From owner-ipng@sunroof.eng.sun.com Sat May 1 19:24:10 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id TAA16931 for ipng-dist; Sat, 1 May 1999 19:22:01 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id TAA16924 for ; Sat, 1 May 1999 19:21:52 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id TAA04385 for ; Sat, 1 May 1999 19:21:51 -0700 (PDT) Received: from sgi.com (sgi.SGI.COM [192.48.153.1]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id TAA28820 for ; Sat, 1 May 1999 19:21:54 -0700 (PDT) Received: from cthulhu.engr.sgi.com (cthulhu.engr.sgi.com [192.26.80.2]) by sgi.com (980327.SGI.8.8.8-aspam/980304.SGI-aspam: SGI does not authorize the use of its proprietary systems or networks for unsolicited or bulk email from the Internet.) via ESMTP id WAA04166 for <@external-mail-relay.sgi.com:ipng@sunroof.eng.sun.com>; Sat, 1 May 1999 22:21:53 -0400 (EDT) mail_from (sm@bossette.engr.sgi.com) Received: from bossette.engr.sgi.com (bossette.engr.sgi.com [150.166.61.12]) by cthulhu.engr.sgi.com (980427.SGI.8.8.8/970903.SGI.AUTOCF) via ESMTP id TAA28892 for <@relay.engr.sgi.com:ipng@sunroof.eng.sun.com>; Sat, 1 May 1999 19:21:53 -0700 (PDT) mail_from (sm@bossette.engr.sgi.com) Received: (from sm@localhost) by bossette.engr.sgi.com (980427.SGI.8.8.8/970903.SGI.AUTOCF) id TAA88253; Sat, 1 May 1999 19:21:52 -0700 (PDT) From: sm@bossette.engr.sgi.com (Sam Manthorpe) Message-Id: <199905020221.TAA88253@bossette.engr.sgi.com> Subject: (IPng 7468) name resolution and NO_ADDRESS To: ipng@sunroof.eng.sun.com Date: Sat, 1 May 1999 19:21:51 -0700 (PDT) Cc: ipv6@bossette.engr.sgi.com X-Mailer: ELM [version 2.4 PL25 PGP3 *ALPHA*] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk Hello, While updating out implementation of getipnodebyname() to draft-ietf-ipngwg-bsd-api-new-06.txt, I found the document (maybe intentionally) unclear as to the return values of the function. I have a specific question: If a lookup is done for name X using getipnodebyname() with an address family of A and flags=0, and no entry exists for family A, but one does for family B, is getipnodebyname() obliged to return NO_ADDRESS, or can it just return HOST_NOT_FOUND? Since IPv4 addresses and IPv6 addresses are stored in separate tables, a `MUST return NO_ADDRESS' would require two table lookups for many calls to getipnodebyname(). The extra information provided to the application by NO_ADDRESS does not warrant this extra work, IMO. Thanks for any clarifying information, or just information on how others have implemented this. -- Sam ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Sam Manthorpe, SGI. tel: (650)933-2856 fax: (650)932-2856 sm@engr.sgi.com -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Sat May 1 19:30:51 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id TAA16969 for ipng-dist; Sat, 1 May 1999 19:29:57 -0700 (PDT) Received: from engmail4.Eng.Sun.COM (engmail4 [129.144.134.6]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id TAA16962 for ; Sat, 1 May 1999 19:29:48 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail4.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.4) with ESMTP id TAA23462 for ; Sat, 1 May 1999 19:29:50 -0700 (PDT) Received: from sgi.com (sgi.SGI.COM [192.48.153.1]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id TAA29907 for ; Sat, 1 May 1999 19:29:50 -0700 (PDT) Received: from cthulhu.engr.sgi.com (cthulhu.engr.sgi.com [192.26.80.2]) by sgi.com (980327.SGI.8.8.8-aspam/980304.SGI-aspam: SGI does not authorize the use of its proprietary systems or networks for unsolicited or bulk email from the Internet.) via ESMTP id WAA01882 for <@external-mail-relay.sgi.com:ipng@sunroof.eng.sun.com>; Sat, 1 May 1999 22:29:49 -0400 (EDT) mail_from (sm@bossette.engr.sgi.com) Received: from bossette.engr.sgi.com (bossette.engr.sgi.com [150.166.61.12]) by cthulhu.engr.sgi.com (980427.SGI.8.8.8/970903.SGI.AUTOCF) via ESMTP id TAA35887 for <@relay.engr.sgi.com:ipng@sunroof.eng.sun.com>; Sat, 1 May 1999 19:29:49 -0700 (PDT) mail_from (sm@bossette.engr.sgi.com) Received: (from sm@localhost) by bossette.engr.sgi.com (980427.SGI.8.8.8/970903.SGI.AUTOCF) id TAA88085; Sat, 1 May 1999 19:29:47 -0700 (PDT) From: sm@bossette.engr.sgi.com (Sam Manthorpe) Message-Id: <199905020229.TAA88085@bossette.engr.sgi.com> Subject: (IPng 7469) Re: name resolution and NO_ADDRESS To: sm@bossette.engr.sgi.com (Sam Manthorpe) Date: Sat, 1 May 1999 19:29:47 -0700 (PDT) Cc: ipng@sunroof.eng.sun.com, ipv6@bossette.engr.sgi.com In-Reply-To: <199905020221.TAA88253@bossette.engr.sgi.com> from "Sam Manthorpe" at May 1, 99 07:21:51 pm X-Mailer: ELM [version 2.4 PL25 PGP3 *ALPHA*] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk Sam Manthorpe wrote: > While updating out implementation of getipnodebyname() to > draft-ietf-ipngwg-bsd-api-new-06.txt, I found the document (maybe > intentionally) unclear as to the return values of the function. Sorry, I do, of course, mean the value returned in the error_num parameter of the function, not the `return value' true of the function. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Sam Manthorpe, SGI. tel: (650)933-2856 fax: (650)932-2856 sm@engr.sgi.com -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Sun May 2 17:35:41 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id RAA17359 for ipng-dist; Sun, 2 May 1999 17:33:07 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id RAA17352 for ; Sun, 2 May 1999 17:32:59 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id RAA24474 for ; Sun, 2 May 1999 17:32:53 -0700 (PDT) Received: from hotmail.com (law-f53.hotmail.com [209.185.131.116]) by earth.sun.com (8.9.1/8.9.1) with SMTP id RAA24162 for ; Sun, 2 May 1999 17:32:58 -0700 (PDT) Received: (qmail 61373 invoked by uid 0); 3 May 1999 00:33:15 -0000 Message-ID: <19990503003315.61372.qmail@hotmail.com> Received: from 192.11.226.97 by www.hotmail.com with HTTP; Sun, 02 May 1999 17:33:14 PDT X-Originating-IP: [192.11.226.97] From: "Arun Sampath" To: ipng@sunroof.eng.sun.com Subject: (IPng 7471) Need some help on IPv6. Date: Sun, 02 May 1999 20:33:14 EDT Mime-Version: 1.0 Content-type: text/plain; format=flowed; Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk hi all, My graduate thesis involves the host implementation of IPv6 on MS-Kermit and I need some help in setting up an environment at my home for the same. I am guessing that I would need atleast two PCs (if not three) that are connected to each other through a network hub. I am not sure what to do for testing. I am still a novice when it comes to IPv6 though I have a reasonably good background in TCP/IP protocol suite. So far, I have been just a listener to messages from IPv6 gurus on this mailing list. I apologize if this message happens to intrude into your current discussions. But I probably could not have found a better avenue to ask for help in this regard. I would not like to waste the bandwidth for my own selfish reasons. So while replying to this email, you can just send me a direct email instead of sending it to the entire mailing list. Any help would be greatly appreciated. Thanks, Arun _______________________________________________________________ Get Free Email and Do More On The Web. Visit http://www.msn.com -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Mon May 3 13:30:35 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id NAA18304 for ipng-dist; Mon, 3 May 1999 13:27:33 -0700 (PDT) Received: from jurassic.eng.sun.com (jurassic [129.146.87.31] (may be forged)) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id NAA18297 for ; Mon, 3 May 1999 13:27:25 -0700 (PDT) Received: from awe174-34 (awe174-34.AWE.Sun.COM [192.29.174.34]) by jurassic.eng.sun.com (8.9.3+Sun/8.9.3) with SMTP id NAA295840; Mon, 3 May 1999 13:27:21 -0700 (PDT) Date: Mon, 3 May 1999 13:24:50 -0700 (PDT) From: Jim Paugh Reply-To: Jim Paugh Subject: (IPng 7472) Re: name resolution and NO_ADDRESS To: Sam Manthorpe Cc: ipng@sunroof.eng.sun.com, ipv6@bossette.engr.sgi.com In-Reply-To: "Your message with ID" <199905020221.TAA88253@bossette.engr.sgi.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; CHARSET=US-ASCII Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk -> I have a specific question: -> -> If a lookup is done for name X using getipnodebyname() -> with an address family of A and flags=0, and no entry -> exists for family A, but one does for family B, is -> getipnodebyname() obliged to return NO_ADDRESS, or can -> it just return HOST_NOT_FOUND? -> -> Since IPv4 addresses and IPv6 addresses are stored in separate -> tables, a `MUST return NO_ADDRESS' would require two table lookups -> for many calls to getipnodebyname(). The extra information provided -> to the application by NO_ADDRESS does not warrant this extra work, We put both v4 and v6 addresses together in the "ipnodes" database, so that one lookup retrieves both. In the case of AF_INET6 and flags=0, the v4 addresses are filtered out. If there is nothing left after filtering the v4s, then NO_ADDRESS is returned. Now we also maintain the "hosts" database for the gethostby*() APIs, for backwards compatibility. The getipnodeby*() APIs know about the hosts db, so for lookups specifically for v4 addresses, if none are found in the ipnodes db, the hosts db is queried. But for the specific case of AF_INET6 and flags=0 (ie v6 only), if none are found in the ipnodes db, we don't check the hosts db for v4 entries, to distinguish between NO_ADDRESS and HOST_NOT_FOUND. I would say that for the specific query that you have done, if addresses are found, but none that match the request, then return NO_ADDRESS. But if your specific query turns up empty, return HOST_NOT_FOUND. ~Jim ________________________________________________________________ James M. Paugh email: Jim.Paugh@Sun.COM Solaris Internet Engineering phone: (650) 786-5087 Sun Microsystems Inc. fax: (650) 786-6137 ________________________________________________________________ -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Mon May 3 14:01:50 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id NAA18403 for ipng-dist; Mon, 3 May 1999 13:58:05 -0700 (PDT) Received: from engmail4.Eng.Sun.COM (engmail4 [129.144.134.6]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id NAA18396 for ; Mon, 3 May 1999 13:57:54 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail4.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.4) with ESMTP id NAA13235; Mon, 3 May 1999 13:57:52 -0700 (PDT) Received: from sgi.com (sgi.SGI.COM [192.48.153.1]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id NAA19421; Mon, 3 May 1999 13:57:51 -0700 (PDT) Received: from cthulhu.engr.sgi.com (cthulhu.engr.sgi.com [192.26.80.2]) by sgi.com (980327.SGI.8.8.8-aspam/980304.SGI-aspam: SGI does not authorize the use of its proprietary systems or networks for unsolicited or bulk email from the Internet.) via ESMTP id QAA06179; Mon, 3 May 1999 16:57:50 -0400 (EDT) mail_from (sm@bossette.engr.sgi.com) Received: from bossette.engr.sgi.com (bossette.engr.sgi.com [150.166.61.12]) by cthulhu.engr.sgi.com (980427.SGI.8.8.8/970903.SGI.AUTOCF) via ESMTP id NAA16937; Mon, 3 May 1999 13:57:48 -0700 (PDT) mail_from (sm@bossette.engr.sgi.com) Received: (from sm@localhost) by bossette.engr.sgi.com (980427.SGI.8.8.8/970903.SGI.AUTOCF) id NAA95765; Mon, 3 May 1999 13:57:47 -0700 (PDT) From: sm@bossette.engr.sgi.com (Sam Manthorpe) Message-Id: <199905032057.NAA95765@bossette.engr.sgi.com> Subject: (IPng 7473) Re: name resolution and NO_ADDRESS To: James.Paugh@eng.sun.com Date: Mon, 3 May 1999 13:57:47 -0700 (PDT) Cc: ipng@sunroof.eng.sun.com, ipv6@eng.sun.com In-Reply-To: from "Jim Paugh" at May 3, 99 01:24:50 pm X-Mailer: ELM [version 2.4 PL25 PGP3 *ALPHA*] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk Hi Jim, Thanks for the reply. Our implementation works in pretty much the same way as yours. > I would say that for the specific query that you have done, if addresses are > found, but none that match the request, then return NO_ADDRESS. But if your > specific query turns up empty, return HOST_NOT_FOUND. Okay good, that's what we have now. The inet-draft is quite vague about these error messages; is that intentional? By the way, did you ever fix a policy in terms of transition of IPv4 addresses from hosts to ipnodes? Does you gethostbyname() look in the ipnodes tables? Thanks, Sam. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Sam Manthorpe, SGI. tel: (650)933-2856 fax: (650)932-2856 sm@engr.sgi.com -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Mon May 3 18:16:29 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id SAA18767 for ipng-dist; Mon, 3 May 1999 18:02:54 -0700 (PDT) Received: from jurassic.eng.sun.com (jurassic [129.146.81.144] (may be forged)) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id SAA18760 for ; Mon, 3 May 1999 18:02:40 -0700 (PDT) Received: from awe174-34 (awe174-34.AWE.Sun.COM [192.29.174.34]) by jurassic.eng.sun.com (8.9.3+Sun/8.9.3) with SMTP id SAA336467; Mon, 3 May 1999 18:02:37 -0700 (PDT) Date: Mon, 3 May 1999 18:00:07 -0700 (PDT) From: Jim Paugh Reply-To: Jim Paugh Subject: (IPng 7474) Re: name resolution and NO_ADDRESS To: Sam Manthorpe Cc: ipng@sunroof.eng.sun.com, ipv6@bossette.engr.sgi.com In-Reply-To: "Your message with ID" <199905032057.NAA95765@bossette.engr.sgi.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; CHARSET=US-ASCII Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk -> Okay good, that's what we have now. The inet-draft is quite vague about -> these error messages; is that intentional? I believe it was to allow some latitude in implementation. -> By the way, did you ever fix a policy in terms of transition of IPv4 -> addresses from hosts to ipnodes? Does you gethostbyname() look in -> the ipnodes tables? No, we left gethostbyname() alone, so it doesn't know about ipnodes. Not wanting to impact legacy apps with IPv6, it was decided that adding a second lookup to gethostbyname() would be undesireable. Also, since many apps and scripts cheat and look directly at /etc/hosts or ypcat hosts.byname that it could cause breakage if gethostbyname() where to get addresses from a new location. So getipnodesbyname() looks in ipnodes for v4 addresses. If not found there, it then fails over to hosts. Note that if v4s are found in ipnodes, no search of hosts is done. ~Jim ________________________________________________________________ James M. Paugh email: Jim.Paugh@Sun.COM Solaris Internet Engineering phone: (650) 786-5087 Sun Microsystems Inc. fax: (650) 786-6137 ________________________________________________________________ -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Tue May 4 23:36:06 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id XAA19869 for ipng-dist; Tue, 4 May 1999 23:33:45 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id XAA19862 for ; Tue, 4 May 1999 23:33:36 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id XAA25688 for ; Tue, 4 May 1999 23:33:32 -0700 (PDT) Received: from mgo.iij.ad.jp (mgo.iij.ad.jp [202.232.15.6]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id XAA13065 for ; Tue, 4 May 1999 23:33:36 -0700 (PDT) Received: from ns.iij.ad.jp (root@ns.iij.ad.jp [192.168.2.8]) by mgo.iij.ad.jp (8.8.8/MGO1.0) with ESMTP id PAA08948 for ; Wed, 5 May 1999 15:33:35 +0900 (JST) Received: from fs.iij.ad.jp (root@fs.iij.ad.jp [192.168.2.9]) by ns.iij.ad.jp (8.8.5/3.5Wpl7) with ESMTP id PAA05901 for ; Wed, 5 May 1999 15:33:35 +0900 (JST) Received: from localhost (mine.iij.ad.jp [192.168.4.209]) by fs.iij.ad.jp (8.8.5/3.5Wpl7) with ESMTP id PAA01767 for ; Wed, 5 May 1999 15:33:35 +0900 (JST) To: ipng@sunroof.eng.sun.com Subject: (IPng 7475) RE: simple source address selection From: Kazu Yamamoto (=?iso-2022-jp?B?GyRCOzNLXE9CSScbKEI=?=) In-Reply-To: <4D0A23B3F74DD111ACCD00805F31D81014514F7A@RED-MSG-50> References: <4D0A23B3F74DD111ACCD00805F31D81014514F7A@RED-MSG-50> X-Mailer: Mew version 1.94b25 on Emacs 19.34 / Mule 2.3 (SUETSUMUHANA) Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-Id: <19990505153328L.kazu@iijlab.net> Date: Wed, 05 May 1999 15:33:28 +0900 X-Dispatcher: imput version 990425(IM115) Lines: 69 Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk From: Richard Draves Subject: RE: simple source address selection Date: Thu, 29 Apr 1999 11:02:38 -0700 > 3. There's no use of longest-matching-prefix as a tie-breaker. False. The paper explicitly states this. And I believe that KAME(more strictly Hydrangea) is the first implementation to use the longest-match tie-break algorithm. > 4. It's sort of a mix between weak model and strong model - it first tries > to pick a suitable source address assigned to the outgoing interface, but if > there isn't one available it will consider source addresses assigned to > other interfaces. (The details imply that KAME assumes that all interfaces > on a node will belong to the same site.) More precisely speaking, KAME don't care site local addresses so much. This is because KAME members believe that it should be discouraged to use site local addresses. > 5. Not clear how v4-compatible addresses or other format prefixes are > handled. Right. KAME doesn't implement automatic-tunneling. > Responding to this: > > I need to add something for loopback to my draft. Please do it. > I think it is a mistake to completely preclude the choice of a deprecated > source address or a source address of scope different than the destination. Agreed. > I think longest-matching-prefix is a good tiebreaker and it should be > encouraged. Agreed. According to our internal discussion, it is believed that this algorithm doesn't give bad influence in multi-homed environments. Comments to srcaddr-00.txt: (1) Rule 2 says, "If the destination address scope is smaller than or equal to SA's scope, then choose SA. Otherwise choose SB". It seems strange to me. The destination address scope never be equal to SA's scope by Rule 1. This language should be the following. "If the destination address scope is smaller than to SA's scope, then choose SA. If the destination address scope is larger than to SA's scope, then choose SB." Note that I'm not confident this rule is appropriate in the case where the destination address scope is larger than SB's scope. (2) Just in case, "organization-local" multicast address should be mapped to site-local scope or global-local scope. I recommend the latter. P.S. I wonder that the deprecated status is valid (or practical) to link-local addresses while it is clear that the status is invalid for the loopback address. The ID should clearly define comparison rules for all cases of matrix: status x scopes. --Kazu -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 5 02:27:39 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id CAA20004 for ipng-dist; Wed, 5 May 1999 02:23:59 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id CAA19997 for ; Wed, 5 May 1999 02:23:21 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id CAA04779 for ; Wed, 5 May 1999 02:23:14 -0700 (PDT) Received: from concorde.inria.fr (concorde.inria.fr [192.93.2.39]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id CAA11343 for ; Wed, 5 May 1999 02:23:19 -0700 (PDT) Received: from givry.inria.fr (givry.inria.fr [193.51.193.144]) by concorde.inria.fr (8.8.7/8.8.7) with ESMTP id LAA15502; Wed, 5 May 1999 11:23:03 +0200 (MET DST) Received: from givry.inria.fr (givry.inria.fr [193.51.193.144]) by givry.inria.fr (8.7.6/8.7.3) with ESMTP id LAA10405; Wed, 5 May 1999 11:23:01 +0200 (MET DST) Message-Id: <199905050923.LAA10405@givry.inria.fr> From: Francis Dupont To: Kazu Yamamoto (=?iso-2022-jp?B?GyRCOzNLXE9CSScbKEI=?=) cc: ipng@sunroof.eng.sun.com Subject: (IPng 7476) Re: simple source address selection In-reply-to: Your message of Wed, 05 May 1999 15:33:28 +0900. <19990505153328L.kazu@iijlab.net> Date: Wed, 05 May 1999 11:22:54 +0200 Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk This mail is not an answer to Kazu's one (but Kazu's one is the last I've received :-). As I already wrote in a previous mail, for me the issue is not a choice between weak/strong model but what model to use for each kind of addresses with the help of sin6_scope_id new field from RFC 2553. For global addresses I am in favor of weak model only because weak model is used for IPv4 on Unixes and to keep it keeps parameters for usual applications too. On BSD Unixes, the default source address is the interface address of the route to the destination and is compute by default by the ifa_ifwithroute() function which does a kind of longest match when nothing else is obvious (then the longest match tie-break is not new (but is still a good thing)). There is no "principal" address but the interface address of the default route can play this role (then neighbor discovery/autoconf must take care of it). For site-local addresses one should give the site to use (strong model at site level) because without this multi-sited nodes can't work BUT there can be a "default site" notion which catches all mono-sited and some multi-sited cases. For link-local addresses the situation is exactly the same, an interface index is needed and you can provide a global (ie. node level) default interface when this strong model is a bit too strong (for instance when you have only one interface). For real multi-homed (multiple interfaces) nodes this can make the use of link-local addresses hard but they are not for general usage and this is the only way to solve possible ambiguities (same link-local address on different interfaces). The last case is multicast addresses. My proposal is to deal with them as with link-local addresses because it is better to know where (ie. on which interface) to send multicast packets. With IPv4-like rules one can get (ie. you should get :-) a wrong interface if one doesn't enforce it and this is not so hard to add an interface parameter to multicast applications without it. The last point is about the role of the network layer. I split things in kernel and user (very similar) and it is clear the kernel can implement only sanity and default rules, ie. a clever address selection (or destination address selection) can only be done at the user level (for instance with a policy library called by getaddrinfo()). Regards Francis.Dupont@inria.fr PS: even I have seen different choices, for instance for source address of multicast, I have never seen stupid choice and I believe we agree about source address selection guidelines. -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 5 02:44:34 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id CAA20027 for ipng-dist; Wed, 5 May 1999 02:40:44 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id CAA20020 for ; Wed, 5 May 1999 02:40:34 -0700 (PDT) Received: from saturn.sun.com (saturn.EBay.Sun.COM [129.150.69.2]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id CAA05570 for ; Wed, 5 May 1999 02:40:27 -0700 (PDT) Received: from ban-server.banyan.tenet.res.in ([203.197.130.133]) by saturn.sun.com (8.9.1/8.9.1) with ESMTP id CAA29172 for ; Wed, 5 May 1999 02:40:10 -0700 (PDT) Received: from localhost (murali@localhost) by ban-server.banyan.tenet.res.in (8.8.7/8.8.3) with SMTP id KAA29655 for ; Wed, 5 May 1999 10:19:41 +0530 Date: Wed, 5 May 1999 10:19:41 +0530 (IST) From: Murali Krishna To: ipng@sunroof.eng.sun.com Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk Hello I'm Murali Krishna working in Banyan Networks, Chennai, INDIA. We as a company work in Remote Access Switches/Servers and Digital Internet Access Systems. We'r planning to incorporate IPv6 for our network layer. I want to know about IPv6 indepth. Can you please give me best sites/links/books regarding this. Thank you. Expecting your reply, Ch. Murali krishna. Software Engr., Banyan Networks Pvt Ltd., 47-B, Velachery Chennai, I N D I A - 600042. -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 5 05:45:09 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id FAA20296 for ipng-dist; Wed, 5 May 1999 05:42:45 -0700 (PDT) Received: from engmail4.Eng.Sun.COM (engmail4 [129.144.134.6]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id FAA20289 for ; Wed, 5 May 1999 05:42:36 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail4.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id FAA22053 for ; Wed, 5 May 1999 05:42:36 -0700 (PDT) Received: from srv-cvp01.sdxplc.com (apple.sdxplc.com [194.202.233.2]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id FAA15061 for ; Wed, 5 May 1999 05:42:34 -0700 (PDT) Received: from nt1-3.sdxplc.com (unverified [172.16.2.5]) by srv-cvp01.sdxplc.com (Dr Solomon's SMTPRS 2.0.15) with ESMTP id for ; Wed, 05 May 1999 13:39:16 +0100 Received: by nt1-3.sdxplc.com with Internet Mail Service (5.5.2448.0) id ; Wed, 5 May 1999 13:41:49 +0100 Message-Id: <47C58C0CC8E2D111873600805FB756EC35CF0E@nt1-3.sdxplc.com> From: Victor Inzani To: "'ipng@sunroof.eng.sun.com'" Subject: (IPng 7477) FW: Date: Wed, 5 May 1999 13:41:48 +0100 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2448.0) Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01BE96F4.A453C9B6" Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_001_01BE96F4.A453C9B6 Content-Type: text/plain Me, too! Many thanks, Victor Inzani Training Officer > Express European Products > Lucent Technologies > > Tel: +44-(0)1707-392-200 ext. 4390 > Email: v.inzani@sdxplc.com > > > > -----Original Message----- > From: Murali Krishna [SMTP:murali@banyan.tenet.res.in] > Sent: 05 May 1999 05:50 > To: ipng@sunroof.eng.sun.com > Subject: > > > Hello > > I'm Murali Krishna working in Banyan Networks, Chennai, INDIA. We as a > company work in Remote Access Switches/Servers and Digital Internet Access > Systems. We'r planning to incorporate IPv6 for our network layer. > > I want to know about IPv6 indepth. Can you please give me best > sites/links/books regarding this. > > Thank you. > > Expecting your reply, > > Ch. Murali krishna. > Software Engr., > Banyan Networks Pvt Ltd., > 47-B, Velachery > Chennai, I N D I A - 600042. > > -------------------------------------------------------------------- > IETF IPng Working Group Mailing List > IPng Home Page: http://playground.sun.com/ipng > FTP archive: ftp://playground.sun.com/pub/ipng > Direct all administrative requests to majordomo@sunroof.eng.sun.com > -------------------------------------------------------------------- ------_=_NextPart_001_01BE96F4.A453C9B6 Content-Type: text/html Content-Transfer-Encoding: quoted-printable FW:

Me, too!

Many thanks,

        Victor = Inzani
        =         Training Officer
        =         Express European Products
        =         Lucent Technologies
        =        =20
        =         Tel:    =         +44-(0)1707-392-200 ext. = 4390
        =         Email:  v.inzani@sdxplc.com
        =        =20


-----Original Message-----
From:   Murali Krishna = [SMTP:murali@banyan.tenet.res.in]
Sent:   05 May 1999 05:50
To:     ipng@sunroof.eng.sun.com
Subject:       = =20


Hello

I'm Murali Krishna working in Banyan = Networks, Chennai, INDIA. We as a
company work in Remote Access = Switches/Servers and Digital Internet Access
Systems. We'r planning to incorporate = IPv6 for our network layer.

I want to know about IPv6 indepth. Can = you please give me best
sites/links/books regarding = this.

Thank you.

Expecting your reply,

Ch. Murali krishna.
Software Engr.,
Banyan Networks Pvt Ltd.,
47-B, Velachery
Chennai, I N D I A - 600042.

---------------------------------------------------------= -----------
IETF IPng Working Group Mailing = List
IPng Home = Page:           &= nbsp;          = http://playground.sun.com/ipng
FTP = archive:          &nbs= p;          = ftp://playground.sun.com/pub/ipng
Direct all administrative requests to = majordomo@sunroof.eng.sun.com
---------------------------------------------------------= -----------

------_=_NextPart_001_01BE96F4.A453C9B6-- -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 5 05:45:23 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id FAA20305 for ipng-dist; Wed, 5 May 1999 05:43:03 -0700 (PDT) Received: from engmail4.Eng.Sun.COM (engmail4 [129.144.134.6]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id FAA20298 for ; Wed, 5 May 1999 05:42:48 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail4.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id FAA22060 for ; Wed, 5 May 1999 05:42:47 -0700 (PDT) Received: from ietf.org (odin.ietf.org [132.151.1.176]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id FAA15150 for ; Wed, 5 May 1999 05:42:46 -0700 (PDT) Received: from CNRI.Reston.VA.US (localhost [127.0.0.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA18833; Wed, 5 May 1999 08:42:42 -0400 (EDT) Message-Id: <199905051242.IAA18833@ietf.org> To: IETF-Announce: ; Cc: ipng@sunroof.eng.sun.com From: The IESG Subject: (IPng 7478) Last Call: IPv6 Jumbograms to Proposed Standard Reply-to: iesg@ietf.org Date: Wed, 05 May 1999 08:42:41 -0400 Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk The IESG has received a request from the IPNG Working Group to consider IPv6 Jumbograms as a Proposed Standard. The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send any comments to the iesg@ietf.org or ietf@ietf.org mailing lists by May 19, 1999. Files can be obtained via http://www.ietf.org/internet-drafts/draft-ietf-ipngwg-jumbograms-00.txt -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 5 07:04:44 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id GAA20350 for ipng-dist; Wed, 5 May 1999 06:54:53 -0700 (PDT) Received: from engmail4.Eng.Sun.COM (engmail4 [129.144.134.6]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id GAA20343 for ; Wed, 5 May 1999 06:54:45 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail4.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id GAA27154 for ; Wed, 5 May 1999 06:54:43 -0700 (PDT) Received: from mail1.es.net (mail1.es.net [198.128.3.181]) by earth.sun.com (8.9.1/8.9.1) with SMTP id GAA19307 for ; Wed, 5 May 1999 06:54:43 -0700 (PDT) Received: from alderhill.wins.lbl.gov (alderhill) [128.3.9.220] by mail1.es.net with smtp (Exim 1.81 #2) id 10f28H-0000vO-00; Wed, 5 May 1999 06:54:41 -0700 Message-Id: <4.1.19990505064734.00ab0570@imap2.es.net> X-Sender: rlfink@imap2.es.net X-Mailer: QUALCOMM Windows Eudora Pro Version 4.1 Date: Wed, 05 May 1999 06:54:38 -0700 To: Murali Krishna , ipng@sunroof.eng.sun.com From: Bob Fink Subject: (IPng 7479) Re: In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk At 10:19 AM 5/5/99 +0530, Murali Krishna wrote: > >Hello > >I'm Murali Krishna working in Banyan Networks, Chennai, INDIA. We as a >company work in Remote Access Switches/Servers and Digital Internet Access >Systems. We'r planning to incorporate IPv6 for our network layer. > >I want to know about IPv6 indepth. Can you please give me best >sites/links/books regarding this. The best place to start is to fully review and understand the content of the ipng web site at: For books, a search of amazon for "ipv6" yields 10 results. I hesitate to recommend books as there are many different opinions, all different. However, I believe the Huitema book is best for understanding underlying concepts. But, again, the ipng web site is the definitive place to get all the real details of the specs. Then you can browse thru the 6bone.net/6ren.net/ipv6.org sites for additional implemenation and deployment info. Bob -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 5 08:01:55 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id HAA20506 for ipng-dist; Wed, 5 May 1999 07:58:52 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id HAA20499 for ; Wed, 5 May 1999 07:58:41 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id HAA28099 for ; Wed, 5 May 1999 07:58:34 -0700 (PDT) Received: from gungnir.fnal.gov (gungnir.fnal.gov [131.225.80.1]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id HAA27596 for ; Wed, 5 May 1999 07:58:40 -0700 (PDT) Received: from gungnir.fnal.gov (localhost [127.0.0.1]) by gungnir.fnal.gov (8.9.1/8.9.1) with ESMTP id JAA24705 for ; Wed, 5 May 1999 09:58:36 -0500 (CDT) Message-Id: <199905051458.JAA24705@gungnir.fnal.gov> To: ipng@sunroof.eng.sun.com From: "Matt Crawford" Subject: (IPng 7480) Re: simple source address selection In-reply-to: kre's message of Fri, 30 Apr 1999 15:36:40 +1000. <18991.925450600@munnari.OZ.AU> Date: Wed, 05 May 1999 09:58:36 -0500 Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk > Another scenario to consider is where a multi-homed host (not a router) is > connected to two links, between which there is no routing (either temporarily, > or permanently). This also describes the case of a virtual interface of the sort that Cisco calls (misleadingly) a loopback interface -- it's not associated with any set of real interfaces, and its existence and address must be communicated to nodes on the real links by a routing protocol (or host routes configured on the routers), yet the node need not behave as a router in the sense of "forward[ing] IPv6 packets not explicitly addressed to itself." -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Thu May 6 23:49:56 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id XAA23024 for ipng-dist; Thu, 6 May 1999 23:40:27 -0700 (PDT) Received: from engmail4.Eng.Sun.COM (engmail4 [129.144.134.6]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id XAA23017 for ; Thu, 6 May 1999 23:39:24 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail4.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id XAA02848 for ; Thu, 6 May 1999 23:39:25 -0700 (PDT) Received: from coconut.itojun.org (coconut.itojun.org [210.160.95.97]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id XAA20318 for ; Thu, 6 May 1999 23:39:23 -0700 (PDT) Received: from kiwi.itojun.org (itojun@localhost.itojun.org [127.0.0.1]) by coconut.itojun.org (8.9.3+3.2W/3.7W) with ESMTP id PAA12579 for ; Fri, 7 May 1999 15:39:10 +0900 (JST) To: ipng@sunroof.eng.sun.com In-reply-to: iesg-secretary's message of Wed, 05 May 1999 08:42:41 -0400. <199905051242.IAA18833@ietf.org> X-Template-Reply-To: itojun@itojun.org X-Template-Return-Receipt-To: itojun@itojun.org X-PGP-Fingerprint: F8 24 B4 2C 8C 98 57 FD 90 5F B4 60 79 54 16 E2 Subject: (IPng 7481) Re: Last Call: IPv6 Jumbograms to Proposed Standard From: itojun@iijlab.net Date: Fri, 07 May 1999 15:39:10 +0900 Message-ID: <12575.926059150@coconut.itojun.org> Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk >IPv6 Jumbograms as a Proposed >Standard. >The IESG plans to make a decision in the next few weeks, and solicits >final comments on this action. Please send any comments to the >iesg@ietf.org or ietf@ietf.org mailing lists by May 19, 1999. >Files can be obtained via >http://www.ietf.org/internet-drafts/draft-ietf-ipngwg-jumbograms-00.txt I found that it is very hard to use jumbo payload option with IPsec AH. It may be good to add a notice somewhere. (but this is NOT a big deal, just add one line and it should be fine - it should not affect the standard process, at all) Suppose that the policy asks for two AH, and the packet is nearly 64K of size. When attaching first AH, the payload length fits in 64K. AH crypto checksum will be performed for the underlined part. IPv6 AH1 payload ================ AH1 Then, by adding second AH, the payload size exceeded 64K. We'll need to add jumbo payload option. IPv6 HBH(jumbo) AH2 AH1 payload =============================== AH2 When the receiving node sees the packet, it will verify AH2, then remove AH2, modify the packet size field in jumbo payload option. IPv6 HBH(jumbo) AH2 AH1 payload =============================== AH2 v IPv6 HBH(jumbo) AH1 payload Here, the size field in jumbo payload option will be come less than 64K. The packet is not trivial for receiving node to process, because: - it can be wrongly formatted packet by the source (a packet with illegal jumbo option), so receiving node cannot simply strip off HBH - how to strip off HBH anyway? what if you have other HBH options on the HBH part? padding? In my implementation I disallowed AH on jumbograms - it is the easiest solution :-P itojun -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Sun May 9 23:40:04 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id XAA24775 for ipng-dist; Sun, 9 May 1999 23:36:25 -0700 (PDT) Received: from engmail2.Eng.Sun.COM (engmail2 [129.146.1.25]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id XAA24768 for ; Sun, 9 May 1999 23:36:16 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail2.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id XAA05861 for ; Sun, 9 May 1999 23:36:16 -0700 (PDT) Received: from mail2.microsoft.com (mail2.microsoft.com [131.107.3.124]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id XAA07592 for ; Sun, 9 May 1999 23:36:15 -0700 (PDT) Received: by mail2.microsoft.com with Internet Mail Service (5.5.2524.0) id ; Sun, 9 May 1999 23:36:16 -0700 Message-ID: <4D0A23B3F74DD111ACCD00805F31D81014515013@RED-MSG-50> From: Richard Draves To: "'itojun@iijlab.net'" , ipng@sunroof.eng.sun.com Subject: (IPng 7484) Re: Last Call: IPv6 Jumbograms to Proposed Stand ard Date: Sun, 9 May 1999 23:36:15 -0700 X-Mailer: Internet Mail Service (5.5.2524.0) Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk > I found that it is very hard to use jumbo payload > option with IPsec > AH. It may be good to add a notice somewhere. (but this is > NOT a big deal, just add one line and it should be fine > - it should > not affect the standard process, at all) > > > Suppose that the policy asks for two AH, and the packet > is nearly > 64K of size. > > When attaching first AH, the payload length fits in 64K. > AH crypto checksum will be performed for the underlined part. > IPv6 AH1 payload > ================ AH1 > Then, by adding second AH, the payload size exceeded 64K. > We'll need to add jumbo payload option. > IPv6 HBH(jumbo) AH2 AH1 payload > =============================== AH2 > > When the receiving node sees the packet, it will verify > AH2, then > remove AH2, modify the packet size field in jumbo > payload option. > IPv6 HBH(jumbo) AH2 AH1 payload > =============================== AH2 > v > IPv6 HBH(jumbo) AH1 payload > Here, the size field in jumbo payload option will be > come less than > 64K. The packet is not trivial for receiving node to > process, because: > - it can be wrongly formatted packet by the source (a > packet with > illegal jumbo option), so receiving node cannot > simply strip off HBH > - how to strip off HBH anyway? what if you have other > HBH options > on the HBH part? padding? > > In my implementation I disallowed AH on jumbograms - it is the > easiest solution :-P I don't think this is an inherent problem with jumbograms. In MSR IPv6, we only have receive-side support for them but we do have support for multiple AH headers. I believe we would have no problems combining jumbograms with AH. Our receive-side processing (both for jumbo & AH) does not modify the received packet, it tracks things like packet size & security associations separately. Our send-side processing does not create the headers incrementally, so both AH headers would know about the packet's final header layout & size. Rich -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Mon May 10 06:19:43 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id GAA24919 for ipng-dist; Mon, 10 May 1999 06:14:09 -0700 (PDT) Received: from engmail2.Eng.Sun.COM (engmail2 [129.146.1.25]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id GAA24912 for ; Mon, 10 May 1999 06:13:54 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail2.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id GAA25135 for ; Mon, 10 May 1999 06:13:52 -0700 (PDT) Received: from east.isi.edu (east.isi.edu [38.245.76.2]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id GAA07026 for ; Mon, 10 May 1999 06:13:53 -0700 (PDT) Received: from bogey by east.isi.edu (8.8.5/5.61+local-24) id ; Mon, 10 May 1999 13:13:52 GMT Message-ID: <002501be9ae8$14a5e860$634cf526@east.isi.edu> From: "Aaron Griggs" To: References: <4D0A23B3F74DD111ACCD00805F31D81014515013@RED-MSG-50> Subject: (IPng 7485) Re: Last Call: IPv6 Jumbograms to Proposed Standard Date: Mon, 10 May 1999 09:21:58 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2014.211 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2014.211 Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk So the KAME stack, does IPSec headers incrementally both on the send and receive side? Meaning for: IP_AH2_AH1_DATA The IP payload length is different for the authentication done for AH1 opposed to AH2. As Rich mentioned, the MSR IPv6 stack on the send side inserts all the IPSec headers for a specific IP area (IP__DATA). This gets the IP payload to the final size. Then, we authenticate the IP packet skipping any nested IPSec headers that come before the AH header being processed. For the example above on the send side, AH2 is not included when AH1 is authenticated but the IP payload length accounts for AH2. On the receive side, AH2 is discarded after it is processed (why we have to skip AH2 on the send side) and we don't adjust the IP payload length. So your stack adjust the payload length after AH2 is processed on the receive side? I guess if you have an association with a "bump-in-the-stack" and "bump-in-the-wire" like so: H----------BW---------BS BS->H (IP_AH(BW)_AH(BS)_DATA) Host (H) has an AH association with BW (bump-in-the-wire) and another AH association with BS (bump-in-the-stack). BS doesn't know about BW when it does IPSec. So if BW does transport mode AH, H would have to change the IP payload length of the received packet after processing the AH(BW) header. Of course, I'd say BW can only do tunnel mode unless there was no IPSec done by BS. The skipping of nested IPSec headers is what I was interested in finding out a few weeks back. It seems some IPSec implementations only handle the require IPSec header combinations. Meaning, the problem of IP_AH_AH_DATA doesn't occur. If you do handle arbitrary nesting of IPSec headers and you don't include the affects of a nested IPSec header as in the example (change in the IP payload length), you get problems like the jumbogram issue. So the easiest solution would be to only handle the required IPSec header combinations. Thus, eliminating the IP header adjustments brought about by AH_AH. Aaron > > I found that it is very hard to use jumbo payload > > option with IPsec > > AH. It may be good to add a notice somewhere. (but this is > > NOT a big deal, just add one line and it should be fine > > - it should > > not affect the standard process, at all) > > > > > > Suppose that the policy asks for two AH, and the packet > > is nearly > > 64K of size. > > > > When attaching first AH, the payload length fits in 64K. > > AH crypto checksum will be performed for the underlined part. > > IPv6 AH1 payload > > ================ AH1 > > Then, by adding second AH, the payload size exceeded 64K. > > We'll need to add jumbo payload option. > > IPv6 HBH(jumbo) AH2 AH1 payload > > =============================== AH2 > > > > When the receiving node sees the packet, it will verify > > AH2, then > > remove AH2, modify the packet size field in jumbo > > payload option. > > IPv6 HBH(jumbo) AH2 AH1 payload > > =============================== AH2 > > v > > IPv6 HBH(jumbo) AH1 payload > > Here, the size field in jumbo payload option will be > > come less than > > 64K. The packet is not trivial for receiving node to > > process, because: > > - it can be wrongly formatted packet by the source (a > > packet with > > illegal jumbo option), so receiving node cannot > > simply strip off HBH > > - how to strip off HBH anyway? what if you have other > > HBH options > > on the HBH part? padding? > > > > In my implementation I disallowed AH on jumbograms - it is the > > easiest solution :-P > > I don't think this is an inherent problem with jumbograms. In MSR IPv6, we > only have receive-side support for them but we do have support for multiple > AH headers. I believe we would have no problems combining jumbograms with > AH. Our receive-side processing (both for jumbo & AH) does not modify the > received packet, it tracks things like packet size & security associations > separately. Our send-side processing does not create the headers > incrementally, so both AH headers would know about the packet's final header > layout & size. > > Rich > -------------------------------------------------------------------- > IETF IPng Working Group Mailing List > IPng Home Page: http://playground.sun.com/ipng > FTP archive: ftp://playground.sun.com/pub/ipng > Direct all administrative requests to majordomo@sunroof.eng.sun.com > -------------------------------------------------------------------- > -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Mon May 10 06:36:05 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id GAA24942 for ipng-dist; Mon, 10 May 1999 06:32:25 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id GAA24935 for ; Mon, 10 May 1999 06:32:14 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id GAA19815 for ; Mon, 10 May 1999 06:32:04 -0700 (PDT) Received: from coconut.itojun.org (coconut.itojun.org [210.160.95.97]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id GAA15065 for ; Mon, 10 May 1999 06:32:12 -0700 (PDT) Received: from kiwi.itojun.org (itojun@localhost.itojun.org [127.0.0.1]) by coconut.itojun.org (8.9.3+3.2W/3.7W) with ESMTP id WAA23367; Mon, 10 May 1999 22:31:47 +0900 (JST) To: "Aaron Griggs" cc: ipng@sunroof.eng.sun.com In-reply-to: agriggs's message of Mon, 10 May 1999 09:21:58 -0400. <002501be9ae8$14a5e860$634cf526@east.isi.edu> X-Template-Reply-To: itojun@itojun.org X-Template-Return-Receipt-To: itojun@itojun.org X-PGP-Fingerprint: F8 24 B4 2C 8C 98 57 FD 90 5F B4 60 79 54 16 E2 Subject: (IPng 7486) Re: Last Call: IPv6 Jumbograms to Proposed Standard From: itojun@iijlab.net Date: Mon, 10 May 1999 22:31:47 +0900 Message-ID: <23363.926343107@coconut.itojun.org> Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk >So the KAME stack, does IPSec headers incrementally both on the send and >receive side? Meaning for: > IP_AH2_AH1_DATA (snip) >So your stack adjust the payload length after AH2 is processed on the >receive side? I guess if you have an association with a "bump-in-the-stack" >and "bump-in-the-wire" like so: >H----------BW---------BS >BS->H (IP_AH(BW)_AH(BS)_DATA) Yes for both sentence, that is what I implemented. I figured this out from the processing rules in tunnel-mode, but I may be wrong.... If there's any mention in the IPsec spec please let me know. I may be missed some descriptions in the spec. I'll try testing multiple AHes with other IPsec implementations. KAME and MSR IPv6 will not interoperate, apparently... >The skipping of nested IPSec headers is what I was interested in finding out >a few weeks back. It seems some IPSec implementations only handle the >require IPSec header combinations. Meaning, the problem of IP_AH_AH_DATA >doesn't occur. If you do handle arbitrary nesting of IPSec headers and you >don't include the affects of a nested IPSec header as in the example (change >in the IP payload length), you get problems like the jumbogram issue. >So the easiest solution would be to only handle the required IPSec header >combinations. Thus, eliminating the IP header adjustments brought about by >AH_AH. Yes, I agree. Our policy engine was generic enough to support multiple AH so I just would like to respect the policy engine :-) itojun -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Mon May 10 07:26:39 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id HAA25006 for ipng-dist; Mon, 10 May 1999 07:24:25 -0700 (PDT) Received: from engmail2.Eng.Sun.COM (engmail2 [129.146.1.25]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id HAA24999 for ; Mon, 10 May 1999 07:24:16 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail2.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id HAA04775 for ; Mon, 10 May 1999 07:24:14 -0700 (PDT) Received: from east.isi.edu (east.isi.edu [38.245.76.2]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id HAA10878 for ; Mon, 10 May 1999 07:24:14 -0700 (PDT) Received: from bogey by east.isi.edu (8.8.5/5.61+local-24) id ; Mon, 10 May 1999 14:24:06 GMT Message-ID: <008d01be9af1$e72b4100$634cf526@east.isi.edu> From: "Aaron Griggs" To: Cc: References: <23363.926343107@coconut.itojun.org> Subject: (IPng 7487) Re: Last Call: IPv6 Jumbograms to Proposed Standard Date: Mon, 10 May 1999 10:32:11 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2014.211 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2014.211 Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk Hi Itojun, > > >So the KAME stack, does IPSec headers incrementally both on the send and > >receive side? Meaning for: > > IP_AH2_AH1_DATA > (snip) > >So your stack adjust the payload length after AH2 is processed on the > >receive side? I guess if you have an association with a "bump-in-the-stack" > >and "bump-in-the-wire" like so: > >H----------BW---------BS > >BS->H (IP_AH(BW)_AH(BS)_DATA) > > Yes for both sentence, that is what I implemented. I figured this > out from the processing rules in tunnel-mode, but I may be wrong.... > If there's any mention in the IPsec spec please let me know. I may be > missed some descriptions in the spec. > I don't remember anywhere in the IPSec spec (rfc 2401) describing what to do for this case. The AH Spec (rfc 2402) states: < start excerpt rfc 2402> 3.3 Outbound Packet Processing ... If there is more than one IPsec header/extension required, the order of the application of the security headers MUST be defined by security policy. For simplicity of processing, each IPsec header SHOULD ignore the existence (i.e., not zero the contents or try to predict the contents) of IPsec headers to be applied later. (While a native IP or bump-in-the-stack implementation could predict the contents of later IPsec headers that it applies itself, it won't be possible for it to predict any IPsec headers added by a bump-in-the- wire implementation between the host and the network.) < end excerpt rfc 2402> To me, the spec should state for "interoperability" and not "simplicity" the other IPSec headers MUST be ignored. However, does ignore mean to remove there affect on the IP payload. The MSR IPv6 stack thinks not. I think getting a concensus on what other IPSec stacks do is in order. We know two now. You pointed out a problem in the way you do it with regards to jumbograms which we don't seem to encounter. There may be some problems with how we do it for other things. Thanks, Aaron > itojun > -------------------------------------------------------------------- > IETF IPng Working Group Mailing List > IPng Home Page: http://playground.sun.com/ipng > FTP archive: ftp://playground.sun.com/pub/ipng > Direct all administrative requests to majordomo@sunroof.eng.sun.com > -------------------------------------------------------------------- > -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Mon May 10 11:01:03 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id KAA25285 for ipng-dist; Mon, 10 May 1999 10:57:23 -0700 (PDT) Received: from engmail2.Eng.Sun.COM (engmail2 [129.146.1.25]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id KAA25278 for ; Mon, 10 May 1999 10:57:14 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail2.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id KAA27657 for ; Mon, 10 May 1999 10:57:11 -0700 (PDT) Received: from inner.net (avarice.inner.net [199.33.248.2]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id KAA01636 for ; Mon, 10 May 1999 10:57:10 -0700 (PDT) Received: from inner.net (cmetz.cstone.net [205.197.102.217]) by inner.net (8.9.1/8.9.1) with ESMTP id RAA12496; Mon, 10 May 1999 17:50:19 GMT Message-Id: <199905101750.RAA12496@inner.net> To: "Aaron Griggs" cc: ipng@sunroof.eng.sun.com Subject: (IPng 7488) Re: Last Call: IPv6 Jumbograms to Proposed Standard In-reply-to: Your message of "Mon, 10 May 1999 09:21:58 EDT." <002501be9ae8$14a5e860$634cf526@east.isi.edu> X-Copyright: Copyright 1999, Craig Metz, All Rights Reserved. X-Reposting: With explicit permission only Date: Mon, 10 May 1999 13:55:41 -0400 From: Craig Metz Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk In message <002501be9ae8$14a5e860$634cf526@east.isi.edu>, you write: >So the easiest solution would be to only handle the required IPSec header >combinations. Thus, eliminating the IP header adjustments brought about by >AH_AH. Last time I checked, the specs were worded to not allow arbitrary combinations of {ESP,AH} (such as the AH AH case you describe). In the IPv6 case, I believe that you can find the allowed combinations described in the IPv6 proper spec's description of chained header ordering. There's no technical reason why you can't make arbitrary combinations work; I have code that should do it just fine. The main problem has actually been that most systems' internals don't have a framework for building arbitrary headers in arbitrary orders, so fixing the order simplifies implementing IPv6/IPsec in a stack. -Craig -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Mon May 10 11:08:26 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id LAA25350 for ipng-dist; Mon, 10 May 1999 11:06:58 -0700 (PDT) Received: from engmail2.Eng.Sun.COM (engmail2 [129.146.1.25]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id LAA25343 for ; Mon, 10 May 1999 11:06:49 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail2.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id LAA01892 for ; Mon, 10 May 1999 11:06:47 -0700 (PDT) Received: from inner.net (avarice.inner.net [199.33.248.2]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id LAA07784 for ; Mon, 10 May 1999 11:06:41 -0700 (PDT) Received: from inner.net (cmetz.cstone.net [205.197.102.217]) by inner.net (8.9.1/8.9.1) with ESMTP id RAA12554; Mon, 10 May 1999 17:59:49 GMT Message-Id: <199905101759.RAA12554@inner.net> To: "Aaron Griggs" cc: ipng@sunroof.eng.sun.com Subject: (IPng 7489) Re: Last Call: IPv6 Jumbograms to Proposed Standard In-reply-to: Your message of "Mon, 10 May 1999 10:32:11 EDT." <008d01be9af1$e72b4100$634cf526@east.isi.edu> X-Copyright: Copyright 1999, Craig Metz, All Rights Reserved. X-Reposting: With explicit permission only Date: Mon, 10 May 1999 14:05:11 -0400 From: Craig Metz Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk In message <008d01be9af1$e72b4100$634cf526@east.isi.edu>, you write: >To me, the spec should state for "interoperability" and not "simplicity" the >other IPSec headers MUST be ignored. However, does ignore mean to remove >there affect on the IP payload. The MSR IPv6 stack thinks not. I think >getting a concensus on what other IPSec stacks do is in order. We know two >now. Ignoring extra IPsec headers should be a local policy decision. You are welcome to implement your stack to ignore them, but please do not force this restriction upon others. The issue of how the specs model the building/removal of chained headers was discussed in detail and settled something like three or four years ago, probably on this list (if not, then the IPsec list). -Craig -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Mon May 10 11:15:31 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id LAA25378 for ipng-dist; Mon, 10 May 1999 11:11:31 -0700 (PDT) Received: from engmail2.Eng.Sun.COM (engmail2 [129.146.1.25]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id LAA25370 for ; Mon, 10 May 1999 11:11:21 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail2.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id LAA03170 for ; Mon, 10 May 1999 11:11:19 -0700 (PDT) Received: from east.isi.edu (east.isi.edu [38.245.76.2]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id LAA10860 for ; Mon, 10 May 1999 11:11:19 -0700 (PDT) Received: from bogey by east.isi.edu (8.8.5/5.61+local-24) id ; Mon, 10 May 1999 18:10:51 GMT Message-ID: <00f101be9b11$92c25070$634cf526@east.isi.edu> From: "Aaron Griggs" To: "Aaron Griggs" , "Craig Metz" Cc: References: <199905101750.RAA12496@inner.net> Subject: (IPng 7490) Re: Last Call: IPv6 Jumbograms to Proposed Standard Date: Mon, 10 May 1999 14:18:58 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2014.211 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2014.211 Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk Hi Craig, > >So the easiest solution would be to only handle the required IPSec header > >combinations. Thus, eliminating the IP header adjustments brought about by > >AH_AH. > > Last time I checked, the specs were worded to not allow arbitrary > combinations of {ESP,AH} (such as the AH AH case you describe). Which specs are you referring. None of the IPSec specs, rule out arbitary combos of IPSec headers. >In the IPv6 > case, I believe that you can find the allowed combinations described in the > IPv6 proper spec's description of chained header ordering. There's no > technical reason why you can't make arbitrary combinations work; I have code > that should do it just fine. The main problem has actually been that most > systems' internals don't have a framework for building arbitrary headers in > arbitrary orders, so fixing the order simplifies implementing IPv6/IPsec in a > stack. Are you talking about arbitary extension headers including IPSec? We handle that fine although we don't implement them all yet. I basically want to find out what other implementations do with regards to nested IPSec headers. As Itojun pointed out, his stack has problems with nested AH_AH and jumbograms. And his stack will not interoperate with ours if AH_AH is done since he does the IPSec incrementally. Aaron -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Mon May 10 11:30:47 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id LAA25418 for ipng-dist; Mon, 10 May 1999 11:26:40 -0700 (PDT) Received: from engmail2.Eng.Sun.COM (engmail2 [129.146.1.25]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id LAA25411 for ; Mon, 10 May 1999 11:26:31 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail2.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id LAA07455 for ; Mon, 10 May 1999 11:26:28 -0700 (PDT) Received: from inner.net (avarice.inner.net [199.33.248.2]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id LAA21163 for ; Mon, 10 May 1999 11:26:25 -0700 (PDT) Received: from inner.net (cmetz.cstone.net [205.197.102.217]) by inner.net (8.9.1/8.9.1) with ESMTP id SAA12591; Mon, 10 May 1999 18:18:26 GMT Message-Id: <199905101818.SAA12591@inner.net> To: "Aaron Griggs" cc: ipng@sunroof.eng.sun.com Subject: (IPng 7491) Re: Last Call: IPv6 Jumbograms to Proposed Standard In-reply-to: Your message of "Mon, 10 May 1999 14:18:58 EDT." <00f101be9b11$92c25070$634cf526@east.isi.edu> X-Copyright: Copyright 1999, Craig Metz, All Rights Reserved. X-Reposting: With explicit permission only Date: Mon, 10 May 1999 14:23:48 -0400 From: Craig Metz Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk In message <00f101be9b11$92c25070$634cf526@east.isi.edu>, you write: >Which specs are you referring. None of the IPSec specs, rule out arbitary >combos of IPSec headers. RFC 1826 did, though subtly (see section three). RFC 2402's rewording makes it much more fuzzy; its wording can be interpeted either way. >Are you talking about arbitary extension headers including IPSec? We handle >that fine although we don't implement them all yet. > >I basically want to find out what other implementations do with regards to >nested IPSec headers. As Itojun pointed out, his stack has problems with >nested AH_AH and jumbograms. And his stack will not interoperate with ours >if AH_AH is done since he does the IPSec incrementally. We (NRL) always do them incrementally. -Craig -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Mon May 10 12:33:01 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id MAA25627 for ipng-dist; Mon, 10 May 1999 12:22:52 -0700 (PDT) Received: from engmail4.Eng.Sun.COM (engmail4 [129.144.134.6]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id MAA25620 for ; Mon, 10 May 1999 12:22:29 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail4.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id MAA12221 for ; Mon, 10 May 1999 12:22:29 -0700 (PDT) Received: from east.isi.edu (east.isi.edu [38.245.76.2]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id MAA28728 for ; Mon, 10 May 1999 12:22:24 -0700 (PDT) Received: from bogey by east.isi.edu (8.8.5/5.61+local-24) id ; Mon, 10 May 1999 19:22:15 GMT Message-ID: <012701be9b1b$8c9f3960$634cf526@east.isi.edu> From: "Aaron Griggs" To: "Craig Metz" Cc: References: <199905101759.RAA12554@inner.net> Subject: (IPng 7492) Re: Last Call: IPv6 Jumbograms to Proposed Standard Date: Mon, 10 May 1999 15:30:23 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2014.211 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2014.211 Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk By "ignore," I mean for the ICV calculation only. If you are doing IPSec incrementally, you don't have to worry about ignoring because there is nothing to ignore. You don't know about any subsequent IPSec headers that may be added later. In this example: IP_AH2_AH1_DATA On the send side I ignore the AH2 header when doing AH1 authentication. However, AH2 was factored in to the IP->Length size. On the receive side after AH2 is processed, I don't reduce the IP->Length size. This means if NRL and MSRIPv6 did AH_AH, we would authenticate AH2 fine but fail on AH1 since the IP->Length field was different when authenticated. So does ignore mean only ignore the header or its affect on other fields (IP->Length). If you do not factor in the final size, the jumbogram issue can occur. To be honest, I didn't think about the jumbogram problem when I did the design. Also, the jumbogram problem occurs for AH_ESP as well as AH_AH. Aaron ----- Original Message ----- From: Craig Metz To: Aaron Griggs Cc: Sent: Monday, May 10, 1999 2:05 PM Subject: (IPng 7489) Re: Last Call: IPv6 Jumbograms to Proposed Standard > In message <008d01be9af1$e72b4100$634cf526@east.isi.edu>, you write: > >To me, the spec should state for "interoperability" and not "simplicity" the > >other IPSec headers MUST be ignored. However, does ignore mean to remove > >there affect on the IP payload. The MSR IPv6 stack thinks not. I think > >getting a concensus on what other IPSec stacks do is in order. We know two > >now. > > Ignoring extra IPsec headers should be a local policy decision. You are > welcome to implement your stack to ignore them, but please do not force this > restriction upon others. > > The issue of how the specs model the building/removal of chained headers was > discussed in detail and settled something like three or four years ago, > probably on this list (if not, then the IPsec list). > > -Craig > -------------------------------------------------------------------- > IETF IPng Working Group Mailing List > IPng Home Page: http://playground.sun.com/ipng > FTP archive: ftp://playground.sun.com/pub/ipng > Direct all administrative requests to majordomo@sunroof.eng.sun.com > -------------------------------------------------------------------- > -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Mon May 10 13:47:37 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id MAA25656 for ipng-dist; Mon, 10 May 1999 12:45:33 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id MAA25649 for ; Mon, 10 May 1999 12:45:16 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id MAA23310 for ; Mon, 10 May 1999 12:44:40 -0700 (PDT) Received: from inner.net (avarice.inner.net [199.33.248.2]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id MAA13441 for ; Mon, 10 May 1999 12:44:48 -0700 (PDT) Received: from inner.net (cmetz.cstone.net [205.197.102.217]) by inner.net (8.9.1/8.9.1) with ESMTP id TAA12669; Mon, 10 May 1999 19:37:57 GMT Message-Id: <199905101937.TAA12669@inner.net> To: "Aaron Griggs" cc: ipng@sunroof.eng.sun.com Subject: (IPng 7493) Re: Last Call: IPv6 Jumbograms to Proposed Standard In-reply-to: Your message of "Mon, 10 May 1999 15:30:23 EDT." <012701be9b1b$8c9f3960$634cf526@east.isi.edu> X-Copyright: Copyright 1999, Craig Metz, All Rights Reserved. X-Reposting: With explicit permission only Date: Mon, 10 May 1999 15:43:22 -0400 From: Craig Metz Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk In message <012701be9b1b$8c9f3960$634cf526@east.isi.edu>, you write: >By "ignore," I mean for the ICV calculation only. Ah, ok. This was not clear. >If you are doing IPSec incrementally, you don't have to worry about ignoring >because there is nothing to ignore. You don't know about any subsequent >IPSec headers that may be added later. In this example: > IP_AH2_AH1_DATA > >On the send side I ignore the AH2 header when doing AH1 authentication. >However, AH2 was factored in to the IP->Length size. On the receive side >after AH2 is processed, I don't reduce the IP->Length size. This means if >NRL and MSRIPv6 did AH_AH, we would authenticate AH2 fine but fail on AH1 >since the IP->Length field was different when authenticated. > >So does ignore mean only ignore the header or its affect on other fields >(IP->Length). If you do not factor in the final size, the jumbogram issue >can occur. To be honest, I didn't think about the jumbogram problem when I >did the design. Also, the jumbogram problem occurs for AH_ESP as well as >AH_AH. Like I said, the more general problem of how to assemble and parse chained headers was discussed years ago. The consensus was that there are reasonable arguments for doing them incrementally (that is, constructing a fully formed IP packet at each step, in which case the length field in the IP header for the two AH computations would be different) and for doing them all at once or in a two-pass fashion (that is, figuring out the correct values for things and filling them in as you go, in which case the length field for the IP header for the two AH computations would be the same -- the bigger length). The solution I remember was that we really didn't want to choose either way and preclude an implementation decision, so the specs were written in such a way that the problem was avoided (which is another reason why you could only have one AH) and therefore either implementation method would give correct results. In my mind, however, there is now a new and more convincing argument for doing this incrementally. The "new" IPsec specs describe a bump-in-the-wire IPsec mode (which was also subtly prevented in the "old" IPsec specs, because it also leads to bad design problems). Suppose that my end host sends out: IP_len=X AH[len=X] payload And my bump-in-the-wire box wants to insert an AH. If we do things incrementally, this is easy: IP_len=X+Y AH[len=X+Y] AH[len=X] payload If we don't things incrementally, this is hard -- cryptographically impossible if the bump-in-the-wire doesn't share the secret key with the end host, actually. On the surface, an alternate solution is to remove the length field. However, I believe that you'll find that the base header's next header type field has the same problem if you have a bump-in-the-stack capable of inserting, for example, ESP before AH (which used to be outlawed, and I think still is in the IPv6 base spec). There might be other fields that become mutable if you take this approach. Personally, I want as much of my packet protected as possible, so I strongly admonish you to choose solutions that allow protection over solutions that preclude it. -Craig -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Mon May 10 13:47:39 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id MAA25690 for ipng-dist; Mon, 10 May 1999 12:54:01 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id MAA25683 for ; Mon, 10 May 1999 12:53:24 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id MAA25209 for ; Mon, 10 May 1999 12:53:13 -0700 (PDT) Received: from east.isi.edu (east.isi.edu [38.245.76.2]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id MAA18920 for ; Mon, 10 May 1999 12:53:20 -0700 (PDT) Received: from bogey by east.isi.edu (8.8.5/5.61+local-24) id ; Mon, 10 May 1999 19:52:55 GMT Message-ID: <013d01be9b1f$d52907c0$634cf526@east.isi.edu> From: "Aaron Griggs" To: "Craig Metz" Cc: References: <199905101937.TAA12669@inner.net> Subject: (IPng 7494) Re: Last Call: IPv6 Jumbograms to Proposed Standard Date: Mon, 10 May 1999 16:01:03 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2014.211 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2014.211 Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk > In my mind, however, there is now a new and more convincing argument for > doing this incrementally. The "new" IPsec specs describe a bump-in-the-wire > IPsec mode (which was also subtly prevented in the "old" IPsec specs, because > it also leads to bad design problems). Suppose that my end host sends out: > > IP_len=X AH[len=X] payload > > And my bump-in-the-wire box wants to insert an AH. If we do things > incrementally, this is easy: > > IP_len=X+Y AH[len=X+Y] AH[len=X] payload > > If we don't things incrementally, this is hard -- cryptographically > impossible if the bump-in-the-wire doesn't share the secret key with the end > host, actually. > > On the surface, an alternate solution is to remove the length field. However, > I believe that you'll find that the base header's next header type field has > the same problem if you have a bump-in-the-stack capable of inserting, for > example, ESP before AH (which used to be outlawed, and I think still is in the > IPv6 base spec). There might be other fields that become mutable if you take > this approach. Personally, I want as much of my packet protected as possible, > so I strongly admonish you to choose solutions that allow protection over > solutions that preclude it. Yeah, I sent that example to Itojun in my first email. My solution was to not allow the "bump-in-the-wire" to do Transport mode IPSec if IPSec was already performed, which may not work. Most of the time a "bump-in-the-wire" will do ESP (encryption) and probably in Tunnel mode, right? Anyway, this is for the arbitrary cases that are not required for IPSec conformance; but, do make "interesting" converstations. Thanks, Aaron -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Mon May 10 13:47:52 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id MAA25703 for ipng-dist; Mon, 10 May 1999 12:59:28 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id MAA25696 for ; Mon, 10 May 1999 12:59:11 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id MAA26679 for ; Mon, 10 May 1999 12:58:31 -0700 (PDT) Received: from inner.net (avarice.inner.net [199.33.248.2]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id MAA22313 for ; Mon, 10 May 1999 12:58:33 -0700 (PDT) Received: from inner.net (cmetz.cstone.net [205.197.102.217]) by inner.net (8.9.1/8.9.1) with ESMTP id TAA12694; Mon, 10 May 1999 19:52:07 GMT Message-Id: <199905101952.TAA12694@inner.net> To: "Aaron Griggs" cc: ipng@sunroof.eng.sun.com Subject: (IPng 7495) Re: Last Call: IPv6 Jumbograms to Proposed Standard In-reply-to: Your message of "Mon, 10 May 1999 16:01:03 EDT." <013d01be9b1f$d52907c0$634cf526@east.isi.edu> X-Copyright: Copyright 1999, Craig Metz, All Rights Reserved. X-Reposting: With explicit permission only Date: Mon, 10 May 1999 15:57:33 -0400 From: Craig Metz Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk In message <013d01be9b1f$d52907c0$634cf526@east.isi.edu>, you write: >Yeah, I sent that example to Itojun in my first email. My solution was to >not allow the "bump-in-the-wire" to do Transport mode IPSec if IPSec was >already performed, which may not work. Most of the time a >"bump-in-the-wire" will do ESP (encryption) and probably in Tunnel mode, >right? Anyway, this is for the arbitrary cases that are not required for >IPSec conformance; but, do make "interesting" converstations. The solution that used to be the case was not to allow bump in the wire. If you need an intermediate box to do IPsec, make it encapsulate. Then there are no problems. Apparently, the people responsible for the new IPsec specs decided to change that. As a result, you are now required to have a stack that can receive packets from such a box. I don't believe this is an arbitrary conformance requirement, I think this is a must. -Craig -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Mon May 10 15:38:09 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id PAA25948 for ipng-dist; Mon, 10 May 1999 15:35:17 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id PAA25941 for ; Mon, 10 May 1999 15:35:06 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id PAA06848 for ; Mon, 10 May 1999 15:34:53 -0700 (PDT) Received: from coconut.itojun.org (coconut.itojun.org [210.160.95.97]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id PAA02629 for ; Mon, 10 May 1999 15:35:00 -0700 (PDT) Received: from kiwi.itojun.org (itojun@localhost.itojun.org [127.0.0.1]) by coconut.itojun.org (8.9.3+3.2W/3.7W) with ESMTP id HAA02136 for ; Tue, 11 May 1999 07:34:55 +0900 (JST) To: ipng@sunroof.eng.sun.com In-reply-to: cmetz's message of Mon, 10 May 1999 13:55:41 -0400. <199905101750.RAA12496@inner.net> X-Template-Reply-To: itojun@itojun.org X-Template-Return-Receipt-To: itojun@itojun.org X-PGP-Fingerprint: F8 24 B4 2C 8C 98 57 FD 90 5F B4 60 79 54 16 E2 Subject: (IPng 7496) Re: Last Call: IPv6 Jumbograms to Proposed Standard From: itojun@iijlab.net Date: Tue, 11 May 1999 07:34:55 +0900 Message-ID: <2132.926375695@coconut.itojun.org> Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk > Last time I checked, the specs were worded to not allow arbitrary >combinations of {ESP,AH} (such as the AH AH case you describe). In the IPv6 >case, I believe that you can find the allowed combinations described in the >IPv6 proper spec's description of chained header ordering. There's no RFC2460 chapter 4.1 has a diagram with "AH then ESP" ordering. However, there is a note that says "see RFC2406 for additional recomendations". So I figured that RFC2460 does not restrict the ordering. itojun -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Mon May 10 17:47:14 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id RAA26049 for ipng-dist; Mon, 10 May 1999 17:24:04 -0700 (PDT) Received: from engmail4.Eng.Sun.COM (engmail4 [129.144.134.6]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id RAA26042 for ; Mon, 10 May 1999 17:23:51 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail4.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id RAA24372 for ; Mon, 10 May 1999 17:23:51 -0700 (PDT) Received: from roll.mentat.com ([192.88.122.129]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id RAA03816 for ; Mon, 10 May 1999 17:23:50 -0700 (PDT) Received: from leo.mentat.com (leo [192.88.122.132]) by roll.mentat.com (8.9.1b+Sun/8.9.1) with SMTP id RAA21336 for ; Mon, 10 May 1999 17:22:03 -0700 (PDT) Received: from orna.mentat.com by leo.mentat.com (SMI-8.6/SMI-4.1) id RAA17842; Mon, 10 May 1999 17:22:03 -0700 Received: by orna.mentat.com (SMI-8.6/SMI-SVR4) id RAA25001; Mon, 10 May 1999 17:27:16 -0700 Date: Mon, 10 May 1999 17:27:16 -0700 From: marc@mentat.com (Marc Hasson) Message-Id: <199905110027.RAA25001@orna.mentat.com> To: ipng@sunroof.eng.sun.com Subject: (IPng 7497) Re: Last Call: IPv6 Jumbograms to Proposed Standard X-Sun-Charset: US-ASCII Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk Cast our (Mentat) lot in with the incremental IPSec header approach, when applying our policy we build a complete packet from the innermost IPSec header on out. I guess we know MSR, KAME, NRL, and Mentat approaches now. I read the score as 3-1 so far. Anyone else ready to close down or open the gap further? -- Marc -- > From owner-ipng@sunroof.eng.sun.com Mon May 10 11:30:54 1999 > To: "Aaron Griggs" > cc: ipng@sunroof.eng.sun.com > Subject: (IPng 7491) Re: Last Call: IPv6 Jumbograms to Proposed Standard > X-Copyright: Copyright 1999, Craig Metz, All Rights Reserved. > X-Reposting: With explicit permission only > Date: Mon, 10 May 1999 14:23:48 -0400 > From: Craig Metz > > In message <00f101be9b11$92c25070$634cf526@east.isi.edu>, you write: > >Which specs are you referring. None of the IPSec specs, rule out arbitary > >combos of IPSec headers. > > RFC 1826 did, though subtly (see section three). RFC 2402's rewording makes > it much more fuzzy; its wording can be interpeted either way. > > >Are you talking about arbitary extension headers including IPSec? We handle > >that fine although we don't implement them all yet. > > > >I basically want to find out what other implementations do with regards to > >nested IPSec headers. As Itojun pointed out, his stack has problems with > >nested AH_AH and jumbograms. And his stack will not interoperate with ours > >if AH_AH is done since he does the IPSec incrementally. > > We (NRL) always do them incrementally. > > -Craig > -------------------------------------------------------------------- > IETF IPng Working Group Mailing List > IPng Home Page: http://playground.sun.com/ipng > FTP archive: ftp://playground.sun.com/pub/ipng > Direct all administrative requests to majordomo@sunroof.eng.sun.com > -------------------------------------------------------------------- > -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Mon May 10 17:58:19 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id RAA26077 for ipng-dist; Mon, 10 May 1999 17:41:22 -0700 (PDT) Received: from engmail2.Eng.Sun.COM (engmail2 [129.146.1.25]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id RAA26070 for ; Mon, 10 May 1999 17:40:58 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail2.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id RAA27931 for ; Mon, 10 May 1999 17:40:56 -0700 (PDT) Received: from mail2.microsoft.com (mail2.microsoft.com [131.107.3.124]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id RAA12176 for ; Mon, 10 May 1999 17:40:55 -0700 (PDT) Received: by mail2.microsoft.com with Internet Mail Service (5.5.2524.0) id ; Mon, 10 May 1999 17:40:54 -0700 Message-ID: <4D0A23B3F74DD111ACCD00805F31D81014515022@RED-MSG-50> From: Richard Draves To: "'Aaron Griggs'" , Craig Metz Cc: ipng@sunroof.eng.sun.com Subject: (IPng 7498) Re: Last Call: IPv6 Jumbograms to Proposed Standa rd Date: Mon, 10 May 1999 17:40:52 -0700 X-Mailer: Internet Mail Service (5.5.2524.0) Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk Several comments on the recent discussion... First, RFC 2401 (the architecture spec) is pretty clear about combinations of security associations. Section 4.5 begins: This section describes four examples of combinations of security associations that MUST be supported by compliant IPsec hosts or security gateways. Additional combinations of AH and/or ESP in tunnel and/or transport modes MAY be supported at the discretion of the implementor. Compliant implementations MUST be capable of generating these four combinations and on receipt, of processing them, but SHOULD be able to receive and process any combination. The diagrams and text below describe the basic cases. ... So an implementation may support an AH-AH combination. KAME & MSR IPv6 choose to support this combination, out of a desire for orthogonality. Second, there's the question of how to calculate the AH authentication data (the ICV). The ICV calculation is unusual because it looks "back" to the preceding IP header. If header construction is done "incrementally" then any extension headers that are added later, after the ICV calculation, will not be authenticated. This is generally not good. The jumbogram case is an example. You want the jumbogram option to be authenticated. So the packet should be constructed complete with the hop-by-hop header before performing the ICV calculation. Any headers that *are* added after ICV calculation should be removed on the receive side before ICV verification. Fragmentation is an example. The whole packet is protected with an AH header, then it is fragmented. Fragment headers are inserted, but they are removed by reassembly before the AH header is processed by the receiver. Although the spec allows it, it's relatively difficult to create a bump-in-the-wire implementation that supports transport mode. For example, it needs to reassemble fragments, apply transport-mode associations, then refragment. Yuck. Suppose a bump-in-the-wire (or bump-in-the-stack) implementation is inserting a transport-mode AH header (call it AH2), and the stack proper has already inserted a transport-mode AH header (call it AH1). I don't think we should expect this to work. AH1 protects the integrity of the packet. The later addition of AH2 violates the packet's integrity. When the packet is received, the AH1 ICV verification *should* fail. Rich -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Mon May 10 18:03:15 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id RAA26102 for ipng-dist; Mon, 10 May 1999 17:55:24 -0700 (PDT) Received: from engmail4.Eng.Sun.COM (engmail4 [129.144.134.6]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id RAA26095 for ; Mon, 10 May 1999 17:55:05 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail4.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id RAA29164 for ; Mon, 10 May 1999 17:55:04 -0700 (PDT) Received: from inner.net (avarice.inner.net [199.33.248.2]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id RAA18552 for ; Mon, 10 May 1999 17:55:03 -0700 (PDT) Received: from inner.net (cmetz.cstone.net [205.197.102.217]) by inner.net (8.9.1/8.9.1) with ESMTP id AAA12934; Tue, 11 May 1999 00:48:29 GMT Message-Id: <199905110048.AAA12934@inner.net> To: Richard Draves cc: ipng@sunroof.eng.sun.com Subject: (IPng 7499) Re: Last Call: IPv6 Jumbograms to Proposed Standa rd In-reply-to: Your message of "Mon, 10 May 1999 17:40:52 PDT." <4D0A23B3F74DD111ACCD00805F31D81014515022@RED-MSG-50> X-Copyright: Copyright 1999, Craig Metz, All Rights Reserved. X-Reposting: With explicit permission only Date: Mon, 10 May 1999 20:54:03 -0400 From: Craig Metz Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk In message <4D0A23B3F74DD111ACCD00805F31D81014515022@RED-MSG-50>, you write: >So an implementation may support an AH-AH combination. KAME & MSR IPv6 >choose to support this combination, out of a desire for orthogonality. As does my code, same reason. >If header construction is done "incrementally" then any >extension headers that are added later, after the ICV calculation, will not >be authenticated. This is generally not good. We always assemble other IPv6 extension headers before doing IPsec. Then we insert the IPsec headers into their correct place. This means that legitimate extension headers will be authenticated. When I say incrementally, I mean that IPsec headers are inserted one at a time, not that the entire packet is constructed this way -- it can't quite be, if you want to have IPv6 extension headers authenticated correctly. This leads to a sort of obtuse way of doing things, but it's the only generally workable way to do it. There exist extension headers -- such as IPcomp -- for which it is not possible to determine the total length without actually doing the majority of the header's processing. That's doable with either approach, but both approaches require ugliness to handle it. Adding extension headers as a bump in the wire probably should be considered invalid. It used to be, and for good reasons. -Craig -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Mon May 10 18:20:04 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id SAA26147 for ipng-dist; Mon, 10 May 1999 18:05:47 -0700 (PDT) Received: from engmail4.Eng.Sun.COM (engmail4 [129.144.134.6]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id SAA26140 for ; Mon, 10 May 1999 18:05:30 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail4.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id SAA00729 for ; Mon, 10 May 1999 18:05:32 -0700 (PDT) Received: from inner.net (avarice.inner.net [199.33.248.2]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id SAA23269 for ; Mon, 10 May 1999 18:05:31 -0700 (PDT) Received: from inner.net (cmetz.cstone.net [205.197.102.217]) by inner.net (8.9.1/8.9.1) with ESMTP id AAA12960; Tue, 11 May 1999 00:58:57 GMT Message-Id: <199905110058.AAA12960@inner.net> To: marc@mentat.com (Marc Hasson) cc: ipng@sunroof.eng.sun.com Subject: (IPng 7500) Re: Last Call: IPv6 Jumbograms to Proposed Standard In-reply-to: Your message of "Mon, 10 May 1999 17:27:16 PDT." <199905110027.RAA25001@orna.mentat.com> X-Copyright: Copyright 1999, Craig Metz, All Rights Reserved. X-Reposting: With explicit permission only Date: Mon, 10 May 1999 21:04:25 -0400 From: Craig Metz Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk In message <199905110027.RAA25001@orna.mentat.com>, you write: >Cast our (Mentat) lot in with the incremental IPSec header approach, >when applying our policy we build a complete packet from the innermost >IPSec header on out. > >I guess we know MSR, KAME, NRL, and Mentat approaches now. I read the >score as 3-1 so far. > >Anyone else ready to close down or open the gap further? Marc, I think you're doing it the same way NRL does it, which makes things 2-2. Of course, I'll also observe that this and many other problems and ambiguities with the IPsec specs are a direct result of the design-by- democracy approach. A dictatorial edict that we aren't supporting bump-in-the- wire and we're modelling the assembly of the headers a certain way would solve the problem. In practice, though, I don't think either method of assembling the packet within the stack necessarily precludes writing the bits with the appearance that they were assembled the other way. For example, I can build a two-pass mechanism that lets me figure out what the total length is, then put that length in all the AHs' pseudo-headers. Similarly, the KAME or MSR people could build a mechanism that inserts the running "virtual length" into the pseudo- header. Hmm. Hmm... pseudo-headers... bump-in-the-wire... I smell another reason why I don't like bumps in the wire. -Craig -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Mon May 10 18:29:19 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id SAA26166 for ipng-dist; Mon, 10 May 1999 18:17:18 -0700 (PDT) Received: from engmail2.Eng.Sun.COM (engmail2 [129.146.1.25]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id SAA26159 for ; Mon, 10 May 1999 18:17:07 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail2.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id SAA03718 for ; Mon, 10 May 1999 18:17:07 -0700 (PDT) Received: from coconut.itojun.org (coconut.itojun.org [210.160.95.97]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id SAA28032 for ; Mon, 10 May 1999 18:17:06 -0700 (PDT) Received: from kiwi.itojun.org (itojun@localhost.itojun.org [127.0.0.1]) by coconut.itojun.org (8.9.3+3.2W/3.7W) with ESMTP id KAA04474 for ; Tue, 11 May 1999 10:16:50 +0900 (JST) To: ipng@sunroof.eng.sun.com In-reply-to: cmetz's message of Mon, 10 May 1999 20:54:03 -0400. <199905110048.AAA12934@inner.net> X-Template-Reply-To: itojun@itojun.org X-Template-Return-Receipt-To: itojun@itojun.org X-PGP-Fingerprint: F8 24 B4 2C 8C 98 57 FD 90 5F B4 60 79 54 16 E2 Subject: (IPng 7501) Re: Last Call: IPv6 Jumbograms to Proposed Standa rd From: itojun@iijlab.net Date: Tue, 11 May 1999 10:16:49 +0900 Message-ID: <4470.926385409@coconut.itojun.org> Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk >>If header construction is done "incrementally" then any >>extension headers that are added later, after the ICV calculation, will not >>be authenticated. This is generally not good. > We always assemble other IPv6 extension headers before doing IPsec. Then we >insert the IPsec headers into their correct place. This means that legitimate >extension headers will be authenticated. When I say incrementally, I mean that >IPsec headers are inserted one at a time, not that the entire packet is >constructed this way -- it can't quite be, if you want to have IPv6 extension >headers authenticated correctly. Same for KAME. We do like this: Beginning of ip6_output: IPv6 payload (options are kept in pcb) Paste options as needed, in documented order. rthdr needs to be updated later. IPv6 hbh dst1 rthdr dest2 payload Insert IPsec headers as needed, one by one, updating header length field (and, in some cases, insert jumbo payload option). Of course we encrypt the part after esp. IPv6 hbh dst1 rthdr [esp|ah]* dest2 payload Modify rthdr properly, and send the packet out. itojun -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Mon May 10 18:34:35 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id SAA26209 for ipng-dist; Mon, 10 May 1999 18:27:46 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id SAA26202 for ; Mon, 10 May 1999 18:27:17 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id SAA15974 for ; Mon, 10 May 1999 18:27:08 -0700 (PDT) Received: from coconut.itojun.org (coconut.itojun.org [210.160.95.97]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id SAA02156 for ; Mon, 10 May 1999 18:27:17 -0700 (PDT) Received: from kiwi.itojun.org (itojun@localhost.itojun.org [127.0.0.1]) by coconut.itojun.org (8.9.3+3.2W/3.7W) with ESMTP id KAA04691; Tue, 11 May 1999 10:27:07 +0900 (JST) To: Craig Metz cc: ipng@sunroof.eng.sun.com In-reply-to: cmetz's message of Mon, 10 May 1999 21:04:25 -0400. <199905110058.AAA12960@inner.net> X-Template-Reply-To: itojun@itojun.org X-Template-Return-Receipt-To: itojun@itojun.org X-PGP-Fingerprint: F8 24 B4 2C 8C 98 57 FD 90 5F B4 60 79 54 16 E2 Subject: (IPng 7502) Re: Last Call: IPv6 Jumbograms to Proposed Standard From: itojun@iijlab.net Date: Tue, 11 May 1999 10:27:07 +0900 Message-ID: <4687.926386027@coconut.itojun.org> Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk >>Cast our (Mentat) lot in with the incremental IPSec header approach, >>when applying our policy we build a complete packet from the innermost >>IPSec header on out. >>I guess we know MSR, KAME, NRL, and Mentat approaches now. I read the >>score as 3-1 so far. >>Anyone else ready to close down or open the gap further? > Marc, I think you're doing it the same way NRL does it, which makes things >2-2. ???? I believed NRL and KAME are doing the same thing, and it makes 3(Mentat/NRL/KAME)-1(MSR). itojun -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Mon May 10 18:34:43 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id SAA26245 for ipng-dist; Mon, 10 May 1999 18:31:11 -0700 (PDT) Received: from engmail2.Eng.Sun.COM (engmail2 [129.146.1.25]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id SAA26234 for ; Mon, 10 May 1999 18:30:55 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail2.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id SAA05240 for ; Mon, 10 May 1999 18:30:56 -0700 (PDT) Received: from mail-blue.research.att.com (mail-blue.research.att.com [135.207.30.102]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id SAA03741 for ; Mon, 10 May 1999 18:30:55 -0700 (PDT) Received: from bigmail.research.att.com (bigmail.research.att.com [135.207.30.101]) by mail-blue.research.att.com (Postfix) with ESMTP id 4B3A24CE2D; Mon, 10 May 1999 21:30:55 -0400 (EDT) Received: from SIGABA.research.att.com (sigaba.research.att.com [135.207.23.169]) by bigmail.research.att.com (8.8.8/8.8.8) with ESMTP id VAA07069; Mon, 10 May 1999 21:30:55 -0400 (EDT) Received: by SIGABA.research.att.com (Postfix, from userid 54047) id E33E841F16; Mon, 10 May 1999 21:30:53 -0400 (EDT) Received: from roc (localhost [127.0.0.1]) by SIGABA.research.att.com (Postfix) with ESMTP id D43B0400B4; Mon, 10 May 1999 21:30:48 -0400 (EDT) X-Mailer: exmh version 2.0.2 2/24/98 To: Craig Metz Cc: ipng@sunroof.eng.sun.com Subject: (IPng 7503) Re: Last Call: IPv6 Jumbograms to Proposed Standard Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Mon, 10 May 1999 21:30:44 -0400 From: "Steven M. Bellovin" Message-Id: <19990511013053.E33E841F16@SIGABA.research.att.com> Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk In message <199905110058.AAA12960@inner.net>, Craig Metz writes: > In message <199905110027.RAA25001@orna.mentat.com>, you write: > >Cast our (Mentat) lot in with the incremental IPSec header approach, > >when applying our policy we build a complete packet from the innermost > >IPSec header on out. > > > >I guess we know MSR, KAME, NRL, and Mentat approaches now. I read the > >score as 3-1 so far. > > > >Anyone else ready to close down or open the gap further? > > Marc, I think you're doing it the same way NRL does it, which makes things > 2-2. > > Of course, I'll also observe that this and many other problems and > ambiguities with the IPsec specs are a direct result of the design-by- > democracy approach. A dictatorial edict that we aren't supporting bump-in-the > - > wire and we're modelling the assembly of the headers a certain way would solv > e > the problem. > > In practice, though, I don't think either method of assembling the packet > within the stack necessarily precludes writing the bits with the appearance > that they were assembled the other way. For example, I can build a two-pass > mechanism that lets me figure out what the total length is, then put that > length in all the AHs' pseudo-headers. Similarly, the KAME or MSR people coul > d > build a mechanism that inserts the running "virtual length" into the pseudo- > header. > > Hmm. Hmm... pseudo-headers... bump-in-the-wire... I smell another reason wh > y > I don't like bumps in the wire. Bump in the wire is fine -- it's AH that's the problem. The problems with ambiguities and infelicities in the spec go back at least to July '95, when (based on work by David Wagner and myself) I posted an analysis showing that everything in the IP header either couldn't be protected by AH or didn't need to be. I was outshouted. -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Mon May 10 23:49:03 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id XAA26447 for ipng-dist; Mon, 10 May 1999 23:41:52 -0700 (PDT) Received: from engmail2.Eng.Sun.COM (engmail2 [129.146.1.25]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id XAA26440 for ; Mon, 10 May 1999 23:41:41 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail2.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id XAA28964 for ; Mon, 10 May 1999 23:41:42 -0700 (PDT) Received: from mail5.microsoft.com (mail5.microsoft.com [131.107.3.121]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id XAA23822 for ; Mon, 10 May 1999 23:41:42 -0700 (PDT) Received: by INET-IMC-05 with Internet Mail Service (5.5.2524.0) id ; Mon, 10 May 1999 23:41:41 -0700 Message-ID: <4FD6422BE942D111908D00805F3158DF07222B6F@RED-MSG-52> From: Brian Zill To: "'Craig Metz'" Cc: ipng@sunroof.eng.sun.com Subject: (IPng 7504) Re: Last Call: IPv6 Jumbograms to Proposed Standa rd Date: Mon, 10 May 1999 23:41:36 -0700 X-Mailer: Internet Mail Service (5.5.2524.0) Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk > From: Craig Metz [mailto:cmetz@inner.net] > A dictatorial edict that we aren't supporting > bump-in-the-wire and we're modeling > the assembly of the headers a certain way > would solve the problem. I believe specifying how we're modeling the assembly of headers would be enough to ensure interoperability when nesting AH inside of another transport mode security header. As you pointed out in an earlier message, transport mode bump-in-the-wire can only work if we model the assembly of headers as "incremental". It's a shame the AH spec isn't clearer on this issue. There are two places in the AH spec (RFC 2402) where it discusses how to handle the AH ICV calculation in the face of subsequently applied IPsec headers. One is in section 3.3 (which Aaron quoted earlier), the other is in section 3.4. Both speak of "ignoring" the subsequently applied headers, with clarifications stating not to zero/predict/use the contents of those headers. I had taken this to mean to just skip over them when performing the ICV calculation. Logically removing them, on the other hand, involves modifying the previous header's next header field to be that of the subsequent header and also decreasing the IPv6 header's Payload Length field by the appropriate amount when calculating the ICV. If I understand everyone's mail so far, NRL, KAME and Mentat all take this latter approach. If that's the consensus, I suppose we'll switch our interpretation to match everybody else's. Anyone with an IPSec implementation who hasn't spoken up yet? Getting back to Itojun's original comment about AH with Jumbograms, they still seem problematic to me. I don't see a good way to support bump-in-the-wire implementations adding transport mode AH Jumbograms. Unlike fragmentation headers, which can be applied later (on transmit) and removed before (on receive) any IPsec is performed, the hop-by-hop jumbo payload option is not specified to be added and later removed transparently. If a bump-in-the-wire implementation finds itself in a situation (such as Itojun's example) where it needs to add a jumbo payload option to hold an AH2, the ICV value in the previously calculated AH1 won't reflect this included option and the ICV check will fail on the receive side. There's currently no mention in the specs of logically removing the jumbo payload option on receive, and I don't think that's a good idea in any event. On the other hand, if we ignore this strange bump-in-the-wire case, I don't see any problem. As long as a single stack is adding both the AH1 and the AH2 header, it can pre-calculate the eventual size of the final datagram and know to insert the jumbo payload option in the hop-by-hop header (and the hop-by-hop header itself if there are no other hop-by-hop options already in the packet) prior to calculating AH1's ICV. The only anomaly here is that the value of the "Jumbo Payload Length" field used to calculate AH1's ICV might be less than 65,535, however, this wouldn't violate the spec as that value would never be seen on the wire. Implementation would be thornier than as in the pure "incremental" approach, but seems possible. --Brian -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Tue May 11 08:38:52 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id IAA26911 for ipng-dist; Tue, 11 May 1999 08:33:41 -0700 (PDT) Received: from engmail2.Eng.Sun.COM (engmail2 [129.146.1.25]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id IAA26904 for ; Tue, 11 May 1999 08:33:31 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail2.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id IAA08869 for ; Tue, 11 May 1999 08:33:29 -0700 (PDT) Received: from morgane.oleane.net (Morgane.OLEANE.Net [194.2.1.9]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id IAA25787 for ; Tue, 11 May 1999 08:33:29 -0700 (PDT) Received: from tom.oleane.net (tom.oleane.net [194.2.28.14]) by morgane.oleane.net with ESMTP id RAA11579 for ; Tue, 11 May 1999 17:33:21 +0200 Received: from none (dyn-1-1-254.Cor.dialup.oleane.fr [62.161.8.254]) by tom.oleane.net (8.8.8/8.8.8) with SMTP id RAA17583 for ; Tue, 11 May 1999 17:33:18 +0200 Message-ID: <017001be9bc2$006c2280$0301a8c0@oleane.com> Reply-To: "Michel Gosse" From: "Michel Gosse" To: Subject: (IPng 7505) mpls Date: Tue, 11 May 1999 17:21:52 +0200 Organization: Upperside MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2014.211 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2014.211 Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk The future is now. It is called MPLS. Overview of the capacity of MPLS in terms of traffic engineering, VPNs, QoS for an IP backbone... What will become of ATM? European conference in June: MPLS 99 For more details, please go to : http://www.upperside.fr/bampls.htm Thanks Michel -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Tue May 11 14:09:26 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id OAA27255 for ipng-dist; Tue, 11 May 1999 14:03:40 -0700 (PDT) Received: from engmail2.Eng.Sun.COM (engmail2 [129.146.1.25]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id OAA27248 for ; Tue, 11 May 1999 14:03:31 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail2.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id OAA21269 for ; Tue, 11 May 1999 14:03:27 -0700 (PDT) Received: from thrawn.cs.ohiou.edu (thrawn.cs.ohiou.edu [132.235.3.130]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id OAA12860 for ; Tue, 11 May 1999 14:03:28 -0700 (PDT) Received: (from vchipits@localhost) by thrawn.cs.ohiou.edu (8.8.5/8.7.1) id RAA14421; Tue, 11 May 1999 17:03:21 -0400 (EDT) From: Vitaly Chipitsyn MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Date: Tue, 11 May 1999 17:03:19 -0400 (EDT) To: IPNG (ipngwg) Subject: (IPng 7506) general question X-Mailer: VM 6.43 under 20.4 "Emerald" XEmacs Lucid Message-ID: <14136.37732.521633.344247@thrawn.cs.ohiou.edu> Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk Hello, I am looking into one problem of routing in IPv6, and I would like to ask if anyone knows of any kind of research that has been done in this area? The problem that I am worried about relates to provider-based routing in IPv6. Imagine a site that has 3 connectiont to the Internet, which means there are three border routers. Assume that those three connection points belong to different sTLAs, for the sake of argument. As far as I know, IPv6 numbering of local hosts can be either global or site-local. Global numbering is not interesting in this situation. In the latter case, packets leaving the site through border routers will have site-local prefixes of their addresses replaced with the prefix of the corresponding connection point. There is no problem with this. Now that there are active TCP connections from the outside through _one_ of the three connection points, imagine _that_ corresponding link (or router) go down. 1) It would be nice to have those active TCP connections change their network path and use another connection point to get packets to the destination inside the site. However, it is hard because TCP uses destination IP address in its notion of virtual connection, while destination IP address would definatly change in this situation. 2) However, because (1) seems hard to accomplish, has anyone thought of somehow telling the node which originates TCP connection to use another IPv6 address (with a different prefix, corresponding to another Internet connection point of the target site) for future communications? This brings another issue that is also interesting: DNS support of multiple addresses to the same node, through a number of connection points as in the example above. Regarding the (2), the originating node, prior to establishing connection, knows that it needs a service from the target node which is inside the site. Typically, I would imagine it to be a WWW server. In this case, that WWW server potentially has several addresses by which it can be reached from the Internet, each valid while connection point is operational. A requesting node would go to a DNS server to get information about all available IPv6 addresses for the server. From this primary questions would be: 3) Does DNS currently support storing multiple IPv6 addresses for cases as in the example above? (I have not read dynamic DNS RFC) 4) Are there specifications of how IPv6 nodes should behave in cases of changes in sets of active prefixes for a given destination? At the top level, this is all. I hope to hear good comments and references to what have already been done regarding the problems that mention here. Thank you. --vc -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Tue May 11 14:52:03 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id OAA27374 for ipng-dist; Tue, 11 May 1999 14:47:22 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id OAA27367 for ; Tue, 11 May 1999 14:47:12 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id OAA15754; Tue, 11 May 1999 14:47:02 -0700 (PDT) Received: from guayacan.uninorte.edu.co ([216.72.67.3]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id OAA12599; Tue, 11 May 1999 14:46:52 -0700 (PDT) Received: from localhost (ydonoso@localhost) by guayacan.uninorte.edu.co (AIX4.2/UCB 8.7/8.7) with SMTP id QAA46118; Tue, 11 May 1999 16:34:31 -0500 (EST) Date: Tue, 11 May 1999 16:34:30 -0500 (EST) From: Yesid Donoso To: ipng@sunroof.eng.sun.com cc: narten@raleigh.ibm.com, nordmark@eng.sun.com Subject: (IPng 7507) About IPng Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk Hi. My name is Yezid Donoso Meisel. I am a research and teacher of Network at North University in Barranquilla, Colombia. I want to present my article about IPng "MINIMUM MTU (Maximum Transfer Unit) SEARCH'S METHOD IN IPv6 (IP Version 6)". I wish to listen your opinions. My document is in Word format. Thanks ========================================================================== Ing.Yezid Donoso Meisel Departamento de sistemas, Universidad del Norte ydonoso@uninorte.edu.co ydonoso@guayacan.uninorte.edu.co ydonoso@mango.uninorte.edu.co Barranquilla, Colombia ========================================================================== -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Tue May 11 19:26:01 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id TAA27577 for ipng-dist; Tue, 11 May 1999 19:21:19 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id TAA27570 for ; Tue, 11 May 1999 19:21:08 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id TAA21879 for ; Tue, 11 May 1999 19:20:58 -0700 (PDT) Received: from coconut.itojun.org (coconut.itojun.org [210.160.95.97]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id TAA03930 for ; Tue, 11 May 1999 19:21:07 -0700 (PDT) Received: from kiwi.itojun.org (itojun@localhost.itojun.org [127.0.0.1]) by coconut.itojun.org (8.9.3+3.2W/3.7W) with ESMTP id LAA25751; Wed, 12 May 1999 11:21:01 +0900 (JST) To: Vitaly Chipitsyn cc: IPNG (ipngwg) In-reply-to: vchipitsyn's message of Tue, 11 May 1999 17:03:19 -0400. <14136.37732.521633.344247@thrawn.cs.ohiou.edu> X-Template-Reply-To: itojun@itojun.org X-Template-Return-Receipt-To: itojun@itojun.org X-PGP-Fingerprint: F8 24 B4 2C 8C 98 57 FD 90 5F B4 60 79 54 16 E2 Subject: (IPng 7508) Re: general question From: itojun@iijlab.net Date: Wed, 12 May 1999 11:21:01 +0900 Message-ID: <25747.926475661@coconut.itojun.org> Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk I agree that there are something needs to be done for multi-homed site support. >As far as I know, IPv6 numbering of local hosts can be either >global or site-local. Global numbering is not interesting in this >situation. In the latter case, packets leaving the site through border >routers will have site-local prefixes of their addresses replaced with >the prefix of the corresponding connection point. There is no problem >with this. Big problem with the above sentence, regarding to the use of site-local addresses (where did you read the above behavior?). Rewriting IPv6 header at the border router will damage IPsec between your node and outside nodes. That is what IPv6 would like to avoid and you will be using global IPv6 address. itojun -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 12 07:21:31 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id HAA27927 for ipng-dist; Wed, 12 May 1999 07:17:09 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id HAA27920 for ; Wed, 12 May 1999 07:17:00 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id HAA18883 for ; Wed, 12 May 1999 07:16:57 -0700 (PDT) Received: from mail3.microsoft.com (mail3.microsoft.com [131.107.3.123]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id HAA18343 for ; Wed, 12 May 1999 07:16:57 -0700 (PDT) Received: by mail3.microsoft.com with Internet Mail Service (5.5.2524.0) id ; Wed, 12 May 1999 07:16:53 -0700 Message-ID: <4D0A23B3F74DD111ACCD00805F31D81014515049@RED-MSG-50> From: Richard Draves To: "'Craig Metz'" Cc: ipng@sunroof.eng.sun.com Subject: (IPng 7510) Re: Last Call: IPv6 Jumbograms to Proposed Standa rd Date: Wed, 12 May 1999 07:16:50 -0700 X-Mailer: Internet Mail Service (5.5.2524.0) Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk > We always assemble other IPv6 extension headers before > doing IPsec. Then we > insert the IPsec headers into their correct place. This means > that legitimate > extension headers will be authenticated. When I say > incrementally, I mean that > IPsec headers are inserted one at a time, not that the entire > packet is > constructed this way -- it can't quite be, if you want to > have IPv6 extension > headers authenticated correctly. > > This leads to a sort of obtuse way of doing things, but > it's the only > generally workable way to do it. There exist extension > headers -- such as > IPcomp -- for which it is not possible to determine the total > length without > actually doing the majority of the header's processing. > That's doable with > either approach, but both approaches require ugliness to handle it. One concern with switching to this implementation model is that it would seem to be less efficient. We have in mind optimizing the common-case header construction for a TCP connection by having precomputed the headers as much as possible. Now in the common case there is no other IPsec header between the AH and IP headers, so it doesn't make a difference. But this points in the direction of having the AH ICV computation use IP header length & next-header values that reflect all the headers. Also on the receive side, it's more work to remove intervening IPsec headers. Another concern is that semantically it seems a little strange that AH should be designed to protect the packet's integrity, especially including proceeding extension headers, but then have preceeding IPsec headers not be accounted for in any way. Rich -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 12 09:13:11 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id JAA28075 for ipng-dist; Wed, 12 May 1999 09:04:58 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id JAA28068 for ; Wed, 12 May 1999 09:04:33 -0700 (PDT) From: Rolf.Kozlowski@cam-comp.de Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id JAA16087 for ; Wed, 12 May 1999 09:04:30 -0700 (PDT) Received: from popmail.space.net (popmail.Space.Net [195.30.0.14]) by earth.sun.com (8.9.1/8.9.1) with SMTP id JAA04640 for ; Wed, 12 May 1999 09:04:30 -0700 (PDT) Received: (qmail 6269 invoked from network); 12 May 1999 16:04:28 -0000 Received: from websrv1.cam-comp.de (195.30.54.222) by popmail.space.net with SMTP; 12 May 1999 16:04:28 -0000 Received: by websrv1 with Internet Mail Service (5.5.2448.0) id ; Wed, 12 May 1999 18:04:30 +0200 Message-ID: To: ipng@sunroof.eng.sun.com Subject: (IPng 7511) Latency of IPv4/IPv6 transition implementation Date: Wed, 12 May 1999 18:04:26 +0200 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2448.0) Content-Type: text/plain; charset="iso-8859-1" Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk Hello, are there already some estimations or even measures on latency of IPv4/IPv6 transition implementation ? I would assume that especially for simple Header Conversion no delays can be expected - but what for Application Proxies ? Ciao -- CAM-TW Dr. Rolf Kozlowski Rudolf-Diesel-Str. 7a 82205 Gilching Rolf.Kozlowski@cam-comp.de -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 12 12:51:53 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id MAA28419 for ipng-dist; Wed, 12 May 1999 12:41:20 -0700 (PDT) Received: from engmail4.Eng.Sun.COM (engmail4 [129.144.134.6]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id MAA28412 for ; Wed, 12 May 1999 12:40:53 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail4.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id MAA04408 for ; Wed, 12 May 1999 12:40:51 -0700 (PDT) Received: from guayacan.uninorte.edu.co ([216.72.67.3]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id MAA14243 for ; Wed, 12 May 1999 12:38:02 -0700 (PDT) Received: from localhost (ydonoso@localhost) by guayacan.uninorte.edu.co (AIX4.2/UCB 8.7/8.7) with SMTP id OAA41696 for ; Wed, 12 May 1999 14:25:53 -0500 (EST) Date: Wed, 12 May 1999 14:25:53 -0500 (EST) From: Yesid Donoso To: ipng@sunroof.eng.sun.com Subject: (IPng 7512) Re: About IPng In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: MULTIPART/MIXED; BOUNDARY="0-170988754-926537153=:15488" Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. Send mail to mime@docserver.cac.washington.edu for more info. --0-170988754-926537153=:15488 Content-Type: TEXT/PLAIN; charset=US-ASCII In this mail, I am sending my article about MTU in IPv6. Thanks and I will wait your opinions. ========================================================================== Ing.Yezid Donoso Meisel Departamento de sistemas, Universidad del Norte ydonoso@uninorte.edu.co ydonoso@guayacan.uninorte.edu.co ydonoso@mango.uninorte.edu.co Barranquilla, Colombia ========================================================================== --0-170988754-926537153=:15488 Content-Type: APPLICATION/octet-stream; name="IPv6_MTU_English.doc" Content-ID: Content-Description: English version Content-Transfer-Encoding: BASE64 0M8R4KGxGuEAAAAAAAAAAAAAAAAAAAAAPgADAP7/CQAGAAAAAAAAAAAAAAAC AAAAAgAAAAAAAAAAEAAAcwAAAAEAAAD+////AAAAAAMAAAA9AAAA//////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////9SAG8AbwB0ACAARQBuAHQAcgB5AAAAAAABAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkPkkAFgAFAf////// ////AQAAAAAJAgAAAAAAwAAAAAAAAEYAAAAAIAaSRo57vgHAp39Tjnu+AQcA AAAABAAAAAAAAFcAbwByAGQARABvAGMAdQBtAGUAbgB0AAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaAAIBAgAAAAMAAAD///// AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAILwAAAA AAAAAQBDAG8AbQBwAE8AYgBqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAABIAAgH///////////////8AAAAAIJAC AAIAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbAAAAAAAAAAFAFMA dQBtAG0AYQByAHkASQBuAGYAbwByAG0AYQB0AGkAbwBuAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAKAACAf////8EAAAA/////zAMQAA4DEAAQAxAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAUAgAA5D5JAHUAAAD9//////// //////8FAAAAewAAAP7///8GAAAACQAAAAoAAAALAAAADAAAAA0AAAAOAAAA DwAAABAAAAARAAAAEgAAABMAAAAUAAAAFQAAABYAAAAXAAAAGAAAABkAAAAa AAAAGwAAABwAAAAdAAAAHgAAAB8AAAAgAAAAIQAAACIAAAAjAAAAJAAAACUA AAAmAAAAJwAAACgAAAApAAAAKgAAACsAAAAsAAAALQAAAC4AAAAvAAAAMAAA ADEAAAAyAAAAMwAAADQAAAA1AAAANgAAADcAAACJAAAA//////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// ///////////////////////////////////////////////////////////+ //////////7//////////////////////////////3wAAAB9AAAAfgAAAH8A AAD+////UgBvAG8AdAAgAEUAbgB0AHIAeQAAAAAAAQAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAA5D5JABYABQH//////////wEAAAAACQIA AAAAAMAAAAAAAABGAAAAACAGkkaOe74BgM+IU457vgEHAAAAAAQAAAAAAABX AG8AcgBkAEQAbwBjAHUAbQBlAG4AdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAGgACAQIAAAADAAAA/////wAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwAAACo+QAAAAAAAAEAQwBvAG0A cABPAGIAagAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAASAAIB////////////////AAAAACCQAgACAAAAAgAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwAAAAAAAAABQBTAHUAbQBtAGEAcgB5 AEkAbgBmAG8AcgBtAGEAdABpAG8AbgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAACgAAgH/////BAAAAP////8wDEAAOAxAAEAMQAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAACAAAAFAIAAOQ+SQD//////////3UAAAD9//////////// ///+////BgAAAAkAAAAKAAAACwAAAAwAAAANAAAADgAAAA8AAAAQAAAAEQAA ABIAAAATAAAAFAAAABUAAAAWAAAAFwAAABgAAAAZAAAAGgAAABsAAAAcAAAA HQAAAB4AAAAfAAAAIAAAACEAAAAiAAAAIwAAACQAAAAlAAAAJgAAACcAAAAo AAAAKQAAACoAAAArAAAALAAAAC0AAAAuAAAALwAAADAAAAAxAAAAMgAAADMA AAA0AAAANQAAADYAAAA3AAAAiQAAADkAAAA6AAAAOwAAAP7///8+AAAA/f// /z8AAABAAAAAQQAAAEIAAABDAAAARAAAAAgAAABGAAAARwAAAEgAAABJAAAA SgAAAEsAAABMAAAATQAAAE4AAABPAAAAUAAAAFEAAABSAAAAUwAAAFQAAABV AAAAVgAAAFcAAABYAAAAWQAAAFoAAABbAAAAXAAAAF0AAABeAAAAXwAAAGAA AABhAAAAYgAAAGMAAABkAAAAZQAAAGYAAABnAAAAaAAAAGkAAABqAAAAawAA AGwAAABtAAAAbgAAAG8AAABwAAAAcQAAAHIAAAB0AAAA/v///3YAAAD+//// dwAAAHgAAAB5AAAAegAAALMAAAD//////////////////////////wAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABxEcHRvLiBTaXN0ZW1hcwAi HgAAAAIAAAA1AGVtHgAAAB4AAABNaWNyb3NvZnQgV29yZCBmb3IgV2luZG93 cyA5NQAAAEAAAAAARsMjAAAAAEAAAAAAAAAAAAAAAEAAAAAAStNFjnu+AUAA AAAAStNFjnu+AQMAAAAJAAAAAwAAAAkIAAADAAAA0C0AAAMAAAAAAAAAobEa 4QAAAAAAAAAAAAAAAAAAAAA+AAMA/v8JAAYAAAAAAAAAAAAAAAEAAAD+/wAA BAACAAAAAAAAAAAAAAAAAAAAAAABAAAAAtXN1ZwuGxCTlwgAKyz5rjAAAADo AAAACAAAAAEAAABIAAAADwAAAFAAAAAEAAAAXAAAAAUAAABkAAAABgAAAGwA AAALAAAAdAAAABAAAAB8AAAADAAAAIQAAAACAAAA5AQAAB4AAAACAAAAIABX bwMAAAAAjAEAAwAAAGEAAAADAAAAFwAAAAsAAAAAAAAACwAAAAAAAAAMEAAA AgAAAB4AAABMAAAATUlOSU1VTSBNVFUgKE1heGltdW0gVHJhbnNmZXIgVW5p dCkgU0VBUkNIklMgTUVUSE9EICBJTiBJUHY2IChJUCBWZXJzaW9uIDYpAAMA AAAAAAAA0M8R4KGxGuEAAAAAAAAAAAAAAAAAAAAAPgADAP7/CQAGAAAAAAAA AAEA/v8DCgAA/////wAJAgAAAAAAwAAAAAAAAEYaAAAARG9jdW1lbnRvIE1p Y3Jvc29mdCBXb3JkIAAKAAAATVNXb3JkRG9jABAAAABXb3JkLkRvY3VtZW50 LjYA9DmycQAAAAAAAAAAAAAAANDPEeChsRrhAAAAAAAAAAAAAAAA/v8AAAQA AgAAAAAAAAAAAAAAAAAAAAAAAQAAAOCFn/L5T2gQq5EIACsns9kwAAAA5AEA ABIAAAABAAAAmAAAAAIAAACgAAAAAwAAAPQAAAAEAAAAAAEAAAUAAAAYAQAA BgAAACQBAAAHAAAAMAEAAAgAAABIAQAACQAAAGABAAASAAAAbAEAAAoAAACU AQAACwAAAKABAAAMAAAArAEAAA0AAAC4AQAADgAAAMQBAAAPAAAAzAEAABAA AADUAQAAEwAAANwBAAACAAAA5AQAAB4AAABMAAAATUlOSU1VTSBNVFUgKE1h eGltdW0gVHJhbnNmZXIgVW5pdCkgU0VBUkNIklMgTUVUSE9EICBJTiBJUHY2 IChJUCBWZXJzaW9uIDYpAB4AAAABAAAAAAoAAB4AAAAPAAAARHB0by4gU2lz dGVtYXMAYx4AAAABAAAAACBQYR4AAAABAAAAAAIAAB4AAAAQAAAAYXJ0Ml9t YWdfaW5nbGVzAB4AAAAPAAAAcHJlc2VudCBNVFUgaW4gdGhlIElDTVAgbWVz c2FnZSB3aXRoIHRoZSBzaXplIG9mIHRoZSBNVFUgc3VwcG9ydGVkIGJ5IHRo ZSBuZXh0IGNvbm5lY3Rpb24uICAgSWYgdGhlIHNpemUgaXMgc21hbGxlciwg dGhlIGZpZWxkIGluIHRoZSBtZXNzYWdlIElDTVAgdGhhdCBjb250YWlucyB0 aGUgbWluaW11bSBNVFUgd2lsbCBiZSB1cGRhdGVkLiBJbiBvcmRlciB0byBm dWxmaWxsIHRoaXMgcmVxdWlyZW1lbnQsIHRoZSBub2RlcyBtdXN0IHN1cHBv cnQgdGhpcyB0eXBlIG9mIG1lc3NhZ2UsIHdoaWNoIGlzIG1lbnRpb25lZCBp biB0aGUgaXRlbSBjb3JyZXNwb25kaW5nIHRvIHRoZSBub2RlknMgc3BlY2lm aWNhdGlvbnMuDQ0gICAgRm9ybWF0IG9mIHRoaXMgSUNNUCBtZXNzYWdlLg0N AQ0NDQ1UeXBlIDEzNCAoaW5mb3JtYXRpb24gbWVzc2FnZSk6IGNhbGxlZCBN aW5pbXVtIFNpemUgTVRVIFJlcGx5IHdpdGggYSB6ZXJvIGNvZGUsIHdoaWNo IGlzIGFuIElDTVAgbWVzc2FnZSB0aGF0IHdpbGwgdHJhdmVsIGJ5IHRoZSBu ZXR3b3JrIGZyb20gdGhlIGRlc3Rpbnkgbm9kZSB0byB0aGUgb3JpZ2luIG5v ZGUgYW5kIHdoaWNoIGNvbnRhaW5zIHRoZSBtaW5pbXVtIE1UVSBvZiBhbGwg dGhlIGNvbm5lY3Rpb24uIEFueSBzcGVjaWZpYyB0cmVhdG1lbnQgd2lsbCBi ZSBtYWRlIHRvIHRoaXMgbWVzc2FnZTsgYnV0IHdoZW4gYW55IG5vZGUgZ2V0 cyBpdCwgdGhlIG5vZGUgd2lsbCByZXNlbmQgaXQgdG8gdGhlIG9uZSBpbmRp Y2F0ZWQgd2l0aG91dCBhbmFseXppbmcgbm9yIHByb2Nlc3NpbmcgaXRzIGNv bnRlbnQuIA0NICAgIEZvcm1hdCBvZiB0aGlzIElDTVAgbWVzc2FnZS4NDQEN DQ10byBtYWtlIGEgbW9yZSBlZmZpY2llbnRseSBzaGlwbWVudCBvZiBtZXNz YWdlcywgaXQgY2FuIGJlIGZlYXNpYmxlIHRoYXQgdGhlIElDTVAgbWVzc2Fn ZSB3aWxsIG5vdCBhcnJpdmUgdG8gaXRzIGRlc3Rpbnk7IGJlY2F1c2UgaWYg YW4gaW50ZXJtZWRpYXRlIG5vZGUga25vd3MgdGhlIG1pbmltdW0gTVRVIHRv IHRoYXQgZGVzdGlueSwgaXQgd2lsbCBiZSBwb3NzaWJsZSB0byBhc3N1bWUg dGhpcyB2YWx1ZSBhcyByZWxpYWJsZSBhbmQgdGhlcmVmb3JlLCBnaXZlIGl0 IGJhY2sgdG8gdGhlIG9yaWdpbiBub2RlIGFzIHRoZSBtaW5pbXVtIE1UVSBh bGwgdGhlIHdheSBmcm9tIHRoZSBvcmlnaW4gbm9kZSB0byB0aGUgZGVzdGlu eSBub2RlLiANDQ0NDQ0zLiBOT0RFklMgTU9ESUZJQ0FUSU9OIElOIFRIRSBS T1VUSU5HIFRBQkxFDQ0NDQ0gICAgVGhpcyBzb2x1dGlvbiBjb25zaXN0cyBv ZiBhZGRpbmcgdG8gdGhlIHJvdXRpbmcgdGFibGUsIGEgZmllbGQgdGhhdCBp bmRpY2F0ZXMgd2hpY2ggaXMgdGhlIG1pbmltdW0gTVRVIGtub3duIHVudGls IHRoYXQgbW9tZW50IGZvciBhbiBpbmZvcm1hdGlvbiB0cmFuc21pc3Npb24g dG8gYSBwYXJ0aWN1bGFyIG5ldHdvcmsuICAgSW4gb3JkZXIgdG8gbWFrZSB0 aGlzIG1lY2hhbmlzbSwgaXQgaXMgbmVjZXNzYXJ5IHRvIGVzdGFibGlzaCBj b21tdW5pY2F0aW9uIHdpdGggb3RoZXIgbm9kZXMgYW5kIHRvIGJlIGFibGUg dG8gZmluZCBvdXQgd2hpY2ggaXMgdGhlIE1UVSBmb3IgdGhhdCBwYXJ0aWN1 bGFyIG5ldHdvcmsuIA0NICAgIElmIHRoZSBuZXR3b3JrIGlzIHVua25vd24s IHRoZW4gb25lIG9mIHRoZSBmb2xsb3dpbmcgZXhwb3NpdGlvbnMgd2lsbCBi ZSB1c2VkOiANdG8gZnJhZ21lbnQgdGhlIHBhY2thZ2VzIHRvIHRoZSBNVFUg c2l6ZSBvZiB0aGUgZmlyc3QganVtcC4NdG8gZmluZCBieSBtZWFucyBvZiB0 aGUgSUNNUCBtZXNzYWdlIHdoaWNoIGlzIHRoZSBtaW5pbXVtIE1UVSBmb3Ig dGhhdCBkZXN0aW55LiANDQ1BbiBleGFtcGxlIG9mIHRoZSByb3V0aW5nIHRh YmxlIGFuZCB0aGUgZm9ybWF0IGFyZSBzaG93bjoNIA0BDQ0NUm91dGluZyB0 YWJsZSBmb3Igcm91dGVyIFINSG9zdCAJCVBhdGggdG8gdGhlCU1pbmltdW0N TWVzc2FnZQlBZGRyZXNzCU1UVQkNMjAuMC4wLjAJRGlyZWN0bHkJMjQwMAkN MzAuMC4wLjAJRGlyZWN0bHkJMzYwMAkNNDAuMC4wLjAJMzAuMC4wLjcJMjQw MAkNMTAuMC4wLjAJMjAuMC4wLjUJMTIwMAkNNTAuMC4wLjAJMjAuMC4wLjUJ MTIwMAkNDVRoZSBpZGVhIHdvdWxkIGJlIHRvIGNvbWJpbmUgdGhlc2UgdHdv IHRlY2huaXF1ZXMsIHNvIHRoYXQgdGhlIHN0b3Jpbmcgb2YgdGhlIE1UVSBh bmQgdGhlIGVzdGFibGlzaGluZyBvZiBleHBpcmF0aW9uIHBlcmlvZHMsIHdp bGwgbm90IGFsd2F5cyByZXF1aXJlIHRvIHNlbmQgdGhlIElDTVAgbWVzc2Fn ZSBtZW50aW9uZWQgcHJldmlvdXNseSwgdG8gZmluZCB0aGF0IG1pbmltdW0g TVRVLiANDQ00LiBQUk9QT1NBTCBBTkFMWVNJUw0NVGhlIG5ldyBzb2x1dGlv biwgcHJlc2VudGVkIGluIHRoZSBkZWZpbml0aW9uIG9mIElDTVAgKEludGVy bmV0IENvbnRyb2wgTWVzc2FnZSBQcm90b2NvbCkgbWVzc2FnZXMgaW4gVENQ L0lQknMgNnRoIHZlcnNpb24gYW5kIG5lY2Vzc2FyeSB0byBrbm93IHRoZSBt aW5pbXVtIE1UVSAoTWF4aW11bSBUcmFuc2ZlciBVbml0KSBiZXR3ZWVuIGFu IG9yaWdpbiBub2RlIG9yaWdpbiBhbmQgYSBkZXN0aW55LCBhbmQgdGhlIGRl c2lnbiBvZiB0aGUgcm91dGluZyB0YWJsZSwgYWRkaW5nIHRvIGl0IHRoZSBm aWVsZCBvZiB0aGUgbWluaW11bSBNVFUgc28gdGhlIG5vZGUgd2lsbCBrbm93 IHRoZSBzaXplIHRoYXQgdGhlIHBhY2thZ2UgcmVxdWlyZXMgZm9yIGEgcGFy dGljdWxhciBuZXR3b3JrLCAgcHJlc2VudHMgdGhlIGZvbGxvd2luZyBjb25z aWRlcmF0aW9uczoNDQ1UaGUgZmFjdCB0aGF0IGEgZmllbGQgd2l0aCB0aGUg TVRVIHRvIHRoZSBkZXN0aW55IG5ldHdvcmsgZXhpc3RzLCBwcmVzZW50cyBh IGNvbnNpZGVyYWJsZSByZWxpZWYgdG8gdGhlIG5ldHdvcmssIGJlY2F1c2Ug dGhlcmUgaXMgYSBoaWdoIHByb2JhYmlsaXR5IHRoYXQgdGhlIHBhY2thZ2Vz IHdpbGwgbm90IGJlIGRpc2NhcmRlZCBvbiB0aGVpciB3YXkgdG8gdGhlaXIg ZmluYWwgZGVzdGlueSBkdWUgdG8gdGhlIE1UVZJzIGtub3duIGFuZCBzdXBw b3J0ZWQgc2l6ZS4gDQ1UaGUgcHJldmlvdXMgdGhpbmcgcHJlc2VudHMgYSBy aXNrLCBpZiB0aGUgbWluaW11bSBNVFUgZ2V0cyB0byBjaGFuZ2UsIHRoZW4g aXQgaXMgcG9zc2libGUgdGhhdCB0aGUgcGFja2FnZXMgYXJlIGRpc2NhcmRl ZDsgYnV0IGFueXdheSwgdGhlIG9yaWdpbiBub2RlIHdvdWxkIGxlYXJuIGFi b3V0IHRoZSBuZXcgTVRVIGZvciB0aGF0IGZpbmFsIGRlc3RpbnkgbmV0d29y ayBhbmQgdGhpcyB3b3VsZCBiZSBtYWRlIGJ5IHRoZSBtZWFucyBvZiB0aGUg kXR5cGUgMpIgKFBhY2tldCBUb28gQmlnIE1lc3NhZ2UpIElDTVAgbWVzc2Fn ZS4gICBGcm9tIHRoZSAzM3JkIHRvIHRoZSA2NHRoIGJpdCwgdGhlIG5ldyBt aW5pbXVtIE1UVSB3b3VsZCBiZSBob3N0ZWQgYW5kIGl0IHdvdWxkIGJlIHVw ZGF0ZWQgaW4gdGhlIG5vZGWScyByb3V0aW5nIHRhYmxlLg0NDQ1JbiBjYXNl IHRoYXQgdGhlIG9yaWdpbiBub2RlIGRvZXMgbm90IGtub3cgdGhlIHZhbHVl IG9mIHRoZSBtaW5pbXVtIE1UVSB0b3dhcmRzDXRoZSBkZXN0aW55IG5ldHdv cmssIHRoZW4gaXQgd2lsbCB1c2UgSUNNUCBtZXNzYWdlcyB0eXBlIDEzMyAo TWluaW11bSBTaXplIE1UVSBSZXF1ZXN0KSBhbmQgMTM0IChNaW5pbXVtIFNp emUgTVRVIFJlcGx5KSB0byBmaW5kIHRoYXQgbWluaW11bSBNVFUgdG93YXJk cyB0aGUgZGVzdGlueSBuZXR3b3JrLiBUaGlzIHdvdWxkIGJlIGEgY2FzZSBv ZiBsb3cgcGVyZm9ybWFuY2UsIGJlY2F1c2UgdGhlIG1pbmltdW0gTVRVIHRv d2FyZHMgdGhlIGRlc3RpbnkgbmV0d29yayBpcyB1bmtub3duLiAgIEFsdGhv dWdoLCBmb3IgdGhpcyBwYXJ0aWN1bGFyIGV4cG9zaXRpb24sIGl0IHdvdWxk IGJlIHBvc3NpYmxlIHRvIHByb3Bvc2UgdGhhdCBpZiBhbiBpbnRlcm1lZGlh dGUgbm9kZSBrbm93cyB0aGUgTVRVIG9mIHRoZSBmaW5hbCBuZXR3b3JrLCB0 aGVuIGl0IHdvdWxkIHRha2UgdGhhdCB2YWx1ZSBhcyB0aGUgbWluaW11bSBN VFUgdG8gdGhlIGRlc3Rpbnkgbm9kZSBhbmQgcmVwb3J0IGl0IHRvIHRoZSBv cmlnaW4gbm9kZSBiZWZvcmUgaXQgYXJyaXZlcyB0byB0aGUgZmluYWwgb25l Lg0NQmVjYXVzZSB0aGUgSUNNUCBwYWNrYWdlLCB0byBrbm93IHRoZSBtaW5p bXVtIE1UVSwgaXMgc21hbGwgKDggYnl0ZXMgb2YgSUNNUCBtZXNzYWdlICsg NDAgYnl0ZXMgb2YgdGhlIElQdjYgaGVhZGVyKSwgaXQgd291bGQgYmUgYSBw YWNrYWdlIG9mIDQ4IGJ5dGVzIHdoaWNoIGFzc3VyZXMgdXMgdGhhdCBpdCB3 aWxsIG5vdCBiZSBkaXNjYXJkZWQgYnkgYW55IG5ldHdvcmsgYmVjYXVzZSB0 aGUgbWluaW11bSBNVFUgYWNjZXB0ZWQgaXMgb2YgNjQgYnl0ZXMgZm9yIGEg TVRVIGFuZCB0aGVyZWZvcmUgaXQgd2lsbCBhc3N1cmUgdXMgdGhhdCB0aGlz IHBhY2thZ2Ugd2lsbCByZXR1cm4gdG8gdGhlIG9yaWdpbiBub2RlIHdpdGgg dGhlIG1pbmltdW0gTVRVLiAgIE9mIGNvdXJzZSwgaWYgb3RoZXIgcHJvYmxl bXMgYXJpc2UsIGxpa2UgYSBjb25uZWN0aW9uIGZhaWx1cmUsIGl0IHdvdWxk IG5vdCByZXR1cm4uDQ1UaGUgZGlzYWR2YW50YWdlIGl0IHByZXNlbnRzLCBp cyB0aGF0IGlmIHRoZSBvcmlnaW4gbm9kZSBkb2VzIG5vdCBrbm93IHRoZSBN VFUsIGxpa2Ugd2UgbWVudGlvbmVkIHByZXZpb3VzbHksIGl0IHdpbGwgaGF2 ZSB0byBzZW5kIHRoZSBJQ01QIG1lc3NhZ2U7IHNvbWV0aGluZyB0aGF0IHVu ZGVyIHRoZSBzY2hlbWEgcHJvcG9zZWQgaW4gW01jQ2Fubjk2XSBkb2VzIG5v dCB3b3JrLiAgIEJ1dCBpbiB0aGlzIGNhc2UgYW5kIHVuZGVyIHRoaXMgc2No ZW1hIG9mIG1lc3NhZ2UsIGl0IHdpbGwgYXNzdXJlIHdpdGggYSBoaWdoIHBy b2JhYmlsaXR5IHRoYXQgdGhlIHBhY2thZ2Ugd2lsbCBub3QgYmUgZGlzY2Fy ZGVkIGJ5IHRoZSBNVFUgc2l6ZS4NIA01LiBJTVBMRU1FTlRBVElPTiBPRiBU SEUgTkVXIERFU0lHTiBJTiBUSEUgVFJBTlNJVElPTiBGUk9NIElQdjQgdG8g SVB2NiANDUxpa2UgaXQgaXMgbWVudGlvbmVkIGluIHRoZSBpbnZlc3RpZ2F0 aW9uIGFydGljbGUgW0Rvbm9zbzk3XSB0byBhc3N1cmUgdGhlIHRyYW5zaXRp b24gZnJvbSBJUHY0IHRvIElQdjYsIGl0IGlzIHJlcXVpcmVkIHRoYXQgdGhl IG5ldyBhcmlzaW5nIG9mIG5vZGVzIChyb3V0ZXJzIG9yIGhvc3RzKSB3aWxs IHN1cHBvcnQgZWl0aGVyIElQdjQgb3IgSVB2Njsgb3IgdGhhdCB0aGUgcHJv dG9jb2wgc3RhY2sgd2lsbCBoZWxkIHRoZSBzZXJ2aWNlcyBvZiBib3RoIG9m IHRoZW0uICAgVGhpcyB3aWxsIGJlIHVudGlsIGV2ZXJ5IG5vZGUgd29ya2lu ZyBvbiB0aGUgSW50ZXJuZXQgd2lsbCBub3Qgb25seSBzdXBwb3J0IElwdjQg bGlrZSB0aGUgb25seSBUQ1AvSVAgcHJvdG9jb2wuICAgVW5kZXIgdGhpcyBz Y2hlbWEgd2UgY2FuIHVzZSB0aGUgbWVjaGFuaXNtIG9mIHR1bm5lbGluZyBh bmQgZW5jYXBzdWxhdGlvbiBwcm9wb3NlZCBpbiBbRG9ub3NvOTddIHRvIHRy YW5zZmVyIElwdjYgcGFja2FnZXMgdGhyb3VnaG91dCBJcHY0IG5vZGVzLg0N DQ1UaGUgcHJvYmxlbSBleGlzdHMsIHdoZW4gaW4gYSBwYWNrYWdlIHRyYW5z bWlzc2lvbiwgdGhlcmUgaXMgYSBub2RlIHRoYXQgc3VwcG9ydHMgb25seSBJ cHY0LiAgIEluIHRoaXMgY2FzZSB0aGUgbm9kZSB3b3VsZCBub3QgaGF2ZSBk ZWZpbmVkIGluIGl0cyByb3V0aW5nIHRhYmxlIHRoZSBtaW5pbXVtIE1UVSBh bmQgaXQgd291bGQgbm90IHN1cHBvcnQgdGhlIElDTVAgbWVzc2FnZXMgcHJv cG9zZWQgaW4gdGhlIGludmVzdGlnYXRpb24gdGhlc2lzIG9uIHZlcnNpb24g Ni4gICBJZiB0aGlzIGlzIHRoYXQgY2FzZSwgdGhlbiBpdCB3b3VsZCBiZSBw b3NzaWJsZSB0byB1c2UgdHdvIG1lY2hhbmlzbXM6IA0NVGhlIG9uZSBwcm9w b3NlZCBpbiBbTWNDYW5uOTZdIHRoYXQgY29uc2lzdHMgb2YgZnJhZ21lbnRp bmcgYWNjb3JkaW5nIHRvIHRoZSBNVFUgb2YNdGhlIGZpcnN0IGp1bXAsIGp1 c3QgdGhlIHdheSBpdCB3b3JrcyBpbiBJcHY0OyBhbmQgbGF0ZXIsIHdhaXQg Zm9yIGEgcGFja2FnZSBmYWlsdXJlLCB0byAgICBkaXNjYXJkIHRoZW0gYnkg dGhlaXIgc2l6ZSBhbmQgcmV0dXJuIHRoZSBuZXcgTVRVLiAgIFRoZSBvcmln aW4gbm9kZSB3aWxsIGZyYWdtZW50IHRoZSBwYWNrYWdlcywgYWdhaW4uDQ1U aGUgb3RoZXIgbWVjaGFuaXNtIHdvdWxkIGNvbnNpc3Qgb24gdGhhdCB0aGUg cGFja2FnZSB3b3VsZCB0cmF2ZWwgd2l0aCB0aGF0IHNpemUgdW50aWwgaXQg YXJyaXZlcyBhdCBhbiBpbnRlcm1lZGlhdGUgSXB2NC9JcHY2IG5vZGUgYW5k IGl0IHdvdWxkIGhhdmUgdGhlIGNhcGFjaXR5IHRvIGZpbmQgdGhlIG1pbmlt dW0gTVRVIHRocm91Z2hvdXQgdGhlIGZpbmFsIG5vZGU7IGFuZCBpZiBuZWNl c3NhcnksIGl0IHdpbGwgZnJhZ21lbnQgdGhlIG5ldyBzaXplIG9mIHRoZSBw YWNrYWdlcywgc28gdGhhdCBsYXRlciwgdGhlIHBhY2thZ2VzIHdvdWxkIG5v dCBiZSBkaXNjYXJkZWQgYnkgdGhlaXIgc2l6ZS4gICBJbiBhZGRpdGlvbiwg dGhpcyBub2RlIHdvdWxkIGJlIGluIHRoZSBjYXBhY2l0eSB0byBmcmFnbWVu dCwgc2luY2UgaXQgY29udGFpbnMgaW4gaXRzIHByb3RvY29sknMgc3RhY2sg Ym90aCBzZXJ2aWNlcy4gDQ1UaGVzZSBtZWNoYW5pc21zIHdvdWxkIGJlIHVz ZWQgaWYgYW55IElwdjQgbm9kZSBpcyBzdGlsbCBsZWZ0IGluIHRoZSBuZXR3 b3JrIGFuZCBsYXRlciBvbmx5IElwdjYgbm9kZXMgd291bGQgY29tZSBvdXQu ICAgVG8gZXN0YWJsaXNoIHRoZSBzcGVjaWZpY2F0aW9ucyBhbmQgb3BlcmF0 aW9uIGZvciB0aGUgbmV0d29ya3OSICBJcHY2IHByb3RvY29sLg0NTm93LCB0 aGUgY29tcGFyaXNvbiBiZXR3ZWVuIHRoZSBleGlzdGluZyBwcm9jZWR1cmUg YW5kIHRoZSBwcm9wb3NlZCBvbmUuIA0NQ29uY2VwdCAJCQkgICAgIEV4aXN0 aW5nIAkJCSAgICAgICAgICBQcm9wb3NlZCANDFBhY2thZ2VzIGRpc2NhcmRl ZCBieSBNVFUuICANDQ0NDUNvbmdlc3Rpb24gaW4gdGhlIE5ldHdvcmsuIA0N DQ0NDQ1Sb3V0aW5nIFRhYmxlLg0NDQ0NR3JlYXRlciBhbW91bnQgYnkgbm90 IGtub3dpbmcgdGhlIE1UVSBvZiB0aGUgd2F5IGZyb20gdGhlIGlyaWdpbiBu b2RlIHRvIHRoZSBkZXN0aW55IG5vZGUuIA0NDUdyZWF0ZXIgY29uZ2VzdGlv biBiZWNhdXNlIHRoZSBwYWNrYWdlcyBjYW4gYmUgZGlzY2FyZGVkIGFuZCBu ZWVkIHRvIGJlIHJldHJhbnNtaXR0ZWQuDQ0NDQ1MaWtlIHRoZSBJcHY0IHNw ZWNpZmljYXRpb25zLiAgIA0NDQ1TbWFsbGVyIGFtb3VudCBiZWNhdXNlIGlu IHRoaXMgbWV0aG9kIHRoZSBtaW5pbXVtIE1UVSBpcyBrbm93biBmcm9tIHRo ZSBvcmlnaW4gbm9kZSB0byB0aGUgZGVzdGlueSBub2RlLg0NU21hbGxlciBj b25nZXN0aW9uIGJlY2F1c2UgdGhlIE1UVSBpcyBrbm93bi4gICBCdXQgY29u Z2VzdGlvbiBjYW4gYXBwZWFyIHdoZW4gdGhlIG9yaWdpbiBub2RlIGRvZXMg bm90IGtub3cgaXQgYW5kIG5lZWRzIHRvIHNlbmQgdGhlIG5ldyBJQ01QIG1l c3NhZ2VzLiANDVRoZSBmaWVsZCBNVFUgaXMgYWRkZWQgdG8gaXQsIHRvIGtu b3cgdGhlIG1pbmltdW0gTVRVIHRvIHRoZSBkZXN0aW55IG5ldHdvcmsuDQwN DQ0NDQ0NDQ02LiBDT05DTFVTSU9ODQ0NDQ1XaXRoaW4gdGhlIGNvbmNsdXNp b25zIHRoYXQgd2UgY2FuIGVtcGhhc2l6ZSB3ZSBjYW4gZmluZCB0aGUgZm9s bG93aW5nIG9uZXM6IA0NVGhlIG9wdGltaXphdGlvbiBvZiB0aGUgYW1vdW50 IG9mIHBhY2thZ2VzIHRoYXQgdHJhdmVsIHRocm91Z2ggdGhlIG5ldHdvcmsg Y2FycnlpbmcgaXQgb3V0DWJ5IG1lYW5zIG9mIHBhY2thZ2UgcmVkdWN0aW9u IGRpc2NhcmRlZCBieSB0aGVpciBzaXplIHdoZW4gdGhlIG1pbmltdW0gc2l6 ZSAgICBzdXBwb3J0ZWQgaXMgcHJldmlvdXNseSBrbm93biBhbGwgdGhlIHdh eS4NDVRoZSBhZHZhbnRhZ2UgdGhhdCBlbnRhaWxzIGluY2x1ZGluZyB0aGUg c2l6ZSBvZiB0aGUgTVRVIGluIHRoZSByb3V0aW5nIHRhYmxlIHN1cHBvcnRl ZCBieSB0aGUgZGVzdGlueSBpbiBpdHMgd2F5IGZyb20gdGhlIG9yaWdpbiBu b2RlOyB0aGVyZWZvcmUgcmVkdWNpbmcgdGhlIHNlYXJjaGluZyB0aW1lIG9m IHRoZSBtZW50aW9uZWQgdmFsdWUNDVRoZSBwcm9jZWR1cmUgb2YgY3JlYXRp b24gYW5kIG9wZXJhdGlvbiBvZiB0aGUgbmV3IElDTVAgbWVzc2FnZXMsIHRv IGdldCB0aGUgdmFsdWUgb2YgdGhlIG1pbmltdW0gTVRVIGZyb20gdGhlIG9y aWdpbiBub2RlIHRvIHRoZSBkZXN0aW55IG5vZGU7IHdoaWNoIGVudGFpbHMg dG8gYXNzdXJlIHRoZSByZWxpYWJsZW5lc3Mgb2YgdGhlIG1lbnRpb25lZCB2 YWx1ZS4gDQ1UaGUgb3B0aW1pemF0aW9uIG9mIHRoaXMgcHJvY2VkdXJlLCBk dWUgdG8gdGhlIGZhY3QgdGhhdCB0aGUgbWVzc2FnZSBkb2VzIG5vdCBuZWNl c3NhcmlseSBoYXMgdG8gYXJyaXZlIHRvIHRoZSBkZXN0aW55IG5vZGU7IGJ1 dCwgaW5zdGVhZCwgaWYgc29tZSBpbnRlcm1lZGlhdGUgbm9kZSBrbm93cyB0 aGF0IHZhbHVlLCBjYW4gYmUgYXNzdW1lZCBsaWtlIGEgcmVsaWFibGUgb25l LiANDVRoZSBpbXBvcnRhbmNlIG9mIHRoZSBub2RlIGNyZWF0aW9uIHRoYXQg c3VwcG9ydCB0aGUgc2VydmljZXMgSVB2NCBhbmQgSVB2NiBpbiB0aGUgdHJh bnNpdGlvbiBwcm9jZXNzIGZyb20gYSBvbmUgdmVyc2lvbiB0byB0aGUgb3Ro ZXIuIA0NDQ0NVEVSTUlOT0xPR1kNDQ1NVFUgKE1heGltdW0gVHJhbnNmZXJl bmNlIFVuaXQpDVRoZSBtYXhpbXVtIHN1cHBvcnRlZCBzaXplIG9mIGEgcGFj a2FnZSBvciBkYXRhZ3JhbSBpbiB0aGUgbmV0d29yayB3aGVyZSBpdCBmbG93 cy4NDUlDTVAgKEludGVybmV0IENvbnRyb2wgTWVzc2FnZSBQcm90b2NvbCkN VGhlIG1lc3NhZ2VzIGJ5IHdoaWNoIHRoZSBuZXR3b3JrIGRldmljZXMgKGhv c3RzIGFuZCByb3V0ZXJzKSBjYW4gY29tbXVuaWNhdGUuDQ1Sb3V0aW5nIFRh YmxlDUEgdGFibGUgdGhhdCBoYXMgdGhlIG5vZGVzLCBpbiB3aGljaCB0aGUg YWRkcmVzcyB3aGVyZSBpdCBzaG91bGQgc2VuZCB0aGUgcGFja2FnZXMgZGVw ZW5kaW5nIG9uIHRoZSBkZXN0aW55IG5ldHdvcmsgaXMgcmVnaXN0ZXJlZC4N DU5vZGUJDUEgZGV2aWNlIHRoYXQgYmVsb25ncyB0byBhIG5ldHdvcmssIGVp dGhlciB0byBwcm9jZXNzIG9yIHRyYW5zbWl0IGluZm9ybWF0aW9uIG9yIHRv IHJvdXRlIHRoYXQgaW5mb3JtYXRpb24uDQ0NIFBhY2thZ2UNSW5mb3JtYXRp b24gcXVhbnRpdHkgdGhhdCBmbG93cyB0aHJvdWdoIHRoZSBuZXR3b3JrIGFz IGEgcGFydGljdWxhciB1bml0IHVuZGVyc3RhbmRlZCBieSB0aGUgbmV0d29y ayBsYXllciBpbiB0aGUgT1NJIG1vZGVsIG9yIHRoZSBUQ1AvSVAuDQ1UaGUg YW1vdW50IG9mIGluZm9ybWF0aW9uIHRoYXQgdHJhdmVscyB0aHJvdWdoIHRo ZSBuZXR3b3JrIGFzIGFuIGluZGl2aWR1YWwgdW5pdCBhbmQgdW5kZXJzdGFu ZGVkIGJ5IHRoZSBuZXR3b3JrIGxheWVyIG9mIHRoZSBPU0kgbW9kZWwgb3Ig VENQL0lQLiAgIE9uZSB3YXkgdG8gdW5kZXJzdGFuZCB0aGlzIGZsb3dpbmcg b2YgaW5mb3JtYXRpb24gaXMgYnkgbWVhbnMgb2YgdGhlIGNvbnN0YW50IGhl YWRlciBmaWVsZHMgYW5kIHdlbGwgZGVmaW5lZCBieSB0aGUgZXF1aXBtZW50 IHRoYXQgdGFrZXMgcGFydCBpbiB0aGUgdHJhbnNtaXNzaW9uIHByb2Nlc3Mu DQ1Sb3V0ZXIuDUlzIGEgbm9kZSB0aGF0IHJlZGlyZWN0cyBhbiBpbmZvcm1h dGlvbiBwYWNrYWdlIGVpdGhlciB0byBvdGhlciByb3V0ZXIgb3IgZXF1aXBt ZW50IHRoYXQgbXVzdCBnZXQgdGhlIGluZm9ybWF0aW9uLCBpZiB0aGF0IGRl dmljZSBiZWxvbmdzIHRvIHRoZSByb3V0ZXIuICAgVGhlIG1ldGhvZHMgb2Yg cm91dGluZyB0aGVzZSBpbmZvcm1hdGlvbiBwYWNrYWdlcyBhcmUgdXNpbmcg YWxnb3JpdGhtcyBhbHJlYWR5IGVzdGFibGlzaGVkLiAgIEZvciBleGFtcGxl OiANVGhlIHNob3J0ZXN0IHdheSBiZXR3ZWVuIHR3byBub2Rlcywgcm91dGlu ZyBieSB0aGUgZGlzdGFuY2VzIGFycmF5LCBldGMuDQ1JUHY2LCBJUG5nLCBG YXN0IElQDU5ldyB2ZXJzaW9uIG9mIFRDUC9JUC4NDQ0NDVJFRkVSRU5DSUFT DQ0NDVtERUVSSU5HOTVdCURFRVJJTkcgU1MuLCBJbnRlcm5ldCBDb250cm9s IE1lc3NhZ2UgUHJvdG9jb2wgCQkJCQkoSUNNUHY2KSBmb3IgVGhlIEludGVy bmV0IFByb3RvY29sIFZlcnNpb24gNiAoSXB2NikgCQkJCVNwZWNpZmljYXRp b24uIFJGQzE4ODUsIERpY2llbWJyZSAxOTk1Lg0NDVtET05PU085N10JCURP Tk9TTyBNZWlzZWwsIFllemlkLCBDb21wYXJhY2nzbiwgVmVudGFqYXMsIAkJ CQkJRGVzdmVudGFqYXMgeSB1bmEgTWV0b2RvbG9n7WEgcGFyYSBsYSBUcmFu c2ljafNuIGRlIAkJCQlJcHY0IGEgSXB2NiwgU2VwdGllbWJyZSBkZSAxOTk3 Lg0NW01jQ0FOTjk2XQkJTWNDQU5OIEouLCBEZWVyaW5nIFMsLiBNb2d1bCBK LiwgUGF0aCBEaXNjb3ZlcnkgZm9yIElQIAkJCQlWZXJzaW9uIDYuIFJGQzE5 ODEuIEFnb3N0byAxOTk2Lg0NW01PR1VMOTBdCQlNT0dVTCBKLiwgRGVlcmlu ZyBTLiwgUGF0aCBNVFUgRGlzY292ZXJ5LiBSRkMxMTkxLiAJCQkJTm92aWVt YnJlIDE5OTAuDQ0NQWNlcmNhIGRlIElQdjQNDVtDT01FUjk2XQkJQ09NRVIu IEludGVybmV0d29ya2luZyB3aXRoIFRDUC9JUC4gUHJlbnRpY2UgSGFsbC4N DQkJCWh0dHA6Ly9kcy5pbnRlcm5pYy5uZXQvcmZjLw0NQWNlcmNhIGRlIElQ djYNDVtERUVSSU5HOTUyXQlERUVSSU5HIFMuLCBISU5ERU4gUi4gSW50ZXJu ZXQgUHJvdG9jb2wgdmVyc2lvbiA2IChJUHY2KSAJCQlTcGVjaWZpY2F0aW9u LiBSRkMxODgzLiBEZWNlbWJlciAxOTk1Lg0JCQlmdHA6Ly9mdHAuaXNpLmVk dS9pbi1ub3Rlcy9yZmMxODgzLnR4dA0NGAChAQCk0C+l4D2mpQanpQaoiQWp iQWqAAAdAI4AkAIAoQEApNAvpeA9pqUGp6UGqIkFqYkFqgAAGgCOAKEBAKTQ L6XgPaalBqelBqiJBamJBaoAAAAAAHYLAAA6AAgAbDgcEQAAAAAAAAAAAAAB AAAAAAD9H7MJ1APUAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAkAAAOTBQAA BgA/AAAAAAAFAAAACwIAAAAABQAAAAwCGxFsOAMAAAAeAAcAAAAWBBsRbDgA AAAABQAAAAwCTREOOQUAAAALAgAAAAADAAAAHgAHAAAAFgRNEQ45AAAAABEA AAAmBg8AGAD/////AAAQAH4BAAClCwAAtg8AAPUPAAAJAAAAJgYPAAgA//// /wIAAAAXAAAAJgYPACMA/////wQAGwBUTlBQFACw6wAwAAAAABQAAADUF4cA AAAAAAAACgAAACYGDwAKAFROUFAAAAIA9AMJAAAAJgYPAAgA/////wMAAAAP AAAAJgYPABQAVE5QUAQADAABAAAAAQAAAAAAAAAFAAAADAJQBDgOBQAAAAsC AAAAAAUAAAALAqULfgEEAAAABAENAAcAAAD8AgEAAAAAAAAABAAAAC0BAAAJ AAAA+gIAAAYAAAAAAAACIgAEAAAALQEBAAcAAAAbBPEPaw+QDLoBBwAAAPwC AAD///8AAAAEAAAALQECAAkAAAD6AgAAAAAAAAAAAAAiAAQAAAAtAQMABAAA APABAQAQAAAAJgYPABYA/////wAAtgEAAKwNAABvDwAAtQ0AAAkAAAD6AgAA BgAAAAAAAAAiAAQAAAAtAQEABAAAAC0BAAAIAAAAJQMCALoBsA1qD7ANBAAA AC0BAwAEAAAA8AEBAAQAAAAtAQIACAAAACYGDwAGAP////8BABAAAAAmBg8A FgD/////AAC2AQAAzA4AAG8PAADVDgAACQAAAPoCAAAGAAAAAAAAACIABAAA AC0BAQAEAAAALQEAAAgAAAAlAwIAugHQDmoP0A4EAAAALQEDAAQAAADwAQEA BAAAAC0BAgAIAAAAJgYPAAYA/////wEAEAAAACYGDwAWAP////8AABYFAACM DAAAHwUAALUNAAAJAAAA+gIAAAYAAAAAAAAAIgAEAAAALQEBAAQAAAAtAQAA CAAAACUDAgAaBZAMGgWwDQQAAAAtAQMABAAAAPABAQAEAAAALQECAAgAAAAm Bg8ABgD/////AQAQAAAAJgYPABYA/////wAA1ggAAIwMAADfCAAAtQ0AAAkA AAD6AgAABgAAAAAAAAAiAAQAAAAtAQEABAAAAC0BAAAIAAAAJQMCANoIkAza CLANBAAAAC0BAwAEAAAA8AEBAAQAAAAtAQIACAAAACYGDwAGAP////8BAAQA AAAtAQAACQAAAPoCBQAAAAAA////ACIABAAAAC0BAQAHAAAAGwRoDC0CpwuA AQQAAAAtAQIABAAAAC0BAwANAAAA+wIAAAAAAAAAAAAAAAAAAAAAAAAAAAQA AAAtAQQABQAAAAkCAAAAAgUAAAAUAgAAAAAVAAAA+wKQ/wAAAAAAALwCAAAA AAAAAABUaW1lcyBOZXcgUm9tYW4APQAEAAAALQEFAAQAAADwAQQABQAAAAkC AAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEACQAAADIKMAy6AQEAAAAw ADgABAAAAC4BAQAEAAAAAgECAAQAAAACAQIABAAAAC0BAAAEAAAALQEBAAcA AAAbBGgMxwWnCxoFBAAAAC0BAgAEAAAALQEDAAUAAAAJAgAAAAIFAAAAFAIA AAAABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEACQAAADIK MAxUBQEAAAA4ADgABAAAAC4BAQAEAAAAAgECAAQAAAACAQIABAAAAC0BAAAE AAAALQEBAAcAAAAbBGgMtQmnC9AIBAAAAC0BAgAEAAAALQEDAAUAAAAJAgAA AAIFAAAAFAIAAAAABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAAC AQEACgAAADIKMAwKCQIAAAAxNjgAOAAEAAAALgEBAAQAAAACAQIABAAAAAIB AgAEAAAALQEAAAQAAAAtAQEABwAAABsEaAy1D6cL0A4EAAAALQECAAQAAAAt AQMABQAAAAkCAAAAAgUAAAAUAgAAAAAFAAAACQIAAAACBQAAABQCAAAAAAQA AAAuARgABAAAAAIBAQAKAAAAMgowDAoPAgAAADMxOAA4AAQAAAAuAQEABAAA AAIBAgAEAAAAAgECAAQAAAAtAQAABAAAAC0BAQAHAAAAGwSIDV0DxwxAAgQA AAAtAQIABAAAAC0BAwAFAAAACQIAAAACBQAAABQCAAAAAAUAAAAJAgAAAAIF AAAAFAIAAAAABAAAAC4BGAAEAAAAAgEBAAwAAAAyClANegIDAAAAMTMzADgA OAA4AAQAAAAuAQEABAAAAAIBAgAEAAAAAgECAAQAAAAtAQAABAAAAC0BAQAH AAAAGwSIDR0GxwxwBQQAAAAtAQIABAAAAC0BAwAFAAAACQIAAAACBQAAABQC AAAAAAUAAAAJAgAAAAIFAAAAFAIAAAAABAAAAC4BGAAEAAAAAgEBAAkAAAAy ClANqgUBAAAAMAA4AAQAAAAuAQEABAAAAAIBAgAEAAAAAgECAAQAAAAtAQAA BAAAAC0BAQAHAAAAGwSIDS0MxwzACQQAAAAtAQIABAAAAC0BAwAFAAAACQIA AAACBQAAABQCAAAAAAUAAAAJAgAAAAIFAAAAFAIAAAAABAAAAC4BGAAEAAAA AgEBABMAAAAyClAN+gkIAAAAQ2hlY2tzdW1RAD4AMgAyAD4ALAA+AF0ABAAA AC4BAQAEAAAAAgECAAQAAAACAQIABAAAAC0BAAAEAAAALQEBAAcAAAAbBKgO iQvnDXAFBAAAAC0BAgAEAAAALQEDAAUAAAAJAgAAAAIFAAAAFAIAAAAABQAA AAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEALgAAADIKcA6qBRoA AABN7W5pbW8gTVRVIGhhc3RhIGVzdGUgTm9kb2oAHwA+AB8AXQA4ABwAagBL AFEAHAA+ADgALAAlADgAHAAyACwAJQAyABwAUQA4AD4AOAAEAAAALgEBAAQA AAACAQIABAAAAAIBAgAEAAAALQEAAAQAAAAtAQEABwAAABsEzw8SDg4PAAME AAAALQECAAQAAAAtAQMABQAAAAkCAAAAAgUAAAAUAgAAAAAFAAAACQIAAAAC BQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQA/AAAAMgqXDzoDJQAAAEVuY2Fi ZXphZG8gSVAgKyA2NCBiaXRzIGRlIGRhdG9zIGRlbCAASwA+ADIAOAA+ADIA MgA4AD4AOAAcACwARAAcAEAAHAA4ADgAHAA+AB8AJQAsABwAPgAyABwAPgA4 ACUAOAAsABwAPgAyAB8AHAAEAAAALgEBAAQAAAACAQIABQAAAAkCAAAAAgUA AAAUAgAAAAAEAAAALgEYAAQAAAACAQEAFgAAADIKlw8pCgoAAABEYXRhZ3Jh bWEgUQA4ACUAOAA4ADIAOABdADgAHAAEAAAALgEBAAQAAAACAQIABQAAAAkC AAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEAEwAAADIKlw9iDAgAAABv cmlnaW5hbDgAMgAfADgAHwA+ADgAHwAEAAAALgEBAAQAAAACAQIABAAAAAIB AgAEAAAALQEBAAQAAAAtAQAAEAAAAPsCFAAJAAAAAAC8AgAAAAABAgIiU3lz dGVtAG4EAAAALQEEAAQAAADwAQUADwAAACYGDwAUAFROUFAEAAwAAAAAAAAA AAAAAAAACQAAACYGDwAIAP////8BAAAABAAAAPABAwAEAAAAJwH//wQAAAAn Af//AwAAAAAAAAAAAAAAAB4AbwAAAAAAIwAAAAAAAGFnygsAADoACABsOBwR AAAAAAAAAAAAAAEAAAAAAP0fswnUA9QDAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAEACQAAA7wFAAAGAFcAAAAAAAUAAAALAgAAAAAFAAAADAIbEWw4AwAAAB4A BwAAABYEGxFsOAAAAAAFAAAADAJNEQ45BQAAAAsCAAAAAAMAAAAeAAcAAAAW BE0RDjkAAAAAEQAAACYGDwAYAP////8AABAAfgEAAN4EAAC2DwAALgkAAAkA AAAmBg8ACAD/////AgAAABcAAAAmBg8AIwD/////BAAbAFROUFAUALDrADAA AAAAFAAAANQXhwAAAAAAAAAKAAAAJgYPAAoAVE5QUAAAAgD0AwkAAAAmBg8A CAD/////AwAAAA8AAAAmBg8AFABUTlBQBAAMAAEAAAABAAAAAAAAAAUAAAAM AlAEOA4FAAAACwIAAAAABQAAAAsC3gR+AQQAAAAEAQ0ABwAAAPwCAQAAAAAA AAAEAAAALQEAAAkAAAD6AgAABgAAAAAAAAIiAAQAAAAtAQEABwAAABsEKglr D8kFugEHAAAA/AIAAP///wAAAAQAAAAtAQIACQAAAPoCAAAAAAAAAAAAACIA BAAAAC0BAwAEAAAA8AEBABAAAAAmBg8AFgD/////AAC2AQAA5QYAAG8PAADu BgAACQAAAPoCAAAGAAAAAAAAACIABAAAAC0BAQAEAAAALQEAAAgAAAAlAwIA ugHpBmoP6QYEAAAALQEDAAQAAADwAQEABAAAAC0BAgAIAAAAJgYPAAYA//// /wEAEAAAACYGDwAWAP////8AALYBAAAFCAAAbw8AAA4IAAAJAAAA+gIAAAYA AAAAAAAAIgAEAAAALQEBAAQAAAAtAQAACAAAACUDAgC6AQkIag8JCAQAAAAt AQMABAAAAPABAQAEAAAALQECAAgAAAAmBg8ABgD/////AQAQAAAAJgYPABYA /////wAAFgUAAMUFAAAfBQAA7gYAAAkAAAD6AgAABgAAAAAAAAAiAAQAAAAt AQEABAAAAC0BAAAIAAAAJQMCABoFyQUaBekGBAAAAC0BAwAEAAAA8AEBAAQA AAAtAQIACAAAACYGDwAGAP////8BABAAAAAmBg8AFgD/////AADWCAAAxQUA AN8IAADuBgAACQAAAPoCAAAGAAAAAAAAACIABAAAAC0BAQAEAAAALQEAAAgA AAAlAwIA2gjJBdoI6QYEAAAALQEDAAQAAADwAQEABAAAAC0BAgAIAAAAJgYP AAYA/////wEABAAAAC0BAAAJAAAA+gIFAAAAAAD///8AIgAEAAAALQEBAAcA AAAbBKEFLQLgBIABBAAAAC0BAgAEAAAALQEDAA0AAAD7AgAAAAAAAAAAAAAA AAAAAAAAAAAABAAAAC0BBAAFAAAACQIAAAACBQAAABQCAAAAABUAAAD7ApD/ AAAAAAAAvAIAAAAAAAAAAFRpbWVzIE5ldyBSb21hbgA9AAQAAAAtAQUABAAA APABBAAFAAAACQIAAAACBQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQAJAAAA MgppBboBAQAAADAAOAAEAAAALgEBAAQAAAACAQIABAAAAAIBAgAEAAAALQEA AAQAAAAtAQEABwAAABsEoQXHBeAEGgUEAAAALQECAAQAAAAtAQMABQAAAAkC AAAAAgUAAAAUAgAAAAAFAAAACQIAAAACBQAAABQCAAAAAAQAAAAuARgABAAA AAIBAQAJAAAAMgppBVQFAQAAADgAOAAEAAAALgEBAAQAAAACAQIABAAAAAIB AgAEAAAALQEAAAQAAAAtAQEABwAAABsEoQW1CeAE0AgEAAAALQECAAQAAAAt AQMABQAAAAkCAAAAAgUAAAAUAgAAAAAFAAAACQIAAAACBQAAABQCAAAAAAQA AAAuARgABAAAAAIBAQAKAAAAMgppBQoJAgAAADE2OAA4AAQAAAAuAQEABAAA AAIBAgAEAAAAAgECAAQAAAAtAQAABAAAAC0BAQAHAAAAGwShBbUP4ATQDgQA AAAtAQIABAAAAC0BAwAFAAAACQIAAAACBQAAABQCAAAAAAUAAAAJAgAAAAIF AAAAFAIAAAAABAAAAC4BGAAEAAAAAgEBAAoAAAAyCmkFCg8CAAAAMzE4ADgA BAAAAC4BAQAEAAAAAgECAAQAAAACAQIABAAAAC0BAAAEAAAALQEBAAcAAAAb BMEGXQMABkACBAAAAC0BAgAEAAAALQEDAAUAAAAJAgAAAAIFAAAAFAIAAAAA BQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEADAAAADIKiQZ6 AgMAAAAxMzQAOAA4ADgABAAAAC4BAQAEAAAAAgECAAQAAAACAQIABAAAAC0B AAAEAAAALQEBAAcAAAAbBMEGHQYABnAFBAAAAC0BAgAEAAAALQEDAAUAAAAJ AgAAAAIFAAAAFAIAAAAABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQA AAACAQEACQAAADIKiQaqBQEAAAAwADgABAAAAC4BAQAEAAAAAgECAAQAAAAC AQIABAAAAC0BAAAEAAAALQEBAAcAAAAbBMEGLQwABsAJBAAAAC0BAgAEAAAA LQEDAAUAAAAJAgAAAAIFAAAAFAIAAAAABQAAAAkCAAAAAgUAAAAUAgAAAAAE AAAALgEYAAQAAAACAQEAEwAAADIKiQb6CQgAAABDaGVja3N1bVEAPgAyADIA PgAsAD4AXQAEAAAALgEBAAQAAAACAQIABAAAAAIBAgAEAAAALQEAAAQAAAAt AQEABwAAABsE4QcuDiAHMAMEAAAALQECAAQAAAAtAQMABQAAAAkCAAAAAgUA AAAUAgAAAAAFAAAACQIAAAACBQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQBX AAAAMgqpB2oDNQAAAE3tbmltbyBNVFUgZGVzZGUgZWwgbm9kbyBvcmlnZW4g aGFzdGEgZWwgbm9kbyBkZXN0aW5vAGoAHwA+AB8AXQA4ABwAagBLAFEAHAA+ ADIALAA+ADIAHAAyAB8AHAA+ADgAPgA4ABwAOAAyAB8AOAAyAD4AHAA+ADgA LAAlADgAHAAyAB8AHAA+ADgAPgA4ABwAPgAyACwAJQAfAD4AOAAEAAAALgEB AAQAAAACAQIABAAAAAIBAgAEAAAALQEAAAQAAAAtAQEABwAAABsECAkSDkcI AAMEAAAALQECAAQAAAAtAQMABQAAAAkCAAAAAgUAAAAUAgAAAAAFAAAACQIA AAACBQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQA/AAAAMgrQCDoDJQAAAEVu Y2FiZXphZG8gSVAgKyA2NCBiaXRzIGRlIGRhdG9zIGRlbCAASwA+ADIAOAA+ ADIAMgA4AD4AOAAcACwARAAcAEAAHAA4ADgAHAA+AB8AJQAsABwAPgAyABwA PgA4ACUAOAAsABwAPgAyAB8AHAAEAAAALgEBAAQAAAACAQIABQAAAAkCAAAA AgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEAFgAAADIK0AgpCgoAAABEYXRh Z3JhbWEgUQA4ACUAOAA4ADIAOABdADgAHAAEAAAALgEBAAQAAAACAQIABQAA AAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEAEwAAADIK0AhiDAgA AABvcmlnaW5hbDgAMgAfADgAHwA+ADgAHwAEAAAALgEBAAQAAAACAQIABAAA AAIBAgAEAAAALQEBAAQAAAAtAQAAEAAAAPsCFAAJAAAAAAC8AgAAAAABAgIi U3lzdGVtAG4EAAAALQEEAAQAAADwAQUADwAAACYGDwAUAFROUFAEAAwAAAAA AAAAAAAAAAAACQAAACYGDwAIAP////8BAAAABAAAAPABAwAEAAAAJwH//wQA AAAnAf//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaXZvZSAOHQAAOgAI AGs4lxsAAAAAAAAAAAAAAQAAAAAA/B+kD9QD1AMAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAQAJAAADXg4AAAcAFwAAAAAABQAAAAsCAAAAAAUAAAAMApcbajgD AAAAHgAHAAAAFgSXG2o4AAAAAAUAAAAMAuwbGDkFAAAACwIAAAAAAwAAAB4A BwAAABYE7BsYOQAAAAARAAAAJgYPABgA/////wAAEADrAAAACwgAAFUQAACV DwAACQAAACYGDwAIAP////8CAAAAFwAAACYGDwAjAP////8EABsAVE5QUBQA sOsAMAAAAAAUAAAA1BeHAAAAAACQAAoAAAAmBg8ACgBUTlBQAAACAPQDCQAA ACYGDwAIAP////8DAAAADwAAACYGDwAUAFROUFAEAAwAAQAAAAEAAAAAAAAA BQAAAAwCigdqDwUAAAALAgAAAAAFAAAACwILCOsABAAAAAQBDQAHAAAA/AIB AAAAAAAAAAQAAAAtAQAACQAAAPoCAAAGAAAAAAAAAiIABAAAAC0BAQAHAAAA GwRqCioMqQk5CwcAAAD8AgAA////AAAABAAAAC0BAgAJAAAA+gIAAAAAAAAA AAAAIgAEAAAALQEDAAQAAADwAQEABAAAAC0BAAAJAAAA+gIAAAYAAAAAAAAC IgAEAAAALQEBAAcAAAAYBMQKwQ9DCfAMBAAAAC0BAgAEAAAALQEDAAQAAADw AQEABAAAAC0BAAAJAAAA+gIFAAAAAAD///8AIgAEAAAALQEBAAcAAAAbBMQK nA8wCVANBAAAAC0BAgAEAAAALQEDAA0AAAD7AgAAAAAAAAAAAAAAAAAAAAAA AAAABAAAAC0BBAAFAAAACQIAAAACBQAAABQCAAAAABUAAAD7AqD/AAAAAAAA vAIAAAAAAAAAElRpbWVzIE5ldyBSb21hbgA9AAQAAAAtAQUABAAAAPABBAAF AAAACQIAAAACBQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQAMAAAAMgqpCSMO AwAAAFJlZABFACsANQAEAAAALgEBAAQAAAACAQIABQAAAAkCAAAAAgUAAAAU AgAAAAAEAAAALgEYAAQAAAACAQEAEwAAADIKHArZDQgAAAA0MC4wLjAuMDAA MAAYADAAGAAwABgAMAAEAAAALgEBAAQAAAACAQIABQAAAAkCAAAAAgUAAAAU AgAAAAAEAAAALgEYAAQAAAACAQEAEwAAADIKjwqKDQgAAABNVFU9MjQwMFsA QABFADcAMAAwADAAMAAEAAAALgEBAAQAAAACAQIABAAAAAIBAgAEAAAALQEA AAQAAAAtAQEABwAAABsEbgryC8AJSAsEAAAALQECAAQAAAAtAQMABQAAAAkC AAAAAgUAAAAUAgAAAAAFAAAACQIAAAACBQAAABQCAAAAAAQAAAAuARgABAAA AAIBAQAJAAAAMgo5CoILAQAAAFMANQAEAAAALgEBAAQAAAACAQIABAAAAAIB AgAEAAAALQEAAAkAAAD6AgAABgAAAAAAAAIiAAQAAAAtAQQABwAAABgE9Aoh CnMJUAcEAAAALQECAAQAAAAtAQMABAAAAPABBAAEAAAALQEAAAQAAAAtAQEA BwAAABsE9Ar8CWAJsAcEAAAALQECAAQAAAAtAQMABQAAAAkCAAAAAgUAAAAU AgAAAAAFAAAACQIAAAACBQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQAMAAAA MgrZCYMIAwAAAFJlZABFACsANQAEAAAALgEBAAQAAAACAQIABQAAAAkCAAAA AgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEAEwAAADIKTAo5CAgAAAAzMC4w LjAuMDAAMAAYADAAGAAwABgAMAAEAAAALgEBAAQAAAACAQIABQAAAAkCAAAA AgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEAEwAAADIKvwrqBwgAAABNVFU9 MzYwMFsAQABFADcAMAAwADAAMAAEAAAALgEBAAQAAAACAQIABAAAAAIBAgAE AAAALQEAAAkAAAD6AgAABgAAAAAAAAIiAAQAAAAtAQQABwAAABgE9ApBBXMJ cAIEAAAALQECAAQAAAAtAQMABAAAAPABBAAEAAAALQEAAAQAAAAtAQEABwAA ABsE9AocBWAJ0AIEAAAALQECAAQAAAAtAQMABQAAAAkCAAAAAgUAAAAUAgAA AAAFAAAACQIAAAACBQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQAMAAAAMgrZ CaMDAwAAAFJlZABFACsANQAEAAAALgEBAAQAAAACAQIABQAAAAkCAAAAAgUA AAAUAgAAAAAEAAAALgEYAAQAAAACAQEAEwAAADIKTApZAwgAAAAyMC4wLjAu MDAAMAAYADAAGAAwABgAMAAEAAAALgEBAAQAAAACAQIABQAAAAkCAAAAAgUA AAAUAgAAAAAEAAAALgEYAAQAAAACAQEAEwAAADIKvwoKAwgAAABNVFU9MjQw MFsAQABFADcAMAAwADAAMAAEAAAALgEBAAQAAAACAQIABAAAAAIBAgAEAAAA LQEAAAkAAAD6AgAABgAAAAAAAAIiAAQAAAAtAQQABwAAABgEVA5xBdMMoAIE AAAALQECAAQAAAAtAQMABAAAAPABBAAEAAAALQEAAAQAAAAtAQEABwAAABsE VA5MBcAMAAMEAAAALQECAAQAAAAtAQMABQAAAAkCAAAAAgUAAAAUAgAAAAAF AAAACQIAAAACBQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQAMAAAAMgo5DdMD AwAAAFJlZABFACsANQAEAAAALgEBAAQAAAACAQIABQAAAAkCAAAAAgUAAAAU AgAAAAAEAAAALgEYAAQAAAACAQEAEwAAADIKrA2JAwgAAAAxMC4wLjAuMDAA MAAYADAAGAAwABgAMAAEAAAALgEBAAQAAAACAQIABQAAAAkCAAAAAgUAAAAU AgAAAAAEAAAALgEYAAQAAAACAQEAEwAAADIKHw46AwgAAABNVFU9MTIwMFsA QABFADcAMAAwADAAMAAEAAAALgEBAAQAAAACAQIABAAAAAIBAgAEAAAALQEA AAkAAAD6AgAABgAAAAAAAAIiAAQAAAAtAQQABwAAABgEVA6hC9MM0AgEAAAA LQECAAQAAAAtAQMABAAAAPABBAAEAAAALQEAAAQAAAAtAQEABwAAABsEVA58 C8AMMAkEAAAALQECAAQAAAAtAQMABQAAAAkCAAAAAgUAAAAUAgAAAAAFAAAA CQIAAAACBQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQAMAAAAMgo5DQMKAwAA AFJlZABFACsANQAEAAAALgEBAAQAAAACAQIABQAAAAkCAAAAAgUAAAAUAgAA AAAEAAAALgEYAAQAAAACAQEAEwAAADIKrA25CQgAAAA1MC4wLjAuMDAAMAAY ADAAGAAwABgAMAAEAAAALgEBAAQAAAACAQIABQAAAAkCAAAAAgUAAAAUAgAA AAAEAAAALgEYAAQAAAACAQEAEwAAADIKHw5qCQgAAABNVFU9MjQwMFsAQABF ADcAMAAwADAAMAAEAAAALgEBAAQAAAACAQIABAAAAAIBAgAEAAAALQEAAAkA AAD6AgAABgAAAAAAAAIiAAQAAAAtAQQABwAAABsEagq6BqkJyQUEAAAALQEC AAQAAAAtAQMABAAAAPABBAAEAAAALQEAAAQAAAAtAQEABwAAABsEbgqKBsAJ 0AUEAAAALQECAAQAAAAtAQMABQAAAAkCAAAAAgUAAAAUAgAAAAAFAAAACQIA AAACBQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQAJAAAAMgo5CgoGAQAAAFIA RQAEAAAALgEBAAQAAAACAQIABAAAAAIBAgAEAAAALQEAAAkAAAD6AgAABgAA AAAAAAIiAAQAAAAtAQQABwAAABsESgxqAokLeQEEAAAALQECAAQAAAAtAQMA BAAAAPABBAAEAAAALQEAAAQAAAAtAQEABwAAABsETgw9AqALfQEEAAAALQEC AAQAAAAtAQMABQAAAAkCAAAAAgUAAAAUAgAAAAAFAAAACQIAAAACBQAAABQC AAAAAAQAAAAuARgABAAAAAIBAQAJAAAAMgoZDLcBAQAAAFEASwAEAAAALgEB AAQAAAACAQIABAAAAAIBAgAEAAAALQEAAAkAAAD6AgAABgAAAAAAAAIiAAQA AAAtAQQABwAAABsE+g2qBzkNuQYEAAAALQECAAQAAAAtAQMABAAAAPABBAAE AAAALQEAAAQAAAAtAQEABwAAABsE/g13B1ANwgYEAAAALQECAAQAAAAtAQMA BQAAAAkCAAAAAgUAAAAUAgAAAAAFAAAACQIAAAACBQAAABQCAAAAAAQAAAAu ARgABAAAAAIBAQAJAAAAMgrJDfwGAQAAAFQAQAAEAAAALgEBAAQAAAACAQIA BAAAAAIBAgAQAAAAJgYPABYA/////wAALAwAABwKAAD1DAAAJQoAAAkAAAD6 AgAABgAAAAAAAAAiAAQAAAAtAQQABAAAAC0BAAAIAAAAJQMCADAMIArwDCAK BAAAAC0BAwAEAAAA8AEEAAQAAAAtAQIACAAAACYGDwAGAP////8BABAAAAAm Bg8AFgD/////AAAcCgAAHAoAAEULAAAlCgAACQAAAPoCAAAGAAAAAAAAACIA BAAAAC0BBAAEAAAALQEAAAgAAAAlAwIAIAogCkALIAoEAAAALQEDAAQAAADw AQQABAAAAC0BAgAIAAAAJgYPAAYA/////wEAEAAAACYGDwAWAP////8AALwG AAAcCgAAVQcAACUKAAAJAAAA+gIAAAYAAAAAAAAAIgAEAAAALQEEAAQAAAAt AQAACAAAACUDAgBQByAKwAYgCgQAAAAtAQMABAAAAPABBAAEAAAALQECAAgA AAAmBg8ABgD/////AQAQAAAAJgYPABYA/////wAAPAUAABwKAADVBQAAJQoA AAkAAAD6AgAABgAAAAAAAAAiAAQAAAAtAQQABAAAAC0BAAAIAAAAJQMCAEAF IArQBSAKBAAAAC0BAwAEAAAA8AEEAAQAAAAtAQIACAAAACYGDwAGAP////8B ABAAAAAmBg8AFgD/////AADcAQAATAoAAOUBAAB1CwAACQAAAPoCAAAGAAAA AAAAACIABAAAAC0BBAAEAAAALQEAAAgAAAAlAwIA4AFwC+ABUAoEAAAALQED AAQAAADwAQQABAAAAC0BAgAIAAAAJgYPAAYA/////wEAEAAAACYGDwAWAP// //8AANwBAABMCgAAdQIAAFUKAAAJAAAA+gIAAAYAAAAAAAAAIgAEAAAALQEE AAQAAAAtAQAACAAAACUDAgDgAVAKcAJQCgQAAAAtAQMABAAAAPABBAAEAAAA LQECAAgAAAAmBg8ABgD/////AQAQAAAAJgYPABYA/////wAA3AEAACwMAADl AQAAtQ0AAAkAAAD6AgAABgAAAAAAAAAiAAQAAAAtAQQABAAAAC0BAAAIAAAA JQMCAOABMAzgAbANBAAAAC0BAwAEAAAA8AEEAAQAAAAtAQIACAAAACYGDwAG AP////8BABAAAAAmBg8AFgD/////AADcAQAArA0AAKUCAAC1DQAACQAAAPoC AAAGAAAAAAAAACIABAAAAC0BBAAEAAAALQEAAAgAAAAlAwIA4AGwDaACsA0E AAAALQEDAAQAAADwAQQABAAAAC0BAgAIAAAAJgYPAAYA/////wEAEAAAACYG DwAWAP////8AAGwFAAB8DQAAxQYAAIUNAAAJAAAA+gIAAAYAAAAAAAAAIgAE AAAALQEEAAQAAAAtAQAACAAAACUDAgBwBYANwAaADQQAAAAtAQMABAAAAPAB BAAEAAAALQECAAgAAAAmBg8ABgD/////AQAQAAAAJgYPABYA/////wAArAcA AHwNAADVCAAAhQ0AAAkAAAD6AgAABgAAAAAAAAAiAAQAAAAtAQQABAAAAC0B AAAIAAAAJQMCALAHgA3QCIANBAAAAC0BAwAEAAAA8AEEAAQAAAAtAQIACAAA ACYGDwAGAP////8BABAAAAAmBg8AFgD/////AAAMAgAAPAwAAGUDAACDDAAA CQAAAPoCAAAGAAAAAAAAACIABAAAAC0BBAAEAAAALQEAAAgAAAAlAwIAYANg DEwCYAwEAAAALQEBAAQAAADwAQQABwAAAPwCAAAAAAAAAAAEAAAALQEEAAoA AAAkAwMATgJADBACYAxOAn8MBAAAAC0BAwAEAAAALQECAAgAAAAmBg8ABgD/ ////AQAQAAAAJgYPABYA/////wAADAIAABwLAABlAwAAYwsAAAkAAAD6AgAA BgAAAAAAAAAiAAQAAAAtAQYABAAAAC0BAAAIAAAAJQMCAGADQAtMAkALBAAA AC0BAQAEAAAA8AEGAAQAAAAtAQQACgAAACQDAwBOAiALEAJAC04CXwsEAAAA LQEDAAQAAAAtAQIACAAAACYGDwAGAP////8BABAAAAAmBg8AFgD/////AAB8 BQAA/AgAAMQFAAD1CQAACQAAAPoCAAAGAAAAAAAAACIABAAAAC0BBgAEAAAA LQEAAAgAAAAlAwIAoAUACaAFtAkEAAAALQEBAAQAAADwAQYABAAAAC0BBAAK AAAAJAMDAIAFsgmgBfAJvwWyCQQAAAAtAQMABAAAAC0BAgAIAAAAJgYPAAYA /////wEAEAAAACYGDwAWAP////8AAPwGAAD8CAAARAcAAPUJAAAJAAAA+gIA AAYAAAAAAAAAIgAEAAAALQEGAAQAAAAtAQAACAAAACUDAgAgBwAJIAe0CQQA AAAtAQEABAAAAPABBgAEAAAALQEEAAoAAAAkAwMAAAeyCSAH8Ak/B7IJBAAA AC0BAwAEAAAALQECAAgAAAAmBg8ABgD/////AQAQAAAAJgYPABYA/////wAA vAoAAPwIAAAECwAA9QkAAAkAAAD6AgAABgAAAAAAAAAiAAQAAAAtAQYABAAA AC0BAAAIAAAAJQMCAOAKAAngCrQJBAAAAC0BAQAEAAAA8AEGAAQAAAAtAQQA CgAAACQDAwDACrIJ4ArwCf8KsgkEAAAALQEDAAQAAAAtAQIACAAAACYGDwAG AP////8BABAAAAAmBg8AFgD/////AAA8DAAA/AgAAIQMAAD1CQAACQAAAPoC AAAGAAAAAAAAACIABAAAAC0BBgAEAAAALQEAAAgAAAAlAwIAYAwACWAMtAkE AAAALQEBAAQAAADwAQYABAAAAC0BBAAKAAAAJAMDAEAMsglgDPAJfwyyCQQA AAAtAQMABAAAAC0BAgAIAAAAJgYPAAYA/////wEAEAAAACYGDwAWAP////8A AD0GAACsDQAAhAYAAHUOAAAJAAAA+gIAAAYAAAAAAAAAIgAEAAAALQEGAAQA AAAtAQAACAAAACUDAgBgBnAOYAbsDQQAAAAtAQEABAAAAPABBgAEAAAALQEE AAoAAAAkAwMAgAbuDWAGsA1BBu4NBAAAAC0BAwAEAAAALQECAAgAAAAmBg8A BgD/////AQAQAAAAJgYPABYA/////wAAvQcAAKwNAAAECAAAdQ4AAAkAAAD6 AgAABgAAAAAAAAAiAAQAAAAtAQYABAAAAC0BAAAIAAAAJQMCAOAHcA7gB+wN BAAAAC0BAQAEAAAA8AEGAAQAAAAtAQQACgAAACQDAwAACO4N4AewDcEH7g0E AAAALQEDAAQAAAAtAQIACAAAACYGDwAGAP////8BAAQAAAAtAQAABAAAAC0B AQAHAAAAGwTVCKMNJwj2CwQAAAAtAQIABAAAAC0BAwAFAAAACQIAAAACBQAA ABQCAAAAAAUAAAAJAgAAAAIFAAAAFAIAAAAABAAAAC4BGAAEAAAAAgEBABMA AAAyCqAIMAwIAAAANDAuMC4wLjcwADAAGAAwABgAMAAYADAABAAAAC4BAQAE AAAAAgECAAQAAAACAQIABAAAAC0BAAAEAAAALQEBAAcAAAAbBNUIkwsnCOYJ BAAAAC0BAgAEAAAALQEDAAUAAAAJAgAAAAIFAAAAFAIAAAAABQAAAAkCAAAA AgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEAEwAAADIKoAggCggAAAAzMC4w LjAuNzAAMAAYADAAGAAwABgAMAAEAAAALgEBAAQAAAACAQIABAAAAAIBAgAE AAAALQEAAAQAAAAtAQEABwAAABsE1QgzCCcIhgYEAAAALQECAAQAAAAtAQMA BQAAAAkCAAAAAgUAAAAUAgAAAAAFAAAACQIAAAACBQAAABQCAAAAAAQAAAAu ARgABAAAAAIBAQATAAAAMgqgCMAGCAAAADMwLjAuMC42MAAwABgAMAAYADAA GAAwAAQAAAAuAQEABAAAAAIBAgAEAAAAAgECAAQAAAAtAQAABAAAAC0BAQAH AAAAGwTVCCMGJwh2BAQAAAAtAQIABAAAAC0BAwAFAAAACQIAAAACBQAAABQC AAAAAAUAAAAJAgAAAAIFAAAAFAIAAAAABAAAAC4BGAAEAAAAAgEBABMAAAAy CqAIsAQIAAAAMjAuMC4wLjYwADAAGAAwABgAMAAYADAABAAAAC4BAQAEAAAA AgECAAQAAAACAQIABAAAAC0BAAAEAAAALQEBAAcAAAAbBKULAwX3ClYDBAAA AC0BAgAEAAAALQEDAAUAAAAJAgAAAAIFAAAAFAIAAAAABQAAAAkCAAAAAgUA AAAUAgAAAAAEAAAALgEYAAQAAAACAQEAEwAAADIKcAuQAwgAAAAyMC4wLjAu NTAAMAAYADAAGAAwABgAMAAEAAAALgEBAAQAAAACAQIABAAAAAIBAgAEAAAA LQEAAAQAAAAtAQEABwAAABsExQwzBRcMhgMEAAAALQECAAQAAAAtAQMABQAA AAkCAAAAAgUAAAAUAgAAAAAFAAAACQIAAAACBQAAABQCAAAAAAQAAAAuARgA BAAAAAIBAQATAAAAMgqQDMADCAAAADEwLjAuMC41MAAwABgAMAAYADAAGAAw AAQAAAAuAQEABAAAAAIBAgAEAAAAAgECAAQAAAAtAQAABAAAAC0BAQAHAAAA GwQ1D+MGhw42BQQAAAAtAQIABAAAAC0BAwAFAAAACQIAAAACBQAAABQCAAAA AAUAAAAJAgAAAAIFAAAAFAIAAAAABAAAAC4BGAAEAAAAAgEBABMAAAAyCgAP cAUIAAAAMTAuMC4wLjgwADAAGAAwABgAMAAYADAABAAAAC4BAQAEAAAAAgEC AAQAAAACAQIABAAAAC0BAAAEAAAALQEBAAcAAAAbBDUP8wiHDkYHBAAAAC0B AgAEAAAALQEDAAUAAAAJAgAAAAIFAAAAFAIAAAAABQAAAAkCAAAAAgUAAAAU AgAAAAAEAAAALgEYAAQAAAACAQEAEwAAADIKAA+ABwgAAAA1MC4wLjAuODAA MAAYADAAGAAwABgAMAAEAAAALgEBAAQAAAACAQIABAAAAAIBAgAEAAAALQEA AAkAAAD6AgAABgAAAAAAAAIiAAQAAAAtAQYABwAAABsEkQ9REBAI8AAEAAAA LQECAAQAAAAtAQMABAAAAPABBgAEAAAALQEBAAQAAAAtAQAAEAAAAPsCFAAJ AAAAAAC8AgAAAAABAgIiU3lzdGVtAG4EAAAALQEGAAQAAADwAQUADwAAACYG DwAUAFROUFAEAAwAAAAAAAAAAAAAAAAACQAAACYGDwAIAP////8BAAAABAAA APABAwAEAAAAJwH//wQAAAAnAf//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA//////8/u7u7Mw////////8P8AD/AA/wAP8AD/gP///////wuwu7 C7cP//////8A8ADwAAAAAAAAAAAAAAAA////////8/u7u7MP////////AA/w AP8AD/AA/wAID/////AAALu7u7u7AAAP////APAA8AAAAAAAAAAAAAAAAP// //////8/u7u7MP///////wAAD/AA/wAP8AD/CA/////wuwu7C7sLd7C7D/// /wAAAPAP8A//D/APAP/w//D//zAAAA//ABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAOQAORHB0by4gU2lzdGVtYXMnQzpcWUVaSURcU0NDQy1DaGls ZVxhcnQyX21hZ19pbmdsZXMuZG9j/wEPAFXmAAAAAAEA6oQAACwJAAAEAAAA 6oQAAFXpAQACAAEAFo4AACYAAAAEAAAAFo4AAFWeAgADAAEAPI4AACIAAAAE AAAAPI4AAFXvAwAEAAUAXo4AABwAAAAEAAAAXo4AAFX1BAAGAAcAeo4AABwA AAAEAAAAeo4AAFXeBQAIAAEAlo4AACIAAAAEAAAAlo4AAFWCBgAJAAoAuI4A ABwAAAAEAAAAuI4AAFWNBwALAAwA1I4AAB0AAAAEAAAA1I4AAFUACAANAA4A 8Y4AAA0AAAAEAAAA8Y4AAFXvCQAPAAUA/o4AABwAAAAEAAAA/o4AAFXPCgAQ AAEAGo8AAA0AAAAEAAAAGo8AAFX1CwARAAcAJ48AABwAAAAEAAAAJ48AAFXP DAASAAEAQ48AAA0AAAAEAAAAQ48AAFWNDQATAAwAUI8AAB0AAAAEAAAAUI8A AFWCDgAUAAoAbY8AABwAAAAEAAAAbY8AABD/AANDQVABAAJGJQYACEF1dG9F eGVjAQAIQXV0b09wZW4BAAhGaWxlT3BlbgEAA0YlTwIACEZpbGVTYXZlAQAD RiVTAgAJQXV0b0Nsb3NlAQAJRmlsZUNsb3NlAQADRiVDAgAKRmlsZVNhdmVB cwEABEYlU0ECAApUb29sc01hY3JvAQAERiU0MAEADEFyY2hpdm9BYnJpcgEA DUZpbGVUZW1wbGF0ZXMBAA5BcmNoaXZvR3VhcmRhcgEAEUFyY2hpdm9QbGFu dGlsbGFzAQASQXJjaGl2b0d1YXJkYXJDb21vAQAYQXJjaGl2b0NlcnJhck9D ZXJyYXJUb2RvAQARDwAAAANDQVAAAQAIQVVUT0VYRUMAAgAIQVVUT09QRU4A AwAIRklMRU9QRU4ABAAIRklMRVNBVkUABQAJQVVUT0NMT1NFAAYACUZJTEVD TE9TRQAHAApGSUxFU0FWRUFTAAgAClRPT0xTTUFDUk8ACQAMQVJDSElWT0FC UklSAAoADUZJTEVURU1QTEFURVMACwAOQVJDSElWT0dVQVJEQVIADAARQVJD SElWT1BMQU5USUxMQVMADQASQVJDSElWT0dVQVJEQVJDT01PAA4AGEFSQ0hJ Vk9DRVJSQVJPQ0VSUkFSVE9ETwBAAQABAFMAAABUAAAACQABAAEAUwAAAAUA AABTAAAAAhwAAAAAAAAAjzcAAJA3AABAAAADAAAAAEAAjzoAAAAARQAVFpAB AABUaW1lcyBOZXcgUm9tYW4ADBaQAQIAU3ltYm9sAAsmkAEAAEFyaWFsABMi kAEAAE1TIFNhbnMgU2VyaWYAIgAEAAEAiBgAANACAAAAAAAAAACz+jNms/oz ZgAAAAAFAAEAAAAJCAAA0C0AAAkAFwAAAAAAAABhAAAAAAAAAAAAAAAJAAEA AAABAAAAAAAAANQCAAAAAHsAAABLTUlOSU1VTSBNVFUgKE1heGltdW0gVHJh bnNmZXIgVW5pdCkgU0VBUkNIklMgTUVUSE9EICBJTiBJUHY2IChJUCBWZXJz aW9uIDYpAAAADkRwdG8uIFNpc3RlbWFzDkRwdG8uIFNpc3RlbWFzAAAAAAAA AAAAANDPEeChsRrhAAAAAAAAAAAAAAAAAAAAAD4AAwD+/wkABgAAAAAAAAAA AAAAAgAAAAIAAAAAAAAAABAAAHMAAAABAAAA/v///wAAAAADAAAAgQAAAP// ///cpWgAV+AKBAAATQBlAAAAAAAAAAAAAAAAAwAAkDoAAKj5AAAAAAAAAAAA AAAAAAAAAAAAkDcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AIQAAOoAAAAAhAAA6gAAAImPAAAAAAAAiY8AAAAAAACJjwAAAAAAAImPAAAA AAAAiY8AADQAAADZmgAAAAAAAI+QAABKCgAA2ZoAAAAAAADZmgAAAAAAANma AAAAAAAA2ZoAABAAAADpmgAANAAAANmaAAAAAAAAkPgAAEUAAAAdmwAAAAAA AB2bAAAAAAAAHZsAAAAAAAAdmwAAAAAAAB2bAAAAAAAAHZsAAAAAAAAdmwAA AAAAAB2bAAAAAAAA+vQAAFcDAABR+AAAAAAAAFH4AAAAAAAAUfgAAAAAAABR +AAAAAAAAFH4AAAAAAAAUfgAAB4AAADV+AAAWAAAAC35AAB7AAAAb/gAACEA AAAAAAAAAAAAAAAAAAAAAAAAiY8AAAAAAAAdmwAAAAAAAAAAOAA6AAIACAAd mwAAAAAAAB2bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB2bAAAAAAAAHZsAAAAA AABv+AAAAAAAAMH0AAAAAAAAiY8AAAAAAACJjwAAAAAAAB2bAAAAAAAAAAAA AAAAAAAAAAAAAAAAAB2bAAAAAP////////////////////////////////// /////////////4oAAACLAAAAjAAAAI0AAACOAAAAjwAAAJAAAABFAAAA//// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// /////////////////////////////////////////////////////////7QA AADFAAAA//////////////////////////////////////////////////// /////////////////////////////////8YAAADHAAAAOAAAAP////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// ////////////////////////////////////////////////AADB9AAAAAAA AMH0AAAAAAAAwfQAAAAAAAAdmwAApFkAAImPAAAAAAAAHZsAAAAAAACJjwAA AAAAAB2bAAAAAAAA+vQAAAAAAAAAAAAAAAAAAIDPiFOOe74BvY8AADgAAAD1 jwAAmgAAAImPAAAAAAAAiY8AAAAAAACJjwAAAAAAAImPAAAAAAAAHZsAAAAA AAD69AAAAAAAAMH0AAA5AAAAwfQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0NDQ0NTUlOSU1VTSBNVFUgKE1heGlt dW0gVHJhbnNmZXIgVW5pdCkgU0VBUkNIklMgTUVUSE9EICBJTiBJUHY2IChJ UCBWZXJzaW9uIDYpDQ0NDQ1ZZXppZCBFLiBEb25vc28gTWVpc2VsDXlkb25v c29AZ3VheWFjYW4udW5pbm9ydGUuZWR1LmNvDUFsZWphbmRybyBRdWludGVy bw0NDQ1Vbml2ZXJzaWRhZCBkZSBsb3MgQW5kZXMNRmFjdWx0YWQgZGUgSW5n ZW5pZXLtYQ1EZXBhcnRhbWVudG8gZGUgU2lzdGVtYXMgeSBDb21wdXRhY2nz bg1TYW50YWbpIGRlIEJvZ2904SwgQ29sb21iaWEsIFNlcHRpZW1icmUgZGUg MTk5OA0NDQ0NU1VNTUFSWQ0NVGhlIHByZXNlbnQgaW52ZXN0aWdhdGlvbiBh cnRpY2xlIGNvbnNpZGVycyBhIG1ldGhvZG9sb2d5IGFuZCBhIHByb2NlZHVy ZSB0byBhdm9pZCB0aGUgcHJvYmxlbSB0byBkaXNjYXJkIHBhY2thZ2VzIG9m IHRoZSBuZXR3b3JrIGR1ZSB0byBpdHMgc2l6ZS4gICBUaGlzIGludmVzdGln YXRpb24gd2FzIG1hZGUgZm9yIHRoZSBuZXcgSVB2NiB2ZXJzaW9uLCBhcyB3 ZWxsIGFzIGZvciB0aGUgdHJhbnNpdGlvbiBwcm9jZXNzIGZyb20gSVB2NCB0 byBJUHY2LiBUaGUgcHJvcG9zYWwgY29uc2lzdHMgb2YgdGhlIGNyZWF0aW9u IG9mIHR3byBuZXcgSUNNUCBtZXNzYWdlcyBhbmQgYSBwcm9jZWR1cmUsIHRo YXQgd2lsbCBiZSBpbmRlZWQgdGhlIG9uZSBzaG93ZWQuDQ1LRVkgV09SRFM6 ICAgSVB2NiwgIElQbmcsIEZhc3QgSVAsIE1UVSwgUE1UVQ0NDTEuIElOVFJP RFVDVElPTg0NQW5hbHl6aW5nIHRoZSBjb25zZXF1ZW5jZXMgb2YgdGhlIHBy ZXNlbnQgc3BlY2lmaWNhdGlvbnMgYWJvdXQgdGhlIG5ldyB2ZXJzaW9uIG9m DVRDUC9JUCAoSVB2NiksIHRoZSBmb2xsb3dpbmcgYXNwZWN0cyBoYXZlIGFw cGVhcmVkIDogICAgIA0NRm9yIElwdjYgKEludGVybmV0IFByb3RvY29sIHZl cnNpb24gNiksIGFuIGVuZC10by1lbmQgZnJhZ21lbnRhdGlvbiBoYXMgYmVl biBzcGVjaWZpZWQuICAgSXQgY29uc2lzdHMgb24sIHRoYXQgdGhlIG9ubHkg bm9kZSB0aGF0IGlzIGF1dGhvcml6ZWQgdG8gZnJhZ21lbnQgSVAgcGFja2Fn ZXMgaXMgdGhlIG9yaWdpbiBub2RlOyBhbmQgdGhlIG9ubHkgb25lIGF1dGhv cml6ZWQgdG8gYXNzZW1ibGUgdGhlIHBhY2thZ2UgaXMgdGhlIGRlc3Rpbnkg bm9kZS4gDVRvIGhhdmUgYXMgYW4gb2JqZWN0aXZlIG5vdCB0byBjb25nZXN0 IHRoZSBuZXR3b3JrIGR1ZSB0byBlZmZlY3RzIG9mIHRoaXMgc2VhcmNoIG9y DSAgICAgIHRoaXMgdHlwZSBvZiBvcGVyYXRpb24uIA0NVGhlIHByb2JsZW0g Y29uc2lzdHMgb24gdGhlIElwdjQgcm91dGVycywgd2hlbiBpbiB0aGUgaGVh ZGVyIG9mIHRoZSBJUCBwYWNrYWdlLCB0aGUgYml0IERGIFNldCBpbmRpY2F0 ZWQgdGhleSB3ZXJlIG5vdCBhdXRob3JpemVkIHRvIGZyYWdtZW50IGEgcGFj a2FnZSB3aGVuIGEgc21hbGxlciBNVFUgd2FzIGZvdW5kIHRoYW4gdGhlIHNp emUgb2YgdGhlIHBhY2thZ2UgdGhleSB3ZXJlIGFycmFuZ2VkIHRvIHJlZGly ZWN0LiANSW4gdGhhdCBjYXNlLCB0aGUgcGFja2V0IHdhcyBkaXNjYXJkZWQg YW5kIGEgdHlwZSAzIChEZXN0aW5hdGlvbiBVbnJlYWNoYWJsZSksIGNvZGUg NCAoRnJhZ21lbnRhdGlvbiBOZWVkZWQpIElDTVAgKEludGVybmV0IENvbnRy b2wgTWVzc2FnZSBQcm90b2NvbCkgbWVzc2FnZSB3YXMgc2VudCwgaW5kaWNh dGluZyB0byB0aGUgb3JpZ2luIG5vZGUgdGhhdCB0aGUgcGFja2V0IHNpemUg d2FzIG92ZXIgdGhlIE1UVSBvbiB0aGF0IGNvbm5lY3Rpb24uICAgQWxzbywg dGhlIG5ldyBNVFUgdmFsdWUgd2FzIHNlbnQgdG8gdGhlIGNvbm5lY3Rpb24n cyBvcmlnaW4gbm9kZSBzbyB0aGF0IGl0IHdvdWxkIGZyYWdtZW50IHdpdGgg dGhlIG5ldyBzaXplLg0NV2hlbiB0aGUgbmV3IHZlcnNpb24gd2FzIGJlaW5n IHNwZWNpZmllZCAoSVB2NiksIHRoZSBzYW1lIHByb2NlZHVyZSBmb3IgdGhl IHBhY2tldCdzIHNpemUgaGFuZGxpbmcgdHJhdmVsaW5nIHRocm91Z2ggdGhl IG5ldHdvcmsgd2FzIHVzZWQuIFRoZSBkaXNhZHZhbnRhZ2VzIGFyZSBpbiB0 aGUgdW5jZXJ0YWludHkgYW5kIHRoZSByYXRlIG9mIHByb2JhYmlsaXR5IHRo YXQgdGhlIHBhY2thZ2VzIHdvdWxkIGJlIGRpc2NhcmRlZCBpbiB0aGUgbmV0 d29yayBiZWZvcmUgYXJyaXZpbmcgdG8gdGhlaXIgZmluYWwgZGVzdGlueS4g V2hpY2ggd291bGQgYnJpbmcgYSBuZXR3b3JrIGNvbmdlc3Rpb24sIGFuZCB0 aGUgb3JpZ2luIG5vZGUgd291bGQgYmUgY2FsbGVkIG9uIHRvIHNlbmQgYWdh aW4gYWxsIHRoZSBwYWNrYWdlcywgdG8gdGhlIGRlc3Rpbnkgbm9kZSwgd2l0 aCBhIG5ldyBzaXplIG9mIHBhY2thZ2UgZm9yIGVhY2ggZnJhZ21lbnQuDQ1J biB0aGlzIGRvY3VtZW50LCBhIG5ldyBwcm9wb3NhbCBpcyBwcmVzZW50ZWQg dG8gYXZvaWQgdGhlc2UgZGlzYWR2YW50YWdlcyBhbmQgdG8gdGFrZSBhZHZh bnRhZ2Ugb2Ygb3RoZXIgYXNwZWN0cywgaW4gdGhlIG5ldyB2ZXJzaW9uLCBh cyB0aGUgbmV3IElDTVAgbWVzc2FnZXMgYW5kIHRoZSByZWRlc2lnbmluZyBv ZiB0aGUgcm91dGluZyB0YWJsZS4NDQ0yLiBUV08gTkVXIElDTVAgTUVTU0FH R0VTIElOIElQdjYNDUFmdGVyIGludmVzdGlnYXRpbmcgdGhlIHNvbHV0aW9u cyBwcmVzZW50ZWQvZGlzcGxheWVkIHRvIHRoaXMgcHJvYmxlbSBhbmQgYW5h bHl6aW5nIHRoZSBwb3NzaWJsZSBwcm9wb3NhbHMgd2l0aCBhIHZpZXcgdG8g cmFpc2luZyBhIHNvbHV0aW9uIHRoYXQgZnVsZmlsbHMgdGhlIGZvbGxvd2lu ZyByZXF1aXJlbWVudHM6IA0NVG8gYXZvaWQgdGhlIG5ldHdvcmuScyBjb25n ZXN0aW9uIGR1cmluZyB0aGUgaW5mb3JtYXRpb24gdHJhbnNtaXNzaW9uIA1U byBhdm9pZCBhcyBmYXIgYXMgcG9zc2libGUgdGhhdCB0aGUgaW5mb3JtYXRp b24gcGFja2FnZSBpcyBkaXNjYXJkZWQgYnkgaXSScyBzaXplLg0NVGhlIGZv bGxvd2luZyB0aGluZyB3ZXJlIHNldCBvdXQ6IA0NVG8gY3JlYXRlIGEgbWVz c2FnZSBjYWxsZWQgTWluaW11bSBTaXplIE1UVSwgd2hpY2ggY29uc2lzdHMg b2YgdHdvIHR5cGVzIG9mIG1lc3NhZ2VzOg0NVHlwZSAxMzMgKGluZm9ybWF0 aW9uIG1lc3NhZ2UpOiBjYWxsZWQgTWluaW11bSBTaXplIE1UVSBSZXF1ZXN0 IHdpdGggYSB6ZXJvIGNvZGUsIHdoaWNoIGlzIGFuIElDTVAgbWVzc2FnZSB0 aGF0IHdpbGwgdHJhdmVsIGJ5IHRoZSBuZXR3b3JrIHRvIGNhbGN1bGF0ZSB0 aGUgbWluaW11bSBNVFUgaW4gYWxsIGl0knMgd2F5IGZyb20gdGhlIG9yaWdp biBub2RlIHRvIHRoZSBkZXN0aW55IG5vZGUuICAgVGhlIG5vZGVzIHdpbGwg aGF2ZSB0byBjb21wYXJlIHRoZSCEMQAAhTEAAA0yAAAOMgAADzIAABAyAAAR MgAAHTIAAB4yAAAfMgAAPzIAAJIyAACTMgAAvDIAAAszAAAMMwAAGjMAAJ0z AACeMwAApDMAABA0AAARNAAAEjQAABs0AACmNAAApzQAAOc1AADoNQAA8DUA APc2AABANwAAQTcAAFU3AABsNwAAbTcAAG43AABvNwAAcDcAAPsAAAAAAADW AAAAAAAA1AAAAAAAANQAAAAAAADUAAAAAAAA1AAAAAAAANQAAAAAAADUAAAA AAAA1AAAAAAAANQAAAAAAADSAAAAAAAA1AAAAAAAANQAAAAAAADUAAAAAAAA 1AAAAAAAANQAAAAAAADUAAAAAAAA1AAAAAAAANQAAAAAAADUAAAAAAAA1AAA AAAAANQAAAAAAADUAAAAAAAA1AAAAAAAANQAAAAAAADUAAAAAAAA1AAAAAAA ANQAAAAAAADUAAAAAAAA1AAAAAAAANQAAAAAAADUAAAAAAAA1AAAAAAAANQA AAAAAADUAAAAAAAA1AAAAAAAANQAAAAAAAAAAAAAAAAAAAABEAAAAQAAACQA AA0LEWgBE5j+DDT/AQAIAAABAAAAAQBoAQAAAAAAALcAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAADwUAAWgBAAAABAAAERsBE+X+JXA3AAB8NwAA fTcAAH43AAB/NwAAHzgAACA4AAAhOAAAuDgAALk4AAAhOQAAIjkAAHQ5AAB1 OQAAdjkAAIU5AACGOQAAxDkAAMU5AADkOQAA5TkAAPQ5AAD1OQAAZToAAI86 AACQOgAA/gAAAAAAAP4AAAAAAAD+AAAAAAAA/gAAAAAAAP4AAAAAAAD+AAAA AAAA/gAAAAAAAP4AAAAAAAD+AAAAAAAA/gAAAAAAAP4AAAAAAAD+AAAAAAAA /gAAAAAAAP4AAAAAAAD+AAAAAAAA/gAAAAAAAP4AAAAAAAD+AAAAAAAA/gAA AAAAAP4AAAAAAAD+AAAAAAAA/gAAAAAAAP4AAAAAAAD+AAAAAAAA/gAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAABAAAZDgARAAgAAQBLAA8AAAAAABwAAEDx/wIAHAAGTm9ybWFsAAIA AAAGAF0DAGEJBCIAAUABAAIAIgAIVO10dWxvIDEABAABAAgBCABVgWEKBGMY AAAAAAAAAAAAAAAAAAAAAAAsAEFA8v+hACwAIEZ1ZW50ZSBkZSBw4XJyYWZv IHByZWRldGVybWluYWRhAAAAAAAAAAAAAAAsAEJAAQDyACwAE1RleHRvIGlu ZGVwZW5kaWVudGUAAAIADwAIAFWBYQoEYxgAIgD+TwEAAgEiAAtCb2R5IFRl eHQgMgAAAgAQAAYAYQoEYxgA5+aC/Y/iq6evqIKNzKXIp8i23MaziMaQj5ST lcaViYWPh4rIyMafxoeOiZSHxoKPgY+Sh4rIyIKNw8SM0oWtn8a3kdWUsp/E xs6Ml5HVlJKfpo6JkouHj4rIhYmLz8iCjfuwg4iDnJODiofKxquHlIeFh5/K xqKPhcbX39/QyIKN2rbIosjGt5ODxo6HhYOVxoGJhY6PkonG2caok4iFh8aV g5SHlca1j4uJiMakiYqPkIeUyMjGpImKlYfGx4L8/YLJ1o/kq8Ljiu/m4IL9 j+e144/koMLggsrL/sCCj+S1wuqM5KDDgo/kosLqjOOrh4WUiYKP5KXC6ozj pYqJlYOCj+SkwuqM4qmWg4iCj+SnwuqM4qCPioOCj+SrwuOK5ubg6ozlpae2 go/kq8LjiuXm4OqP5KfC4Y/kpcKCj+SrwuOK4+bg6o/kp8LhjOK1h5CDgo/k q8LjiuTm4OqP5KfC4Y/kpMKCj+SrwuOK7+bg6o/kp8LhjO+yg4uWioeSg5WC j+SnwuqM4qeTkomCj+SrwuOK4Obg6o/kq8LjiuPm4OGM5KeVgo/kq8Ljiufm 4OqP5KfC4Y/kpMKCj+SrwuOK7ubg6o/kp8LhjOKjnoOFgo/kq8LjiuLm4OqP 5KfC4Y/kpcKCj+SrwuOK4ebg6ozjsomJipXhj+SiwoKP56vqiubmgo/nqOqK 5uaCxY/nsuqK5+bCiubmw+6K5+aCxY/nr+qBUWbjj+ey4MKK5+bD7orn5oKP 5KTC6oFeZuOP56/0j+ey4IL7j+S1wuqB7mbjgVhm44/kpMLg9Irk5uD4gsWP 56zqiubmworv5oL7j+SkwuqP5KvC44/nrOD4gvuP57L4j+eo6o/nqOGK5+bG j+er6o/nq+GK5+aCj+es6orv5oL8+4LAgsaCgTHmlefm6o/kpML0lbbn6o/n suGP57Lhiufm9JXt5oL8+4LAgsCC+4/koMLrjOb4gvuP56voiuzm5Y/nqPiC gTfmlUrl6orm5vSVsOfqiufm9JXS5uqK5+b0lbHn6ozk19aCxY/nr+qK5ubC iu/mgvuP56/riuHm+I/nreruiufmxo/nreqK5uaCgSRmj+SgwuGM59zhj+Sr wuOP56/g9I/kq8Ljj+ev4PSP562CwIKP5KTC6o/ktcLhgQxm44HhZuOB4Gbj gexm44FYZuOP5KvC44rh5uDg9Irl5uDg4Yrn5uDggoEx5pXn5uqP5KvC44rh 5uD0lbbn6orn5vSV0Ofqj+SkwvSV0uSCj+SnwuqBpmfjiubm9Irn5uCCxY/n r+qBUWbjiufm4MKK5+bD7orn5oKP56zqiubmgo/kpMLqgV5m44/nr/SK5+bg gtfVgVhm44/kpMLggtWP5LXC4YznqYKP56zqiuTmgtWP5LXC4YznpYKP56zq iuXmgtWP5LXC4YzntYKP56zqiuPmgtWP5LXC4YzktaeCj+es6org5oL814L7 j+es+IKP5KXC6oHYZ+OP5KfC9Irm5vSP56zggvuB7mbjgUlm44/kpcLg9IHl ZuOP5KvC44/nrODg4OuBSWbjj+SrwuOP56zg4OWB7mbjj+SlwvSK5+bg64zn zviBJGaP5KDC4Yzn3OGP5KTC9I/kpcL0j+etgvz7gsCCj+ey6u6K5+aCxY/n r+qK5ubCiufmgvuP56/4j+es6orn5saP56zqiuDmgo/kp8LqgaZn44/nr/SP 56zggo/nrOqBp2fjj+SnwvSP56/g7orn5oLFj+er6o/nrMKK5+bD7orn5oL7 gelm44HYZ+OP5KfC9I/nr/SP56vg9I/kosLg+IL7j+ev+IKP5KTC6oHYZ+OP 5KfC9I/nr/SP56vuiuTm4IL7gUlm44/kpMLg64FJZuOP5KvC44rv5uDg5YHu ZuOP5KTC9Irn5uDrjOfO+IEkZo/kq8Ljiu/m4PSP5KTC9I/nrYLGgo/nq+qP 56vhiufmgvz7gsWP57Lqj+erwo/nq+6K5+bD7orn5oL7j+ey6Yrl5viBV+eV SuTqj+ev9JXN5uqP57L0lefm6oHYZ+OP5KfC9I/nr/SP57Lg9JXh5uqP5KfC 9JVf5/SV5ebqiubmgsCCj+er6orn5oKP57Lqiubmgvz7gsCCwIL7j+ey+ILF j+ev6org5sKP56yC+4HuZuOB2Gfjj+SnwvSK5+b0j+ev4PSK5+bg6oznzuWB 7mbjgdhn44/kp8L0iufm9I/nr+6K5Obg9Irn5uDqjOfO+ILFj+ey6orn5sKK 5ebDiuTmgo/kpMLqgdhn44/kp8L0iufm9I/nr+6P57LggvuB7mbjj+SkwvSK 5+bg64znzviBJGaP5KvC44/nsuGK4Obg9I/kpML0j+etgsCCj+ev6o/nrIL8 +4LAgvz7gvz7gsmP56LSgbLmgtiP56KC+4/nqOiK7Oblj+eilS3m6orn5uKP 56KVLebqiubm4o/nopUt5uqK4Ob4go/nopUt5uqK5+aCxY/nr+qBUWbjiubm 4MKK5+bD7orn5oKP5KTC6oFeZuOP56/0iubm4IL7j+SkwuuP5KvC44rh5uD4 j+et6u6K5+bGj+et6orm5oKBJGaP5KTC9I/koMLhjOfc4Y/kpML0j+etgsCC gbLmj+eigvz7gvz7go/lo5SU6orm5oL8/YL9j+SgqYLKy/7AgoEwZoLKy8yP 56OCyY/notKBtuaC2I/nooLZj+eigoG25o/nooKP57Xjj+eilefm4IPno/+C /P2C/Y/koKWCysv+wIKBMGaCj+e144HDZuPg4IKBRmaC/P2C/Y/koLWCysv+ wIKBMGaCysvMj+eggoG15oKP57XjgcNm4+Dgg+eg/4L8/YL9j+WgtaeCysv+ wIKBMGaCysvMj+ehgsmP56LSgbLmgtiP56KC+4/nopUt5uuK5+b4gtmP56KC gbLmj+eigo/nteOP56KV5+bggsaCj+ey6oHYZuPggo/kscLqj+eilefmgoGp 5pW05uqBw2bj4ILKy8yP566C2I/nooKP56KV5+bqj+SxwoLZj+eigoGy5o/n ooLKy8yP56GCj+e144/nopXn5uCC+4/nsveB2Gbj4PiP57Lqj+ey4Yrn5oKB OGaP57KD567/goFGZork5oL8+4Pnof+C/P3o6Y3ygO2kqKCnjcXE8c+Njj9p henpjYDqqqi5n+i67IPp743z8p+e+oX3mtPf19D6srOGuPr3nd3fzuifzZv5 ux6bmJj6hIXu74v0huuirqahi8PC98mLhuysrr+Z7amgi/X09PWR7pzxuLS8 u5HZ2O3TkZz2trSlg/ezppHv7t/eusW32pOfl5C68vPG+Lq33Z2fjqjfjdu5 +17b2Ni6xMWDguaZ64bPw8vM5q6vmqTm64HBw9L0gMTB5piZjI3pluSJwMzE w+mhoJWr6eSOzszd+47L3szpl5YBAGQbaQRNQUlOZBob7u+L9Ibroq6moYvD wvfJi4bsrK6/me2poIv19M7Pq9Smy4KOhoGr1dT09ZHunPG4tLy7kdnY7dOR nPa2tKWD97Omke/uzs+r1KbLgo6GgavV1IyN6ZbkicDMxMPpoaCVq+nkjs7M 3fuOy97M6ZeWg4LmmeuGz8PLzOaur5qk5uuBwcPS9IDEweaYmQAAAABJKAAA zyoAAJA3AAAEAJA6AAAEAP////8EAKo6AAAEAP////8EAMk6AAAEAP////8J AAQg//8BAAAg//8CAAQg//8DAAAg//8EAAQg//8FAAAi//8GAAQC//8HAAAA //8IAAQA//8JAAAAAACDBAAAYQ4AAOgRAAAZFgAAWyAAAEkoAABqKAAAiygA AJ8oAABXKQAA5ikAAM8qAACoLQAAQDQAAJA3AAAAAFQAAAABACEAAAACAAEA AAADAAEAAAAEAEkAAAAFAAAAAAIFAAAAAAIFAAAAAQIFAFwAAgIGAAAAAAIG AAAAAQIGAAAAAgIGANwAAAIHAAEAAAAIAAAAAAAAAAAAAQAAAAIAAAADAAAA BAAAAAUAAABRAAAAUgAAAFMAAABUAAAAVQAAAGwAAACNAAAAoAAAAKEAAACi AAAAowAAALwAAADTAAAA+gAAACoBAAArAQAALAEAAC0BAAAuAQAANgEAADcB AACvAgAAsAIAAN0CAADeAgAA3wIAAO8CAADwAgAAQgMAAHwDAAB9AwAAgwQA ANcEAAD2BAAA9wQAAOoFAABaBwAAWwcAADkJAAA6CQAABAoAAAUKAAAGCgAA KAoAACkKAADhCgAA4goAACkLAAB9CwAAfgsAAKELAACiCwAA+AsAAPkLAABg DgAAYQ4AAIIOAACDDgAAhQ4AAIYOAACHDgAAiA4AACAQAAAhEAAAQhAAAEMQ AABFEAAARhAAAEcQAAC2EQAAtxEAALgRAAC5EQAAuhEAALsRAADnEQAA6BEA AOkRAADqEQAA6xEAAFATAABREwAApRMAAOETAAAyFAAAMxQAADQUAABuFAAA cBQAAHIUAABzFAAAdBQAAI8UAACqFAAAvxQAANcUAADvFAAABxUAAB8VAAA3 FQAAOBUAABgWAAAZFgAAGhYAAC8WAAAwFgAA4BcAAOEXAADiFwAA7xgAAPAY AACaGgAAmxoAAJwaAACdGgAA7RoAABwdAAAdHQAA6R4AAOoeAABZIAAAWyAA AKQgAAClIAAAuSIAALoiAAC7IgAAvCIAABUkAAAWJAAAaiQAAC4lAAAvJQAA AicAAAMnAADMJwAAzScAABcoAABJKAAAZigAAGcoAABoKAAAaSgAAGooAACG KAAAhygAAIgoAACJKAAAiigAAIsoAACMKAAAmygAAJwoAACdKAAAnigAAJ8o AAD7KAAA/CgAAP0oAABUKQAAVSkAAFYpAABXKQAAWCkAAHkpAAB6KQAAeykA AHwpAADlKQAA5ikAAH8qAADPKgAA0CoAANEqAADSKgAA0yoAANQqAADVKgAA 1ioAANcqAADYKgAA5ioAAOcqAADoKgAA6SoAAOoqAAA4KwAAOSsAAJQrAAAO LAAADywAANQsAADVLAAApy0AAKgtAACELgAAhS4AAA0vAAAOLwAADy8AABAv AAARLwAAHS8AAB4vAAAfLwAAPy8AAJIvAACTLwAAvC8AAAswAAAMMAAAGjAA AJ0wAACeMAAApDAAABAxAAARMQAAEjEAABsxAACmMQAApzEAAOcyAADoMgAA 8DIAAPczAABANAAAQTQAAFU0AABsNAAAbTQAAG40AABvNAAAcDQAAHw0AAB9 NAAAfjQAAH80AAAfNQAAIDUAACE1AAC4NQAAuTUAACE2AAAiNgAAdDYAAHU2 AAB2NgAAhTYAAIY2AADENgAAxTYAAOQ2AADlNgAA9DYAAPU2AABlNwAAjzcA AJA3AAAAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAoMiLAEAAYMi LAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEA AYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMi LAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEABIMiLAEAAYMiLAEAAYMiLAEA AYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAA4Mi LAEAAYMiLAEAAYMiLAEAAYMiLAEAA4MiLAEABYMiLAEAAYMiLAEABYMiLAEA AYMiLAEAA4MiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAoMiLAEAAYMi LAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEA B4MiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMijQkAAYMiLAEAAYMiLAEAAYMi LAEABYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMijQkAAYMiLAEAAYMiLAEA BIMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiWQEAAYMi WQEAAYMiLAEAAYMiLAEAAYMiLAEABIMiLAEAAYMiLAEAAYMiLAEAAYMiLAEA AYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiWg8AAYMiLAEAAYMi LAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEA AYMiLAEAAYMiLAEAA4MiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEABYMi LAEAAYMiLAEAAYMiLAEAA4MiLAEAAYMiLAEABYMiLAEAAYMiLAEAAYMiLAEA AYMiLAEAAYMiLAEAB4MiLAEAAYMiLAEABYMiLAEAAYMiLAEABIMiLAEAAYMi LAEAAoMiLAEAAYMiLAEAB4MiLAEAAYMiLAEAAYMiLAEAAYMiLAEABIMiLAEA AYMiLAEAAYMiLAEAA4MiLAEAAYMiLAEABYMiLAEAAYMiLAEAA4MiLAEAAYMi LAEAAYMiLAEAAYMiLAEAAqsJLAEAAasJLAEAAasJLAEAAasJLAEAAasJLAEA AqsJLAEAAasJLAEAAasJLAEAAasJLAEAAasJLAEAAasJLAEAAasJLAEAAasJ LAEAAasJLAEAAasJLAEAAasJLAEAAasJLAEABKsJLAEAAasJLAEAAasJLAEA BKsJLAEAAasJLAEAAasJLAEAAasJLAEAAasJLAEAAqsJLAEAAasJLAEAAasJ LAEAAasJLAEABasJLAEAAasJLAEAB6sJLAEAAasJLAEAAYMiLAEAAYMiLAEA AYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMi LAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEA AoMiLAEAAYMiLAEAA4MiLAEAAYMiLAEAA4MiLAEAAYMiLAEAA4MiLAEAAYMi LAEAAoMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEA AYMiLAEAAYMiLAEAAoMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMi LAEAAoMiLAEAAYMiLAEAAYMiLAEAAoMiLAEAAYMiLAEAAYMiLAEAAYMiLAEA AoMiLAEAAYMiLAEABIMiLAEAAYMiLAEAAYMiLAEAA4MiLAEAAYMiLAEAAYMi LAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEA AYMiLAEAAYMiLAEAAYMiLAEAA4MiLAEAAYMiLAEAAYMiLAEAA4MiLAEAAYMi LAEAAoMiLAEAAYMiLAEAAoMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEA AYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAoMiLAEAAYMi LAEAAYMiLAEAAwAAwzgAAImPAAA4ADkAAAMAAIMHAABCEwAAGRkAAGonAABW LAAAhDEAAHA3AACQOgAAOgA7ADwAPQA+AD8AQABBAAAAAAAAAAAAEgAAABkA AAAaAAAAIgAAACMAAAAnAAAARgAAAE0AAABVAAAAWgAAAGUAAABrAAAAbAAA AIwAAACXAAAAnwAAAPoAAAABAQAANwEAADoBAAA7AQAAQgEAAEMBAABQAQAA UQEAAFgBAABZAQAAYgEAAGUBAABwAQAAcQEAAHQBAAB3AQAAgAEAAIEBAACD AQAAhAEAAIkBAACKAQAAjQEAAI4BAACVAQAAlgEAAJgBAACZAQAAoAEAAKEB AACpAQAAqgEAAKwBAACtAQAAsAEAALEBAAC4AQAAuQEAALwBAAC9AQAAvwEA AMABAADDAQAAxAEAAMgBAADMAQAA0AEAANEBAADeAQAA3wEAAOIBAADjAQAA 5wEAAOgBAADrAQAA7AEAAO8BAADwAQAA8wEAAPkBAAAAAgAABQIAAAkCAAAN AgAAEAIAABECAAAUAgAAFQIAAB8CAAAgAgAAJwIAACgCAAAsAgAAMgIAADQC AAA7AgAAPgIAAD8CAABHAgAASAIAAFACAABRAgAAUwIAAFQCAABXAgAAWAIA AGACAABhAgAAYwIAAGQCAABnAgAAaAIAAGsCAABxAgAAeQIAAHoCAAB9AgAA gAIAAIkCAACLAgAAjwIAAJACAACUAgAAmAIAAJ4CAACfAgAAogIAAKMCAACm AgAApwIAAK0CAADEAgAAyAIAAMoCAADOAgAA8AIAAPkCAAD6AgAA/QIAAP4C AAAKAwAACwMAAA0DAAAOAwAAEQMAABIDAAAZAwAAGgMAACgDAAApAwAALgMA AC8DAAAyAwAAMwMAADYDAAA3AwAAPgMAAD8DAABBAwAAUQMAAFQDAABVAwAA XgMAAF8DAABmAwAAZwMAAGsDAABsAwAAdAMAAH0DAACAAwAAhwMAAI8DAACQ AwAAmAMAAJkDAACgAwAApQMAAKcDAACoAwAAsgMAALMDAADAAwAAxQMAAMkD AADKAwAA0wMAANcDAADZAwAA2gMAAOIDAADjAwAA5QMAAOcDAADrAwAA7AMA AO8DAADwAwAA9AMAAPUDAAD5AwAA+gMAAP4DAAD/AwAAAQQAAAIEAAAMBAAA DQQAAA8EAAAQBAAAGAQAABwEAAAkBAAAJQQAACcEAAAoBAAAKwQAACwEAAAy BAAAMwQAADcEAAA5BAAAPAQAAD0EAABABAAAQQQAAEUEAABGBAAASQQAAEoE AABUBAAAVQQAAFcEAABYBAAAYAQAAGEEAABkBAAAZQQAAGwEAABtBAAAbwQA AHAEAABzBAAAdAQAAHsEAAB8BAAAgAQAAIMEAACFBAAAhgQAAIoEAACOBAAA kAQAAJEEAACaBAAAmwQAAJ4EAACfBAAAoQQAAKIEAACpBAAAqgQAAK0EAACu BAAAtQQAALYEAAC5BAAAugQAALwEAAC9BAAAxAQAAMUEAADHBAAAyAQAAMwE AADNBAAA0wQAANQEAADWBAAA3QQAAOEEAADiBAAA5gQAAOcEAADpBAAA6gQA APMEAAD3BAAA+gQAAPsEAAACBQAAAwUAAAsFAAAMBQAADgUAAA8FAAASBQAA GAUAAB8FAAAhBQAAJQUAACkFAAAsBQAALQUAADMFAAA0BQAANgUAADcFAAA6 BQAAPgUAAEUFAABHBQAASgUAAFIFAABVBQAAVgUAAF8FAABgBQAAZAUAAGUF AABpBQAAagUAAG0FAABuBQAAeAUAAHkFAAB7BQAAfAUAAIQFAACHBQAAjgUA AI8FAACTBQAAlgUAAJ0FAACiBQAApQUAAKYFAACrBQAArAUAALAFAACxBQAA tAUAALUFAAC5BQAAugUAALwFAAC9BQAAwAUAAMEFAADIBQAAyQUAAM0FAADO BQAA0gUAANMFAADbBQAA3AUAAN4FAADfBQAA5wUAAO0FAADxBQAA+AUAAPsF AAD8BQAAAgYAAAMGAAAGBgAABwYAABAGAAARBgAAFAYAABcGAAAbBgAAHwYA ACoGAAArBgAANgYAADkGAAA9BgAAQQYAAE4GAABPBgAAVQYAAF0GAABlBgAA bgYAAHUGAAB2BgAAfgYAAIAGAACHBgAAiAYAAIsGAACMBgAAkAYAAJIGAACc BgAAnQYAAJ8GAACgBgAAowYAAKQGAACqBgAAqwYAAK8GAACwBgAAtAYAALUG AAC4BgAAuQYAAL8GAADABgAAxAYAAMUGAADIBgAAyQYAAM0GAADOBgAA0QYA ANYGAADYBgAA2QYAAN0GAADeBgAA6AYAAPIGAAD1BgAA9gYAAPkGAAD+BgAA AwcAAAQHAAAHBwAACAcAAAwHAAANBwAADwcAABAHAAATBwAAFAcAACAHAAAh BwAAJwcAACgHAAAsBwAAMAcAADQHAAA1BwAANwcAADgHAAA9BwAAPgcAAEYH AABHBwAASwcAAEwHAABPBwAAUAcAAFMHAABUBwAAWAcAAFsHAABfBwAAYAcA AGMHAABkBwAAZwcAAGgHAABvBwAAcAcAAHMHAAB0BwAAeQcAAHoHAACDBwAA jAcAAI8HAACQBwAAlAcAAJUHAACeBwAAnwcAAKIHAACjBwAApgcAAKcHAACv BwAAsAcAALQHAAC1BwAAvQcAAL4HAADHBwAAyAcAAM8HAADQBwAA0wcAANQH AADbBwAA3AcAAN8HAADgBwAA5AcAAOYHAADpBwAA6gcAAPcHAAD/BwAAAggA AAMIAAAOCAAADwgAABIIAAATCAAAFggAABcIAAAbCAAAHAgAAB4IAAAfCAAA KggAACsIAAAvCAAAMAgAADMIAAA0CAAAPAgAAD0IAABCCAAARggAAE8IAABT CAAAVggAAFcIAABeCAAAXwgAAGUIAABmCAAAbggAAG8IAABxCAAAcggAAHcI AAB+CAAAhQgAAIcIAACMCAAAjQgAAJIIAACTCAAAmAgAAJsIAACiCAAAowgA AK0IAACvCAAAsggAALMIAAC2CAAAtwgAAL0IAAC+CAAAwggAAMMIAADICAAA zAgAANIIAADTCAAA1QgAANYIAADYCAAA2QgAAN0IAADeCAAA4wgAAOQIAADn CAAA6AgAAOsIAADsCAAA9AgAAPYIAAD4CAAA+QgAAPwIAAD9CAAABAkAAAUJ AAAJCQAACwkAAA8JAAASCQAAFQkAABYJAAAaCQAAGwkAAB0JAAAeCQAAJQkA ACYJAAApCQAAKgkAAC4JAAAvCQAANwkAAD0JAABBCQAAQgkAAEoJAABOCQAA UQkAAFIJAABaCQAAWwkAAF0JAABeCQAAZwkAAGgJAABqCQAAawkAAHAJAABx CQAAdgkAAHcJAACECQAAhQkAAIgJAACJCQAAiwkAAIwJAACQCQAAkQkAAJoJ AACbCQAAnQkAAJ4JAACjCQAApAkAAKsJAACwCQAAswkAALQJAAC3CQAAuAkA AL8JAADECQAAxwkAAMgJAADLCQAA0QkAANkJAADaCQAA3QkAAN4JAADhCQAA 4gkAAO0JAADuCQAA8AkAAPEJAAD0CQAA9QkAAPwJAAD9CQAAAgoAACkKAAAu CgAALwoAADwKAAA9CgAAQAoAAEEKAABKCgAASwoAAFQKAABVCgAAXgoAAF8K AABhCgAAYgoAAGYKAABnCgAAbgoAAG8KAAByCgAAcwoAAHwKAAB9CgAAgAoA AIEKAACJCgAAigoAAJMKAACUCgAAmAoAAJsKAACfCgAAoAoAAKIKAACjCgAA qgoAAK0KAAC1CgAAtgoAALoKAAC7CgAAwwoAAMQKAADHCgAAyAoAANEKAADS CgAA3goAAOIKAADkCgAA5QoAAOoKAADrCgAA7goAAO8KAAD4CgAA+QoAAAML AAAECwAACgsAAAsLAAAOCwAADwsAABoLAAAbCwAAJwsAACkLAAArCwAALAsA ADELAAA1CwAAOAsAADwLAABECwAARQsAAEkLAABKCwAATQsAAE4LAABZCwAA WgsAAGELAABiCwAAZAsAAGULAABuCwAAbwsAAHELAAByCwAAdgsAAHcLAAB7 CwAAfgsAAIELAACCCwAAiwsAAIwLAACRCwAAkgsAAJYLAACXCwAAmgsAAJsL AACeCwAAogsAAKQLAAClCwAAqwsAAK4LAAC1CwAAtgsAALwLAAC9CwAAxAsA AMULAADJCwAAzwsAANQLAADVCwAA3QsAAN4LAADgCwAA4QsAAOQLAADlCwAA 6gsAAOsLAADtCwAA7gsAAPYLAAD5CwAA/QsAAAMMAAAODAAADwwAABYMAAAZ DAAAHwwAACAMAAAnDAAAKAwAACwMAAAxDAAAOAwAADkMAAA9DAAAQAwAAEQM AABFDAAASQwAAEsMAABQDAAAUQwAAFMMAABUDAAAVgwAAFwMAABjDAAAZAwA AGgMAABpDAAAbQwAAG4MAAB0DAAAdQwAAHcMAAB4DAAAewwAAHwMAACDDAAA hAwAAIYMAACHDAAAkAwAAJEMAACUDAAAlQwAAJwMAACkDAAApwwAAKgMAACs DAAArQwAALAMAACxDAAAtQwAALYMAAC5DAAAugwAAMAMAADBDAAAxQwAAMYM AADIDAAAyQwAAMwMAADNDAAA1AwAANUMAADZDAAA3QwAAOAMAADhDAAA5gwA AOcMAADrDAAA7AwAAPAMAADxDAAA8wwAAPwMAAD/DAAAAA0AAAcNAAAPDQAA Eg0AABgNAAAfDQAAIA0AACQNAAAlDQAAKA0AACkNAAAtDQAALg0AADANAAAx DQAANA0AADkNAABCDQAAQw0AAEUNAABGDQAASQ0AAEoNAABODQAATw0AAFkN AABdDQAAXw0AAGANAABjDQAAZA0AAGgNAABpDQAAaw0AAGwNAABzDQAAdQ0A AHgNAAB5DQAAfg0AAIINAACFDQAAhg0AAI0NAACTDQAAlw0AAJgNAACgDQAA oQ0AAKQNAAClDQAArA0AALENAAC1DQAAuQ0AAMANAADFDQAAyg0AAMsNAADN DQAAzg0AANUNAADWDQAA2g0AANsNAADmDQAA6A0AAOsNAADsDQAA8Q0AAPIN AAD2DQAA9w0AAP4NAAD/DQAAAw4AAAQOAAAIDgAACQ4AAAsOAAAMDgAAEw4A ABUOAAAaDgAAGw4AAB0OAAAeDgAAJw4AACsOAAAuDgAALw4AADMOAAA0DgAA QQ4AAEIOAABEDgAARQ4AAEgOAABJDgAATw4AAFAOAABeDgAAZQ4AAGsOAABs DgAAbg4AAG8OAABzDgAAeQ4AAIAOAACIDgAAjA4AAJIOAACdDgAAng4AAKUO AACoDgAArg4AAK8OAAC2DgAAtw4AALsOAADADgAAxQ4AAMYOAADKDgAAzQ4A ANEOAADSDgAA1g4AANgOAADdDgAA3g4AAOAOAADhDgAA4w4AAOkOAADwDgAA 8Q4AAPUOAAD2DgAA+g4AAPsOAAABDwAAAg8AAAQPAAAFDwAACA8AAAkPAAAQ DwAAEQ8AABUPAAAWDwAAGQ8AABoPAAAhDwAAIg8AACYPAAAnDwAAKQ8AACoP AAAtDwAALg8AADQPAAA1DwAAOQ8AADoPAAA9DwAAPg8AAEMPAABEDwAATA8A AE0PAABQDwAAUQ8AAFgPAABdDwAAXw8AAGAPAABjDwAAZA8AAGcPAABoDwAA cg8AAHQPAAB3DwAAeA8AAIAPAACBDwAAig8AAIsPAACPDwAAkw8AAJcPAACY DwAAmg8AAJsPAACfDwAAoA8AAKcPAACpDwAArA8AAK0PAACxDwAAsg8AALUP AAC2DwAAug8AALsPAAC/DwAAwA8AAMIPAADEDwAAxw8AAMgPAADMDwAAzQ8A ANEPAADSDwAA2A8AANkPAADbDwAA3A8AAN4PAADfDwAA4g8AAOMPAADmDwAA 5w8AAPAPAADxDwAA+A8AAPkPAAACEAAAAxAAAAYQAAAHEAAAERAAABIQAAAV EAAAFhAAAB0QAAAlEAAAKxAAACwQAAAuEAAALxAAADMQAAA5EAAAQBAAAEcQ AABJEAAAShAAAE4QAABWEAAAYRAAAGIQAABqEAAAaxAAAG0QAABuEAAAdhAA AHgQAAB6EAAAghAAAIoQAACLEAAAjxAAAJAQAACTEAAAmRAAAKAQAAChEAAA pRAAAKYQAACpEAAAqhAAALAQAACxEAAAsxAAALQQAAC3EAAAuBAAAL8QAADB EAAAyBAAAMkQAADLEAAAzBAAAM4QAADPEAAA2xAAANwQAADgEAAA4RAAAOYQ AADnEAAA6hAAAOsQAADyEAAA9xAAAPkQAAD6EAAA/hAAAP8QAAAGEQAACBEA AAoRAAALEQAADxEAABMRAAAbEQAAHBEAAB4RAAAfEQAAJREAACYRAAAqEQAA KxEAADARAAA0EQAAPBEAAD0RAABAEQAAQREAAEoRAABMEQAAUBEAAFERAABT EQAAVBEAAFgRAABZEQAAWxEAAFwRAABfEQAAYBEAAGYRAABnEQAAaxEAAG8R AAByEQAAcxEAAHoRAAB/EQAAghEAAIMRAACGEQAAhxEAAIoRAACLEQAAjxEA AJARAACTEQAAlBEAAJoRAACbEQAAnxEAAKARAACiEQAAoxEAAKYRAACnEQAA rhEAAK8RAACzEQAA7xEAAPMRAAD0EQAA/BEAAP0RAAAFEgAABhIAAAgSAAAJ EgAADxIAABASAAASEgAAExIAABYSAAAXEgAAHhIAAB8SAAAkEgAAKBIAAC0S AAAuEgAAMhIAADMSAAA8EgAAPRIAAEISAABDEgAARRIAAEYSAABJEgAAShIA AFESAABWEgAAWxIAAFwSAABhEgAAYhIAAGYSAABnEgAAbRIAAG4SAABxEgAA chIAAHQSAAB1EgAAgBIAAIESAACNEgAAjhIAAJASAACeEgAApRIAAKwSAACx EgAAshIAALQSAAC1EgAAuRIAALoSAAC+EgAAvxIAAMgSAADKEgAAzBIAAM0S AADPEgAA0BIAANkSAADaEgAA3BIAAN0SAADmEgAA5xIAAPQSAAD1EgAA+RIA APoSAAD/EgAAABMAAAUTAAAGEwAACRMAAAoTAAAMEwAAEBMAABQTAAAVEwAA FxMAABgTAAAcEwAAHRMAACATAAAhEwAAJhMAACcTAAApEwAAKhMAAC0TAAAy EwAANRMAADYTAAA6EwAARhMAAE0TAABVEwAAVxMAAFgTAABbEwAAXBMAAGMT AABkEwAAZhMAAGcTAABuEwAAcBMAAHQTAAB1EwAAeBMAAHkTAAB7EwAAfBMA AH8TAACAEwAAiRMAAIoTAACVEwAAlhMAAJoTAACeEwAAohMAAKUTAACnEwAA qBMAALATAACxEwAAtBMAALUTAAC9EwAAvhMAAMATAADBEwAAxBMAAMkTAADN EwAAzhMAANATAADREwAA1BMAANUTAADaEwAA2xMAAN8TAADhEwAA4xMAAOQT AADoEwAA6RMAAOsTAADsEwAA8RMAAPITAAD0EwAA9RMAAPgTAAD+EwAABRQA AAYUAAALFAAADBQAAA4UAAAPFAAAEhQAABMUAAAaFAAAHxQAACIUAAAjFAAA JxQAACgUAAAvFAAANBQAADYUAAA3FAAAPhQAAD8UAABBFAAAQhQAAEUUAABG FAAATRQAAE4UAABTFAAAVBQAAFcUAABYFAAAWxQAAFwUAABiFAAAZxQAAGwU AAB0FAAAexQAAHwUAACBFAAAghQAAIUUAACGFAAAjBQAAI8UAACTFAAAlhQA AJoUAACbFAAAnRQAAJ4UAAChFAAAohQAAKkUAACqFAAAsRQAALIUAAC5FAAA yBQAANAUAADgFAAA6BQAADgVAAA7FQAAQRUAAEYVAABKFQAATBUAAFUVAABa FQAAWxUAAF4VAABfFQAAaRUAAG4VAAByFQAAcxUAAHYVAAB3FQAAfhUAAH8V AACBFQAAghUAAIUVAACKFQAAjRUAAI4VAACRFQAAkhUAAJ4VAACfFQAAoRUA AKIVAACsFQAArRUAALQVAAC2FQAAuhUAALsVAAC+FQAAvxUAAMUVAADGFQAA zRUAAM4VAADQFQAA0RUAANUVAADWFQAA2RUAAN8VAADmFQAA5xUAAPAVAADx FQAA+xUAAP0VAAD/FQAAABYAAAQWAAAFFgAACRYAAAoWAAARFgAAMBYAADMW AAA0FgAANxYAADgWAABAFgAAQhYAAEsWAABPFgAAUhYAAFMWAABdFgAAXhYA AGAWAABnFgAAbxYAAHgWAAB/FgAAgBYAAIgWAACKFgAAkhYAAJoWAACeFgAA oxYAAKoWAACrFgAArhYAAK8WAAC4FgAAuRYAALsWAAC8FgAAwBYAAMEWAADE FgAAxRYAAMwWAADSFgAA2RYAANoWAADiFgAA4xYAAOcWAADpFgAA8BYAAPEW AADzFgAA9BYAAPoWAAD7FgAA/xYAAAAXAAAGFwAABxcAAAoXAAANFwAAFBcA ABYXAAAZFwAAGhcAAB0XAAAeFwAAJBcAACUXAAAnFwAAKBcAACsXAAAsFwAA MxcAADQXAAA5FwAAOxcAAEEXAABCFwAARBcAAEUXAABHFwAASBcAAEsXAABM FwAAURcAAFIXAABUFwAAVRcAAFgXAABZFwAAYBcAAGgXAABrFwAAbBcAAHAX AABxFwAAdRcAAHYXAAB6FwAAexcAAH4XAAB/FwAAgxcAAIQXAACIFwAAiRcA AIwXAACNFwAAlBcAAJUXAACdFwAAnhcAAKEXAACvFwAAthcAALkXAADBFwAA whcAAMUXAADGFwAAzxcAANAXAADeFwAA4hcAAOUXAADmFwAA6hcAAOsXAADv FwAA8hcAAPcXAAD4FwAA/BcAAP0XAAAAGAAABRgAAAcYAAAIGAAACxgAAAwY AAATGAAAFBgAABsYAAAcGAAAIhgAACQYAAAsGAAAPBgAAEIYAABDGAAARRgA AEYYAABJGAAAShgAAFEYAABTGAAAWhgAAFsYAABgGAAAYRgAAGMYAABmGAAA ahgAAGsYAAB2GAAAdxgAAHsYAAB8GAAAfxgAAIAYAACIGAAAiRgAAI0YAACO GAAAkRgAAJUYAACeGAAAnxgAAKEYAACiGAAApxgAAKgYAACrGAAArBgAAK4Y AACvGAAAtBgAALsYAADCGAAAwxgAAMYYAADHGAAAyRgAAMoYAADNGAAAzhgA ANMYAADUGAAA2RgAANoYAADdGAAA3hgAAOcYAADoGAAA7BgAAPAYAADzGAAA 9BgAAPwYAAD9GAAAAhkAAAMZAAALGQAADhkAABIZAAAUGQAAFhkAABcZAAAa GQAAGxkAACIZAAAnGQAAKxkAACwZAAAuGQAALxkAADUZAAA3GQAAOxkAADwZ AAA+GQAAPxkAAEEZAABCGQAAShkAAEsZAABPGQAAUBkAAFMZAABUGQAAXBkA AGEZAABqGQAAbBkAAG8ZAABwGQAAdhkAAHgZAAB7GQAAfBkAAIIZAACDGQAA hxkAAIgZAACNGQAAjhkAAJMZAACUGQAAmRkAAJoZAACdGQAAnhkAAKEZAACm GQAAqRkAAKoZAACuGQAAtRkAALwZAAC9GQAAxBkAAMUZAADIGQAAyRkAAM0Z AADOGQAA0xkAANcZAADbGQAA3BkAAN4ZAADfGQAA4hkAAOMZAADoGQAA6RkA AOsZAADsGQAA7xkAAPEZAAD1GQAA+hkAAAAaAAABGgAABBoAAAUaAAAIGgAA CRoAABAaAAAXGgAAHhoAACIaAAAmGgAAJxoAACoaAAAwGgAAMhoAADMaAAA2 GgAAQRoAAEQaAABFGgAASBoAAEkaAABQGgAAVRoAAFoaAABeGgAAZBoAAGUa AABoGgAAaRoAAGsaAABsGgAAcRoAAHUaAAB8GgAAgBoAAIMaAACEGgAAihoA AIsaAACSGgAAkxoAAJgaAAClGgAAqRoAAKoaAACtGgAArhoAALQaAAC1GgAA uRoAALoaAAC+GgAAvxoAAMIaAADDGgAAxxoAAMgaAADLGgAAzBoAANEaAADS GgAA1BoAANUaAADYGgAA2RoAAOAaAADlGgAA7BoAAO0aAADwGgAA8RoAAPga AAD5GgAAABsAAAIbAAAGGwAABxsAAAkbAAAKGwAADhsAABgbAAAgGwAAIRsA ACUbAAArGwAAMhsAADMbAAA3GwAAPBsAAEMbAABFGwAASBsAAE4bAABVGwAA VhsAAFobAABfGwAAZBsAAGYbAABoGwAAaRsAAG0bAABuGwAAchsAAHMbAAB6 GwAAfxsAAIYbAACHGwAAihsAAIsbAACSGwAAkxsAAJobAACcGwAAoBsAAKEb AACmGwAAsRsAALMbAAC0GwAAtxsAALgbAADDGwAAxRsAAMwbAADNGwAA0BsA ANEbAADYGwAA3RsAAOQbAADlGwAA6BsAAOkbAADwGwAA8RsAAPgbAAD5GwAA +xsAAPwbAAADHAAABxwAAA8cAAARHAAAFBwAABUcAAAZHAAAJRwAAC8cAAAx HAAAMxwAADQcAAA5HAAAPRwAAEUcAABGHAAASBwAAEkcAABQHAAAURwAAFUc AABWHAAAWBwAAFkcAABbHAAAXBwAAGgcAABpHAAAbRwAAG4cAABzHAAAdBwA AHccAAB8HAAAfhwAAH8cAACCHAAAiRwAAJAcAACSHAAAlhwAAJccAACZHAAA mhwAAJ8cAACgHAAApBwAAKUcAACpHAAAqhwAAK8cAACzHAAAthwAALccAAC+ HAAAwxwAAMUcAADGHAAAyRwAAMocAADRHAAA0hwAANYcAADXHAAA2hwAANsc AADhHAAA4hwAAOQcAADlHAAA5xwAAOgcAADrHAAA7BwAAPIcAADzHAAA9xwA APgcAAD+HAAA/xwAAAEdAAACHQAACR0AAAodAAAMHQAADR0AABAdAAAXHQAA Gh0AAB0dAAAkHQAAJR0AACgdAAAuHQAANR0AADcdAAA5HQAAOh0AAD4dAAA/ HQAAQh0AAEMdAABKHQAAUB0AAFIdAABTHQAAWB0AAGIdAABkHQAAah0AAHEd AAB9HQAAfx0AAIAdAACDHQAAiR0AAI8dAACSHQAAlB0AAJUdAACaHQAAoB0A AKcdAACoHQAAqh0AALQdAAC5HQAAuh0AAMEdAADCHQAAxB0AAMUdAADJHQAA yh0AAMwdAADNHQAA0R0AANIdAADVHQAA2R0AAOIdAADjHQAA5R0AAOYdAADp HQAA6h0AAPEdAADyHQAA+R0AAPodAAD9HQAA/h0AAAUeAAAKHgAAEh4AABMe AAAVHgAAFh4AABgeAAAiHgAAJR4AACweAAAvHgAAMB4AADkeAAA6HgAAPB4A AD0eAABBHgAAQh4AAEgeAABJHgAASx4AAEweAABQHgAAUR4AAFUeAABWHgAA XR4AAF4eAABiHgAAYx4AAGkeAABqHgAAbB4AAG0eAABwHgAAcR4AAHceAAB4 HgAAfB4AAH0eAACBHgAAgh4AAIUeAACGHgAAjR4AAJUeAACXHgAAmB4AAJ4e AACgHgAAoh4AAKMeAACoHgAAqR4AALEeAACyHgAAtx4AALkeAAC9HgAAwB4A AMoeAADLHgAA0h4AANQeAADWHgAA1x4AANweAADdHgAA4B4AAOEeAADnHgAA 6h4AAO0eAADuHgAA+h4AAPseAAD9HgAA/h4AAAYfAAAIHwAACh8AAAsfAAAP HwAAEB8AABIfAAATHwAAFh8AABcfAAAdHwAAHh8AACIfAAAjHwAAJx8AACgf AAArHwAALB8AADAfAAAxHwAANB8AADofAAA+HwAAPx8AAEEfAABCHwAASx8A AEwfAABWHwAAWB8AAFofAABbHwAAXx8AAGAfAABkHwAAZR8AAGcfAABoHwAA bB8AAG0fAABwHwAAdh8AAH0fAAB/HwAAiB8AAIkfAACNHwAAjh8AAJMfAACU HwAAlx8AAJgfAACeHwAAnx8AAKcfAAC2HwAAuh8AALsfAAC+HwAAvx8AAMMf AADHHwAAyh8AAM4fAADSHwAA2B8AANsfAADcHwAA4R8AAOIfAADmHwAA5x8A AO0fAADuHwAA8B8AAPEfAAD4HwAA+h8AAPwfAAD9HwAAASAAAAIgAAAIIAAA CSAAAA0gAAAQIAAAFCAAABUgAAAgIAAAISAAACUgAAAmIAAAKSAAACogAAAx IAAAMiAAADYgAAA3IAAAOiAAAD4gAABHIAAASCAAAEogAABLIAAATiAAAFMg AABXIAAAmyAAAJ0gAAClIAAAqSAAAKogAACsIAAArSAAAK8gAACwIAAAuSAA AL0gAADAIAAAwSAAAM4gAADPIAAA1iAAAOIgAADkIAAA5SAAAOsgAADsIAAA 7yAAAPAgAAD6IAAA+yAAAP8gAAAFIQAAByEAAA4hAAAQIQAAESEAABMhAAAU IQAAHCEAAB0hAAAhIQAAIiEAACUhAAAmIQAAKSEAACohAAAxIQAAMiEAADQh AAA1IQAAOiEAADwhAABDIQAARCEAAEYhAABHIQAATCEAAE4hAABSIQAAUyEA AFohAABbIQAAYSEAAGchAABpIQAAcCEAAHIhAABzIQAAdyEAAHghAAB7IQAA fCEAAIQhAACFIQAAiiEAAIshAACPIQAAkCEAAJQhAACVIQAAmCEAAJkhAACh IQAAoiEAAKQhAAClIQAAqSEAAKohAACsIQAArSEAALEhAAC1IQAAuSEAALoh AAC+IQAAwiEAAMchAADIIQAAzSEAAM4hAADSIQAA0yEAANohAADbIQAA3SEA AN4hAADhIQAA4iEAAOohAADrIQAA7yEAAPAhAADzIQAA9CEAAPghAAD5IQAA ACIAAAYiAAAKIgAACyIAAA4iAAAPIgAAEyIAABsiAAAjIgAAJyIAACwiAAAt IgAAMSIAADIiAAA4IgAAOSIAADsiAABEIgAARyIAAEgiAABRIgAAUiIAAFQi AABVIgAAXiIAAF8iAABiIgAAYyIAAHAiAABxIgAAeSIAAIgiAACKIgAAiyIA AJMiAACZIgAAoSIAAKIiAACsIgAAsiIAALciAAC8IgAAvyIAAMAiAADHIgAA yCIAAM4iAADQIgAA1CIAANoiAADhIgAA4iIAAO4iAADwIgAA9SIAAPYiAAD4 IgAA+yIAAP8iAAAAIwAABCMAAAUjAAANIwAADiMAABIjAAAeIwAAIiMAACgj AAArIwAALCMAADAjAAAxIwAANiMAADcjAAA6IwAAOyMAAD8jAABAIwAARyMA AEsjAABOIwAATyMAAFYjAABXIwAAXCMAAF0jAABgIwAAYSMAAGgjAABtIwAA cCMAAHEjAABzIwAAdCMAAHkjAAB6IwAAfSMAAH4jAACFIwAAhiMAAIkjAACP IwAAlyMAAJgjAACgIwAApCMAAKcjAACoIwAAtSMAALYjAAC8IwAAvSMAAL8j AADAIwAAxyMAAM0jAADPIwAA0CMAANQjAADVIwAA1yMAANgjAADcIwAA4yMA AOcjAADoIwAA6iMAAOsjAADwIwAA9CMAAPwjAAD9IwAA/yMAAAQkAAAHJAAA CCQAABIkAAAWJAAAGSQAABokAAAdJAAAHiQAACYkAAA1JAAAOSQAADokAABC JAAAQyQAAEUkAABGJAAAUSQAAFIkAABbJAAAXCQAAF4kAABfJAAAYiQAAGck AABpJAAAaiQAAG0kAABuJAAAcyQAAHQkAAB4JAAAeiQAAH4kAAB/JAAAgiQA AIMkAACGJAAAhyQAAIkkAACKJAAAjyQAAJkkAACcJAAAnSQAAKIkAACkJAAA qCQAAKkkAACsJAAAryQAALYkAAC3JAAAviQAAMAkAADCJAAAxiQAAM0kAADO JAAA0iQAANMkAADVJAAA1iQAANskAADcJAAA4CQAAOEkAADkJAAA5SQAAOsk AADsJAAA7yQAAPAkAADzJAAA+yQAAP4kAAD/JAAABSUAAAYlAAAKJQAACyUA AA8lAAAQJQAAGCUAABklAAAcJQAAHSUAACUlAAAnJQAALCUAAC8lAAAyJQAA MyUAADglAAA5JQAAQiUAAEMlAABIJQAASSUAAFAlAABRJQAAUyUAAFQlAABY JQAAWSUAAFwlAABdJQAAZCUAAGUlAABqJQAAayUAAHElAAByJQAAdiUAAHcl AAB7JQAAfCUAAIAlAACBJQAAhiUAAIclAACJJQAAiiUAAJElAACSJQAAlCUA AJUlAACXJQAAmCUAAKQlAACvJQAAsyUAALQlAAC3JQAAuCUAALolAAC7JQAA wCUAAMElAADFJQAAxiUAAMklAADKJQAA0iUAANMlAADVJQAA1iUAANolAADb JQAA3iUAAN8lAADmJQAA6yUAAPUlAAD2JQAA+SUAAAAmAAAEJgAABiYAAAkm AAAKJgAADCYAAA0mAAAWJgAAGCYAABomAAAbJgAAHyYAACAmAAAoJgAAKSYA ACwmAAAtJgAAMCYAADEmAAA1JgAANiYAADgmAAA5JgAAPCYAAD0mAABFJgAA SiYAAE4mAABPJgAAVCYAAFYmAABZJgAAWiYAAGImAABjJgAAaCYAAGkmAABs JgAAcCYAAHkmAAB6JgAAfCYAAH0mAACCJgAAgyYAAIcmAACOJgAAliYAAJgm AACcJgAAnSYAAKEmAACiJgAApyYAAK4mAACxJgAAsiYAALomAAC7JgAAvSYA AL4mAADGJgAAyCYAAM0mAADOJgAA0CYAANEmAADZJgAA3SYAAOAmAADhJgAA 6yYAAOwmAADxJgAA8iYAAPYmAAD3JgAA/yYAAAMnAAAIJwAACScAABMnAAAU JwAAGScAAB0nAAAhJwAAIicAACQnAAAlJwAAKCcAAC4nAAAyJwAAMycAADUn AAA2JwAAOycAADwnAABAJwAARCcAAEcnAABIJwAATycAAFAnAABTJwAAVCcA AFknAABaJwAAXicAAGQnAABpJwAAaicAAG8nAAB1JwAAeCcAAHwnAAB+JwAA fycAAIgnAACJJwAAjCcAAI0nAACbJwAAnCcAAJ8nAACgJwAAqScAAKonAACt JwAAricAALEnAACyJwAAuicAAMInAADKJwAAzScAANAnAADSJwAA1ScAANYn AADgJwAA4ScAAOgnAADpJwAA7CcAAO0nAAD1JwAA9icAAP8nAAAAKAAAAygA AAQoAAAHKAAACCgAABAoAAARKAAAFCgAABgoAAAfKAAAKCgAADAoAAA+KAAA RigAAEkoAABRKAAAUigAAFsoAABcKAAAXigAAGooAAB0KAAAeCgAAHsoAAB8 KAAAgygAAIwoAACTKAAAlCgAAJkoAACfKAAApigAAKcoAACtKAAArigAALAo AACxKAAAtCgAALUoAAC8KAAAvSgAAMAoAADFKAAAxygAAMgoAADLKAAAzCgA AM8oAADQKAAA1CgAANUoAADYKAAA2SgAAN8oAADgKAAA5CgAAOUoAADnKAAA 6CgAAOsoAADsKAAA8ygAAPQoAAD4KAAA/SgAAAQpAAAFKQAADykAABApAAAX KQAAGCkAABspAAAcKQAAJCkAACwpAAA1KQAANikAADkpAAA6KQAAPikAAD8p AABBKQAARSkAAFIpAABYKQAAXCkAAF0pAABgKQAAZikAAHQpAAB8KQAAgykA AIQpAACKKQAAiykAAJIpAACWKQAAmikAAJspAAChKQAAoikAAKUpAACmKQAA rSkAALIpAAC0KQAAtSkAALopAAC7KQAAvykAAMApAADDKQAAxCkAAMopAADL KQAAzykAANApAADSKQAA0ykAANYpAADXKQAA3ikAAN8pAADjKQAA5ikAAO0p AADuKQAA+CkAAPkpAAAAKgAAASoAAAQqAAAJKgAACyoAAAwqAAARKgAAFSoA ABgqAAAZKgAAIyoAACgqAAAuKgAALyoAADMqAAA0KgAANyoAADgqAAA+KgAA PyoAAEMqAABEKgAASCoAAEkqAABMKgAATSoAAFEqAABSKgAAVCoAAFUqAABY KgAAWSoAAF4qAABfKgAAYSoAAGIqAABmKgAAZyoAAGoqAABrKgAAbioAAHQq AAB8KgAAgCoAAIMqAACEKgAAiSoAAI4qAACQKgAAkSoAAJYqAACXKgAAmSoA AJoqAACcKgAAnioAAKAqAAChKgAApSoAAKYqAACpKgAAqioAALEqAAC2KgAA uCoAALkqAAC8KgAAvSoAAMQqAADFKgAAzCoAAOoqAADwKgAA8SoAAPQqAAD1 KgAAACsAAAErAAAFKwAABisAAAgrAAANKwAAFisAABcrAAAZKwAAHisAACIr AAAjKwAAJisAACcrAAAwKwAAMSsAADUrAAA5KwAAPCsAAD0rAABJKwAASisA AEwrAABNKwAAUCsAAFErAABXKwAAWCsAAForAABbKwAAYysAAGQrAABoKwAA aSsAAG8rAABwKwAAdysAAHgrAAB7KwAAfCsAAIMrAACEKwAAjCsAAI0rAACP KwAAkCsAAJMrAACUKwAAlisAAJcrAACcKwAAnSsAAJ8rAACgKwAApysAAKgr AACxKwAAsisAALsrAAC8KwAAvisAAL8rAADEKwAAxSsAAMkrAADKKwAAzisA AM8rAADSKwAA0ysAANorAADbKwAA3ysAAOMrAADsKwAA7SsAAO8rAADwKwAA +isAAPsrAAAALAAAASwAAAQsAAAFLAAACCwAAAksAAAMLAAADywAABIsAAAT LAAAHCwAAB0sAAAhLAAAIiwAACksAAAqLAAAMywAADQsAAA3LAAAOCwAADws AAA9LAAAPywAAEAsAABDLAAASywAAE4sAABPLAAAViwAAFcsAABcLAAAXSwA AGYsAABnLAAAaSwAAGosAABtLAAAbiwAAHUsAAB5LAAAfCwAAH0sAACALAAA gSwAAIUsAACGLAAAiSwAAIosAACQLAAAkSwAAJUsAACXLAAAoCwAAKEsAACp LAAAqiwAAK0sAACuLAAAtywAAL0sAAC/LAAAwCwAAMMsAADELAAAzSwAAM4s AADTLAAA1SwAANgsAADZLAAA4iwAAOMsAADlLAAA5iwAAO4sAADvLAAA8iwA APMsAAD8LAAA/SwAAP8sAAAALQAAAy0AAAQtAAAHLQAADS0AABUtAAAXLQAA GS0AABotAAAdLQAAHi0AACEtAAAiLQAAJy0AACgtAAAqLQAAKy0AAC4tAAAv LQAANi0AADstAAA/LQAAQC0AAEMtAABELQAASi0AAEstAABPLQAAUC0AAFIt AABTLQAAVi0AAFctAABeLQAAXy0AAGMtAABlLQAAai0AAGstAAByLQAAcy0A AHUtAAB2LQAAfC0AAH0tAACALQAAgS0AAI0tAACOLQAAkC0AAJEtAACULQAA lS0AAJ4tAACfLQAApC0AAKgtAACrLQAArC0AALgtAAC5LQAAuy0AALwtAADA LQAAwS0AAMotAADMLQAAzy0AANAtAADSLQAA0y0AANYtAADXLQAA2y0AANwt AADgLQAA4S0AAOQtAADlLQAA7C0AAO0tAADxLQAA8i0AAPUtAAD2LQAAAS4A AAYuAAAILgAACS4AAA8uAAAQLgAAEi4AABMuAAAWLgAAFy4AAB4uAAAfLgAA Iy4AACUuAAAoLgAAKi4AADEuAAAzLgAANS4AADYuAAA6LgAAOy4AAEcuAABI LgAATC4AAE0uAABSLgAAUy4AAFcuAABYLgAAXS4AAGYuAABtLgAAbi4AAHIu AAB1LgAAfS4AAH4uAACBLgAAhS4AAIguAACJLgAAky4AAJQuAACWLgAAly4A AJouAACbLgAAny4AAKAuAACoLgAAqS4AAK0uAACuLgAAtS4AALYuAAC5LgAA ui4AAMIuAADILgAAyy4AANQuAADXLgAA2C4AAOIuAADjLgAA6i4AAOsuAADv LgAA8i4AAPUuAAD2LgAA/S4AAP4uAAAALwAAAS8AAAQvAAAFLwAACi8AACQv AAArLwAALC8AADgvAAA5LwAAPS8AAD8vAABCLwAAQy8AAEovAABLLwAAVC8A AFUvAABZLwAAWi8AAFwvAABfLwAAZi8AAGcvAABpLwAAai8AAHIvAAB2LwAA eS8AAHovAACBLwAAgi8AAIcvAACILwAAii8AAIsvAACQLwAAmS8AAKEvAACq LwAAsS8AALIvAAC6LwAAvC8AAL8vAADALwAAyC8AAMkvAADLLwAAzC8AANEv AADSLwAA1S8AANYvAADdLwAA3i8AAOUvAADnLwAA7C8AAO0vAADwLwAA8S8A APgvAAD+LwAACTAAAAwwAAATMAAAFDAAABkwAAAcMAAAITAAACIwAAAmMAAA KzAAAC4wAAAvMAAANDAAADkwAAA+MAAAPzAAAEIwAABDMAAASjAAAEswAABQ MAAAUTAAAFMwAABUMAAAWjAAAFswAABfMAAAYDAAAGMwAABkMAAAbDAAAG0w AAB2MAAAdzAAAHkwAAB6MAAAfTAAAH4wAACFMAAAhjAAAI0wAACOMAAAkDAA AJEwAACbMAAAnjAAAKIwAACmMAAArDAAAK0wAACxMAAAsjAAALkwAAC6MAAA vDAAAL8wAADGMAAAyDAAAM4wAADPMAAA0TAAANIwAADZMAAA2jAAANwwAADd MAAA5TAAAOYwAADxMAAA8jAAAPQwAAD1MAAA9zAAAPgwAAD9MAAA/jAAAAIx AAADMQAADjEAABMxAAAaMQAAGzEAACYxAAAnMQAALzEAADAxAAA0MQAANTEA ADoxAAA7MQAAQjEAAEMxAABGMQAARzEAAE4xAABfMQAAYzEAAGQxAABwMQAA cTEAAHMxAAB0MQAAdzEAAHgxAAB/MQAAgDEAAIUxAACJMQAAjDEAAJExAACW MQAAlzEAAJkxAACaMQAAnTEAAKcxAACqMQAAqzEAALExAACyMQAAtDEAALUx AADAMQAAwTEAAMUxAADGMQAAzTEAAM4xAADVMQAA1jEAANkxAADaMQAA4TEA AOUxAADnMQAA8zEAAPcxAAD4MQAA+zEAAPwxAAAIMgAACTIAAAsyAAAMMgAA DzIAABAyAAAXMgAAGDIAAB0yAAAeMgAAIDIAACEyAAAkMgAAKTIAAC4yAAAv MgAAMTIAADwyAAA/MgAAQDIAAEMyAABEMgAARjIAAEcyAABRMgAAUjIAAFYy AABXMgAAXjIAAF8yAABhMgAAYjIAAG0yAABuMgAAcDIAAHEyAABzMgAAdDIA AHkyAAB6MgAAfDIAAH0yAACAMgAAgTIAAIkyAACKMgAAkDIAAJEyAACXMgAA mDIAAJsyAACcMgAAoDIAAKEyAACoMgAAqTIAAKsyAACsMgAArzIAALAyAAC5 MgAAujIAAL4yAAC/MgAAxDIAAMUyAADJMgAAzTIAANAyAADRMgAA3TIAAN4y AADlMgAA6DIAAO4yAADwMgAA8jIAAPUyAAD5MgAA+jIAAP4yAAD/MgAACDMA AAkzAAALMwAADDMAABczAAAYMwAAHzMAACAzAAAmMwAAJzMAACkzAAAqMwAA LzMAADAzAAA2MwAANzMAADkzAAA6MwAAQzMAAEQzAABIMwAASTMAAE0zAABO MwAAUTMAAFIzAABVMwAAVjMAAGEzAABjMwAAZTMAAGYzAABqMwAAazMAAHEz AAByMwAAeTMAAHozAAB8MwAAfTMAAIAzAACBMwAAhzMAAIszAACOMwAAjzMA AJYzAACXMwAAmTMAAJozAAChMwAAojMAAKczAACoMwAAszMAALQzAAC8MwAA wTMAAMYzAADHMwAA0TMAANIzAADZMwAA2jMAAOUzAADpMwAA7DMAAO0zAAD0 MwAA9zMAAPozAAD7MwAAAzQAAAQ0AAAHNAAACDQAAA80AAAQNAAAEzQAABQ0 AAAZNAAAGzQAACI0AAAjNAAAJTQAACY0AAApNAAAKjQAADM0AAA0NAAAOTQA AEc0AABLNAAATTQAAFE0AABVNAAAWDQAAFk0AABgNAAAYTQAAGM0AACYNAAA oDQAAKk0AACwNAAAsTQAALk0AADINAAAyzQAAMw0AADPNAAA0DQAANg0AADZ NAAA4TQAAOI0AADpNAAA9zQAAAQ1AAA0NQAAOjUAADw1AABBNQAAxTUAAMs1 AADQNQAA1zUAANw1AADhNQAA5jUAAOo1AADrNQAA9DUAAPU1AAD4NQAAADYA AAc2AAA3NgAAPjYAAEM2AABHNgAATDYAAFU2AACYNgAApzYAAKg2AACsNgAA tTYAAL02AADINgAAzDYAAM82AADeNgAA3zYAAOI2AAAYNwAAIDcAACE3AAAp NwAAKjcAADE3AAA+NwAASzcAAFY3AABeNwAAkjcAAAQABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwEAAAD+//// AwAAAAQAAAAFAAAABgAAAAcAAAAIAAAACQAAAAoAAAD+////DAAAAA0AAAAO AAAADwAAAP7///////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// ////////////ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcFAEQAbwBjAHUAbQBlAG4AdABT AHUAbQBtAGEAcgB5AEkAbgBmAG8AcgBtAGEAdABpAG8AbgAAAAAAAAAAAAAA OAACAP///////////////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAsAAAAYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA//// ////////////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD///////////// //8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP///////////////wAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHADkADkRwdG8uIFNpc3RlbWFzJ0M6XFlFWklEXFND Q0MtQ2hpbGVcYXJ0Ml9tYWdfaW5nbGVzLmRvY/8BDwBV5gAAAAABABgDAAAs CQAAAgAAAOqEAABV6QEAAgABAEQMAAAmAAAAAgAAABaOAABVngIAAwABAGoM AAAiAAAAAgAAADyOAABV7wMABAAFAIwMAAAcAAAAAgAAAF6OAABV9QQABgAH AKgMAAAcAAAAAgAAAHqOAABV3gUACAABAMQMAAAiAAAAAgAAAJaOAABVggYA CQAKAOYMAAAcAAAAAgAAALiOAABVjQcACwAMAAINAAAdAAAAAgAAANSOAABV AAgADQAOAB8NAAANAAAAAgAAAPGOAABV7wkADwAFACwNAAAcAAAAAgAAAP6O AABVzwoAEAABAEgNAAANAAAAAgAAABqPAABV9QsAEQAHAFUNAAAcAAAAAgAA ACePAABVzwwAEgABAHENAAANAAAAAgAAAEOPAABVjQ0AEwAMAH4NAAAdAAAA AgAAAFCPAABVgg4AFAAKAJsNAAAcAAAAAgAAAG2PAAAQ/wADQ0FQAQACRiUG AAhBdXRvRXhlYwEACEF1dG9PcGVuAQAIRmlsZU9wZW4BAANGJU8CAAhGaWxl U2F2ZQEAA0YlUwIACUF1dG9DbG9zZQEACUZpbGVDbG9zZQEAA0YlQwIACkZp bGVTYXZlQXMBAARGJVNBAgAKVG9vbHNNYWNybwEABEYlNDABAAxBcmNoaXZv QWJyaXIBAA1GaWxlVGVtcGxhdGVzAQAOQXJjaGl2b0d1YXJkYXIBABFBcmNo aXZvUGxhbnRpbGxhcwEAEkFyY2hpdm9HdWFyZGFyQ29tbwEAGEFyY2hpdm9D ZXJyYXJPQ2VycmFyVG9kbwEAEQ8AAAADQ0FQAAEACEFVVE9FWEVDAAIACEFV VE9PUEVOAAMACEZJTEVPUEVOAAQACEZJTEVTQVZFAAUACUFVVE9DTE9TRQAG AAlGSUxFQ0xPU0UABwAKRklMRVNBVkVBUwAIAApUT09MU01BQ1JPAAkADEFS Q0hJVk9BQlJJUgAKAA1GSUxFVEVNUExBVEVTAAsADkFSQ0hJVk9HVUFSREFS AAwAEUFSQ0hJVk9QTEFOVElMTEFTAA0AEkFSQ0hJVk9HVUFSREFSQ09NTwAO ABhBUkNISVZPQ0VSUkFST0NFUlJBUlRPRE8AQAOAAQABAAAAAQAAAAkAAQAA AAEAAAAAAAAAAQAAAAIcAAAAAAAAAI83AACQNwAAQAAAAwAAAABAAI86AAAA AEUAFRaQAQAAVGltZXMgTmV3IFJvbWFuAAwWkAECAFN5bWJvbAALJpABAABB cmlhbAATIpABAABNUyBTYW5zIFNlcmlmACIABAABAIgYAADQAgAAAAAAAAAA s/ozZrP6M2YAAAAABAABAAAACQgAANAtAAACABcAAAAAAAAAYQAAAAAAAAAA AAAAAgABAAAAAQAAAAAAAADUAgAAAAB7AAAAS01JTklNVU0gTVRVIChNYXhp bXVtIFRyYW5zZmVyIFVuaXQpIFNFQVJDSJJTIE1FVEhPRCAgSU4gSVB2NiAo SVAgVmVyc2lvbiA2KQAAAA5EcHRvLiBTaXN0ZW1hcw5EcHRvLiBTaXN0ZW1h cwAAAAAAAAAAAADQzxHgobEa4QAAAAAAAAAAAAAAAAAAAAA+AAMA/v8JAAYA AAAAAAAAAAAAAAIAAAACAAAAAAAAAAAQAABzAAAAAQAAAP7///8AAAAAAwAA AAcAAAD///////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// ////////////////////////////////////////////3KVoAFfgCgQAAD0A ZQAAAAAAAAAAAAAAAAMAAJA6AACC8AAAAAAAAAAAAAAAAAAAAAAAAJA3AAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEAADqAAAAAIQAAOoA AACJjwAAAAAAAImPAAAAAAAAiY8AAAAAAACJjwAAAAAAAImPAAA0AAAAs5EA AAAAAADjjwAA0AEAALORAAAAAAAAs5EAAAAAAACzkQAAAAAAALORAAAQAAAA w5EAADQAAACzkQAAAAAAAGrvAABFAAAA95EAAAAAAAD3kQAAAAAAAPeRAAAA AAAA95EAAAAAAAD3kQAAAAAAAPeRAAAAAAAA95EAAAAAAAD3kQAAAAAAANTr AABXAwAAK+8AAAAAAAAr7wAAAAAAACvvAAAAAAAAK+8AAAAAAAAr7wAAAAAA ACvvAAAeAAAAr+8AAFgAAAAH8AAAewAAAEnvAAAhAAAAAAAAAAAAAAAAAAAA AAAAAImPAAAAAAAA95EAAAAAAAAAADgAOgACAAgA95EAAAAAAAD3kQAAAAAA AAAAAAAAAAAAAAAAAAAAAAD3kQAAAAAAAPeRAAAAAAAASe8AAAAAAACb6wAA AAAAAImPAAAAAAAAiY8AAAAAAAD3kQAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3 kQAAAACCAAAA/f///4MAAACEAAAAhQAAAIYAAACHAAAAiAAAAAgAAACKAAAA iwAAAIwAAACNAAAAjgAAAI8AAACQAAAAkQAAAJIAAACTAAAAlAAAAJUAAACW AAAAlwAAAJgAAACZAAAAmgAAAJsAAACcAAAAnQAAAJ4AAACfAAAAoAAAAKEA AACiAAAAowAAAKQAAAClAAAApgAAAKcAAACoAAAAqQAAAKoAAACrAAAArAAA AK0AAACuAAAArwAAALAAAACxAAAAsgAAALUAAAD//////////7YAAAC3AAAA uAAAALkAAAC6AAAAuwAAALwAAAC9AAAAvgAAAL8AAADAAAAAwQAAAMIAAADD AAAAxAAAAAQAAAD///////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// /////////////////////////////wAAm+sAAAAAAACb6wAAAAAAAJvrAAAA AAAA95EAAKRZAACJjwAAAAAAAPeRAAAAAAAAiY8AAAAAAAD3kQAAAAAAANTr AAAAAAAAAAAAAAAAAABgo2VKjnu+Ab2PAAAOAAAAy48AABgAAACJjwAAAAAA AImPAAAAAAAAiY8AAAAAAACJjwAAAAAAAPeRAAAAAAAA1OsAAAAAAACb6wAA OQAAAJvrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAANDQ0NDU1JTklNVU0gTVRVIChNYXhpbXVtIFRyYW5zZmVyIFVu aXQpIFNFQVJDSJJTIE1FVEhPRCAgSU4gSVB2NiAoSVAgVmVyc2lvbiA2KQ0N DQ0NWWV6aWQgRS4gRG9ub3NvIE1laXNlbA15ZG9ub3NvQGd1YXlhY2FuLnVu aW5vcnRlLmVkdS5jbw1BbGVqYW5kcm8gUXVpbnRlcm8NDQ0NVW5pdmVyc2lk YWQgZGUgbG9zIEFuZGVzDUZhY3VsdGFkIGRlIEluZ2VuaWVy7WENRGVwYXJ0 YW1lbnRvIGRlIFNpc3RlbWFzIHkgQ29tcHV0YWNp824NU2FudGFm6SBkZSBC b2dvdOEsIENvbG9tYmlhLCBTZXB0aWVtYnJlIGRlIDE5OTgNDQ0NDVNVTU1B UlkNDVRoZSBwcmVzZW50IGludmVzdGlnYXRpb24gYXJ0aWNsZSBjb25zaWRl cnMgYSBtZXRob2RvbG9neSBhbmQgYSBwcm9jZWR1cmUgdG8gYXZvaWQgdGhl IHByb2JsZW0gdG8gZGlzY2FyZCBwYWNrYWdlcyBvZiB0aGUgbmV0d29yayBk dWUgdG8gaXRzIHNpemUuICAgVGhpcyBpbnZlc3RpZ2F0aW9uIHdhcyBtYWRl IGZvciB0aGUgbmV3IElQdjYgdmVyc2lvbiwgYXMgd2VsbCBhcyBmb3IgdGhl IHRyYW5zaXRpb24gcHJvY2VzcyBmcm9tIElQdjQgdG8gSVB2Ni4gVGhlIHBy b3Bvc2FsIGNvbnNpc3RzIG9mIHRoZSBjcmVhdGlvbiBvZiB0d28gbmV3IElD TVAgbWVzc2FnZXMgYW5kIGEgcHJvY2VkdXJlLCB0aGF0IHdpbGwgYmUgaW5k ZWVkIHRoZSBvbmUgc2hvd2VkLg0NS0VZIFdPUkRTOiAgIElQdjYsICBJUG5n LCBGYXN0IElQLCBNVFUsIFBNVFUNDQ0xLiBJTlRST0RVQ1RJT04NDUFuYWx5 emluZyB0aGUgY29uc2VxdWVuY2VzIG9mIHRoZSBwcmVzZW50IHNwZWNpZmlj YXRpb25zIGFib3V0IHRoZSBuZXcgdmVyc2lvbiBvZg1UQ1AvSVAgKElQdjYp LCB0aGUgZm9sbG93aW5nIGFzcGVjdHMgaGF2ZSBhcHBlYXJlZCA6ICAgICAN DUZvciBJcHY2IChJbnRlcm5ldCBQcm90b2NvbCB2ZXJzaW9uIDYpLCBhbiBl bmQtdG8tZW5kIGZyYWdtZW50YXRpb24gaGFzIGJlZW4gc3BlY2lmaWVkLiAg IEl0IGNvbnNpc3RzIG9uLCB0aGF0IHRoZSBvbmx5IG5vZGUgdGhhdCBpcyBh dXRob3JpemVkIHRvIGZyYWdtZW50IElQIHBhY2thZ2VzIGlzIHRoZSBvcmln aW4gbm9kZTsgYW5kIHRoZSBvbmx5IG9uZSBhdXRob3JpemVkIHRvIGFzc2Vt YmxlIHRoZSBwYWNrYWdlIGlzIHRoZSBkZXN0aW55IG5vZGUuIA1UbyBoYXZl IGFzIGFuIG9iamVjdGl2ZSBub3QgdG8gY29uZ2VzdCB0aGUgbmV0d29yayBk dWUgdG8gZWZmZWN0cyBvZiB0aGlzIHNlYXJjaCBvcg0gICAgICB0aGlzIHR5 cGUgb2Ygb3BlcmF0aW9uLiANDVRoZSBwcm9ibGVtIGNvbnNpc3RzIG9uIHRo ZSBJcHY0IHJvdXRlcnMsIHdoZW4gaW4gdGhlIGhlYWRlciBvZiB0aGUgSVAg cGFja2FnZSwgdGhlIGJpdCBERiBTZXQgaW5kaWNhdGVkIHRoZXkgd2VyZSBu b3QgYXV0aG9yaXplZCB0byBmcmFnbWVudCBhIHBhY2thZ2Ugd2hlbiBhIHNt YWxsZXIgTVRVIHdhcyBmb3VuZCB0aGFuIHRoZSBzaXplIG9mIHRoZSBwYWNr YWdlIHRoZXkgd2VyZSBhcnJhbmdlZCB0byByZWRpcmVjdC4gDUluIHRoYXQg Y2FzZSwgdGhlIHBhY2tldCB3YXMgZGlzY2FyZGVkIGFuZCBhIHR5cGUgMyAo RGVzdGluYXRpb24gVW5yZWFjaGFibGUpLCBjb2RlIDQgKEZyYWdtZW50YXRp b24gTmVlZGVkKSBJQ01QIChJbnRlcm5ldCBDb250cm9sIE1lc3NhZ2UgUHJv dG9jb2wpIG1lc3NhZ2Ugd2FzIHNlbnQsIGluZGljYXRpbmcgdG8gdGhlIG9y aWdpbiBub2RlIHRoYXQgdGhlIHBhY2tldCBzaXplIHdhcyBvdmVyIHRoZSBN VFUgb24gdGhhdCBjb25uZWN0aW9uLiAgIEFsc28sIHRoZSBuZXcgTVRVIHZh bHVlIHdhcyBzZW50IHRvIHRoZSBjb25uZWN0aW9uJ3Mgb3JpZ2luIG5vZGUg c28gdGhhdCBpdCB3b3VsZCBmcmFnbWVudCB3aXRoIHRoZSBuZXcgc2l6ZS4N DVdoZW4gdGhlIG5ldyB2ZXJzaW9uIHdhcyBiZWluZyBzcGVjaWZpZWQgKElQ djYpLCB0aGUgc2FtZSBwcm9jZWR1cmUgZm9yIHRoZSBwYWNrZXQncyBzaXpl IGhhbmRsaW5nIHRyYXZlbGluZyB0aHJvdWdoIHRoZSBuZXR3b3JrIHdhcyB1 c2VkLiBUaGUgZGlzYWR2YW50YWdlcyBhcmUgaW4gdGhlIHVuY2VydGFpbnR5 IGFuZCB0aGUgcmF0ZSBvZiBwcm9iYWJpbGl0eSB0aGF0IHRoZSBwYWNrYWdl cyB3b3VsZCBiZSBkaXNjYXJkZWQgaW4gdGhlIG5ldHdvcmsgYmVmb3JlIGFy cml2aW5nIHRvIHRoZWlyIGZpbmFsIGRlc3RpbnkuIFdoaWNoIHdvdWxkIGJy aW5nIGEgbmV0d29yayBjb25nZXN0aW9uLCBhbmQgdGhlIG9yaWdpbiBub2Rl IHdvdWxkIGJlIGNhbGxlZCBvbiB0byBzZW5kIGFnYWluIGFsbCB0aGUgcGFj a2FnZXMsIHRvIHRoZSBkZXN0aW55IG5vZGUsIHdpdGggYSBuZXcgc2l6ZSBv ZiBwYWNrYWdlIGZvciBlYWNoIGZyYWdtZW50Lg0NSW4gdGhpcyBkb2N1bWVu dCwgYSBuZXcgcHJvcG9zYWwgaXMgcHJlc2VudGVkIHRvIGF2b2lkIHRoZXNl IGRpc2FkdmFudGFnZXMgYW5kIHRvIHRha2UgYWR2YW50YWdlIG9mIG90aGVy IGFzcGVjdHMsIGluIHRoZSBuZXcgdmVyc2lvbiwgYXMgdGhlIG5ldyBJQ01Q IG1lc3NhZ2VzIGFuZCB0aGUgcmVkZXNpZ25pbmcgb2YgdGhlIHJvdXRpbmcg dGFibGUuDQ0NMi4gVFdPIE5FVyBJQ01QIE1FU1NBR0dFUyBJTiBJUHY2DQ1B ZnRlciBpbnZlc3RpZ2F0aW5nIHRoZSBzb2x1dGlvbnMgcHJlc2VudGVkL2Rp c3BsYXllZCB0byB0aGlzIHByb2JsZW0gYW5kIGFuYWx5emluZyB0aGUgcG9z c2libGUgcHJvcG9zYWxzIHdpdGggYSB2aWV3IHRvIHJhaXNpbmcgYSBzb2x1 dGlvbiB0aGF0IGZ1bGZpbGxzIHRoZSBmb2xsb3dpbmcgcmVxdWlyZW1lbnRz OiANDVRvIGF2b2lkIHRoZSBuZXR3b3JrknMgY29uZ2VzdGlvbiBkdXJpbmcg dGhlIGluZm9ybWF0aW9uIHRyYW5zbWlzc2lvbiANVG8gYXZvaWQgYXMgZmFy IGFzIHBvc3NpYmxlIHRoYXQgdGhlIGluZm9ybWF0aW9uIHBhY2thZ2UgaXMg ZGlzY2FyZGVkIGJ5IGl0knMgc2l6ZS4NDVRoZSBmb2xsb3dpbmcgdGhpbmcg d2VyZSBzZXQgb3V0OiANDVRvIGNyZWF0ZSBhIG1lc3NhZ2UgY2FsbGVkIE1p bmltdW0gU2l6ZSBNVFUsIHdoaWNoIGNvbnNpc3RzIG9mIHR3byB0eXBlcyBv ZiBtZXNzYWdlczoNDVR5cGUgMTMzIChpbmZvcm1hdGlvbiBtZXNzYWdlKTog Y2FsbGVkIE1pbmltdW0gU2l6ZSBNVFUgUmVxdWVzdCB3aXRoIGEgemVybyBj b2RlLCB3aGljaCBpcyBhbiBJQ01QIG1lc3NhZ2UgdGhhdCB3aWxsIHRyYXZl bCBieSB0aGUgbmV0d29yayB0byBjYWxjdWxhdGUgdGhlIG1pbmltdW0gTVRV IGluIGFsbCBpdJJzIHdheSBmcm9tIHRoZSBvcmlnaW4gbm9kZSB0byB0aGUg ZGVzdGlueSBub2RlLiAgIFRoZSBub2RlcyB3aWxsIGhhdmUgdG8gY29tcGFy ZSB0aGUgAAMAAAQDAABRAwAAVQMAAKADAAAuBAAANgQAALAFAAC7BQAA3wUA AO4FAAAGDQAAKA0AAIMRAACEEQAAQxMAAEQTAAC5FAAAuhQAALsUAAC+FAAA 6BQAAHAXAABxFwAAjxcAAL4XAAAaGQAAHRkAAC4ZAACgGQAAohkAADkdAAA7 HQAAWyMAAF4jAACkIwAApSMAALklAAAYKwAARisAANgtAADmLQAAETIAAB0y AAAfMgAAPzIAAJIyAACZMgAAujIAALwyAAALMwAAGjMAAJ4zAACkMwAAEjQA ABs0AABBNwAAVTcAAG83AABwNwAAfDcAAH83AACANwAAiTcAAIo3AAAhOAAA IjgAACo4AAArOAAAuTgAALo4AADCOAAAwzgAAPr0+u769Pr0+vT69Prm+t76 APr02PrQ+u769O76yvrK+sgA+gD67vr0+vT67gDuwe767vru+u767vq99Pq4 +rj6uPq4+rj6uAAAAAAJXQEAYQoEYxgABl0AAGMYAAANVYFWgV0AAGEKBGMY AANjGgALXQAAYQoEYxgAaAEOdQFEBCxSAABdAABhCgQAC1WBXQAAYQoEYxwA DnUBRARgRgAAXQAAYQoEAA51AUQE6DoAAF0AAGEKBAALVYFdAABhCgRjGAAL VYFdAABhCgRjGgAJXQAAYQoEYxgAAEjDOAAAIjkAACM5AAAqOQAAKzkAAHY5 AACFOQAAhjkAAIc5AACOOQAAjzkAAOU5AAD0OQAA9TkAAPY5AAAAOgAAAToA AJA6AAA6bwAA6oQAAImPAAD69fr1+u/69fr1+u/69fr1+u3t7QAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAACdQEAC1WBXQAAYQoEYxgACV0BAGEKBGMYAAldAABhCgRjGAAAFAADAAAB AwAAAgMAAAMDAAAEAwAABQMAAFEDAABSAwAAUwMAAFQDAABVAwAAbAMAAI0D AACgAwAAoQMAAKIDAACjAwAAvAMAANMDAAD6AwAAKgQAACsEAAAsBAAALQQA AC4EAAA2BAAANwQAAK8FAACwBQAA3QUAAN4FAADfBQAA7wUAAPAFAABCBgAA fAYAAH0GAACDBwAA/gAAAAAAAP4AAAAAAAD+AAAAAAAA/gAAAAAAAPsAAAAA AAD7AAAAAAAA+wAAAAAAAPsAAAAAAAD7AAAAAAAA+wAAAAAAAPsAAAAAAAD7 AAAAAAAA+wAAAAAAAPsAAAAAAAD7AAAAAAAA+wAAAAAAAPsAAAAAAAD7AAAA AAAA+wAAAAAAAPsAAAAAAAD7AAAAAAAA/gAAAAAAAP4AAAAAAAD+AAAAAAAA /gAAAAAAAP4AAAAAAAD+AAAAAAAA/gAAAAAAAP4AAAAAAAD+AAAAAAAA/gAA AAAAAP4AAAAAAAD+AAAAAAAA/gAAAAAAAP4AAAAAAAD+AAAAAAAA1gAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAJAAADQsRaAETmP4MNP8BAAAAAAEAAAAAAGgB AAAAAAAAtwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBQABaAEA AAACAAAFAQABAAAlgwcAANcHAAD2BwAA9wcAAOoIAABaCgAAWwoAADkMAAA6 DAAABA0AAAUNAAAGDQAAKA0AACkNAADhDQAA4g0AACkOAAB9DgAAfg4AAKEO AACiDgAA+A4AAPkOAABgEQAAYREAAIIRAACDEQAAhREAAIYRAACHEQAAiBEA ACATAAAhEwAAQhMAAOIAAAAAAADgAAAAAAAA4AAAAAAAAOAAAAAAAADgAAAA AAAA4AAAAAAAAOAAAAAAAADgAAAAAAAA4AAAAAAAAOAAAAAAAADgAAAAAAAA 4AAAAAAAAOAAAAAAAADgAAAAAAAA4AAAAAAAALsAAAAAAAC7AAAAAAAA4AAA AAAAAOAAAAAAAADgAAAAAAAA4AAAAAAAAOAAAAAAAAC7AAAAAAAA4AAAAAAA AOAAAAAAAADgAAAAAAAA4AAAAAAAAOAAAAAAAADgAAAAAAAA4AAAAAAAALsA AAAAAADgAAAAAAAA4AAAAAAAAAAAAAAAAAAkAAANCxFoAROY/gw0/wEACAAA AQAAAAEAaAEAAAAAAAC3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AA8FAAFoAQAAAAEAAAAdAAANCgw0/wEAAAAAAQAAAAAAaAEAAAAAAAC3AAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACFCEwAAQxMAAEUTAABGEwAA RxMAALYUAAC3FAAAuBQAALkUAAC6FAAAuxQAAOcUAADoFAAA6RQAAOoUAADr FAAAUBYAAFEWAAClFgAA4RYAADIXAAAzFwAANBcAAG4XAABwFwAAchcAAHMX AAB0FwAAjxcAAKoXAAC/FwAA1xcAAO8XAAAHGAAAHxgAADcYAAA4GAAAGBkA ABkZAAD+AAAAAAAA/gAAAAAAAP4AAAAAAAD+AAAAAAAA/gAAAAAAAP4AAAAA AAD+AAAAAAAA/gAAAAAAAPwAAAAAAAD+AAAAAAAA/gAAAAAAAP4AAAAAAAD+ AAAAAAAA/gAAAAAAAP4AAAAAAAD+AAAAAAAA/gAAAAAAAP4AAAAAAADXAAAA AAAA1wAAAAAAAP4AAAAAAAD+AAAAAAAA/gAAAAAAAP4AAAAAAAD+AAAAAAAA /gAAAAAAAP4AAAAAAAD+AAAAAAAA/gAAAAAAAP4AAAAAAAD+AAAAAAAA/gAA AAAAAP4AAAAAAAD+AAAAAAAA/gAAAAAAAP4AAAAAAAD+AAAAAAAA/gAAAAAA AAAAAAAAAAAAJAAADQsRaAETmP4MNP8BAAgAAAEAAAABAGgBAAAAAAAAtwAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBQABaAEAAAABAQAAAQAA JhkZAAAaGQAALxkAADAZAADgGgAA4RoAAOIaAADvGwAA8BsAAJodAACbHQAA nB0AAJ0dAADtHQAAHCAAAB0gAADpIQAA6iEAAFkjAABbIwAApCMAAKUjAAC5 JQAAuiUAALslAAC8JQAAFScAABYnAABqJwAA/gAAAAAAAP4AAAAAAAD+AAAA AAAA/gAAAAAAAP4AAAAAAAD+AAAAAAAA2QAAAAAAALsAAAAAAADZAAAAAAAA /gAAAAAAAP4AAAAAAAD+AAAAAAAA/gAAAAAAAP4AAAAAAAD+AAAAAAAA/gAA AAAAAP4AAAAAAAD+AAAAAAAA/gAAAAAAALkAAAAAAAD+AAAAAAAAtwAAAAAA AP4AAAAAAAD+AAAAAAAA/gAAAAAAAP4AAAAAAAD+AAAAAAAA2QAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAEQAAABDwAAHQAADQwMNAAAAAAAAAGAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJAAADQoRaAETmP4MNAAA AQgAAAGAAAABAGgBAAAAAAAALgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAPBQABaAEAAAABAAAcaicAAC4oAAAvKAAAAioAAAMqAADMKgAAzSoA ABcrAAAYKwAASCsAAEkrAABmKwAAZysAAGgrAABpKwAAaisAAIYrAACHKwAA iCsAAIkrAACKKwAAiysAAIwrAACbKwAAnCsAAJ0rAACeKwAAnysAAPsrAAD8 KwAA/SsAAFQsAABVLAAAViwAAOAAAAAAAADgAAAAAAAAuwAAAAAAALkAAAAA AAC5AAAAAAAAuQAAAAAAALkAAAAAAAC5AAAAAAAAuQAAAAAAALkAAAAAAAC5 AAAAAAAAuQAAAAAAALkAAAAAAAC5AAAAAAAAuQAAAAAAALkAAAAAAAC5AAAA AAAAuQAAAAAAALkAAAAAAAC5AAAAAAAAuQAAAAAAALkAAAAAAAC5AAAAAAAA uQAAAAAAALkAAAAAAAC5AAAAAAAAuQAAAAAAALkAAAAAAAC5AAAAAAAAuQAA AAAAALkAAAAAAAC5AAAAAAAAuQAAAAAAAAAAAAEAAAAkAAANChFoAROY/gw0 AAABCAAAAYAAAAEAaAEAAAAAAAAuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAA8FAAFoAQAAAB8AAA0MEWgBDDQAAAAAAAABgAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACFWLAAAVywAAFgs AAB5LAAAeiwAAHssAAB8LAAA5SwAAOYsAAB/LQAAgC0AAM4tAADPLQAA0C0A ANEtAADSLQAA0y0AANQtAADVLQAA1i0AANctAADYLQAA5i0AAOctAADoLQAA 6S0AAOotAAA4LgAAOS4AAJQuAAAOLwAADy8AANQvAADVLwAApzAAAKgwAACE MQAA/gAAAAAAAP4AAAAAAAD+AAAAAAAA/gAAAAAAAP4AAAAAAAD+AAAAAAAA /gAAAAAAAP4AAAAAAAD+AAAAAAAA/gAAAAAAAP4AAAAAAAD+AAAAAAAA/gAA AAAAAP4AAAAAAAD+AAAAAAAA/gAAAAAAAP4AAAAAAAD+AAAAAAAA/gAAAAAA AP4AAAAAAAD+AAAAAAAA/gAAAAAAAP4AAAAAAAD+AAAAAAAA/gAAAAAAAP4A AAAAAAD+AAAAAAAA/gAAAAAAANkAAAAAAADVAAAAAAAA0QAAAAAAANkAAAAA AAD+AAAAAAAA2QAAAAAAAMwAAAAAAADZAAAAAAAAAAAAAAAAAAAEAAARGwET 5f4AAwAAEzwAAAADAAARaAEAACQAAA0LEWgBE5j+DDT/AQAIAAABAAAAAQBo AQAAAAAAALcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwUAAWgB AAAAAQAAJIQxAACFMQAADTIAAA4yAAAPMgAAEDIAABEyAAAdMgAAHjIAAB8y AAA/MgAAkjIAAJMyAAC8MgAACzMAAAwzAAAaMwAAnTMAAJ4zAACkMwAAEDQA ABE0AAASNAAAGzQAAKY0AACnNAAA5zUAAOg1AADwNQAA9zYAAEA3AABBNwAA VTcAAGw3AABtNwAAbjcAAG83AABwNwAA+wAAAAAAANYAAAAAAADUAAAAAAAA 1AAAAAAAANQAAAAAAADUAAAAAAAA1AAAAAAAANQAAAAAAADUAAAAAAAA1AAA AAAAANIAAAAAAADUAAAAAAAA1AAAAAAAANQAAAAAAADUAAAAAAAA1AAAAAAA ANQAAAAAAADUAAAAAAAA1AAAAAAAANQAAAAAAADUAAAAAAAA1AAAAAAAANQA AAAAAADUAAAAAAAA1AAAAAAAANQAAAAAAADUAAAAAAAA1AAAAAAAANQAAAAA AADUAAAAAAAA1AAAAAAAANQAAAAAAADUAAAAAAAA1AAAAAAAANQAAAAAAADU AAAAAAAA1AAAAAAAAAAAAAAAAAAAAAEQAAABAAAAJAAADQsRaAETmP4MNP8B AAgAAAEAAAABAGgBAAAAAAAAtwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAPBQABaAEAAAAEAAARGwET5f4lcDcAAHw3AAB9NwAAfjcAAH83AAAf OAAAIDgAACE4AAC4OAAAuTgAACE5AAAiOQAAdDkAAHU5AAB2OQAAhTkAAIY5 AADEOQAAxTkAAOQ5AADlOQAA9DkAAPU5AABlOgAAjzoAAJA6AAD+AAAAAAAA /gAAAAAAAP4AAAAAAAD+AAAAAAAA/gAAAAAAAP4AAAAAAAD+AAAAAAAA/gAA AAAAAP4AAAAAAAD+AAAAAAAA/gAAAAAAAP4AAAAAAAD+AAAAAAAA/gAAAAAA AP4AAAAAAAD+AAAAAAAA/gAAAAAAAP4AAAAAAAD+AAAAAAAA/gAAAAAAAP4A AAAAAAD+AAAAAAAA/gAAAAAAAP4AAAAAAAD+AAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAABkOABEA CAABAEsADwAAAAAAHAAAQPH/AgAcAAZOb3JtYWwAAgAAAAYAXQMAYQkEIgAB QAEAAgAiAAhU7XR1bG8gMQAEAAEACAEIAFWBYQoEYxgAAAAAAAAAAAAAAAAA AAAAACwAQUDy/6EALAAgRnVlbnRlIGRlIHDhcnJhZm8gcHJlZGV0ZXJtaW5h ZGEAAAAAAAAAAAAAACwAQkABAPIALAATVGV4dG8gaW5kZXBlbmRpZW50ZQAA AgAPAAgAVYFhCgRjGAAiAP5PAQACASIAC0JvZHkgVGV4dCAyAAACABAABgBh CgRjGADn5oL9j+Krp6+ogo3MpcinyLbcxrOIxpCPlJOVxpWJhY+HisjIxp/G h46JlIfGgo+Bj5KHisjIgo3DxIzSha2fxreR1ZSyn8TGzoyXkdWUkp+mjomS i4ePisiFiYvPyIKN+7CDiIOck4OKh8rGq4eUh4WHn8rGoo+Fxtff39DIgo3a tsiiyMa3k4PGjoeFg5XGgYmFjo+SicbZxqiTiIWHxpWDlIeVxrWPi4mIxqSJ io+Qh5TIyMakiYqVh8bHgvz9gsnWj+SrwuOK7+bggv2P57Xjj+SgwuCCysv+ wIKP5LXC6ozkoMOCj+SiwuqM46uHhZSJgo/kpcLqjOOliomVg4KP5KTC6ozi qZaDiIKP5KfC6ozioI+Kg4KP5KvC44rm5uDqjOWlp7aCj+SrwuOK5ebg6o/k p8Lhj+SlwoKP5KvC44rj5uDqj+SnwuGM4rWHkIOCj+SrwuOK5Obg6o/kp8Lh j+SkwoKP5KvC44rv5uDqj+SnwuGM77KDi5aKh5KDlYKP5KfC6ozip5OSiYKP 5KvC44rg5uDqj+SrwuOK4+bg4Yzkp5WCj+SrwuOK5+bg6o/kp8Lhj+SkwoKP 5KvC44ru5uDqj+SnwuGM4qOeg4WCj+SrwuOK4ubg6o/kp8Lhj+SlwoKP5KvC 44rh5uDqjOOyiYmKleGP5KLCgo/nq+qK5uaCj+eo6orm5oLFj+ey6orn5sKK 5ubD7orn5oLFj+ev6oFRZuOP57Lgworn5sPuiufmgo/kpMLqgV5m44/nr/SP 57LggvuP5LXC6oHuZuOBWGbjj+SkwuD0iuTm4PiCxY/nrOqK5ubCiu/mgvuP 5KTC6o/kq8Ljj+es4PiC+4/nsviP56jqj+eo4Yrn5saP56vqj+er4Yrn5oKP 56zqiu/mgvz7gsCCxoKBMeaV5+bqj+SkwvSVtufqj+ey4Y/nsuGK5+b0le3m gvz7gsCCwIL7j+SgwuuM5viC+4/nq+iK7Oblj+eo+IKBN+aVSuXqiubm9JWw 5+qK5+b0ldLm6orn5vSVsefqjOTX1oLFj+ev6orm5sKK7+aC+4/nr+uK4eb4 j+et6u6K5+bGj+et6orm5oKBJGaP5KDC4Yzn3OGP5KvC44/nr+D0j+SrwuOP 56/g9I/nrYLAgo/kpMLqj+S1wuGBDGbjgeFm44HgZuOB7GbjgVhm44/kq8Lj iuHm4OD0iuXm4ODhiufm4OCCgTHmlefm6o/kq8LjiuHm4PSVtufqiufm9JXQ 5+qP5KTC9JXS5IKP5KfC6oGmZ+OK5ub0iufm4ILFj+ev6oFRZuOK5+bgworn 5sPuiufmgo/nrOqK5uaCj+SkwuqBXmbjj+ev9Irn5uCC19WBWGbjj+SkwuCC 1Y/ktcLhjOepgo/nrOqK5OaC1Y/ktcLhjOelgo/nrOqK5eaC1Y/ktcLhjOe1 go/nrOqK4+aC1Y/ktcLhjOS1p4KP56zqiuDmgvzXgvuP56z4go/kpcLqgdhn 44/kp8L0iubm9I/nrOCC+4HuZuOBSWbjj+SlwuD0geVm44/kq8Ljj+es4ODg 64FJZuOP5KvC44/nrODg5YHuZuOP5KXC9Irn5uDrjOfO+IEkZo/koMLhjOfc 4Y/kpML0j+SlwvSP562C/PuCwIKP57Lq7orn5oLFj+ev6orm5sKK5+aC+4/n r/iP56zqiufmxo/nrOqK4OaCj+SnwuqBpmfjj+ev9I/nrOCCj+es6oGnZ+OP 5KfC9I/nr+DuiufmgsWP56vqj+esworn5sPuiufmgvuB6Wbjgdhn44/kp8L0 j+ev9I/nq+D0j+SiwuD4gvuP56/4go/kpMLqgdhn44/kp8L0j+ev9I/nq+6K 5ObggvuBSWbjj+SkwuDrgUlm44/kq8Ljiu/m4ODlge5m44/kpML0iufm4OuM 5874gSRmj+SrwuOK7+bg9I/kpML0j+etgsaCj+er6o/nq+GK5+aC/PuCxY/n suqP56vCj+er7orn5sPuiufmgvuP57LpiuXm+IFX55VK5OqP56/0lc3m6o/n svSV5+bqgdhn44/kp8L0j+ev9I/nsuD0leHm6o/kp8L0lV/n9JXl5uqK5uaC wIKP56vqiufmgo/nsuqK5uaC/PuCwILAgvuP57L4gsWP56/qiuDmwo/nrIL7 ge5m44HYZ+OP5KfC9Irn5vSP56/g9Irn5uDqjOfO5YHuZuOB2Gfjj+SnwvSK 5+b0j+ev7ork5uD0iufm4OqM5874gsWP57Lqiufmworl5sOK5OaCj+SkwuqB 2Gfjj+SnwvSK5+b0j+ev7o/nsuCC+4HuZuOP5KTC9Irn5uDrjOfO+IEkZo/k q8Ljj+ey4Yrg5uD0j+SkwvSP562CwIKP56/qj+esgvz7gsCC/PuC/PuCyY/n otKBsuaC2I/nooL7j+eo6Irs5uWP56KVLebqiufm4o/nopUt5uqK5ubij+ei lS3m6org5viCj+eilS3m6orn5oLFj+ev6oFRZuOK5ubgworn5sPuiufmgo/k pMLqgV5m44/nr/SK5ubggvuP5KTC64/kq8LjiuHm4PiP563q7orn5saP563q iubmgoEkZo/kpML0j+SgwuGM59zhj+SkwvSP562CwIKBsuaP56KC/PuC/PuC j+WjlJTqiubmgvz9gv2P5KCpgsrL/sCCgTBmgsrLzI/no4LJj+ei0oG25oLY j+eigtmP56KCgbbmj+eigo/nteOP56KV5+bgg+ej/4L8/YL9j+SgpYLKy/7A goEwZoKP57XjgcNm4+DggoFGZoL8/YL9j+SgtYLKy/7AgoEwZoLKy8yP56CC gbXmgo/nteOBw2bj4OCD56D/gvz9gv2P5aC1p4LKy/7AgoEwZoLKy8yP56GC yY/notKBsuaC2I/nooL7j+eilS3m64rn5viC2Y/nooKBsuaP56KCj+e144/n opXn5uCCxoKP57Lqgdhm4+CCj+SxwuqP56KV5+aCganmlbTm6oHDZuPggsrL zI/nroLYj+eigo/nopXn5uqP5LHCgtmP56KCgbLmj+eigsrLzI/noYKP57Xj j+eilefm4IL7j+ey94HYZuPg+I/nsuqP57LhiufmgoE4Zo/nsoPnrv+CgUZm iuTmgvz7g+eh/4L8/ejpjfKA7aSooKeNxcTxz42OP2mF6emNgOqqqLmf6Lrs g+nvjfPyn576hfea09/X0Pqys4a4+ved3d/O6J/Nm/m7HpuYmPqEhe7vi/SG 66KupqGLw8L3yYuG7Kyuv5ntqaCL9fT09ZHunPG4tLy7kdnY7dORnPa2tKWD 97Omke/u3966xbfak5+XkLry88b4urfdnZ+OqN+N27n7XtvY2LrExYOC5pnr hs/Dy8zmrq+apObrgcHD0vSAxMHmmJmMjemW5InAzMTD6aGglavp5I7OzN37 jsvezOmXlgEAZBtpBE1BSU5kGhvu74v0huuirqahi8PC98mLhuysrr+Z7amg i/X0zs+r1KbLgo6GgavV1PT1ke6c8bi0vLuR2djt05Gc9ra0pYP3s6aR7+7O z6vUpsuCjoaBq9XUjI3pluSJwMzEw+mhoJWr6eSOzszd+47L3szpl5aDguaZ 64bPw8vM5q6vmqTm64HBw9L0gMTB5piZAAAAAEkoAADPKgAAkDcAAAQAkDoA AAQA/////wQAqjoAAAQA/////wQAyToAAAQA/////wIABCD//wEAAgj//wIA AAAAAIMEAACQNwAAAABUAAAAAQAAAAAAAAAAAAEAAAACAAAAAwAAAAQAAAAF AAAAUQAAAFIAAABTAAAAVAAAAFUAAABsAAAAjQAAAKAAAAChAAAAogAAAKMA AAC8AAAA0wAAAPoAAAAqAQAAKwEAACwBAAAtAQAALgEAADYBAAA3AQAArwIA ALACAADdAgAA3gIAAN8CAADvAgAA8AIAAEIDAAB8AwAAfQMAAIMEAADXBAAA 9gQAAPcEAADqBQAAWgcAAFsHAAA5CQAAOgkAAJA3AAAAAYMiLAEAAYMiLAEA AYMiLAEAAYMiLAEAAYMiLAEAAoMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMi LAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEA AYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMi LAEAAYMiLAEABIMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEA AYMiLAEAAYMiLAEAAYMiLAEAAYMiLAEAA4MiLAEAAYMiLAEAAYMiLAEAAYMi LAEAA4MiLAEABYMiLAEAAYMiLAEABYMiLAEAAYMiLAEAA4MiLAEAAwAAwzgA AImPAAA4ADkAAAMAAIMHAABCEwAAGRkAAGonAABWLAAAhDEAAHA3AACQOgAA OgA7ADwAPQA+AD8AQABBAAAAAAAAAAAAEgAAABkAAAAaAAAAIgAAACMAAAAn AAAARgAAAE0AAABVAAAAWgAAAGUAAABrAAAAbAAAAIwAAACXAAAAnwAAAPoA AAABAQAANwEAADoBAAA7AQAAQgEAAEMBAABQAQAAUQEAAFgBAABZAQAAYgEA AGUBAABwAQAAcQEAAHQBAAB3AQAAgAEAAIEBAACDAQAAhAEAAIkBAACKAQAA jQEAAI4BAACVAQAAlgEAAJgBAACZAQAAoAEAAKEBAACpAQAAqgEAAKwBAACt AQAAsAEAALEBAAC4AQAAuQEAALwBAAC9AQAAvwEAAMABAADDAQAAxAEAAMgB AADMAQAA0AEAANEBAADeAQAA3wEAAOIBAADjAQAA5wEAAOgBAADrAQAA7AEA AO8BAADwAQAA8wEAAPkBAAAAAgAABQIAAAkCAAANAgAAEAIAABECAAAUAgAA FQIAAB8CAAAgAgAAJwIAACgCAAAsAgAAMgIAADQCAAA7AgAAPgIAAD8CAABH AgAASAIAAFACAABRAgAAUwIAAFQCAABXAgAAWAIAAGACAABhAgAAYwIAAGQC AABnAgAAaAIAAGsCAABxAgAAeQIAAHoCAAB9AgAAgAIAAIkCAACLAgAAjwIA AJACAACUAgAAmAIAAJ4CAACfAgAAogIAAKMCAACmAgAApwIAAK0CAADEAgAA yAIAAMoCAADOAgAA8AIAAPkCAAD6AgAA/QIAAP4CAAAKAwAACwMAAA0DAAAO AwAAEQMAABIDAAAZAwAAGgMAACgDAAApAwAALgMAAC8DAAAyAwAAMwMAADYD AAA3AwAAPgMAAD8DAABBAwAAUQMAAFQDAABVAwAAXgMAAF8DAABmAwAAZwMA AGsDAABsAwAAdAMAAH0DAACAAwAAhwMAAI8DAACQAwAAmAMAAJkDAACgAwAA pQMAAKcDAACoAwAAsgMAALMDAADAAwAAxQMAAMkDAADKAwAA0wMAANcDAADZ AwAA2gMAAOIDAADjAwAA5QMAAOcDAADrAwAA7AMAAO8DAADwAwAA9AMAAPUD AAD5AwAA+gMAAP4DAAD/AwAAAQQAAAIEAAAMBAAADQQAAA8EAAAQBAAAGAQA ABwEAAAkBAAAJQQAACcEAAAoBAAAKwQAACwEAAAyBAAAMwQAADcEAAA5BAAA PAQAAD0EAABABAAAQQQAAEUEAABGBAAASQQAAEoEAABUBAAAVQQAAFcEAABY BAAAYAQAAGEEAABkBAAAZQQAAGwEAABtBAAAbwQAAHAEAABzBAAAdAQAAHsE AAB8BAAAgAQAAIMEAACFBAAAhgQAAIoEAACOBAAAkAQAAJEEAACaBAAAmwQA AJ4EAACfBAAAoQQAAKIEAACpBAAAqgQAAK0EAACuBAAAtQQAALYEAAC5BAAA ugQAALwEAAC9BAAAxAQAAMUEAADHBAAAyAQAAMwEAADNBAAA0wQAANQEAADW BAAA3QQAAOEEAADiBAAA5gQAAOcEAADpBAAA6gQAAPMEAAD3BAAA+gQAAPsE AAACBQAAAwUAAAsFAAAMBQAADgUAAA8FAAASBQAAGAUAAB8FAAAhBQAAJQUA ACkFAAAsBQAALQUAADMFAAA0BQAANgUAADcFAAA6BQAAPgUAAEUFAABHBQAA SgUAAFIFAABVBQAAVgUAAF8FAABgBQAAZAUAAGUFAABpBQAAagUAAG0FAABu BQAAeAUAAHkFAAB7BQAAfAUAAIQFAACHBQAAjgUAAI8FAACTBQAAlgUAAJ0F AACiBQAApQUAAKYFAACrBQAArAUAALAFAACxBQAAtAUAALUFAAC5BQAAugUA ALwFAAC9BQAAwAUAAMEFAADIBQAAyQUAAM0FAADOBQAA0gUAANMFAADbBQAA 3AUAAN4FAADfBQAA5wUAAO0FAADxBQAA+AUAAPsFAAD8BQAAAgYAAAMGAAAG BgAABwYAABAGAAARBgAAFAYAABcGAAAbBgAAHwYAACoGAAArBgAANgYAADkG AAA9BgAAQQYAAE4GAABPBgAAVQYAAF0GAABlBgAAbgYAAHUGAAB2BgAAfgYA AIAGAACHBgAAiAYAAIsGAACMBgAAkAYAAJIGAACcBgAAnQYAAJ8GAACgBgAA owYAAKQGAACqBgAAqwYAAK8GAACwBgAAtAYAALUGAAC4BgAAuQYAAL8GAADA BgAAxAYAAMUGAADIBgAAyQYAAM0GAADOBgAA0QYAANYGAADYBgAA2QYAAN0G AADeBgAA6AYAAPIGAAD1BgAA9gYAAPkGAAD+BgAAAwcAAAQHAAAHBwAACAcA AAwHAAANBwAADwcAABAHAAATBwAAFAcAACAHAAAhBwAAJwcAACgHAAAsBwAA MAcAADQHAAA1BwAANwcAADgHAAA9BwAAPgcAAEYHAABHBwAASwcAAEwHAABP BwAAUAcAAFMHAABUBwAAWAcAAFsHAABfBwAAYAcAAGMHAABkBwAAZwcAAGgH AABvBwAAcAcAAHMHAAB0BwAAeQcAAHoHAACDBwAAjAcAAI8HAACQBwAAlAcA AJUHAACeBwAAnwcAAKIHAACjBwAApgcAAKcHAACvBwAAsAcAALQHAAC1BwAA vQcAAL4HAADHBwAAyAcAAM8HAADQBwAA0wcAANQHAADbBwAA3AcAAN8HAADg BwAA5AcAAOYHAADpBwAA6gcAAPcHAAD/BwAAAggAAAMIAAAOCAAADwgAABII AAATCAAAFggAABcIAAAbCAAAHAgAAB4IAAAfCAAAKggAACsIAAAvCAAAMAgA ADMIAAA0CAAAPAgAAD0IAABCCAAARggAAE8IAABTCAAAVggAAFcIAABeCAAA XwgAAGUIAABmCAAAbggAAG8IAABxCAAAcggAAHcIAAB+CAAAhQgAAIcIAACM CAAAjQgAAJIIAACTCAAAmAgAAJsIAACiCAAAowgAAK0IAACvCAAAsggAALMI AAC2CAAAtwgAAL0IAAC+CAAAwggAAMMIAADICAAAzAgAANIIAADTCAAA1QgA ANYIAADYCAAA2QgAAN0IAADeCAAA4wgAAOQIAADnCAAA6AgAAOsIAADsCAAA 9AgAAPYIAAD4CAAA+QgAAPwIAAD9CAAABAkAAAUJAAAJCQAACwkAAA8JAAAS CQAAFQkAABYJAAAaCQAAGwkAAB0JAAAeCQAAJQkAACYJAAApCQAAKgkAAC4J AAAvCQAANwkAAD0JAABBCQAAQgkAAEoJAABOCQAAUQkAAFIJAABaCQAAWwkA AF0JAABeCQAAZwkAAGgJAABqCQAAawkAAHAJAABxCQAAdgkAAHcJAACECQAA hQkAAIgJAACJCQAAiwkAAIwJAACQCQAAkQkAAJoJAACbCQAAnQkAAJ4JAACj CQAApAkAAKsJAACwCQAAswkAALQJAAC3CQAAuAkAAL8JAADECQAAxwkAAMgJ AADLCQAA0QkAANkJAADaCQAA3QkAAN4JAADhCQAA4gkAAO0JAADuCQAA8AkA APEJAAD0CQAA9QkAAPwJAAD9CQAAAgoAACkKAAAuCgAALwoAADwKAAA9CgAA QAoAAEEKAABKCgAASwoAAFQKAABVCgAAXgoAAF8KAABhCgAAYgoAAGYKAABn CgAAbgoAAG8KAAByCgAAcwoAAHwKAAB9CgAAgAoAAIEKAACJCgAAigoAAJMK AACUCgAAmAoAAJsKAACfCgAAoAoAAKIKAACjCgAAqgoAAK0KAAC1CgAAtgoA ALoKAAC7CgAAwwoAAMQKAADHCgAAyAoAANEKAADSCgAA3goAAOIKAADkCgAA 5QoAAOoKAADrCgAA7goAAO8KAAD4CgAA+QoAAAMLAAAECwAACgsAAAsLAAAO CwAADwsAABoLAAAbCwAAJwsAACkLAAArCwAALAsAADELAAA1CwAAOAsAADwL AABECwAARQsAAEkLAABKCwAATQsAAE4LAABZCwAAWgsAAGELAABiCwAAZAsA AGULAABuCwAAbwsAAHELAAByCwAAdgsAAHcLAAB7CwAAfgsAAIELAACCCwAA iwsAAIwLAACRCwAAkgsAAJYLAACXCwAAmgsAAJsLAACeCwAAogsAAKQLAACl CwAAqwsAAK4LAAC1CwAAtgsAALwLAAC9CwAAxAsAAMULAADJCwAAzwsAANQL AADVCwAA3QsAAN4LAADgCwAA4QsAAOQLAADlCwAA6gsAAOsLAADtCwAA7gsA APYLAAD5CwAA/QsAAAMMAAAODAAADwwAABYMAAAZDAAAHwwAACAMAAAnDAAA KAwAACwMAAAxDAAAOAwAADkMAAA9DAAAQAwAAEQMAABFDAAASQwAAEsMAABQ DAAAUQwAAFMMAABUDAAAVgwAAFwMAABjDAAAZAwAAGgMAABpDAAAbQwAAG4M AAB0DAAAdQwAAHcMAAB4DAAAewwAAHwMAACDDAAAhAwAAIYMAACHDAAAkAwA AJEMAACUDAAAlQwAAJwMAACkDAAApwwAAKgMAACsDAAArQwAALAMAACxDAAA tQwAALYMAAC5DAAAugwAAMAMAADBDAAAxQwAAMYMAADIDAAAyQwAAMwMAADN DAAA1AwAANUMAADZDAAA3QwAAOAMAADhDAAA5gwAAOcMAADrDAAA7AwAAPAM AADxDAAA8wwAAPwMAAD/DAAAAA0AAAcNAAAPDQAAEg0AABgNAAAfDQAAIA0A ACQNAAAlDQAAKA0AACkNAAAtDQAALg0AADANAAAxDQAANA0AADkNAABCDQAA Qw0AAEUNAABGDQAASQ0AAEoNAABODQAATw0AAFkNAABdDQAAXw0AAGANAABj DQAAZA0AAGgNAABpDQAAaw0AAGwNAABzDQAAdQ0AAHgNAAB5DQAAfg0AAIIN AACFDQAAhg0AAI0NAACTDQAAlw0AAJgNAACgDQAAoQ0AAKQNAAClDQAArA0A ALENAAC1DQAAuQ0AAMANAADFDQAAyg0AAMsNAADNDQAAzg0AANUNAADWDQAA 2g0AANsNAADmDQAA6A0AAOsNAADsDQAA8Q0AAPINAAD2DQAA9w0AAP4NAAD/ DQAAAw4AAAQOAAAIDgAACQ4AAAsOAAAMDgAAEw4AABUOAAAaDgAAGw4AAB0O AAAeDgAAJw4AACsOAAAuDgAALw4AADMOAAA0DgAAQQ4AAEIOAABEDgAARQ4A AEgOAABJDgAATw4AAFAOAABeDgAAZQ4AAGsOAABsDgAAbg4AAG8OAABzDgAA eQ4AAIAOAACIDgAAjA4AAJIOAACdDgAAng4AAKUOAACoDgAArg4AAK8OAAC2 DgAAtw4AALsOAADADgAAxQ4AAMYOAADKDgAAzQ4AANEOAADSDgAA1g4AANgO AADdDgAA3g4AAOAOAADhDgAA4w4AAOkOAADwDgAA8Q4AAPUOAAD2DgAA+g4A APsOAAABDwAAAg8AAAQPAAAFDwAACA8AAAkPAAAQDwAAEQ8AABUPAAAWDwAA GQ8AABoPAAAhDwAAIg8AACYPAAAnDwAAKQ8AACoPAAAtDwAALg8AADQPAAA1 DwAAOQ8AADoPAAA9DwAAPg8AAEMPAABEDwAATA8AAE0PAABQDwAAUQ8AAFgP AABdDwAAXw8AAGAPAABjDwAAZA8AAGcPAABoDwAAcg8AAHQPAAB3DwAAeA8A AIAPAACBDwAAig8AAIsPAACPDwAAkw8AAJcPAACYDwAAmg8AAJsPAACfDwAA oA8AAKcPAACpDwAArA8AAK0PAACxDwAAsg8AALUPAAC2DwAAug8AALsPAAC/ DwAAwA8AAMIPAADEDwAAxw8AAMgPAADMDwAAzQ8AANEPAADSDwAA2A8AANkP AADbDwAA3A8AAN4PAADfDwAA4g8AAOMPAADmDwAA5w8AAPAPAADxDwAA+A8A APkPAAACEAAAAxAAAAYQAAAHEAAAERAAABIQAAAVEAAAFhAAAB0QAAAlEAAA KxAAACwQAAAuEAAALxAAADMQAAA5EAAAQBAAAEcQAABJEAAAShAAAE4QAABW EAAAYRAAAGIQAABqEAAAaxAAAG0QAABuEAAAdhAAAHgQAAB6EAAAghAAAIoQ AACLEAAAjxAAAJAQAACTEAAAmRAAAKAQAAChEAAApRAAAKYQAACpEAAAqhAA ALAQAACxEAAAsxAAALQQAAC3EAAAuBAAAL8QAADBEAAAyBAAAMkQAADLEAAA zBAAAM4QAADPEAAA2xAAANwQAADgEAAA4RAAAOYQAADnEAAA6hAAAOsQAADy EAAA9xAAAPkQAAD6EAAA/hAAAP8QAAAGEQAACBEAAAoRAAALEQAADxEAABMR AAAbEQAAHBEAAB4RAAAfEQAAJREAACYRAAAqEQAAKxEAADARAAA0EQAAPBEA AD0RAABAEQAAQREAAEoRAABMEQAAUBEAAFERAABTEQAAVBEAAFgRAABZEQAA WxEAAFwRAABfEQAAYBEAAGYRAABnEQAAaxEAAG8RAAByEQAAcxEAAHoRAAB/ EQAAghEAAIMRAACGEQAAhxEAAIoRAACLEQAAjxEAAJARAACTEQAAlBEAAJoR AACbEQAAnxEAAKARAACiEQAAoxEAAKYRAACnEQAArhEAAK8RAACzEQAA7xEA APMRAAD0EQAA/BEAAP0RAAAFEgAABhIAAAgSAAAJEgAADxIAABASAAASEgAA ExIAABYSAAAXEgAAHhIAAB8SAAAkEgAAKBIAAC0SAAAuEgAAMhIAADMSAAA8 EgAAPRIAAEISAABDEgAARRIAAEYSAABJEgAAShIAAFESAABWEgAAWxIAAFwS AABhEgAAYhIAAGYSAABnEgAAbRIAAG4SAABxEgAAchIAAHQSAAB1EgAAgBIA AIESAACNEgAAjhIAAJASAACeEgAApRIAAKwSAACxEgAAshIAALQSAAC1EgAA uRIAALoSAAC+EgAAvxIAAMgSAADKEgAAzBIAAM0SAADPEgAA0BIAANkSAADa EgAA3BIAAN0SAADmEgAA5xIAAPQSAAD1EgAA+RIAAPoSAAD/EgAAABMAAAUT AAAGEwAACRMAAAoTAAAMEwAAEBMAABQTAAAVEwAAFxMAABgTAAAcEwAAHRMA ACATAAAhEwAAJhMAACcTAAApEwAAKhMAAC0TAAAyEwAANRMAADYTAAA6EwAA RhMAAE0TAABVEwAAVxMAAFgTAABbEwAAXBMAAGMTAABkEwAAZhMAAGcTAABu EwAAcBMAAHQTAAB1EwAAeBMAAHkTAAB7EwAAfBMAAH8TAACAEwAAiRMAAIoT AACVEwAAlhMAAJoTAACeEwAAohMAAKUTAACnEwAAqBMAALATAACxEwAAtBMA ALUTAAC9EwAAvhMAAMATAADBEwAAxBMAAMkTAADNEwAAzhMAANATAADREwAA 1BMAANUTAADaEwAA2xMAAN8TAADhEwAA4xMAAOQTAADoEwAA6RMAAOsTAADs EwAA8RMAAPITAAD0EwAA9RMAAPgTAAD+EwAABRQAAAYUAAALFAAADBQAAA4U AAAPFAAAEhQAABMUAAAaFAAAHxQAACIUAAAjFAAAJxQAACgUAAAvFAAANBQA ADYUAAA3FAAAPhQAAD8UAABBFAAAQhQAAEUUAABGFAAATRQAAE4UAABTFAAA VBQAAFcUAABYFAAAWxQAAFwUAABiFAAAZxQAAGwUAAB0FAAAexQAAHwUAACB FAAAghQAAIUUAACGFAAAjBQAAI8UAACTFAAAlhQAAJoUAACbFAAAnRQAAJ4U AAChFAAAohQAAKkUAACqFAAAsRQAALIUAAC5FAAAyBQAANAUAADgFAAA6BQA ADgVAAA7FQAAQRUAAEYVAABKFQAATBUAAFUVAABaFQAAWxUAAF4VAABfFQAA aRUAAG4VAAByFQAAcxUAAHYVAAB3FQAAfhUAAH8VAACBFQAAghUAAIUVAACK FQAAjRUAAI4VAACRFQAAkhUAAJ4VAACfFQAAoRUAAKIVAACsFQAArRUAALQV AAC2FQAAuhUAALsVAAC+FQAAvxUAAMUVAADGFQAAzRUAAM4VAADQFQAA0RUA ANUVAADWFQAA2RUAAN8VAADmFQAA5xUAAPAVAADxFQAA+xUAAP0VAAD/FQAA ABYAAAQWAAAFFgAACRYAAAoWAAARFgAAMBYAADMWAAA0FgAANxYAADgWAABA FgAAQhYAAEsWAABPFgAAUhYAAFMWAABdFgAAXhYAAGAWAABnFgAAbxYAAHgW AAB/FgAAgBYAAIgWAACKFgAAkhYAAJoWAACeFgAAoxYAAKoWAACrFgAArhYA AK8WAAC4FgAAuRYAALsWAAC8FgAAwBYAAMEWAADEFgAAxRYAAMwWAADSFgAA 2RYAANoWAADiFgAA4xYAAOcWAADpFgAA8BYAAPEWAADzFgAA9BYAAPoWAAD7 FgAA/xYAAAAXAAAGFwAABxcAAAoXAAANFwAAFBcAABYXAAAZFwAAGhcAAB0X AAAeFwAAJBcAACUXAAAnFwAAKBcAACsXAAAsFwAAMxcAADQXAAA5FwAAOxcA AEEXAABCFwAARBcAAEUXAABHFwAASBcAAEsXAABMFwAAURcAAFIXAABUFwAA VRcAAFgXAABZFwAAYBcAAGgXAABrFwAAbBcAAHAXAABxFwAAdRcAAHYXAAB6 FwAAexcAAH4XAAB/FwAAgxcAAIQXAACIFwAAiRcAAIwXAACNFwAAlBcAAJUX AACdFwAAnhcAAKEXAACvFwAAthcAALkXAADBFwAAwhcAAMUXAADGFwAAzxcA ANAXAADeFwAA4hcAAOUXAADmFwAA6hcAAOsXAADvFwAA8hcAAPcXAAD4FwAA /BcAAP0XAAAAGAAABRgAAAcYAAAIGAAACxgAAAwYAAATGAAAFBgAABsYAAAc GAAAIhgAACQYAAAsGAAAPBgAAEIYAABDGAAARRgAAEYYAABJGAAAShgAAFEY AABTGAAAWhgAAFsYAABgGAAAYRgAAGMYAABmGAAAahgAAGsYAAB2GAAAdxgA AHsYAAB8GAAAfxgAAIAYAACIGAAAiRgAAI0YAACOGAAAkRgAAJUYAACeGAAA nxgAAKEYAACiGAAApxgAAKgYAACrGAAArBgAAK4YAACvGAAAtBgAALsYAADC GAAAwxgAAMYYAADHGAAAyRgAAMoYAADNGAAAzhgAANMYAADUGAAA2RgAANoY AADdGAAA3hgAAOcYAADoGAAA7BgAAPAYAADzGAAA9BgAAPwYAAD9GAAAAhkA AAMZAAALGQAADhkAABIZAAAUGQAAFhkAABcZAAAaGQAAGxkAACIZAAAnGQAA KxkAACwZAAAuGQAALxkAADUZAAA3GQAAOxkAADwZAAA+GQAAPxkAAEEZAABC GQAAShkAAEsZAABPGQAAUBkAAFMZAABUGQAAXBkAAGEZAABqGQAAbBkAAG8Z AABwGQAAdhkAAHgZAAB7GQAAfBkAAIIZAACDGQAAhxkAAIgZAACNGQAAjhkA AJMZAACUGQAAmRkAAJoZAACdGQAAnhkAAKEZAACmGQAAqRkAAKoZAACuGQAA tRkAALwZAAC9GQAAxBkAAMUZAADIGQAAyRkAAM0ZAADOGQAA0xkAANcZAADb GQAA3BkAAN4ZAADfGQAA4hkAAOMZAADoGQAA6RkAAOsZAADsGQAA7xkAAPEZ AAD1GQAA+hkAAAAaAAABGgAABBoAAAUaAAAIGgAACRoAABAaAAAXGgAAHhoA ACIaAAAmGgAAJxoAACoaAAAwGgAAMhoAADMaAAA2GgAAQRoAAEQaAABFGgAA SBoAAEkaAABQGgAAVRoAAFoaAABeGgAAZBoAAGUaAABoGgAAaRoAAGsaAABs GgAAcRoAAHUaAAB8GgAAgBoAAIMaAACEGgAAihoAAIsaAACSGgAAkxoAAJga AAClGgAAqRoAAKoaAACtGgAArhoAALQaAAC1GgAAuRoAALoaAAC+GgAAvxoA AMIaAADDGgAAxxoAAMgaAADLGgAAzBoAANEaAADSGgAA1BoAANUaAADYGgAA 2RoAAOAaAADlGgAA7BoAAO0aAADwGgAA8RoAAPgaAAD5GgAAABsAAAIbAAAG GwAABxsAAAkbAAAKGwAADhsAABgbAAAgGwAAIRsAACUbAAArGwAAMhsAADMb AAA3GwAAPBsAAEMbAABFGwAASBsAAE4bAABVGwAAVhsAAFobAABfGwAAZBsA AGYbAABoGwAAaRsAAG0bAABuGwAAchsAAHMbAAB6GwAAfxsAAIYbAACHGwAA ihsAAIsbAACSGwAAkxsAAJobAACcGwAAoBsAAKEbAACmGwAAsRsAALMbAAC0 GwAAtxsAALgbAADDGwAAxRsAAMwbAADNGwAA0BsAANEbAADYGwAA3RsAAOQb AADlGwAA6BsAAOkbAADwGwAA8RsAAPgbAAD5GwAA+xsAAPwbAAADHAAABxwA AA8cAAARHAAAFBwAABUcAAAZHAAAJRwAAC8cAAAxHAAAMxwAADQcAAA5HAAA PRwAAEUcAABGHAAASBwAAEkcAABQHAAAURwAAFUcAABWHAAAWBwAAFkcAABb HAAAXBwAAGgcAABpHAAAbRwAAG4cAABzHAAAdBwAAHccAAB8HAAAfhwAAH8c AACCHAAAiRwAAJAcAACSHAAAlhwAAJccAACZHAAAmhwAAJ8cAACgHAAApBwA AKUcAACpHAAAqhwAAK8cAACzHAAAthwAALccAAC+HAAAwxwAAMUcAADGHAAA yRwAAMocAADRHAAA0hwAANYcAADXHAAA2hwAANscAADhHAAA4hwAAOQcAADl HAAA5xwAAOgcAADrHAAA7BwAAPIcAADzHAAA9xwAAPgcAAD+HAAA/xwAAAEd AAACHQAACR0AAAodAAAMHQAADR0AABAdAAAXHQAAGh0AAB0dAAAkHQAAJR0A ACgdAAAuHQAANR0AADcdAAA5HQAAOh0AAD4dAAA/HQAAQh0AAEMdAABKHQAA UB0AAFIdAABTHQAAWB0AAGIdAABkHQAAah0AAHEdAAB9HQAAfx0AAIAdAACD HQAAiR0AAI8dAACSHQAAlB0AAJUdAACaHQAAoB0AAKcdAACoHQAAqh0AALQd AAC5HQAAuh0AAMEdAADCHQAAxB0AAMUdAADJHQAAyh0AAMwdAADNHQAA0R0A ANIdAADVHQAA2R0AAOIdAADjHQAA5R0AAOYdAADpHQAA6h0AAPEdAADyHQAA +R0AAPodAAD9HQAA/h0AAAUeAAAKHgAAEh4AABMeAAAVHgAAFh4AABgeAAAi HgAAJR4AACweAAAvHgAAMB4AADkeAAA6HgAAPB4AAD0eAABBHgAAQh4AAEge AABJHgAASx4AAEweAABQHgAAUR4AAFUeAABWHgAAXR4AAF4eAABiHgAAYx4A AGkeAABqHgAAbB4AAG0eAABwHgAAcR4AAHceAAB4HgAAfB4AAH0eAACBHgAA gh4AAIUeAACGHgAAjR4AAJUeAACXHgAAmB4AAJ4eAACgHgAAoh4AAKMeAACo HgAAqR4AALEeAACyHgAAtx4AALkeAAC9HgAAwB4AAMoeAADLHgAA0h4AANQe AADWHgAA1x4AANweAADdHgAA4B4AAOEeAADnHgAA6h4AAO0eAADuHgAA+h4A APseAAD9HgAA/h4AAAYfAAAIHwAACh8AAAsfAAAPHwAAEB8AABIfAAATHwAA Fh8AABcfAAAdHwAAHh8AACIfAAAjHwAAJx8AACgfAAArHwAALB8AADAfAAAx HwAANB8AADofAAA+HwAAPx8AAEEfAABCHwAASx8AAEwfAABWHwAAWB8AAFof AABbHwAAXx8AAGAfAABkHwAAZR8AAGcfAABoHwAAbB8AAG0fAABwHwAAdh8A AH0fAAB/HwAAiB8AAIkfAACNHwAAjh8AAJMfAACUHwAAlx8AAJgfAACeHwAA nx8AAKcfAAC2HwAAuh8AALsfAAC+HwAAvx8AAMMfAADHHwAAyh8AAM4fAADS HwAA2B8AANsfAADcHwAA4R8AAOIfAADmHwAA5x8AAO0fAADuHwAA8B8AAPEf AAD4HwAA+h8AAPwfAAD9HwAAASAAAAIgAAAIIAAACSAAAA0gAAAQIAAAFCAA ABUgAAAgIAAAISAAACUgAAAmIAAAKSAAACogAAAxIAAAMiAAADYgAAA3IAAA OiAAAD4gAABHIAAASCAAAEogAABLIAAATiAAAFMgAABXIAAAmyAAAJ0gAACl IAAAqSAAAKogAACsIAAArSAAAK8gAACwIAAAuSAAAL0gAADAIAAAwSAAAM4g AADPIAAA1iAAAOIgAADkIAAA5SAAAOsgAADsIAAA7yAAAPAgAAD6IAAA+yAA AP8gAAAFIQAAByEAAA4hAAAQIQAAESEAABMhAAAUIQAAHCEAAB0hAAAhIQAA IiEAACUhAAAmIQAAKSEAACohAAAxIQAAMiEAADQhAAA1IQAAOiEAADwhAABD IQAARCEAAEYhAABHIQAATCEAAE4hAABSIQAAUyEAAFohAABbIQAAYSEAAGch AABpIQAAcCEAAHIhAABzIQAAdyEAAHghAAB7IQAAfCEAAIQhAACFIQAAiiEA AIshAACPIQAAkCEAAJQhAACVIQAAmCEAAJkhAAChIQAAoiEAAKQhAAClIQAA qSEAAKohAACsIQAArSEAALEhAAC1IQAAuSEAALohAAC+IQAAwiEAAMchAADI IQAAzSEAAM4hAADSIQAA0yEAANohAADbIQAA3SEAAN4hAADhIQAA4iEAAOoh AADrIQAA7yEAAPAhAADzIQAA9CEAAPghAAD5IQAAACIAAAYiAAAKIgAACyIA AA4iAAAPIgAAEyIAABsiAAAjIgAAJyIAACwiAAAtIgAAMSIAADIiAAA4IgAA OSIAADsiAABEIgAARyIAAEgiAABRIgAAUiIAAFQiAABVIgAAXiIAAF8iAABi IgAAYyIAAHAiAABxIgAAeSIAAIgiAACKIgAAiyIAAJMiAACZIgAAoSIAAKIi AACsIgAAsiIAALciAAC8IgAAvyIAAMAiAADHIgAAyCIAAM4iAADQIgAA1CIA ANoiAADhIgAA4iIAAO4iAADwIgAA9SIAAPYiAAD4IgAA+yIAAP8iAAAAIwAA BCMAAAUjAAANIwAADiMAABIjAAAeIwAAIiMAACgjAAArIwAALCMAADAjAAAx IwAANiMAADcjAAA6IwAAOyMAAD8jAABAIwAARyMAAEsjAABOIwAATyMAAFYj AABXIwAAXCMAAF0jAABgIwAAYSMAAGgjAABtIwAAcCMAAHEjAABzIwAAdCMA AHkjAAB6IwAAfSMAAH4jAACFIwAAhiMAAIkjAACPIwAAlyMAAJgjAACgIwAA pCMAAKcjAACoIwAAtSMAALYjAAC8IwAAvSMAAL8jAADAIwAAxyMAAM0jAADP IwAA0CMAANQjAADVIwAA1yMAANgjAADcIwAA4yMAAOcjAADoIwAA6iMAAOsj AADwIwAA9CMAAPwjAAD9IwAA/yMAAAQkAAAHJAAACCQAABIkAAAWJAAAGSQA ABokAAAdJAAAHiQAACYkAAA1JAAAOSQAADokAABCJAAAQyQAAEUkAABGJAAA USQAAFIkAABbJAAAXCQAAF4kAABfJAAAYiQAAGckAABpJAAAaiQAAG0kAABu JAAAcyQAAHQkAAB4JAAAeiQAAH4kAAB/JAAAgiQAAIMkAACGJAAAhyQAAIkk AACKJAAAjyQAAJkkAACcJAAAnSQAAKIkAACkJAAAqCQAAKkkAACsJAAAryQA ALYkAAC3JAAAviQAAMAkAADCJAAAxiQAAM0kAADOJAAA0iQAANMkAADVJAAA 1iQAANskAADcJAAA4CQAAOEkAADkJAAA5SQAAOskAADsJAAA7yQAAPAkAADz JAAA+yQAAP4kAAD/JAAABSUAAAYlAAAKJQAACyUAAA8lAAAQJQAAGCUAABkl AAAcJQAAHSUAACUlAAAnJQAALCUAAC8lAAAyJQAAMyUAADglAAA5JQAAQiUA AEMlAABIJQAASSUAAFAlAABRJQAAUyUAAFQlAABYJQAAWSUAAFwlAABdJQAA ZCUAAGUlAABqJQAAayUAAHElAAByJQAAdiUAAHclAAB7JQAAfCUAAIAlAACB JQAAhiUAAIclAACJJQAAiiUAAJElAACSJQAAlCUAAJUlAACXJQAAmCUAAKQl AACvJQAAsyUAALQlAAC3JQAAuCUAALolAAC7JQAAwCUAAMElAADFJQAAxiUA AMklAADKJQAA0iUAANMlAADVJQAA1iUAANolAADbJQAA3iUAAN8lAADmJQAA 6yUAAPUlAAD2JQAA+SUAAAAmAAAEJgAABiYAAAkmAAAKJgAADCYAAA0mAAAW JgAAGCYAABomAAAbJgAAHyYAACAmAAAoJgAAKSYAACwmAAAtJgAAMCYAADEm AAA1JgAANiYAADgmAAA5JgAAPCYAAD0mAABFJgAASiYAAE4mAABPJgAAVCYA AFYmAABZJgAAWiYAAGImAABjJgAAaCYAAGkmAABsJgAAcCYAAHkmAAB6JgAA fCYAAH0mAACCJgAAgyYAAIcmAACOJgAAliYAAJgmAACcJgAAnSYAAKEmAACi JgAApyYAAK4mAACxJgAAsiYAALomAAC7JgAAvSYAAL4mAADGJgAAyCYAAM0m AADOJgAA0CYAANEmAADZJgAA3SYAAOAmAADhJgAA6yYAAOwmAADxJgAA8iYA APYmAAD3JgAA/yYAAAMnAAAIJwAACScAABMnAAAUJwAAGScAAB0nAAAhJwAA IicAACQnAAAlJwAAKCcAAC4nAAAyJwAAMycAADUnAAA2JwAAOycAADwnAABA JwAARCcAAEcnAABIJwAATycAAFAnAABTJwAAVCcAAFknAABaJwAAXicAAGQn AABpJwAAaicAAG8nAAB1JwAAeCcAAHwnAAB+JwAAfycAAIgnAACJJwAAjCcA AI0nAACbJwAAnCcAAJ8nAACgJwAAqScAAKonAACtJwAAricAALEnAACyJwAA uicAAMInAADKJwAAzScAANAnAADSJwAA1ScAANYnAADgJwAA4ScAAOgnAADp JwAA7CcAAO0nAAD1JwAA9icAAP8nAAAAKAAAAygAAAQoAAAHKAAACCgAABAo AAARKAAAFCgAABgoAAAfKAAAKCgAADAoAAA+KAAARigAAEkoAABRKAAAUigA AFsoAABcKAAAXigAAGooAAB0KAAAeCgAAHsoAAB8KAAAgygAAIwoAACTKAAA lCgAAJkoAACfKAAApigAAKcoAACtKAAArigAALAoAACxKAAAtCgAALUoAAC8 KAAAvSgAAMAoAADFKAAAxygAAMgoAADLKAAAzCgAAM8oAADQKAAA1CgAANUo AADYKAAA2SgAAN8oAADgKAAA5CgAAOUoAADnKAAA6CgAAOsoAADsKAAA8ygA APQoAAD4KAAA/SgAAAQpAAAFKQAADykAABApAAAXKQAAGCkAABspAAAcKQAA JCkAACwpAAA1KQAANikAADkpAAA6KQAAPikAAD8pAABBKQAARSkAAFIpAABY KQAAXCkAAF0pAABgKQAAZikAAHQpAAB8KQAAgykAAIQpAACKKQAAiykAAJIp AACWKQAAmikAAJspAAChKQAAoikAAKUpAACmKQAArSkAALIpAAC0KQAAtSkA ALopAAC7KQAAvykAAMApAADDKQAAxCkAAMopAADLKQAAzykAANApAADSKQAA 0ykAANYpAADXKQAA3ikAAN8pAADjKQAA5ikAAO0pAADuKQAA+CkAAPkpAAAA KgAAASoAAAQqAAAJKgAACyoAAAwqAAARKgAAFSoAABgqAAAZKgAAIyoAACgq AAAuKgAALyoAADMqAAA0KgAANyoAADgqAAA+KgAAPyoAAEMqAABEKgAASCoA AEkqAABMKgAATSoAAFEqAABSKgAAVCoAAFUqAABYKgAAWSoAAF4qAABfKgAA YSoAAGIqAABmKgAAZyoAAGoqAABrKgAAbioAAHQqAAB8KgAAgCoAAIMqAACE KgAAiSoAAI4qAACQKgAAkSoAAJYqAACXKgAAmSoAAJoqAACcKgAAnioAAKAq AAChKgAApSoAAKYqAACpKgAAqioAALEqAAC2KgAAuCoAALkqAAC8KgAAvSoA AMQqAADFKgAAzCoAAOoqAADwKgAA8SoAAPQqAAD1KgAAACsAAAErAAAFKwAA BisAAAgrAAANKwAAFisAABcrAAAZKwAAHisAACIrAAAjKwAAJisAACcrAAAw KwAAMSsAADUrAAA5KwAAPCsAAD0rAABJKwAASisAAEwrAABNKwAAUCsAAFEr AABXKwAAWCsAAForAABbKwAAYysAAGQrAABoKwAAaSsAAG8rAABwKwAAdysA AHgrAAB7KwAAfCsAAIMrAACEKwAAjCsAAI0rAACPKwAAkCsAAJMrAACUKwAA lisAAJcrAACcKwAAnSsAAJ8rAACgKwAApysAAKgrAACxKwAAsisAALsrAAC8 KwAAvisAAL8rAADEKwAAxSsAAMkrAADKKwAAzisAAM8rAADSKwAA0ysAANor AADbKwAA3ysAAOMrAADsKwAA7SsAAO8rAADwKwAA+isAAPsrAAAALAAAASwA AAQsAAAFLAAACCwAAAksAAAMLAAADywAABIsAAATLAAAHCwAAB0sAAAhLAAA IiwAACksAAAqLAAAMywAADQsAAA3LAAAOCwAADwsAAA9LAAAPywAAEAsAABD LAAASywAAE4sAABPLAAAViwAAFcsAABcLAAAXSwAAGYsAABnLAAAaSwAAGos AABtLAAAbiwAAHUsAAB5LAAAfCwAAH0sAACALAAAgSwAAIUsAACGLAAAiSwA AIosAACQLAAAkSwAAJUsAACXLAAAoCwAAKEsAACpLAAAqiwAAK0sAACuLAAA tywAAL0sAAC/LAAAwCwAAMMsAADELAAAzSwAAM4sAADTLAAA1SwAANgsAADZ ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABywAAOIsAADjLAAA 5SwAAOYsAADuLAAA7ywAAPIsAADzLAAA/CwAAP0sAAD/LAAAAC0AAAMtAAAE LQAABy0AAA0tAAAVLQAAFy0AABktAAAaLQAAHS0AAB4tAAAhLQAAIi0AACct AAAoLQAAKi0AACstAAAuLQAALy0AADYtAAA7LQAAPy0AAEAtAABDLQAARC0A AEotAABLLQAATy0AAFAtAABSLQAAUy0AAFYtAABXLQAAXi0AAF8tAABjLQAA ZS0AAGotAABrLQAAci0AAHMtAAB1LQAAdi0AAHwtAAB9LQAAgC0AAIEtAACN LQAAji0AAJAtAACRLQAAlC0AAJUtAACeLQAAny0AAKQtAACoLQAAqy0AAKwt AAC4LQAAuS0AALstAAC8LQAAwC0AAMEtAADKLQAAzC0AAM8tAADQLQAA0i0A ANMtAADWLQAA1y0AANstAADcLQAA4C0AAOEtAADkLQAA5S0AAOwtAADtLQAA 8S0AAPItAAD1LQAA9i0AAAEuAAAGLgAACC4AAAkuAAAPLgAAEC4AABIuAAAT LgAAFi4AABcuAAAeLgAAHy4AACMuAAAlLgAAKC4AACouAAAxLgAAMy4AADUu AAA2LgAAOi4AADsuAABHLgAASC4AAEwuAABNLgAAUi4AAFMuAABXLgAAWC4A AF0uAABmLgAAbS4AAG4uAAByLgAAdS4AAH0uAAB+LgAAgS4AAIUuAACILgAA iS4AAJMuAACULgAAli4AAJcuAACaLgAAmy4AAJ8uAACgLgAAqC4AAKkuAACt LgAAri4AALUuAAC2LgAAuS4AALouAADCLgAAyC4AAMsuAADULgAA1y4AANgu AADiLgAA4y4AAOouAADrLgAA7y4AAPIuAAD1LgAA9i4AAP0uAAD+LgAAAC8A AAEvAAAELwAABS8AAAovAAAkLwAAKy8AACwvAAA4LwAAOS8AAD0vAAA/LwAA Qi8AAEMvAABKLwAASy8AAFQvAABVLwAAWS8AAFovAABcLwAAXy8AAGYvAABn LwAAaS8AAGovAAByLwAAdi8AAHkvAAB6LwAAgS8AAIIvAACHLwAAiC8AAIov AACLLwAAkC8AAJkvAAChLwAAqi8AALEvAACyLwAAui8AALwvAAC/LwAAwC8A AMgvAADJLwAAyy8AAMwvAADRLwAA0i8AANUvAADWLwAA3S8AAN4vAADlLwAA 5y8AAOwvAADtLwAA8C8AAPEvAAD4LwAA/i8AAAkwAAAMMAAAEzAAABQwAAAZ MAAAHDAAACEwAAAiMAAAJjAAACswAAAuMAAALzAAADQwAAA5MAAAPjAAAD8w AABCMAAAQzAAAEowAABLMAAAUDAAAFEwAABTMAAAVDAAAFowAABbMAAAXzAA AGAwAABjMAAAZDAAAGwwAABtMAAAdjAAAHcwAAB5MAAAejAAAH0wAAB+MAAA hTAAAIYwAACNMAAAjjAAAJAwAACRMAAAmzAAAJ4wAACiMAAApjAAAKwwAACt MAAAsTAAALIwAAC5MAAAujAAALwwAAC/MAAAxjAAAMgwAADOMAAAzzAAANEw AADSMAAA2TAAANowAADcMAAA3TAAAOUwAADmMAAA8TAAAPIwAAD0MAAA9TAA APcwAAD4MAAA/TAAAP4wAAACMQAAAzEAAA4xAAATMQAAGjEAABsxAAAmMQAA JzEAAC8xAAAwMQAANDEAADUxAAA6MQAAOzEAAEIxAABDMQAARjEAAEcxAABO MQAAXzEAAGMxAABkMQAAcDEAAHExAABzMQAAdDEAAHcxAAB4MQAAfzEAAIAx AACFMQAAiTEAAIwxAACRMQAAljEAAJcxAACZMQAAmjEAAJ0xAACnMQAAqjEA AKsxAACxMQAAsjEAALQxAAC1MQAAwDEAAMExAADFMQAAxjEAAM0xAADOMQAA 1TEAANYxAADZMQAA2jEAAOExAADlMQAA5zEAAPMxAAD3MQAA+DEAAPsxAAD8 MQAACDIAAAkyAAALMgAADDIAAA8yAAAQMgAAFzIAABgyAAAdMgAAHjIAACAy AAAhMgAAJDIAACkyAAAuMgAALzIAADEyAAA8MgAAPzIAAEAyAABDMgAARDIA AEYyAABHMgAAUTIAAFIyAABWMgAAVzIAAF4yAABfMgAAYTIAAGIyAABtMgAA bjIAAHAyAABxMgAAczIAAHQyAAB5MgAAejIAAHwyAAB9MgAAgDIAAIEyAACJ MgAAijIAAJAyAACRMgAAlzIAAJgyAACbMgAAnDIAAKAyAAChMgAAqDIAAKky AACrMgAArDIAAK8yAACwMgAAuTIAALoyAAC+MgAAvzIAAMQyAADFMgAAyTIA AM0yAADQMgAA0TIAAN0yAADeMgAA5TIAAOgyAADuMgAA8DIAAPIyAAD1MgAA +TIAAPoyAAD+MgAA/zIAAAgzAAAJMwAACzMAAAwzAAAXMwAAGDMAAB8zAAAg MwAAJjMAACczAAApMwAAKjMAAC8zAAAwMwAANjMAADczAAA5MwAAOjMAAEMz AABEMwAASDMAAEkzAABNMwAATjMAAFEzAABSMwAAVTMAAFYzAABhMwAAYzMA AGUzAABmMwAAajMAAGszAABxMwAAcjMAAHkzAAB6MwAAfDMAAH0zAACAMwAA gTMAAIczAACLMwAAjjMAAI8zAACWMwAAlzMAAJkzAACaMwAAoTMAAKIzAACn MwAAqDMAALMzAAC0MwAAvDMAAMEzAADGMwAAxzMAANEzAADSMwAA2TMAANoz AADlMwAA6TMAAOwzAADtMwAA9DMAAPczAAD6MwAA+zMAAAM0AAAENAAABzQA AAg0AAAPNAAAEDQAABM0AAAUNAAAGTQAABs0AAAiNAAAIzQAACU0AAAmNAAA KTQAACo0AAAzNAAANDQAADk0AABHNAAASzQAAE00AABRNAAAVTQAAFg0AABZ NAAAYDQAAGE0AABjNAAAmDQAAKA0AACpNAAAsDQAALE0AAC5NAAAyDQAAMs0 AADMNAAAzzQAANA0AADYNAAA2TQAAOE0AADiNAAA6TQAAPc0AAAENQAANDUA ADo1AAA8NQAAQTUAAMU1AADLNQAA0DUAANc1AADcNQAA4TUAAOY1AADqNQAA 6zUAAPQ1AAD1NQAA+DUAAAA2AAAHNgAANzYAAD42AABDNgAARzYAAEw2AABV NgAAmDYAAKc2AACoNgAArDYAALU2AAC9NgAAyDYAAMw2AADPNgAA3jYAAN82 AADiNgAAGDcAACA3AAAhNwAAKTcAACo3AAAxNwAAPjcAAEs3AABWNwAAXjcA AJI3AAAEAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH --0-170988754-926537153=:15488 Content-Type: APPLICATION/octet-stream; name="IPv6_MTU_Spanish.doc" Content-ID: Content-Description: Version en espaqol Content-Transfer-Encoding: BASE64 0M8R4KGxGuEAAAAAAAAAAAAAAAAAAAAAPgADAP7/CQAGAAAAAAAAAAAAAAAB AAAAUQAAAAAAAAAAEAAAUgAAAAEAAAD+////AAAAAFAAAAD///////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// ///////////////////////cpWgAV+AKBAAACABlAAAAAAAAAAAAAAAAAwAA OT0AAKqfAAAAAAAAAAAAAAAAAAAAAAAAOToAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAJIAAI4AAAAAkgAAjgAAAI6SAAAAAAAAjpIAAAAA AACOkgAAAAAAAI6SAAAAAAAAjpIAABQAAAB4kwAAAAAAAHiTAAAAAAAAeJMA AAAAAAB4kwAAAAAAAHiTAAAAAAAAeJMAABAAAACIkwAAOgAAAHiTAAAAAAAA XZ4AAEYAAADCkwAAAAAAAMKTAAAAAAAAwpMAAAAAAADCkwAAAAAAAMKTAAAA AAAAwpMAAAAAAADCkwAAAAAAAMKTAAAAAAAA6JoAAAAAAAA/ngAAAAAAAD+e AAAAAAAAP54AAAAAAAA/ngAAAAAAAD+eAAAAAAAAP54AAB4AAACjngAAWAAA APueAACvAAAAXZ4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAjpIAAAAAAADCkwAA AAAAAAAAPgBAAAIACQDCkwAAAAAAAMKTAAAAAAAAAAAAAAAAAAAAAAAAAAAA AMKTAAAAAAAAwpMAAAAAAABdngAAAAAAANiZAAAAAAAAjpIAAAAAAACOkgAA AAAAAMKTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMKTAAAAAAAA2JkAAAAAAADY mQAAAAAAANiZAAAAAAAAwpMAABYGAACOkgAAAAAAAMKTAAAAAAAAjpIAAAAA AADCkwAAAAAAAOiaAAAAAAAAAAAAAAAAAABgLt4GAnq+AaKSAABQAAAA8pIA AIYAAACOkgAAAAAAAI6SAAAAAAAAjpIAAAAAAACOkgAAAAAAAMKTAAAAAAAA 6JoAAAAAAADYmQAAEAEAANiZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAANDQ0NDU3JVE9ETyBERSBC2lNRVUVEQSBE RUwgTc1OSU1PIE1UVSAoVW5pZGFkIGRlIFRyYW5zZmVyZW5jaWEgTeF4aW1h KSBFTiBMQSBSVVRBIERFU0RFIEVMIE5PRE8gT1JJR0VOIEhBU1RBIEVMIE5P RE8gREVTVElOTyBFTiBJUHY2DQ0NDQ1ZZXppZCBFLiBEb25vc28gTWVpc2Vs DXlkb25vc29AZ3VheWFjYW4udW5pbm9ydGUuZWR1LmNvDUFsZWphbmRybyBR dWludGVybw1hcXVpbnRlckB1bmlhbmRlcy5lZHUuY28NDQ1Vbml2ZXJzaWRh ZCBkZSBsb3MgQW5kZXMNRmFjdWx0YWQgZGUgSW5nZW5pZXLtYQ1EZXBhcnRh bWVudG8gZGUgU2lzdGVtYXMgeSBDb21wdXRhY2nzbg1TYW50YWbpIGRlIEJv Z2904SwgQ29sb21iaWEsIFNlcHRpZW1icmUgZGUgMTk5OA0NDQ0NUkVTVU1F Tg0NDUVuIGVsIHByZXNlbnRhIGFydO1jdWxvIGRlIGludmVzdGlnYWNp824g c2UgcGxhbnRlYSB1bmEgbWV0b2RvbG9n7WEgeSB1biBwcm9jZWRpbWllbnRv IHBhcmEgZXZpdGFyIGVsIHByb2JsZW1hIGRlIGRlc2NhcnRhciBwYXF1ZXRl cyBkZSBsYSByZWQgZGViaWRvIGEgc3UgdGFtYfFvLiBFc3RhIGludmVzdGln YWNp824gc2UgcmVhbGl68yB0YW50byBwYXJhIGxhIG51ZXZhIHZlcnNp824g SVB2NiwgY29tbyBwYXJhIGVsIHByb2Nlc28gZGUgbGEgdHJhbnNpY2nzbiBk ZSBJUHY0IGEgSVB2Ni4gTGEgcHJvcHVlc3RhIGNvbnNpc3RlIGVuIGxhIGNy ZWFjafNuIGRlIGRvcyBudWV2b3MgbWVuc2FqZXMgSUNNUCB5IGRlIHVuIHBy b2NlZGltaWVudG8sIHF1ZSBzZXLhIHByZWNpc2FtZW50ZSBlbCBxdWUgc2Ug bW9zdHJhcuEgYSBjb250aW51YWNp824uDQ0NDQ1QQUxBQlJBUyBDTEFWRVM6 ICAgSVB2NiwgIElQbmcsIEZhc3QgSVAsIE1UVSwgUE1UVQ0NDQ0NDQ0NMS4g SU5UUk9EVUNDSdNODQ1BbmFsaXphbmRvIGxhcyBjb25zZWN1ZW5jaWFzIGRl IGxhcyBlc3BlY2lmaWNhY2lvbmVzIGFjdHVhbGVzIGFjZXJjYSBkZSBsYSBu dWV2YSB2ZXJzafNuIGRlIFRDUC9JUCwgZXMgZGVjaXIgSVB2Niwgc2UgaGFu IHByZXNlbnRhZG8gbG9zIHNpZ3VpZW50ZXMgYXNwZWN0b3MgOg0NDVBhcmEg SXB2NiAoSW50ZXJuZXQgUHJvdG9jb2wgdmVyc2nzbiA2KSBzZSBoYSBlc3Bl Y2lmaWNhZG8gbGEgZnJhZ21lbnRhY2nzbiBlbmQtdG8tZW5kLCBsYSBjdeFs IGNvbnNpc3RlIGVuIHF1ZSBlbCD6bmljbyBub2RvIHF1ZSBlc3ThIGF1dG9y aXphZG8gcGFyYSBmcmFnbWVudGFyIGxvcyBwYXF1ZXRlcyBJUCwgZXMgZWwg bm9kbyBvcmlnZW47IHkgZWwg+m5pY28gYXV0b3JpemFkbyBwYXJhIHJlZW5z YW1ibGFyIGVsIHBhcXVldGUgZXMgZWwgbm9kbyBkZXN0aW5vLg1UZW5lciBj b21vIG9iamV0aXZvIGVsIG5vIGNvbmdlc3Rpb25hciBsYSByZWQgZGViaWRv IGEgZWZlY3RvcyBkZSBlc3RhIGL6c3F1ZWRhIG8gZGUgZXN0ZSB0aXBvIGRl IGZ1bmNpb25hbWllbnRvLg0NDQ1FbCBwcm9ibGVtYSBjb25zaXN0ZSBlbiBx dWUgZW4gbG9zIGVucnV0YWRvcmVzIElwdjQgY3XhbmRvIGVuIGVsIGVuY2Fi ZXphZG8gZGVsIHBhcXVldGUgSVAsIHNlIGxlIGluZGljYWJhIGNvbiBlbCBi aXQgREYgU2V0IChEb26SdCBGcmFnbWVudCkgcXVlIGVzdG9zIG5vIGVzdGFi YW4gYXV0b3JpemFkb3MgcGFyYSBmcmFnbWVudGFyIHVuIHBhcXVldGUgY3Vh bmRvIGVuY29udHJhYmFuIHVuIE1UVSBtZW5vciBhbCB0YW1h8W8gZGVsIHBh cXVldGUgcXVlIHNlIGRpc3Bvbu1hbiBhIHJlZGlyaWdpci4NRW4gZXN0ZSBj YXNvIHNlIHByb2NlZO1hIGEgZGVzY2FydGFyIGVsIHBhcXVldGUgeSBzZSBs ZSBlbnZpYWJhIHVuIG1lbnNhamUgSUNNUCAoSW50ZXJuZXQgQ29udHJvbCBN ZXNzYWdlIFByb3RvY29sKSBjb24gZWwgdGlwbyAzIChEZXN0aW5hdGlvbiBV bnJlYWNoYWJsZSkgeSBjb24gZWwgY/NkaWdvIDQgKEZyYWdtZW50YXRpb24g TmVlZGVkIGFuZCBERiBTZXQpLCBpbmZvcm1hbmRvbGUgZGUgZXN0YSBtYW5l cmEgYWwgbm9kbyBvcmlnZW4gcXVlIGVsIHRhbWHxbyBkZSBlc2UgcGFxdWV0 ZSBoYWLtYSBzb2JyZXBhc2FkbyBhbCBNVFUgZW4gZXNlIGVubGFjZS4gQWRl beFzIHNlIGxlIGVudmlhYmEgZWwgdmFsb3IgZGVsIE1UVSBkZSBlc2UgZW5s YWNlIHBhcmEgcXVlIGVsIG5vZG8gb3JpZ2VuIGZyYWdtZW50YXLhIGFsIG51 ZXZvIHRhbWHxby4gDQ1DdWFuZG8gc2UgZW1wZXrzIGEgZXNwZWNpZmljYXIg bGEgbnVldmEgdmVyc2nzbiwgZXMgZGVjaXIgSVB2Niwgc2UgYWRvcHTzIGVz dGUgbWlzbW8gcHJvY2VkaW1pZW50byBwYXJhIGVsIG1hbmVqbyBkZSBsb3Mg dGFtYfFvcyBkZSBwYXF1ZXRlcyBxdWUgdmlhamFuIHBvciBsYSByZWQuIExv cyBpbmNvbnZlbmllbnRlcyByYWRpY2FuIGVuIGxhIGluY2VydGlkdW1icmUg eSBlbiBsYSB0YXNhIGRlIHByb2JhYmlsaWRhZCBkZSBxdWUgbG9zIHBhcXVl dGVzIHNlYW4gZGVzY2FydGFkb3MgZW4gbGEgcmVkIGFudGVzIGRlIGxsZWdh ciBhbCBkZXN0aW5vIGZpbmFsLiBMbyBjdeFsIHRyYWVy7WEgY29tbyBwcm9i bGVtYSBsYSBjb25nZXN0afNuIGRlIGxhIHJlZCwgZGViaWRvIGEgcXVlIHRv Y2Fy7WEgdm9sdmVyIGEgZW52aWFyIHRvZG9zIGxvcyBwYXF1ZXRlcyBkZXNk ZSBlbCBub2RvIG9yaWdlbiBoYXN0YSBlbCBub2RvIGRlc3Rpbm8gY29uIHVu IG51ZXZvIHRhbWHxbyBkZSBwYXF1ZXRlIHBhcmEgY2FkYSBmcmFnbWVudG8u DQ1FbiBlc3RlIGRvY3VtZW50byBzZSBwcmVzZW50YSB1bmEgbnVldmEgcHJv cHVlc3RhIHBhcmEgZXZpdGFyIGVzdG9zIGluY29udmVuaWVudGVzIHkgYXBy b3ZlY2hhciBvdHJvcyBhc3BlY3RvcyBkZSBsYSBudWV2YSB2ZXJzafNuIGNv bW8gc29uIGxvcyBudWV2b3MgbWVuc2FqZXMgSUNNUCB5IGVsIHJlZGlzZfFv IGRlIGxhIHRhYmxhIGRlIGVucnV0YW1pZW50by4NDQ0NDQ0yLiBDUkVBQ0nT TiBERSBET1MgTlVFVk9TIE1FTlNBSkVTIElDTVAgRU4gTEEgVkVSU0nTTiA2 IERFIFRDUC9JUA0NDQ1EZXNwdelzIGRlIGludmVzdGlnYXIgbGFzIHNvbHVj aW9uZXMgcHJlc2VudGFkYXMgYSBlc3RlIHByb2JsZW1hIHkgYW5hbGl6YXIg bGFzIHBvc2libGVzIHByb3B1ZXN0YXMgY29uIG1pcmFzIGEgcGxhbnRlYXIg dW5hIHNvbHVjafNuIHF1ZSBjdW1wbGEgY29uIGxvcyBzaWd1aWVudGVzIHJl cXVpc2l0b3MgOg0NRXZpdGFyIGVsIGNvbmdlc3Rpb25hbWllbnRvIGRlIGxh IHJlZCBlbiBsYSB0cmFuc21pc2nzbiBkZSBpbmZvcm1hY2nzbg1Fdml0YXIg ZW4gbG8gcG9zaWJsZSBxdWUgZWwgcGFxdWV0ZSBkZSBpbmZvcm1hY2nzbiBz ZWEgZGVzY2FydGFkbyBwb3Igc3UgdGFtYfFvLiANDQ1TZSBwcm9wb25lIGxv IHNpZ3VpZW50ZSA6DQ0NQ3JlYXIgdW4gbWVuc2FqZSBsbGFtYWRvIE1pbmlt dW0gU2l6ZSBNVFUgKE3tbmltbyBUYW1h8W8gTVRVKSwgZWwgY3XhbCBjb25z dGEgZGUgZG9zIHRpcG9zIGRlIG1lbnNhamVzIDoNDVRpcG8gMTMzIChtZW5z YWplIGRlIGluZm9ybWFjafNuKSwgbGxhbWFkbyBNaW5pbXVtIFNpemUgTVRV IFJlcXVlc3QgY29uIGPzZGlnbyBjZXJvICgwKSwgZWwgY3XhbCBlcyB1biBt ZW5zYWplIElDTVAgcXVlIHZpYWphcuEgcG9yIGxhIHJlZCBwYXJhIGNhbGN1 bGFyIGVsIG3tbmltbyBNVFUgZW4gdG9kbyBlbCBjYW1pbm8gZGVzZGUgZWwg bm9kbyBvcmlnZW4gaGFzdGEgZWwgbm9kbyBkZXN0aW5vLiBMb3Mgbm9kb3Mg ZGViZXLhbiBjb21wYXJhciBlbCBNVFUgcHJlc2VudGUgZW4gZWwgbWVuc2Fq ZSBJQ01QIGNvbiBlbCB0YW1h8W8gZGVsIE1UVSBzb3BvcnRhZG8gcG9yIGVs IHNpZ3VpZW50ZSBlbmxhY2UsIHNpIGVsIHRhbWHxbyBlcyBtZW5vciBzZSBk ZWJlcuEgYWN0dWFsaXphciBlbCBjYW1wbyBlbiBlbCBtZW5zYWplIElDTVAg cXVlIGNvbnRpZW5lIGVsIG3tbmltbyBNVFUuIFBhcmEgY3VtcGxpciBjb24g ZXN0ZSByZXF1ZXJpbWllbnRvIGxvcyBub2RvcyBkZWJlbiBzb3BvcnRhciBl c3RlIHRpcG8gZGUgbWVuc2FqZSB5IGVsIGN14WwgZXMgbWVuY2lvbmFkbyBl biBlbCBpdGVtIGNvcnJlc3BvbmRpZW50ZSBhIGVzcGVjaWZpY2FjaW9uZXMg ZGUgbG9zIG5vZG9zLg0NRm9ybWF0byBkZSBlc3RlIG1lbnNhamUgSUNNUC4N AQ0NDQ0NDVRpcG8gMTM0IChtZW5zYWplIGRlIGluZm9ybWFjafNuKSwgbGxh bWFkbyBNaW5pbXVtIFNpemUgTVRVIFJlcGx5IGNvbiBj82RpZ28gY2VybyAo MCksIGVsIGN14WwgZXMgdW4gbWVuc2FqZSBJQ01QIHF1ZSB2aWFqYXLhIHBv ciBsYSByZWQgZGVzZGUgZWwgbm9kbyBkZXN0aW5vIGhhc3RhIGVsIG5vZG8g b3JpZ2VuIHkgZWwgY3XhbCBjb250aWVuZSBlbCBt7W5pbW8gTVRVIGRlIHRv ZG8gZWwgY2FtaW5vLiBBIGVzdGUgbWVuc2FqZSBubyBzZSBsZSByZWFsaXph cuEgbmluZ/puIHRyYXRhbWllbnRvIGVzcGVj7WZpY28sIHNpbm8gc2ltcGxl bWVudGUgY3VhbmRvIHVuIG5vZG8gbG8gcmVjaWLhIGVzdGUgbG8gcmVlbnZp YXLhIGFsIG5vZG8gaW5kaWNhZG8gc2luIGFuYWxpemFyIG5pIHByb2Nlc2Fy IHN1IGNvbnRlbmlkby4NDUZvcm1hdG8gZGUgZXN0ZSBtZW5zYWplIElDTVAu DQENDQ0NUGFyYSByZWFsaXphciBt4XMgZWZpY2llbnRlbWVudGUgZXN0ZSBl bnbtbyBkZSBtZW5zYWplcywgcHVlZGUgc2VyIGZhY3RpYmxlIGRlIHF1ZSBl bCBtZW5zYWplIElDTVAgbm8gbGxlZ3XpIGhhc3RhIGVsIG5vZG8gZGVzdGlu bzsgZGViaWRvIGEgcXVlIHNpIHVuIG5vZG8gaW50ZXJtZWRpbyBjb25vY2Ug ZWwgbe1uaW1vIE1UVSBoYXN0YSBlc2UgZGVzdGlubywgc2UgcG9kcuEgYXN1 bWlyIGNvbW8gY2llcnRvIGVzdGUgdmFsb3IgeSBwb3IgbG8gdGFudG8gZGV2 b2x2ZXJsbyBhbCBub2RvIG9yaWdlbiBjb21vIGVsIG3tbmltbyBNVFUgZW4g ZWwgY2FtaW5vIGRlc2RlIGVsIG5vZG8gb3JpZ2VuIGhhc3RhIGVsIG5vZG8g ZGVzdGluby4gDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NMy4gTU9ESUZJQ0FDSdNOIERF IExBIFRBQkxBIERFIEVOUlVUQU1JRU5UTyBFTiBMT1MgTk9ET1MNDQ1Fc3Rh IHNvbHVjafNuIGNvbnNpc3RlIGVuIGFkaWNpb25hciBhIGxhIHRhYmxhIGRl IGVucnV0YW1pZW50byB1biBjYW1wbyBxdWUgaW5kaXF1ZSBjdeFsIGVzIGVs IG3tbmltbyBNVFUgY29ub2NpZG8gaGFzdGEgZWwgbW9tZW50byBwYXJhIHVu YSB0cmFuc21pc2nzbiBkZSBpbmZvcm1hY2nzbiBhIHVuYSByZWQgZW4gcGFy dGljdWxhci4NUGFyYSByZWFsaXphciBlc3RlIG1lY2FuaXNtbywgZXMgbmVj ZXNhcmlvIGVzdGFibGVjZXIgY29tdW5pY2FjafNuIGNvbiBvdHJvcyBub2Rv cyBwYXJhIHBvZGVyIGVudGVyYXJzZSBkZSBjdeFsIGVzIGVsIE1UVSBwYXJh IGVzYSByZWQgZW4gcGFydGljdWxhci4gDQ0NU2kgbGEgcmVkIGVzIGRlc2Nv bm9jaWRhIGVudG9uY2VzIHNlIHByb2NlZGVy4SBhIHV0aWxpemFyIHVubyBk ZSBsb3MgZG9zIHBsYW50ZWFtaWVudG9zLCBlcyBkZWNpciBhIGZyYWdtZW50 YXIgbG9zIHBhcXVldGVzIGFsIHRhbWHxbyBkZWwgTVRVIGRlbCBwcmltZXIg c2FsdG8gbyBlbCBkZSBlbmNvbnRyYXIgcG9yIG1lZGlvIGRlbCBtZW5zYWpl IElDTVAgY3XhbCBlcyBlbCBt7W5pbW8gTVRVIHBhcmEgZXNlIGRlc3Rpbm8u DQ1BIGNvbnRpbnVhY2nzbiBzZSBwcmVzZW50YSBlbCBmb3JtYXRvIHkgdW4g ZWplbXBsbyBkZSBsYSB0YWJsYSBkZSBlbnJ1dGFtaWVudG8gOg0NAQ0NDVRh YmxhIGRlIEVucnV0YW1pZW50byBwYXJhIGVsIGVucnV0YWRvciBSLg1NZW5z YWplIGFsIEhvc3QHUnV0YSBhIGVzYSBkaXJlY2Np824HTe1uaW1vIE1UVQcH MjAuMC4wLjAHRGlyZWN0YW1lbnRlBzI0MDAHBzMwLjAuMC4wB0RpcmVjdGFt ZW50ZQczNjAwBwc0MC4wLjAuMAczMC4wLjAuNwcyNDAwBwcxMC4wLjAuMAcy MC4wLjAuNQcxMjAwBwc1MC4wLjAuMAcyMC4wLjAuNQcxMjAwBwcNDQ1MYSBp ZGVhIHNlcu1hIGNvbWJpbmFyIGVzdGFzIGRvcyB06WNuaWNhcyBwYXJhIHF1 ZSBhbG1hY2VuYW5kbyBlbCBNVFUgeSBlc3RhYmxlY2llbmRvIHVub3MgdGll bXBvcyBkZSBhbnRpZ3VlZGFkIG5vIHNpZW1wcmUgc2UgcmVxdWllcmEgZW52 aWFyIGVsIG1lbnNhamUgSUNNUCBtZW5jaW9uYWRvIGFudGVyaW9ybWVudGUs IHBhcmEgZW5jb250cmFyIGVzZSBt7W5pbW8gTVRVLg0NDQ00LiBBTsFMSVNJ UyBERSBMQSBTT0xVQ0nTTiBQUk9QVUVTVEENDQ1MYSBudWV2YSBzb2x1Y2nz biBxdWUgcHJlc2VudGEgbGEgZGVmaW5pY2nzbiBkZSBsb3MgbWVuc2FqZXMg SUNNUCAoSW50ZXJuZXQgQ29udHJvbCBNZXNzYWdlIFByb3RvY29sKSBlbiBs YSB2ZXJzafNuIDYgZGUgVENQL0lQIG5lY2VzYXJpb3MgcGFyYSBjb25vY2Vy IGVsIG3tbmltbyBNVFUgKE1heGltdW0gVHJhbnNmZXIgVW5pdCkgZW50cmUg dW4gbm9kbyBvcmlnZW4geSB1bm8gZGUgZGVzdGlubyB5IGVsIGRpc2XxbyBk ZSBsYSB0YWJsYSBkZSBlbnJ1dGFtaWVudG8gYWdyZWdhbmRvbGUgZWwgY2Ft cG8gZGUgbe1uaW1vIE1UVSBwYXJhIHF1ZSBlbCBub2RvIGNvbm96Y2EgZXNl IHRhbWHxbyBkZSBwYXF1ZXRlIHJlcXVlcmlkbyBwYXJhIHVuYSByZWQgZW4g cGFydGljdWxhciBwcmVzZW50YSBsYXMgc2lndWllbnRlcyBjb25zaWRlcmFj aW9uZXMgOg0NDSggRWwgaGVjaG8gZGUgcXVlIGV4aXN0YSB1biBjYW1wbyBj b24gZWwgTVRVIGhhY+1hIGxhIHJlZCBkZSBkZXN0aW5vLCBwcmVzZW50YSB1 bmEgZGVzY29uZ2VzdGnzbiBjb25zaWRlcmFibGUgZGUgbGEgcmVkLCBkZWJp ZG8gYSBxdWUgZXMgYWx0YSBsYSBwcm9iYWJpbGlkYWQgZGUgcXVlIG5vIHNl YW4gZGVzY2FydGFkb3MgbG9zIHBhcXVldGVzIGhhc3RhIGVsIGRlc3Rpbm8g ZmluYWwgcG9yIGVsIHRhbWHxbyBzb3BvcnRhZG8geSBjb25vY2lkbyBkZWwg TVRVLg0NKCAgTG8gYW50ZXJpb3IgcHJlc2VudGEgdW4gcmllc2dvLCBzaSBl bCBNVFUgbe1uaW1vIGxsZWdhIGEgY2FtYmlhciwgZW50b25jZXMgZXMgcG9z aWJsZSBxdWUgbG9zIHBhcXVldGVzIHNlYW4gZGVzY2FydGFkb3MsIHBlcm8g ZGUgdG9kb3MgbW9kb3MgZWwgbm9kbyBvcmlnZW4gYXByZW5kZXLtYSBhY2Vy Y2EgZGVsIG51ZXZvIE1UVSBwYXJhIGVzYSByZWQgZGUgZGVzdGlubyBmaW5h bCB5IGVzdG8gc2UgaGFy7WEgcG9yIG1lZGlvIGRlbCBtZW5zYWplIElDTVAg ZGUgdGlwbyAyIChQYWNrZXQgVG9vIEJpZyBNZXNzYWdlKSBlbiBkb25kZSBk ZWwgYml0IDMzIGFsIDY0IHNlIGVuY29udHJhcu1hIGVsIG51ZXZvIE1UVSBt 7W5pbW8geSBlc3RlIHNlcu1hIGFjdHVhbGl6YWRvIGVuIGxhIHRhYmxhIGRl IGVucnV0YW1pZW50byBkZWwgbm9kbyBvcmlnZW4uDQ0oIEVuIGNhc28gZGUg cXVlIGVsIG5vZG8gb3JpZ2VuIGRlc2Nvbm96Y2EgZWwgdmFsb3IgZGVsIE1U VSBt7W5pbW8gaGFjaWEgbGEgcmVkIGRlc3Rpbm8sIGVudG9uY2VzIHByb2Nl ZGVy4SBhIHV0aWxpemFyIG1lbnNhamVzIElDTVAgZGUgdGlwbyAxMzMgKE1p bmltdW0gU2l6ZSBNVFUgUmVxdWVzdCkgeSAxMzQgKE1pbmltdW0gU2l6ZSBN VFUgUmVwbHkpIHBhcmEgZW5jb250cmFyIGVzZSBt7W5pbW8gTVRVIGhhY2lh IGxhIHJlZCBkZXN0aW5vLiBFc3RlIHNlcu1hIGVsIGNhc28gZGUgYmFqbyBy ZW5kaW1pZW50byBkZWJpZG8gYSBxdWUgZGVzY29ub2NlIGVsIG3tbmltbyBN VFUgaGFjaWEgbGEgcmVkIGRlc3Rpbm8uDUF1bnF1ZSBwYXJhIGVzdGUgcGxh bnRlYW1pZW50byBzZSBwb2Ry7WEgcHJvcG9uZXIgZGUgcXVlIHNpIHVuIG5v ZG8gaW50ZXJtZWRpbyBjb25vY2UgZXNlIE1UVSBkZSBlc2EgcmVkIGZpbmFs LCBlbnRvbmNlcyBxdWUgdG9tZSBlc2UgdmFsb3IgY29tbyBlbCBt7W5pbW8g TVRVIGhhc3RhIGVsIG5vZG8gZGVzdGlubyB5IGx1ZWdvIHNlIGxlIGluZm9y bWUgYWwgbm9kbyBvcmlnZW4sIHNpbiBxdWUgbGxlZ3VlIGhhc3RhIGVsIG5v ZG8gZmluYWwuDQ0oIERlYmlkbyBhIHF1ZSBlbCBwYXF1ZXRlIElDTVAgcGFy YSBjb25vY2VyIGVsIE1UVSBt7W5pbW8gZXMgcGVxdWXxbyAoOCBieXRlcyBk ZSBtZW5zYWplIElDTVAgKyA0MCBieXRlcyBkZWwgZW5jYWJlemFkbyBJUHY2 KSBkYXLtYSB1biBwYXF1ZXRlIGRlIDQ4IGJ5dGVzIGxvIGN14Wwgbm9zIGFz ZWd1cmEgcXVlIGVzdGUgbm8gc2Vy4SBkZXNjYXJ0YWRvIHBvciBuaW5ndW5h IHJlZCBkZWJpZG8gYSBxdWUgZWwgbe1uaW1vIHRhbWHxbyBhY2VwdGFkbyBl cyBkZSA2NCBieXRlcyBwYXJhIHVuIE1UVSB5IHBvciBsbyB0YW50byBub3Mg YXNlZ3VyYXLhIHF1ZSBlc3RlIHBhcXVldGUgcmV0b3JuYXLhIGFsIG5vZG8g b3JpZ2VuIGNvbiBlbCBt7W5pbW8gTVRVLiBDbGFybyBlc3ThIHF1ZSBzaSBz ZSBwcmVzZW50YSBvdHJvIHRpcG8gZGUgcHJvYmxlbWFzIGNvbW8gY2HtZGEg ZGVsIGVubGFjZSwgZXRjLCBlc3RlIG5vIHJldG9ybmFy4S4NDSBMYSBkZXN2 ZW50YWphIHF1ZSBwcmVzZW50YSwgZXMgcXVlIHNpIGVsIG5vZG8gb3JpZ2Vu IG5vIGNvbm9jZSBlbCBNVFUsIGNvbW8gbWVuY2lvbmFtb3MgYW50ZXJpb3Jt ZW50ZSwgIHRlbmRy4SBxdWUgZW52aWFyIGVsIG1lbnNhamUgSUNNUDsgYWxn byBxdWUgYmFqbyBlbCBlc3F1ZW1hIHByb3B1ZXN0byBlbiBbTWNDYW5uOTZd IG5vIHNlIHJlYWxpemEuIFBlcm8gZW4gZXN0ZSBjYXNvIHkgYmFqbyBlc3Rl IGVzcXVlbWEgZGUgbWVuc2FqZXMsIHNlIGFzZWd1cmFy7WEgY29uIHVuYSBh bHRhIHByb2JhYmlsaWRhZCBxdWUgZWwgcGFxdWV0ZSBubyBzZXLtYSBkZXNj YXJ0YWRvIHBvciB0YW1h8W8gZGVsIE1UVS4NDQ0NDQ0NDQ0NDQ01LiBJTVBM RU1FTlRBQ0nTTiBERUwgTlVFVk8gRElTRdFPIEVOIExBIFRSQU5TSUNJ004g REUgSVB2NCBhIElQdjYNDQ0NDUNvbW8gc2UgbWVuY2lvbmEgZW4gZWwgYXJ0 7WN1bG8gZGUgaW52ZXN0aWdhY2nzbiBbRG9ub3NvOTddIHBhcmEgbGxldmFy c2UgYSBjYWJvIGxhIHRyYW5zaWNp824gZGUgSVB2NCBhIElQdjYsIHNlIHJl cXVpZXJlIHF1ZSBsb3MgbnVldm9zIG5vZG9zIChlbnJ1dGFkb3JlcyBvIGhv c3RzKSBxdWUgc2FsZ2FuIGVuIG9wZXJhY2nzbiBzb3BvcnRlbiB0YW50byBJ UHY0IGNvbW8gSVB2NjsgZXMgZGVjaXIgcXVlIGVuIHN1IHBpbGEgZGUgcHJv dG9jb2xvcyBzZSBlbmN1ZW50cmVuIGxvcyBzZXJ2aWNpb3MgZGUgSXB2NCB5 IGxvcyBkZSBJcHY2OyB5IGVzdG8gc2Vy7WEgaGFzdGEgcXVlIHRvZG9zIGxv cyBub2RvcyBxdWUgZXN06W4gZnVuY2lvbmFuZG8gZW4gbGEgaW50ZXJuZXQg eWEgbm8gc29sbyBzb3BvcnRlbiBJcHY0IGNvbW8g+m5pY28gcHJvdG9jb2xv IFRDUC9JUC4NQmFqbyBlc3RlIGVzcXVlbWEgcG9kcmVtb3MgdXRpbGl6YXIg IGxvcyBtZWNhbmlzbW9zIGRlIGVudHVuZWxhbWllbnRvIHkgZW5jYXBzdWxh bWllbnRvIHByb3B1ZXN0b3MgZW4gW0Rvbm9zbzk3XSBwYXJhIHBvZGVyIHRy YW5zZmVyaXIgcGFxdWV0ZXMgSXB2NiBhIHRyYXZlcyBkZSBub2RvcyBJcHY0 Lg0NRWwgcHJvYmxlbWEgcmFkaWNhIGN1YW5kbyBlbiB1bmEgdHJhbnNtaXNp 824gZGUgcGFxdWV0ZXMgc2UgZW5jdWVudHJlIHVuIG5vZG8gcXVlIHNvbG8g c29wb3J0YSBJcHY0LCBlbiBlc3RlIGNhc28gZXN0ZSBub2RvIG5vIHRlbmRy 4SBkZWZpbmlkYSBlbiBzdSB0YWJsYSBkZSBlbnJ1dGFtaWVudG8gZWwgbe1u aW1vIE1UVSB5IHRhbXBvY28gc29wb3J0YXLhIGxvcyBtZW5zYWplcyBJQ01Q IHZlcnNp824gNiBwcm9wdWVzdG9zIGVuIGxhIHRlc2lzIGRlIGludmVzdGln YWNp824uIFNpIGVzdGUgZXMgZWwgY2FzbywgZW50b25jZXMgc2UgcG9kcu1h IHV0aWxpemFyIGRvcyBtZWNhbmlzbW9zOg0NDSggRWwgcHJvcHVlc3RvIGVu IFtNY0Nhbm45Nl0gcXVlIGNvbnNpc3RlIGVuIGZyYWdtZW50YXIgc2Vn+m4g ZWwgTVRVIGRlbCBwcmltZXIgc2FsdG8sIGVzIGRlY2lyLCB0YWwgeSBjb21v IGZ1bmNpb25hIGVuIElwdjQgeSBlc3BlcmFyIGEgcXVlIHNpIG3hcyBhZGVs YW50ZSBmYWxsYSBhbGf6biBwYXF1ZXRlLCBlc3RvcyBzb24gZGVzY2FydGFk b3MgcG9yIHN1IHRhbWHxbyB5IHNlIHJldG9ybmFy4SBlbCBudWV2byBNVFUg eSBlbCBub2RvIG9yaWdlbiB2b2x2ZXLhIGEgZnJhZ21lbnRhciBsb3MgcGFx dWV0ZXMuDQ0oIEVsIG90cm8gbWVjYW5pc21vIGNvbnNpc3Rpcu1hIGVuIHF1 ZSBsb3MgcGFxdWV0ZXMgdmlhamFy7WFuIGNvbiBlc2UgdGFtYfFvIGhhc3Rh IHF1ZSBsbGVndWUgYSB1biBub2RvIGludGVybWVkaW8gcXVlIHNlYSBJcHY0 L0lwdjYgeSBlc3RlIHNpIGVzdOEgZW4gY2FwYWNpZGFkIGRlIGVuY29udHJh ciBlbCBt7W5pbW8gTVRVIGhhc3RhIGVsIG5vZG8gZmluYWw7IHkgc2kgZXMg bmVjZXNhcmlvIGZyYWdtZW50YXLhIGFsIG51ZXZvIHRhbWHxbyBsb3MgcGFx dWV0ZXMsIGNvbiB0YWwgZGUgcXVlIG3hcyBhZGVsYW50ZSBsb3MgcGFxdWV0 ZXMgbm8gdmF5YW4gYSBzZXIgZGVzY2FydGFkb3MgcG9yIHN1IHRhbWHxby4g QWRlbeFzLCBlc3RlIG5vZG8gc2kgZXN0YXLtYSBlbiBjYXBhY2lkYWQgZGUg ZnJhZ21lbnRhciwgeWEgcXVlIGNvbnRpZW5lIGVuIHN1IHBpbGEgZGUgcHJv dG9jb2xvcyB0YW50byBsb3Mgc2VydmljaW9zIGRlIElwdjQgY29tbyBsb3Mg ZGUgSXB2Ni4NDQ1Fc3RvcyBtZWNhbmlzbW9zIHNlIHV0aWxpemFy7WFuIGhh c3RhIGN1YW5kbyB0b2RvcyBsb3Mgbm9kb3MgSXB2NCBoYWxsYW4gc2FsaWRv IGRlIG9wZXJhY2nzbiBlbiBsYXMgcmVkZXMgeSBzb2xvIHF1ZWRlbiBsb3Mg bm9kb3MgSXB2NC9JcHY2IHkgbHVlZ28gc2kgc2FsZHLtYW4gc29sbyBub2Rv cyBJcHY2IHkgZXN0YWJsZWNlciBsYXMgZXNwZWNpZmljYWNpb25lcyB5IGZ1 bmNpb25hbWllbnRvIHBhcmEgcmVkZXMgY29uIHByb3RvY29sbyBJcHY2Lg0N QSBjb250aW51YWNp824gc2UgcHJlc2VudGEgbGEgY29tcGFyYWNp824gZW50 cmUgZWwgcHJvY2VkaW1pZW50byBleGlzdGVudGUgeSBlbCBwcm9wdWVzdG8u DQ0NQ29uY2VwdG8HRXhpc3RlbnRlB1Byb3B1ZXN0bwcHUGFxdWV0ZXMgZGVz Y2FydGFkb3MgcG9yIE1UVQdNYXlvciBjYW50aWRhZCBwb3Igbm8gY29ub2Nl ciBsb3MgTVRVIGRlbCBjYW1pbm8gZGVzZGUgZWwgbm9kbyBvcmlnZW4gaGFz dGEgZWwgbm9kbyBkZXN0aW5vLgdNZW5vciBjYW50aWRhZCBwb3JxdWUgZW4g ZXN0ZSBt6XRvZG8gc2UgY29ub2NlIGVsIG3tbmltbyBNVFUgZGVzZGUgZWwg bm9kbyBvcmlnZW4gaGFzdGEgZWwgbm9kbyBkZXN0aW5vLgcHQ29uZ2VzdGnz biBlbiBsYSBSZWQHTWF5b3IgY29uZ2VzdGnzbiBwb3JxdWUgbG9zIHBhcXVl dGVzIHB1ZWRlbiBzZXIgZGVzY2FydGFkb3MgeSBuZWNlc2l0YW4gcXVlIHNl YW4gcmV0cmFuc21pdGlkb3MuB01lbm9yIGNvbmdlc3Rp824gZGViaWRvIGEg cXVlIGVsIE1UVSBlcyBjb25vY2lkby4gUGVybyBwdWVkZSBwcmVzZW50YXJz ZSBjb25nZXN0afNuIGN1YW5kbyBlbCBub2RvIG9yaWdlbiBubyBsbyBjb25v Y2UgeSBuZWNlc2l0YSBlbnZpYXIgbG9zIG51ZXZvcyBtZW5zYWplcyBJQ01Q LgcHVGFibGEgZGUgRW5ydXRhbWllbnRvB0lndWFsIGEgbGFzIGVzcGVjaWZp Y2FjaW9uZXMgZGUgSVB2NC4HU2UgbGUgYWRpY2lvbmEgZWwgY2FtcG8gTVRV LCBwYXJhIGNvbm9jZXIgZWwgbe1uaW1vIE1UVSBoYXN0YSBsYSByZWQgZGVz dGluby4HBw0NDQwNDTYuIENPTkNMVVNJT05FUw0NDQ1EZW50cm8gZGUgbGFz IGNvbmNsdXNpb25lcyBxdWUgcG9kZW1vcyBkZXN0YWNhciBzZSBlbmN1ZW50 cmFuIGxhcyBzaWd1aWVudGVzIDoNDQ1MYSBvcHRpbWl6YWNp824gZGUgbGEg Y2FudGlkYWQgZGUgcGFxdWV0ZXMgcXVlIHZpYWphbiBwb3IgbGEgcmVkIGxs ZXbhbmRvbG8gYSBjYWJvIHBvciBtZWRpbyBkZSBsYSBkaXNtaW51Y2nzbiBk ZSBwYXF1ZXRlcyBkZXNjYXJ0YWRvcyBwb3Igc3UgdGFtYfFvIGFsIGNvbm9j ZXIgcHJldmlhbWVudGUgZWwgdGFtYfFvIG3tbmltbyBzb3BvcnRhZG8gcG9y IHRvZG8gZWwgY2FtaW5vLg0NTGEgdmVudGFqYSBxdWUgY29ubGxldmEgZWwg aW5jbHVpciBlbCB0YW1h8W8gZGVsIE1UVSBlbiBsYSB0YWJsYSBkZSBlbnJ1 dGFtaWVudG8gc29wb3J0YWRvIHBvciBlbCBkZXN0aW5vIGVuIGVsIGNhbWlu byBkZXNkZSBlbCBub2RvIG9yaWdlbjsgZGlzbWludXllbmRvIGFz7SBlbCB0 aWVtcG8gZGUgYvpzcXVlZGEgZGVsIG1lbmNpb25hZG8gdmFsb3IuDQ1FbCBw cm9jZWRpbWllbnRvIGRlIGNyZWFjafNuIHkgZnVuY2lvbmFtaWVudG8gZGUg bG9zIG51ZXZvcyBtZW5zYWplcyBJQ01QLCBwYXJhIGxhIG9idGVuY2nzbiBk ZWwgdmFsb3IgZGVsIG3tbmltbyBNVFUgZGVzZGUgZWwgbm9kbyBvcmlnZW4g aGFzdGEgZWwgbm9kbyBkZXN0aW5vOyBsbyBjdWFsIGNvbmxsZXZhIGEgYXNl Z3VyYXIgbGEgdmVyYWNpZGFkIGRlbCBtZW5jaW9uYWRvIHZhbG9yLg0NTGEg b3B0aW1pemFjafNuIGRlIGVzdGUgcHJvY2VkaW1pZW50bywgbWVkaWFudGUg ZWwgaGVjaG8gZGUgcXVlIGVsIG1lbnNhamUgbm8gbmVjZXNhcmlhbWVudGUg dGllbmUgcXVlIGxsZWdhciBhbCBub2RvIGRlc3Rpbm8sIHNpbm8gcXVlIHNp IGFsZ/puIG5vZG8gaW50ZXJtZWRpbyBjb25vY2UgZXNlIHZhbG9yLCBzZSBw dWVkZSBhc3VtaXIgY29tbyBlbCB2YWxvciBjb3JyZWN0by4NDUxhIGltcG9y dGFuY2lhIGRlIGxhIGNyZWFjafNuIGRlIG5vZG9zIHF1ZSBzb3BvcnRlbiBs b3Mgc2VydmljaW9zIElQdjQgZSBJUHY2IGVuIGVsIHByb2Nlc28gZGUgdHJh bnNpY2nzbiBkZSB1bmEgdmVyc2nzbiBhIG90cmEuDQ0NDA0NDVRFUk1JTk9M T0fNQQ0NDU1UVSAoVW5pZGFkIGRlIFRyYW5zZmVyZW5jaWEgTeF4aW1hKQ0J CUVsIE1UVSBlcyBlbCB0YW1h8W8gbeF4aW1vIGRlIHVuIHBhcXVldGUgbyBk YXRhZ3JhbWEgc29wb3J0YWRvIAkJcG9yIGxhIHJlZCBlbiBsYSBjdeFsIGVz IHRyYW5zcG9ydGFkby4NSUNNUCAoSW50ZXJuZXQgQ29udHJvbCBNZXNzYWdl IFByb3RvY29sKQ0JCVNvbiBsb3MgbWVuc2FqZXMgcG9yIG1lZGlvIGRlIGxv cyBjdWFsZXMgbG9zIGVxdWlwbyBkZSByZWQgKGhvc3RzIHkgCQlSb3V0ZXJz KSBwdWVkZW4gZGlhbG9nYXIuDVRhYmxhIGRlIEVucnV0YW1pZW50bw0JCUVz IGxhIHRhYmxhIHF1ZSBjb250aWVuZW4gbG9zIG5vZG9zLCBlbiBsb3MgY3Vh bGVzIHNlIHJlZ2lzdHJhIGxhIAkJCWRpcmVjY2nzbiBhIGRvbmRlIGRlYmUg ZW52aWFyIHVuIHBhcXVldGUgZGVwZW5kaWVuZG8gZGUgbGEgcmVkIGRlIAkJ ZGVzdGluby4NTm9kbwkNCQlVbiBkaXNwb3NpdGl2byBvIGVxdWlwbyBxdWUg cGVydGVuZWNlIGEgdW5hIHJlZCBkZSBjb211bmljYWNpb25lcywgeWEgCQlz ZWEgcGFyYSBwcm9jZXNhciBpbmZvcm1hY2nzbiB5IHRyYW5zbWl0aXJsYSBv IGJpZW4gcGFyYSBlbnJ1dGFyIGVzdGEgCQlpbmZvcm1hY2nzbi4NUGFxdWV0 ZQ0JCUNhbnRpZGFkIGRlIGluZm9ybWFjafNuIHF1ZSB2aWFqYSBwb3IgbGEg cmVkIGNvbW8gdW5hIHVuaWRhZCBlbiAJCQlwYXJ0aWN1bGFyIHkgZW50ZW5k aWJsZSBwb3IgbGEgY2FwYSBkZSByZWQgZGVsIG1vZGVsbyBPU0kgbyBlbCBt b2RlbG8gCQlUQ1AvSVAuIExhIGZvcm1hIGRlIGVudGVuZGVyIGVzdGUgZmx1 am8gZGUgaW5mb3JtYWNp824gZXMgcG9yIG1lZGlvIAkJZGUgY2FtcG9zIGRl IGVuY2FiZXphZG9zIGNvbnN0YW50ZXMgeSBiaWVuIGRlZmluaWRvcyBwb3Ig bG9zIGVxdWlwb3MgCQlxdWUgaW50ZXJ2aWVuZW4gZW4gZWwgcHJvY2VzbyBk ZSB0cmFuc21pc2nzbi4NRW5ydXRhZG9yIChSb3V0ZXIpDQkJRXMgdW4gbm9k byBxdWUgcmVkaXJpZ2UgdW4gcGFxdWV0ZSBkZSBpbmZvcm1hY2nzbiB5YSBz ZWEgYSBvdHJvIAkJCWVucnV0YWRvciBvIGFsIGVxdWlwbyBxdWUgbGUgZGVi ZSBsbGVnYXIgaW5mb3JtYWNp824gZW4gY2FzbyBkZSBxdWUgCQllc3RlIGVx dWlwbyBwZXJ0ZW5lY2UgYSBkaWNobyBlbnJ1dGFkb3IuIExvcyBt6XRvZG9z IGRlIGVucnV0YXIgZXN0b3MgCQlwYXF1ZXRlcyBkZSBpbmZvcm1hY2nzbiBz b24gcG9yIHVub3MgYWxnb3JpdG1vcyBlc3RhYmxlY2lkb3MgY29tbyAJCXBv ciBlamVtcGxvIDogRWwgY2FtaW5vIG3hcyBjb3J0byBlbnRyZSBkb3Mgbm9k b3MsIEVucnV0YW1pZW50byBwb3IgCQllbCBWZWN0b3IgZGUgRGlzdGFuY2lh cywgZXRjLg1JUHY2LCBJUG5nLCBGYXN0IElQDQkJRXMgbGEgbnVldmEgdmVy c2nzbiBkZWwgcHJvdG9jb2xvIGRlIHJlZCBUQ1AvSVAuDQ0NDA0NDVJFRkVS RU5DSUFTDQ0NDShERUVSSU5HOTUoCURFRVJJTkcgU1MuLCBJbnRlcm5ldCBD b250cm9sIE1lc3NhZ2UgUHJvdG9jb2wgCQkJCQkoSUNNUHY2KSBmb3IgVGhl IEludGVybmV0IFByb3RvY29sIFZlcnNpb24gNiAoSXB2NikgCQkJCVNwZWNp ZmljYXRpb24uIFJGQzE4ODUsIERpY2llbWJyZSAxOTk1Lg0NDShET05PU085 NygJCURPTk9TTyBNZWlzZWwsIFllemlkLCBDb21wYXJhY2nzbiwgVmVudGFq YXMsIAkJCQkJRGVzdmVudGFqYXMgeSB1bmEgTWV0b2RvbG9n7WEgcGFyYSBs YSBUcmFuc2ljafNuIGRlIAkJCQlJcHY0IGEgSXB2NiwgU2VwdGllbWJyZSBk ZSAxOTk3Lg0NKE1jQ0FOTjk2KAkJTWNDQU5OIEouLCBEZWVyaW5nIFMsLiBN b2d1bCBKLiwgUGF0aCBEaXNjb3ZlcnkgZm9yIElQIAkJCQlWZXJzaW9uIDYu IFJGQzE5ODEuIEFnb3N0byAxOTk2Lg0NKE1PR1VMOTAoCQlNT0dVTCBKLiwg RGVlcmluZyBTLiwgUGF0aCBNVFUgRGlzY292ZXJ5LiBSRkMxMTkxLiAJCQkJ Tm92aWVtYnJlIDE5OTAuDQ0NQWNlcmNhIGRlIElQdjQNDShDT01FUjk2KAkJ Q09NRVIuIEludGVybmV0d29ya2luZyB3aXRoIFRDUC9JUC4gUHJlbnRpY2Ug SGFsbC4NDQkJCWh0dHA6Ly9kcy5pbnRlcm5pYy5uZXQvcmZjLw0NQWNlcmNh IGRlIElQdjYNDShERUVSSU5HOTUyKAlERUVSSU5HIFMuLCBISU5ERU4gUi4g SW50ZXJuZXQgUHJvdG9jb2wgdmVyc2lvbiA2IChJUHY2KSAJCQlTcGVjaWZp Y2F0aW9uLiBSRkMxODgzLiBEZWNlbWJlciAxOTk1Lg0JCQlmdHA6Ly9mdHAu aXNpLmVkdS9pbi1ub3Rlcy9yZmMxODgzLnR4dA0NGACk0i+l4j2m3AinpQao pQappQaqAACrAQAg+goAADoACACzPgQTAAAAAAAAAAAAAAEBAAAAAIwjyAqO A44DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEACQAAA1oFAAAGAD8AAAAAABEA AAAmBg8AGAD/////AAAQAH4BAAClCwAAtg8AAPUPAAAJAAAAJgYPAAgA//// /wIAAAAXAAAAJgYPACMA/////wQAGwBUTlBQFACw6wAwAAAAABQAAADUF4cA AAAAAAAACgAAACYGDwAKAFROUFAAAAIA9AMJAAAAJgYPAAgA/////wMAAAAP AAAAJgYPABQAVE5QUAQADAABAAAAAQAAAAAAAAAFAAAACwKlC34BBQAAAAwC UAQ4DgQAAAAEAQ0ABwAAAPwCAQAAAAAAAAAEAAAALQEAAAkAAAD6AgAABgAA AAAAAAIiAAQAAAAtAQEABwAAABsE8Q9rD5AMugEHAAAA/AIAAP///wAAAAQA AAAtAQIACQAAAPoCAAAAAAAAAAAAACIABAAAAC0BAwAEAAAA8AEBABAAAAAm Bg8AFgD/////AAC2AQAArA0AAG8PAAC1DQAACQAAAPoCAAAGAAAAAAAAACIA BAAAAC0BAQAEAAAALQEAAAgAAAAlAwIAugGwDWoPsA0EAAAALQEDAAQAAADw AQEABAAAAC0BAgAIAAAAJgYPAAYA/////wEAEAAAACYGDwAWAP////8AALYB AADMDgAAbw8AANUOAAAJAAAA+gIAAAYAAAAAAAAAIgAEAAAALQEBAAQAAAAt AQAACAAAACUDAgC6AdAOag/QDgQAAAAtAQMABAAAAPABAQAEAAAALQECAAgA AAAmBg8ABgD/////AQAQAAAAJgYPABYA/////wAAFgUAAIwMAAAfBQAAtQ0A AAkAAAD6AgAABgAAAAAAAAAiAAQAAAAtAQEABAAAAC0BAAAIAAAAJQMCABoF kAwaBbANBAAAAC0BAwAEAAAA8AEBAAQAAAAtAQIACAAAACYGDwAGAP////8B ABAAAAAmBg8AFgD/////AADWCAAAjAwAAN8IAAC1DQAACQAAAPoCAAAGAAAA AAAAACIABAAAAC0BAQAEAAAALQEAAAgAAAAlAwIA2giQDNoIsA0EAAAALQED AAQAAADwAQEABAAAAC0BAgAIAAAAJgYPAAYA/////wEABAAAAC0BAAAJAAAA +gIFAAAAAAD///8AIgAEAAAALQEBAAcAAAAbBGgMLQKnC4ABBAAAAC0BAgAE AAAALQEDAA0AAAD7AgAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAC0BBAAFAAAA CQIAAAACBQAAABQCAAAAABUAAAD7ApD/AAAAAAAAvAIAAAAAAAAAAFRpbWVz IE5ldyBSb21hbgAdAAQAAAAtAQUABAAAAPABBAAFAAAACQIAAAACBQAAABQC AAAAAAQAAAAuARgABAAAAAIBAQAJAAAAMgowDLoBAQAAADAAOAAEAAAALgEB AAQAAAACAQIABAAAAAIBAgAEAAAALQEAAAQAAAAtAQEABwAAABsEaAzHBacL GgUEAAAALQECAAQAAAAtAQMABQAAAAkCAAAAAgUAAAAUAgAAAAAFAAAACQIA AAACBQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQAJAAAAMgowDFQFAQAAADgA OAAEAAAALgEBAAQAAAACAQIABAAAAAIBAgAEAAAALQEAAAQAAAAtAQEABwAA ABsEaAy1CacL0AgEAAAALQECAAQAAAAtAQMABQAAAAkCAAAAAgUAAAAUAgAA AAAFAAAACQIAAAACBQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQAKAAAAMgow DAoJAgAAADE2OAA4AAQAAAAuAQEABAAAAAIBAgAEAAAAAgECAAQAAAAtAQAA BAAAAC0BAQAHAAAAGwRoDLUPpwvQDgQAAAAtAQIABAAAAC0BAwAFAAAACQIA AAACBQAAABQCAAAAAAUAAAAJAgAAAAIFAAAAFAIAAAAABAAAAC4BGAAEAAAA AgEBAAoAAAAyCjAMCg8CAAAAMzE4ADgABAAAAC4BAQAEAAAAAgECAAQAAAAC AQIABAAAAC0BAAAEAAAALQEBAAcAAAAbBIgNXQPHDEACBAAAAC0BAgAEAAAA LQEDAAUAAAAJAgAAAAIFAAAAFAIAAAAABQAAAAkCAAAAAgUAAAAUAgAAAAAE AAAALgEYAAQAAAACAQEADAAAADIKUA16AgMAAAAxMzMAOAA4ADgABAAAAC4B AQAEAAAAAgECAAQAAAACAQIABAAAAC0BAAAEAAAALQEBAAcAAAAbBIgNHQbH DHAFBAAAAC0BAgAEAAAALQEDAAUAAAAJAgAAAAIFAAAAFAIAAAAABQAAAAkC AAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEACQAAADIKUA2qBQEAAAAw ADgABAAAAC4BAQAEAAAAAgECAAQAAAACAQIABAAAAC0BAAAEAAAALQEBAAcA AAAbBIgNLQzHDMAJBAAAAC0BAgAEAAAALQEDAAUAAAAJAgAAAAIFAAAAFAIA AAAABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEAEwAAADIK UA36CQgAAABDaGVja3N1bVEAPgAyADIAPgAsAD4AXQAEAAAALgEBAAQAAAAC AQIABAAAAAIBAgAEAAAALQEAAAQAAAAtAQEABwAAABsEqA6JC+cNcAUEAAAA LQECAAQAAAAtAQMABQAAAAkCAAAAAgUAAAAUAgAAAAAFAAAACQIAAAACBQAA ABQCAAAAAAQAAAAuARgABAAAAAIBAQAuAAAAMgpwDqoFGgAAAE3tbmltbyBN VFUgaGFzdGEgZXN0ZSBOb2RvagAfAD4AHwBdADgAHABqAEsAUQAcAD4AOAAs ACUAOAAcADIALAAlADIAHABRADgAPgA4AAQAAAAuAQEABAAAAAIBAgAEAAAA AgECAAQAAAAtAQAABAAAAC0BAQAHAAAAGwTPDxIODg8AAwQAAAAtAQIABAAA AC0BAwAFAAAACQIAAAACBQAAABQCAAAAAAUAAAAJAgAAAAIFAAAAFAIAAAAA BAAAAC4BGAAEAAAAAgEBAD8AAAAyCpcPOgMlAAAARW5jYWJlemFkbyBJUCAr IDY0IGJpdHMgZGUgZGF0b3MgZGVsIABLAD4AMgA4AD4AMgAyADgAPgA4ABwA LABEABwAQAAcADgAOAAcAD4AHwAlACwAHAA+ADIAHAA+ADgAJQA4ACwAHAA+ ADIAHwAcAAQAAAAuAQEABAAAAAIBAgAFAAAACQIAAAACBQAAABQCAAAAAAQA AAAuARgABAAAAAIBAQAWAAAAMgqXDykKCgAAAERhdGFncmFtYSBRADgAJQA4 ADgAMgA4AF0AOAAcAAQAAAAuAQEABAAAAAIBAgAFAAAACQIAAAACBQAAABQC AAAAAAQAAAAuARgABAAAAAIBAQATAAAAMgqXD2IMCAAAAG9yaWdpbmFsOAAy AB8AOAAfAD4AOAAfAAQAAAAuAQEABAAAAAIBAgAEAAAAAgECAAQAAAAtAQEA BAAAAC0BAAAQAAAA+wIUAAkAAAAAALwCAAAAAAECAiJTeXN0ZW0AbgQAAAAt AQQABAAAAPABBQAPAAAAJgYPABQAVE5QUAQADAAAAAAAAAAAAAAAAAAJAAAA JgYPAAgA/////wEAAAADAAAAAAAAAAAAAAAAAAAAAABkb1oLAAA6AAgAsz4E EwAAAAAAAAAAAAABAQAAAACMI8gKjgOOAwAAAAAAAAAAAAAAAAAAAAAAAAAA AAABAAkAAAODBQAABgBXAAAAAAARAAAAJgYPABgA/////wAAEAB+AQAA3gQA ALYPAAAuCQAACQAAACYGDwAIAP////8CAAAAFwAAACYGDwAjAP////8EABsA VE5QUBQAsOsAMAAAAAAUAAAA1BeHAAAAAAAAAAoAAAAmBg8ACgBUTlBQAAAC APQDCQAAACYGDwAIAP////8DAAAADwAAACYGDwAUAFROUFAEAAwAAQAAAAEA AAAAAAAABQAAAAsC3gR+AQUAAAAMAlAEOA4EAAAABAENAAcAAAD8AgEAAAAA AAAABAAAAC0BAAAJAAAA+gIAAAYAAAAAAAACIgAEAAAALQEBAAcAAAAbBCoJ aw/JBboBBwAAAPwCAAD///8AAAAEAAAALQECAAkAAAD6AgAAAAAAAAAAAAAi AAQAAAAtAQMABAAAAPABAQAQAAAAJgYPABYA/////wAAtgEAAOUGAABvDwAA 7gYAAAkAAAD6AgAABgAAAAAAAAAiAAQAAAAtAQEABAAAAC0BAAAIAAAAJQMC ALoB6QZqD+kGBAAAAC0BAwAEAAAA8AEBAAQAAAAtAQIACAAAACYGDwAGAP// //8BABAAAAAmBg8AFgD/////AAC2AQAABQgAAG8PAAAOCAAACQAAAPoCAAAG AAAAAAAAACIABAAAAC0BAQAEAAAALQEAAAgAAAAlAwIAugEJCGoPCQgEAAAA LQEDAAQAAADwAQEABAAAAC0BAgAIAAAAJgYPAAYA/////wEAEAAAACYGDwAW AP////8AABYFAADFBQAAHwUAAO4GAAAJAAAA+gIAAAYAAAAAAAAAIgAEAAAA LQEBAAQAAAAtAQAACAAAACUDAgAaBckFGgXpBgQAAAAtAQMABAAAAPABAQAE AAAALQECAAgAAAAmBg8ABgD/////AQAQAAAAJgYPABYA/////wAA1ggAAMUF AADfCAAA7gYAAAkAAAD6AgAABgAAAAAAAAAiAAQAAAAtAQEABAAAAC0BAAAI AAAAJQMCANoIyQXaCOkGBAAAAC0BAwAEAAAA8AEBAAQAAAAtAQIACAAAACYG DwAGAP////8BAAQAAAAtAQAACQAAAPoCBQAAAAAA////ACIABAAAAC0BAQAH AAAAGwShBS0C4ASAAQQAAAAtAQIABAAAAC0BAwANAAAA+wIAAAAAAAAAAAAA AAAAAAAAAAAAAAQAAAAtAQQABQAAAAkCAAAAAgUAAAAUAgAAAAAVAAAA+wKQ /wAAAAAAALwCAAAAAAAAAABUaW1lcyBOZXcgUm9tYW4ANAAEAAAALQEFAAQA AADwAQQABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEACQAA ADIKaQW6AQEAAAAwADgABAAAAC4BAQAEAAAAAgECAAQAAAACAQIABAAAAC0B AAAEAAAALQEBAAcAAAAbBKEFxwXgBBoFBAAAAC0BAgAEAAAALQEDAAUAAAAJ AgAAAAIFAAAAFAIAAAAABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQA AAACAQEACQAAADIKaQVUBQEAAAA4ADgABAAAAC4BAQAEAAAAAgECAAQAAAAC AQIABAAAAC0BAAAEAAAALQEBAAcAAAAbBKEFtQngBNAIBAAAAC0BAgAEAAAA LQEDAAUAAAAJAgAAAAIFAAAAFAIAAAAABQAAAAkCAAAAAgUAAAAUAgAAAAAE AAAALgEYAAQAAAACAQEACgAAADIKaQUKCQIAAAAxNjgAOAAEAAAALgEBAAQA AAACAQIABAAAAAIBAgAEAAAALQEAAAQAAAAtAQEABwAAABsEoQW1D+AE0A4E AAAALQECAAQAAAAtAQMABQAAAAkCAAAAAgUAAAAUAgAAAAAFAAAACQIAAAAC BQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQAKAAAAMgppBQoPAgAAADMxOAA4 AAQAAAAuAQEABAAAAAIBAgAEAAAAAgECAAQAAAAtAQAABAAAAC0BAQAHAAAA GwTBBl0DAAZAAgQAAAAtAQIABAAAAC0BAwAFAAAACQIAAAACBQAAABQCAAAA AAUAAAAJAgAAAAIFAAAAFAIAAAAABAAAAC4BGAAEAAAAAgEBAAwAAAAyCokG egIDAAAAMTM0ADgAOAA4AAQAAAAuAQEABAAAAAIBAgAEAAAAAgECAAQAAAAt AQAABAAAAC0BAQAHAAAAGwTBBh0GAAZwBQQAAAAtAQIABAAAAC0BAwAFAAAA CQIAAAACBQAAABQCAAAAAAUAAAAJAgAAAAIFAAAAFAIAAAAABAAAAC4BGAAE AAAAAgEBAAkAAAAyCokGqgUBAAAAMAA4AAQAAAAuAQEABAAAAAIBAgAEAAAA AgECAAQAAAAtAQAABAAAAC0BAQAHAAAAGwTBBi0MAAbACQQAAAAtAQIABAAA AC0BAwAFAAAACQIAAAACBQAAABQCAAAAAAUAAAAJAgAAAAIFAAAAFAIAAAAA BAAAAC4BGAAEAAAAAgEBABMAAAAyCokG+gkIAAAAQ2hlY2tzdW1RAD4AMgAy AD4ALAA+AF0ABAAAAC4BAQAEAAAAAgECAAQAAAACAQIABAAAAC0BAAAEAAAA LQEBAAcAAAAbBOEHLg4gBzADBAAAAC0BAgAEAAAALQEDAAUAAAAJAgAAAAIF AAAAFAIAAAAABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEA VwAAADIKqQdqAzUAAABN7W5pbW8gTVRVIGRlc2RlIGVsIG5vZG8gb3JpZ2Vu IGhhc3RhIGVsIG5vZG8gZGVzdGlubwBqAB8APgAfAF0AOAAcAGoASwBRABwA PgAyACwAPgAyABwAMgAfABwAPgA4AD4AOAAcADgAMgAfADgAMgA+ABwAPgA4 ACwAJQA4ABwAMgAfABwAPgA4AD4AOAAcAD4AMgAsACUAHwA+ADgABAAAAC4B AQAEAAAAAgECAAQAAAACAQIABAAAAC0BAAAEAAAALQEBAAcAAAAbBAgJEg5H CAADBAAAAC0BAgAEAAAALQEDAAUAAAAJAgAAAAIFAAAAFAIAAAAABQAAAAkC AAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEAPwAAADIK0Ag6AyUAAABF bmNhYmV6YWRvIElQICsgNjQgYml0cyBkZSBkYXRvcyBkZWwgAEsAPgAyADgA PgAyADIAOAA+ADgAHAAsAEQAHABAABwAOAA4ABwAPgAfACUALAAcAD4AMgAc AD4AOAAlADgALAAcAD4AMgAfABwABAAAAC4BAQAEAAAAAgECAAUAAAAJAgAA AAIFAAAAFAIAAAAABAAAAC4BGAAEAAAAAgEBABYAAAAyCtAIKQoKAAAARGF0 YWdyYW1hIFEAOAAlADgAOAAyADgAXQA4ABwABAAAAC4BAQAEAAAAAgECAAUA AAAJAgAAAAIFAAAAFAIAAAAABAAAAC4BGAAEAAAAAgEBABMAAAAyCtAIYgwI AAAAb3JpZ2luYWw4ADIAHwA4AB8APgA4AB8ABAAAAC4BAQAEAAAAAgECAAQA AAACAQIABAAAAC0BAQAEAAAALQEAABAAAAD7AhQACQAAAAAAvAIAAAAAAQIC IlN5c3RlbQBuBAAAAC0BBAAEAAAA8AEFAA8AAAAmBg8AFABUTlBQBAAMAAAA AAAAAAAAAAAAAAkAAAAmBg8ACAD/////AQAAAAMAAAAAAAAAAAAyCjAMugEB AAAAMAA4AAQAAAAuAQEAbmmaHAAAOgAIAPlDPyEAAAAAAAAAAAAAAQEAAAAA iSbZEkgDSAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAJAAADJQ4AAAcAFwAA AAAAEQAAACYGDwAYAP////8AABAA6wAAAAsIAABVEAAAlQ8AAAkAAAAmBg8A CAD/////AgAAABcAAAAmBg8AIwD/////BAAbAFROUFAUALDrADAAAAAAFAAA ANQXhwAAAAAAkAAKAAAAJgYPAAoAVE5QUAAAAgD0AwkAAAAmBg8ACAD///// AwAAAA8AAAAmBg8AFABUTlBQBAAMAAEAAAABAAAAAAAAAAUAAAALAgsI6wAF AAAADAKKB2oPBAAAAAQBDQAHAAAA/AIBAAAAAAAAAAQAAAAtAQAACQAAAPoC AAAGAAAAAAAAAiIABAAAAC0BAQAHAAAAGwRqCioMqQk5CwcAAAD8AgAA//// AAAABAAAAC0BAgAJAAAA+gIAAAAAAAAAAAAAIgAEAAAALQEDAAQAAADwAQEA BAAAAC0BAAAJAAAA+gIAAAYAAAAAAAACIgAEAAAALQEBAAcAAAAYBMQKwQ9D CfAMBAAAAC0BAgAEAAAALQEDAAQAAADwAQEABAAAAC0BAAAJAAAA+gIFAAAA AAD///8AIgAEAAAALQEBAAcAAAAbBMQKnA8wCVANBAAAAC0BAgAEAAAALQED AA0AAAD7AgAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAC0BBAAFAAAACQIAAAAC BQAAABQCAAAAABUAAAD7AqD/AAAAAAAAvAIAAAAAAAAAElRpbWVzIE5ldyBS b21hbgAZAAQAAAAtAQUABAAAAPABBAAFAAAACQIAAAACBQAAABQCAAAAAAQA AAAuARgABAAAAAIBAQAMAAAAMgqpCSMOAwAAAFJlZABFACsANQAEAAAALgEB AAQAAAACAQIABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEA EwAAADIKHArZDQgAAAA0MC4wLjAuMDAAMAAYADAAGAAwABgAMAAEAAAALgEB AAQAAAACAQIABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEA EwAAADIKjwqKDQgAAABNVFU9MjQwMFsAQABFADcAMAAwADAAMAAEAAAALgEB AAQAAAACAQIABAAAAAIBAgAEAAAALQEAAAQAAAAtAQEABwAAABsEbgryC8AJ SAsEAAAALQECAAQAAAAtAQMABQAAAAkCAAAAAgUAAAAUAgAAAAAFAAAACQIA AAACBQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQAJAAAAMgo5CoILAQAAAFMA NQAEAAAALgEBAAQAAAACAQIABAAAAAIBAgAEAAAALQEAAAkAAAD6AgAABgAA AAAAAAIiAAQAAAAtAQQABwAAABgE9AohCnMJUAcEAAAALQECAAQAAAAtAQMA BAAAAPABBAAEAAAALQEAAAQAAAAtAQEABwAAABsE9Ar8CWAJsAcEAAAALQEC AAQAAAAtAQMABQAAAAkCAAAAAgUAAAAUAgAAAAAFAAAACQIAAAACBQAAABQC AAAAAAQAAAAuARgABAAAAAIBAQAMAAAAMgrZCYMIAwAAAFJlZABFACsANQAE AAAALgEBAAQAAAACAQIABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQA AAACAQEAEwAAADIKTAo5CAgAAAAzMC4wLjAuMDAAMAAYADAAGAAwABgAMAAE AAAALgEBAAQAAAACAQIABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQA AAACAQEAEwAAADIKvwrqBwgAAABNVFU9MzYwMFsAQABFADcAMAAwADAAMAAE AAAALgEBAAQAAAACAQIABAAAAAIBAgAEAAAALQEAAAkAAAD6AgAABgAAAAAA AAIiAAQAAAAtAQQABwAAABgE9ApBBXMJcAIEAAAALQECAAQAAAAtAQMABAAA APABBAAEAAAALQEAAAQAAAAtAQEABwAAABsE9AocBWAJ0AIEAAAALQECAAQA AAAtAQMABQAAAAkCAAAAAgUAAAAUAgAAAAAFAAAACQIAAAACBQAAABQCAAAA AAQAAAAuARgABAAAAAIBAQAMAAAAMgrZCaMDAwAAAFJlZABFACsANQAEAAAA LgEBAAQAAAACAQIABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAAC AQEAEwAAADIKTApZAwgAAAAyMC4wLjAuMDAAMAAYADAAGAAwABgAMAAEAAAA LgEBAAQAAAACAQIABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAAC AQEAEwAAADIKvwoKAwgAAABNVFU9MjQwMFsAQABFADcAMAAwADAAMAAEAAAA LgEBAAQAAAACAQIABAAAAAIBAgAEAAAALQEAAAkAAAD6AgAABgAAAAAAAAIi AAQAAAAtAQQABwAAABgEVA5xBdMMoAIEAAAALQECAAQAAAAtAQMABAAAAPAB BAAEAAAALQEAAAQAAAAtAQEABwAAABsEVA5MBcAMAAMEAAAALQECAAQAAAAt AQMABQAAAAkCAAAAAgUAAAAUAgAAAAAFAAAACQIAAAACBQAAABQCAAAAAAQA AAAuARgABAAAAAIBAQAMAAAAMgo5DdMDAwAAAFJlZABFACsANQAEAAAALgEB AAQAAAACAQIABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEA EwAAADIKrA2JAwgAAAAxMC4wLjAuMDAAMAAYADAAGAAwABgAMAAEAAAALgEB AAQAAAACAQIABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEA EwAAADIKHw46AwgAAABNVFU9MTIwMFsAQABFADcAMAAwADAAMAAEAAAALgEB AAQAAAACAQIABAAAAAIBAgAEAAAALQEAAAkAAAD6AgAABgAAAAAAAAIiAAQA AAAtAQQABwAAABgEVA6hC9MM0AgEAAAALQECAAQAAAAtAQMABAAAAPABBAAE AAAALQEAAAQAAAAtAQEABwAAABsEVA58C8AMMAkEAAAALQECAAQAAAAtAQMA BQAAAAkCAAAAAgUAAAAUAgAAAAAFAAAACQIAAAACBQAAABQCAAAAAAQAAAAu ARgABAAAAAIBAQAMAAAAMgo5DQMKAwAAAFJlZABFACsANQAEAAAALgEBAAQA AAACAQIABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEAEwAA ADIKrA25CQgAAAA1MC4wLjAuMDAAMAAYADAAGAAwABgAMAAEAAAALgEBAAQA AAACAQIABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEAEwAA ADIKHw5qCQgAAABNVFU9MjQwMFsAQABFADcAMAAwADAAMAAEAAAALgEBAAQA AAACAQIABAAAAAIBAgAEAAAALQEAAAkAAAD6AgAABgAAAAAAAAIiAAQAAAAt AQQABwAAABsEagq6BqkJyQUEAAAALQECAAQAAAAtAQMABAAAAPABBAAEAAAA LQEAAAQAAAAtAQEABwAAABsEbgqKBsAJ0AUEAAAALQECAAQAAAAtAQMABQAA AAkCAAAAAgUAAAAUAgAAAAAFAAAACQIAAAACBQAAABQCAAAAAAQAAAAuARgA BAAAAAIBAQAJAAAAMgo5CgoGAQAAAFIARQAEAAAALgEBAAQAAAACAQIABAAA AAIBAgAEAAAALQEAAAkAAAD6AgAABgAAAAAAAAIiAAQAAAAtAQQABwAAABsE SgxqAokLeQEEAAAALQECAAQAAAAtAQMABAAAAPABBAAEAAAALQEAAAQAAAAt AQEABwAAABsETgw9AqALfQEEAAAALQECAAQAAAAtAQMABQAAAAkCAAAAAgUA AAAUAgAAAAAFAAAACQIAAAACBQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQAJ AAAAMgoZDLcBAQAAAFEASwAEAAAALgEBAAQAAAACAQIABAAAAAIBAgAEAAAA LQEAAAkAAAD6AgAABgAAAAAAAAIiAAQAAAAtAQQABwAAABsE+g2qBzkNuQYE AAAALQECAAQAAAAtAQMABAAAAPABBAAEAAAALQEAAAQAAAAtAQEABwAAABsE /g13B1ANwgYEAAAALQECAAQAAAAtAQMABQAAAAkCAAAAAgUAAAAUAgAAAAAF AAAACQIAAAACBQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQAJAAAAMgrJDfwG AQAAAFQAQAAEAAAALgEBAAQAAAACAQIABAAAAAIBAgAQAAAAJgYPABYA//// /wAALAwAABwKAAD1DAAAJQoAAAkAAAD6AgAABgAAAAAAAAAiAAQAAAAtAQQA BAAAAC0BAAAIAAAAJQMCADAMIArwDCAKBAAAAC0BAwAEAAAA8AEEAAQAAAAt AQIACAAAACYGDwAGAP////8BABAAAAAmBg8AFgD/////AAAcCgAAHAoAAEUL AAAlCgAACQAAAPoCAAAGAAAAAAAAACIABAAAAC0BBAAEAAAALQEAAAgAAAAl AwIAIAogCkALIAoEAAAALQEDAAQAAADwAQQABAAAAC0BAgAIAAAAJgYPAAYA /////wEAEAAAACYGDwAWAP////8AALwGAAAcCgAAVQcAACUKAAAJAAAA+gIA AAYAAAAAAAAAIgAEAAAALQEEAAQAAAAtAQAACAAAACUDAgBQByAKwAYgCgQA AAAtAQMABAAAAPABBAAEAAAALQECAAgAAAAmBg8ABgD/////AQAQAAAAJgYP ABYA/////wAAPAUAABwKAADVBQAAJQoAAAkAAAD6AgAABgAAAAAAAAAiAAQA AAAtAQQABAAAAC0BAAAIAAAAJQMCAEAFIArQBSAKBAAAAC0BAwAEAAAA8AEE AAQAAAAtAQIACAAAACYGDwAGAP////8BABAAAAAmBg8AFgD/////AADcAQAA TAoAAOUBAAB1CwAACQAAAPoCAAAGAAAAAAAAACIABAAAAC0BBAAEAAAALQEA AAgAAAAlAwIA4AFwC+ABUAoEAAAALQEDAAQAAADwAQQABAAAAC0BAgAIAAAA JgYPAAYA/////wEAEAAAACYGDwAWAP////8AANwBAABMCgAAdQIAAFUKAAAJ AAAA+gIAAAYAAAAAAAAAIgAEAAAALQEEAAQAAAAtAQAACAAAACUDAgDgAVAK cAJQCgQAAAAtAQMABAAAAPABBAAEAAAALQECAAgAAAAmBg8ABgD/////AQAQ AAAAJgYPABYA/////wAA3AEAACwMAADlAQAAtQ0AAAkAAAD6AgAABgAAAAAA AAAiAAQAAAAtAQQABAAAAC0BAAAIAAAAJQMCAOABMAzgAbANBAAAAC0BAwAE AAAA8AEEAAQAAAAtAQIACAAAACYGDwAGAP////8BABAAAAAmBg8AFgD///// AADcAQAArA0AAKUCAAC1DQAACQAAAPoCAAAGAAAAAAAAACIABAAAAC0BBAAE AAAALQEAAAgAAAAlAwIA4AGwDaACsA0EAAAALQEDAAQAAADwAQQABAAAAC0B AgAIAAAAJgYPAAYA/////wEAEAAAACYGDwAWAP////8AAGwFAAB8DQAAxQYA AIUNAAAJAAAA+gIAAAYAAAAAAAAAIgAEAAAALQEEAAQAAAAtAQAACAAAACUD AgBwBYANwAaADQQAAAAtAQMABAAAAPABBAAEAAAALQECAAgAAAAmBg8ABgD/ ////AQAQAAAAJgYPABYA/////wAArAcAAHwNAADVCAAAhQ0AAAkAAAD6AgAA BgAAAAAAAAAiAAQAAAAtAQQABAAAAC0BAAAIAAAAJQMCALAHgA3QCIANBAAA AC0BAwAEAAAA8AEEAAQAAAAtAQIACAAAACYGDwAGAP////8BABAAAAAmBg8A FgD/////AAAMAgAAPAwAAGUDAACDDAAACQAAAPoCAAAGAAAAAAAAACIABAAA AC0BBAAEAAAALQEAAAgAAAAlAwIAYANgDEwCYAwEAAAALQEBAAQAAADwAQQA BwAAAPwCAAAAAAAAAAAEAAAALQEEAAoAAAAkAwMATgJADBACYAxOAn8MBAAA AC0BAwAEAAAALQECAAgAAAAmBg8ABgD/////AQAQAAAAJgYPABYA/////wAA DAIAABwLAABlAwAAYwsAAAkAAAD6AgAABgAAAAAAAAAiAAQAAAAtAQYABAAA AC0BAAAIAAAAJQMCAGADQAtMAkALBAAAAC0BAQAEAAAA8AEGAAQAAAAtAQQA CgAAACQDAwBOAiALEAJAC04CXwsEAAAALQEDAAQAAAAtAQIACAAAACYGDwAG AP////8BABAAAAAmBg8AFgD/////AAB8BQAA/AgAAMQFAAD1CQAACQAAAPoC AAAGAAAAAAAAACIABAAAAC0BBgAEAAAALQEAAAgAAAAlAwIAoAUACaAFtAkE AAAALQEBAAQAAADwAQYABAAAAC0BBAAKAAAAJAMDAIAFsgmgBfAJvwWyCQQA AAAtAQMABAAAAC0BAgAIAAAAJgYPAAYA/////wEAEAAAACYGDwAWAP////8A APwGAAD8CAAARAcAAPUJAAAJAAAA+gIAAAYAAAAAAAAAIgAEAAAALQEGAAQA AAAtAQAACAAAACUDAgAgBwAJIAe0CQQAAAAtAQEABAAAAPABBgAEAAAALQEE AAoAAAAkAwMAAAeyCSAH8Ak/B7IJBAAAAC0BAwAEAAAALQECAAgAAAAmBg8A BgD/////AQAQAAAAJgYPABYA/////wAAvAoAAPwIAAAECwAA9QkAAAkAAAD6 AgAABgAAAAAAAAAiAAQAAAAtAQYABAAAAC0BAAAIAAAAJQMCAOAKAAngCrQJ BAAAAC0BAQAEAAAA8AEGAAQAAAAtAQQACgAAACQDAwDACrIJ4ArwCf8KsgkE AAAALQEDAAQAAAAtAQIACAAAACYGDwAGAP////8BABAAAAAmBg8AFgD///// AAA8DAAA/AgAAIQMAAD1CQAACQAAAPoCAAAGAAAAAAAAACIABAAAAC0BBgAE AAAALQEAAAgAAAAlAwIAYAwACWAMtAkEAAAALQEBAAQAAADwAQYABAAAAC0B BAAKAAAAJAMDAEAMsglgDPAJfwyyCQQAAAAtAQMABAAAAC0BAgAIAAAAJgYP AAYA/////wEAEAAAACYGDwAWAP////8AAD0GAACsDQAAhAYAAHUOAAAJAAAA +gIAAAYAAAAAAAAAIgAEAAAALQEGAAQAAAAtAQAACAAAACUDAgBgBnAOYAbs DQQAAAAtAQEABAAAAPABBgAEAAAALQEEAAoAAAAkAwMAgAbuDWAGsA1BBu4N BAAAAC0BAwAEAAAALQECAAgAAAAmBg8ABgD/////AQAQAAAAJgYPABYA//// /wAAvQcAAKwNAAAECAAAdQ4AAAkAAAD6AgAABgAAAAAAAAAiAAQAAAAtAQYA BAAAAC0BAAAIAAAAJQMCAOAHcA7gB+wNBAAAAC0BAQAEAAAA8AEGAAQAAAAt AQQACgAAACQDAwAACO4N4AewDcEH7g0EAAAALQEDAAQAAAAtAQIACAAAACYG DwAGAP////8BAAQAAAAtAQAABAAAAC0BAQAHAAAAGwTVCKMNJwj2CwQAAAAt AQIABAAAAC0BAwAFAAAACQIAAAACBQAAABQCAAAAAAUAAAAJAgAAAAIFAAAA FAIAAAAABAAAAC4BGAAEAAAAAgEBABMAAAAyCqAIMAwIAAAANDAuMC4wLjcw ADAAGAAwABgAMAAYADAABAAAAC4BAQAEAAAAAgECAAQAAAACAQIABAAAAC0B AAAEAAAALQEBAAcAAAAbBNUIkwsnCOYJBAAAAC0BAgAEAAAALQEDAAUAAAAJ AgAAAAIFAAAAFAIAAAAABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQA AAACAQEAEwAAADIKoAggCggAAAAzMC4wLjAuNzAAMAAYADAAGAAwABgAMAAE AAAALgEBAAQAAAACAQIABAAAAAIBAgAEAAAALQEAAAQAAAAtAQEABwAAABsE 1QgzCCcIhgYEAAAALQECAAQAAAAtAQMABQAAAAkCAAAAAgUAAAAUAgAAAAAF AAAACQIAAAACBQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQATAAAAMgqgCMAG CAAAADMwLjAuMC42MAAwABgAMAAYADAAGAAwAAQAAAAuAQEABAAAAAIBAgAE AAAAAgECAAQAAAAtAQAABAAAAC0BAQAHAAAAGwTVCCMGJwh2BAQAAAAtAQIA BAAAAC0BAwAFAAAACQIAAAACBQAAABQCAAAAAAUAAAAJAgAAAAIFAAAAFAIA AAAABAAAAC4BGAAEAAAAAgEBABMAAAAyCqAIsAQIAAAAMjAuMC4wLjYwADAA GAAwABgAMAAYADAABAAAAC4BAQAEAAAAAgECAAQAAAACAQIABAAAAC0BAAAE AAAALQEBAAcAAAAbBKULAwX3ClYDBAAAAC0BAgAEAAAALQEDAAUAAAAJAgAA AAIFAAAAFAIAAAAABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAAC AQEAEwAAADIKcAuQAwgAAAAyMC4wLjAuNTAAMAAYADAAGAAwABgAMAAEAAAA LgEBAAQAAAACAQIABAAAAAIBAgAEAAAALQEAAAQAAAAtAQEABwAAABsExQwz BRcMhgMEAAAALQECAAQAAAAtAQMABQAAAAkCAAAAAgUAAAAUAgAAAAAFAAAA CQIAAAACBQAAABQCAAAAAAQAAAAuARgABAAAAAIBAQATAAAAMgqQDMADCAAA ADEwLjAuMC41MAAwABgAMAAYADAAGAAwAAQAAAAuAQEABAAAAAIBAgAEAAAA AgECAAQAAAAtAQAABAAAAC0BAQAHAAAAGwQ1D+MGhw42BQQAAAAtAQIABAAA AC0BAwAFAAAACQIAAAACBQAAABQCAAAAAAUAAAAJAgAAAAIFAAAAFAIAAAAA BAAAAC4BGAAEAAAAAgEBABMAAAAyCgAPcAUIAAAAMTAuMC4wLjgwADAAGAAw ABgAMAAYADAABAAAAC4BAQAEAAAAAgECAAQAAAACAQIABAAAAC0BAAAEAAAA LQEBAAcAAAAbBDUP8wiHDkYHBAAAAC0BAgAEAAAALQEDAAUAAAAJAgAAAAIF AAAAFAIAAAAABQAAAAkCAAAAAgUAAAAUAgAAAAAEAAAALgEYAAQAAAACAQEA EwAAADIKAA+ABwgAAAA1MC4wLjAuODAAMAAYADAAGAAwABgAMAAEAAAALgEB AAQAAAACAQIABAAAAAIBAgAEAAAALQEAAAkAAAD6AgAABgAAAAAAAAIiAAQA AAAtAQYABwAAABsEkQ9REBAI8AAEAAAALQECAAQAAAAtAQMABAAAAPABBgAE AAAALQEBAAQAAAAtAQAAEAAAAPsCFAAJAAAAAAC8AgAAAAABAgIiU3lzdGVt AG4EAAAALQEGAAQAAADwAQUADwAAACYGDwAUAFROUFAEAAwAAAAAAAAAAAAA AAAACQAAACYGDwAIAP////8BAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAAAQDAACG AwAAigMAAO4DAAB7BAAAgwQAADMGAABEBgAAbQYAAH0GAABPDgAAkQ4AABYQ AAAmEAAAkhAAAKoQAADrEgAA7BIAAB0TAAAzEwAArhQAAK8UAAAwFgAAaRYA AAwZAAANGQAAOxkAAGsZAADKGgAA7xoAAKAcAAChHAAAqh0AAKsdAABZHwAA Wh8AALohAAC7IQAA/yQAAEIlAAAAKQAAASkAACcqAAAoKgAAeS0AAJYtAAAm MAAANjAAAHY0AACDNAAAhTQAAIo0AACoNAAAqjQAABQ1AAAaNQAAOzUAAD01 AACfNQAAtTUAAEk2AABPNgAA7jYAAPY2AAA+OAAAUTgAAMw5AADgOQAAGToA ACU6AAAoOgAAKToAADI6AAAzOgAAyjoAAMs6AADTOgAA1DoAAP36/ff9+v36 /fr9+v3z/fP97v3z/en9+v3k/ff9+v3f/dr91f3Q/fr93/3a/fr9+v36/ffz 9/338/f99/33/ff99/33/fr9y/3G/cv9xgAACEoDAQBdYxgAAAhKAwEAW2MY AAAISgMDALljGAAACEoDAwC4YxgAAAhKAwMAt2MYAAAISgMDALZjGAAACHUB RASsUwAAAAh1AUQEUEgAAAAIdQFEBFQ9AAAAB1WBVoFjGAAFVYFjGAAFVYFj GgADYxgAAE7UOgAAYjsAAGM7AABrOwAAbDsAAMs7AADMOwAA0zsAANQ7AAAf PAAALjwAAC88AAAwPAAANzwAADg8AACOPAAAnTwAAJ48AACfPAAAqTwAAKo8 AAA5PQAA5XoAAP34/fP9+P3z/fD9+P3z/fD9+P3z/e4AAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ1AQAFVYFjGAAI SgMBAF1jGAAACEoDAQBbYxgAAANjGAAAFgADAAABAwAAAgMAAAMDAAAEAwAA BQMAAIYDAACHAwAAiAMAAIkDAACKAwAAoQMAAMIDAADVAwAA7gMAAO8DAADw AwAACQQAACAEAABHBAAAdwQAAHgEAAB5BAAAegQAAHsEAACDBAAAhAQAAIUE AAAvBgAAMAYAADEGAAAyBgAAMwYAAGYGAABnBgAAaAYAAGkGAABqBgAAawYA AGwGAABtBgAAfQYAAH4GAAAdBwAAHgcAAB8HAAD9AAFYICwB/QABWCAsAf0A AVggLAH9AAFYICwB+gABWCAsAfoAA1ggLAH6AAFYICwB+gABWCAsAfoAAVgg LAH6AAFYICwB+gABWCAsAfoAAVggLAH6AAFYICwB+gABWCAsAfoAAVggLAH6 AAFYICwB+gABWCAsAfoAAVggLAH6AAFYICwB+gABWCAsAfoAAVggLAH9AAFY ICwB/QABWCAsAf0AAVggLAH9AAFYICwB/QABWCAsAf0AAVggLAH9AAVYICwB /QABWCAsAf0AAVggLAH9AAFYICwB/QABWCAsAf0AAVggLAH9AAFYICwB/QAB WCAsAf0AAVggLAH9AAFYICwB/QABWCAsAf0AAVggLAH9AAFYICwB/QABWCAs Af0AAVggLAH9AAJYICwB/QABWCAsAf0AAVggLAEAAgAABQEAAgAABQMtHwcA ACsIAACdCAAAnggAAJ8IAACgCAAAvgkAAGkLAABqCwAAeQ0AAHoNAABKDgAA Sw4AAEwOAABNDgAATg4AAE8OAACRDgAAkg4AAJMOAACUDgAARQ8AAEYPAACN DwAA3w8AAOAPAADhDwAA+w8AAPwPAAD9DwAAZhAAAGcQAADMEgAA2gAEWCAs AdoAAlggLAHXAAFYICwB1wABWCAsAdcAAVggLAHXAARYICwB1wAFWCAsAdcA AVggLAHXAAZYICwB0QABWCDCAdcAA1ggLAHXAAFYICwB1wABWCAsAdcAAVgg LAHXAAFYICwB1wABWCAsAdcAAlggLAHXAAFYICwB1wABWCAsAdcAAVggLAHX AAJYICwB1wABWCAsAdoAAVggLAHaAAFYICwB1wABWCAsAdcAAVggLAHXAAFY ICwB1wABWCAsAdcAAVggLAHXAAJYICwB1wABWCAsAdoACFggLAEAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAUAAAUDFGgBAQAAAAIAAAUDACUAAAUDDQsRaAETmP4MNP8B AAgAAAEAAAABAGgBAAAAAAAAtwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAPBQABaAEAACDMEgAAzRIAAOsSAADtEgAA7hIAAO8SAADwEgAA8RIA APISAACPFAAAkBQAAK4UAACwFAAAsRQAALIUAACzFAAAHxYAACAWAAAhFgAA IhYAACMWAAAkFgAAJRYAACYWAAAnFgAAKBYAACkWAADhAAFYICwB4QABWCAs AeEAAVggyQnhAAFYICwB4QABWCAsAeEAAVggLAHhAAFYICwB4QABWCAsAbsA BVggLAG4AAFYICwBuAABWCAsAbgAAVggyQm4AAFYICwBuAABWCAsAbgAAVgg LAGWAAVYICwBuAABWCAsAbgAAVggLAG4AAFYICwBuAABWCAsAbgAAVggLAG4 AAFYICwBuAABWCAsAbgAAVggLAG4AAFYICwBuAABWCAsAQAAAAAAAAAAAAAh AAAFAw0LERsBE+X+DDT/AQAIAAABAAAAAQAbAQAAAAAAALcAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAUDACUAAAUDDQsRaAETmP4MNP8B AAgAAAEAAAABAGgBAAAAAAAAtwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAPBQABaAEAAAAeAAAFAw0MDDQAAAAAAAABgAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGikWAAAqFgAAKxYAACwW AAAtFgAALhYAAC8WAAAwFgAAaRYAAGoWAABrFgAALBcAAMMXAADEFwAAxRcA ALkYAAC6GAAACxkAAAwZAAAOGQAADxkAABAZAAA7GQAASxkAAGAZAABrGQAA bBkAAHUZAACCGQAAhxkAAIgZAACRGQAAnhkAAP0AAVggLAH9AAFYICwB/QAB WCAsAf0AAVggLAH9AAFYICwB/QABWCAsAf0AAVggLAH9AAJYICwB/QABWCAs Af0AAVggLAH9AANYICwB/QACWCAsAf0AAVggLAH9AAFYICwB/QADWCAsAf0A AVggLAH9AAFYICwB/QABWCAsAf0AAVgg0g/9AAFYICwB/QABWCAsAf0AAVgg LAH5AAFzCiwB+QABcwosAfkAAXMKLAHUAAFzCiwB+QABcwosAfkAAXMKLAH5 AAFzCiwBswABcwosAfkAAXMKLAH5AAFzCiwBAAAgAAAYARkBuEYAuwkACQAJ AAkACQAJAL4oAAO6/7kKuBW3IAAA//8AAAAAAAAAAP//AAAAAAAAAAD//wAA AAAAAAAkAAAYARkBuEYAuwkACQAJAAkACQAJAL4oAAO6/7kKuBW3IAAABgAG AAYABgAAAAYABgAGAAYAAAAGAAYABgAGAL8GABAAEAAQAAMAAAUDGAEAAgAA BQMgnhkAAKMZAACkGQAArRkAALYZAAC7GQAAvBkAAMUZAADOGQAA0xkAANQZ AADdGQAA5hkAAOsZAADsGQAA7RkAAO4ZAADvGQAAxxoAAMgaAADJGgAAyhoA AO8aAADwGgAA8RoAAJ4cAACfHAAAoBwAAKkdAACqHQAAWB8AAFkfAAC6IAAA uSEAALohAACVIwAAliMAAPQkAAD1JAAA9iQAAPwAAXMKLAHqAAFzCiwB/AAB cwosAfwAAXMKLAH8AAFzCiwB6gABcwosAfwAAXMKLAH8AAFzCiwB/AABcwos AeoAAXMKLAH8AAFzCiwB/AABcwosAfwAAXMKLAHqAAFzCiwB5wABWCAsAecA AVggLAHnAAFYICwB5wADWCAsAecAAVggLAHnAAFYICwB5wABWCAsAecAAVgg LAHnAAFYICwB4QABWCDCAeEABVggwgHhAAFYIMIB4QABWCDCAdoABFggwgHh AAFYIMIB2gAGWCDCAeEAAVggwgHaAAVYIMIB2gAEWCDCAeEAAVggwgHaAAdY IMIB4QABWCDCAdoABVggwgHhAAFYIMIB4QABWCDCAQAAAAYAAAUDEcQCFGgB AQAABQAABQMUaAEBAAAAAgAABQMAEQAAGAEZAbhGALsJAAkACQAJAAkACQC+ CgADuv+5CrgVtyAAAwAABQMYASf2JAAA9yQAAPgkAAD5JAAA+iQAAPskAAD8 JAAA/SQAAP4kAAD/JAAAQiUAAEMlAABEJQAARSUAAEYlAAD+JgAAqycAAKwn AAD+KAAA/ygAAAApAAAmKgAAJyoAABcsAAAYLAAAGSwAABstAAAcLQAAdy0A AHgtAAB5LQAAgi0AAIwtAACWLQAAly0AALQtAAARLgAA/QABWCAsAf0AAVgg LAH9AAFYICwB/QABWCAsAf0AAVggLAH9AAFYICwB/QABWCAsAf0AAVggLAH9 AAFYICwB/QACWCAsAf0AAVggLAH9AAFYICwB/QABWCAsAfcAAVggwgH3AAZY IMIB9wACWCDCAfcAAVggwgH3AARYIMIB9wABWCDCAfcAAVggwgHwAARYIMIB 9wABWCDCAfAAB1ggwgH3AAFYIMIB9wABWCDCAfcAA1ggwgH3AAFYIMIB/QAB WCAsAf0AAVggLAH9AAFYICwB7AABaAosAewAAWgKLAHsAAFoCiwBywABaAos AewAAmgKLAHsAARoCiwBAAAAAAAAIAAAGAEZAbhGALsJAAkACQAJAAAAAAC+ KAADuv+uCqIVliAAAAkAAAAJAAkAAAAJAP//CQAJAAAACQD/////AAAAAwAA BQMYAQAGAAAFAxHEAhRoAQEAAAUAAAUDFGgBAQAAAAIAAAUDJBEuAAB6LgAA ey4AAJAuAADxLgAAlC8AAJUvAACrLwAA0S8AAB8wAAAgMAAAITAAACIwAAAj MAAAJTAAACYwAAA2MAAANzAAADgwAAA5MAAAiDAAAIkwAACKMAAA/AAEaAos AdsABGgKLAH8AAFoCiwB/AAEaAosAfwAB2gKLAG6AAdoCiwB/AABaAosAfwA AmgKLAH8AARoCiwBmQAEaAosAZYAAVggLAGWAAFYICwBlgABWCAsAZYAAAAA AACWAAFYICwBlgABWCAsAZYAAVggLAGWAAFYICwBlgABWCAsAZYAAVggLAGW AAFYICwBkAABWCDCAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAUAAAUDFGgBAQAAAAIAAAUDACAAABgBGQG4RgC7CQAJAAkA CQAAAAAAvigAA7r/rgqiFZYgAAAJAAAACQAJAAAACQD//wkACQAAAP////8A AAAAACAAABgBGQG4RgC7CQAJAAkACQAAAAAAvigAA7r/rgqiFZYgAAAJAAAA CQAJAAAACQD//wkACQAAAAkA//8JAAAAACAAABgBGQG4RgC7CQAJAAkACQAA AAAAvigAA7r/rgqiFZYgAAAJAAAACQAJAAAACQD//wkACQAAAAkA/////wAA AAMAAAUDGAEWijAAAGUxAABmMQAAMDIAADEyAAASMwAAEzMAAO4zAADvMwAA cDQAAHE0AAByNAAAdDQAAHU0AAB2NAAAgzQAAIQ0AACFNAAAqjQAABQ1AAA9 NQAAnzUAALU1AABJNgAATzYAAO42AAD2NgAAPjgAAFE4AADMOQAA4DkAABM6 AADbAANYIMIBtgABWCDCAdsAA1ggwgG2AAFYIMIB2wADWCDCAbYAAVggwgHb AANYIMIBtgABWCDCAdsAAlggwgGwAAFYIMIBrQABWCAsAa0AAAAAAACtAAFY ICwBrQABWCAsAa0AAVggLAGtAAFYICwBrQABWCAsAa0AAVggLAGtAAJYICwB rQABWCAsAa0AAlggLAGtAAFYICwBrQADWCAsAa0AAVggLAGtAANYICwBrQAB WCAsAa0ABVggLAGtAAFYICwBrQAGWCAsAa0AAVggLAGtAAFYICwBAAIAAAUD AAUAAAUDFGgBAQAAACQAAAUDDQwRGwET5f4UaAEBAAw0/wEACAAAAQAAAAEA GwEAAAAAAAC3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJAAA BQMNCxEbARPl/hRoAQEADDT/AQAIAAABAAAAAQAbAQAAAAAAALcAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8TOgAAFDoAABU6AAAXOgAAGDoA ABk6AAAlOgAAJjoAACc6AAAoOgAAyDoAAMk6AADKOgAAYTsAAGI7AADKOwAA yzsAAB08AAAePAAAHzwAAC48AAAvPAAAbTwAAG48AACNPAAAjjwAAJ08AACe PAAADj0AADg9AAA5PQAA/QABWCAsAf0AAVggLAH9AAAAAAAA/QABWCAsAf0A AVggLAH9AAFYICwB/QABWCAsAf0AAVggLAH9AAFYICwB/QADWCAsAf0AAVgg LAH9AAFYICwB/QADWCAsAf0AAVggLAH9AAJYICwB/QABWCAsAf0AAlggLAH9 AAFYICwB/QABWCAsAf0AAVggLAH9AAFYICwB/QABWCAsAf0AAVggLAH9AAFY ICwB/QABWCAsAf0AAVggLAH9AAFYICwB/QACWCAsAf0AAVggLAH9AAFYICwB AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAUDHg4A EAAIAAEASwAPAAAAAAAaAABA8f8CABoABk5vcm1hbAACAAAAAwBhCgQAAAAA AAAAAAAAAAAAAAAAAAAAKABBQPL/oQAoABtGdWVudGUgZGUgcOFycmFmbyBw cmVkZXRlci4AAAAAAAAAAAAAAAAcACVAAQDyABwABlJlbWl0ZQACAA8ABQBc gWMaAAAAAAAAOToAAAQAOT0AAAAA/////w0ABCH//wEAACH//wIABCH//wMA ACH//wQABCH//wUAACH//wYABCH//wcAACH//wgABCH//wkAACD//woABCH/ /wsAACH//wwABCH//w0AAAAAAGgDAABLCwAA7g8AAC0TAAC8FgAAWBwAAPgh AAAmJwAAIS0AACQtAABzMQAAFjcAADk6AAAAAAEAAAABAAEAAAACAAEAAAAD AAEAAAAEAAkAAAAFAAAAAAAGAAEAAAAHAAAAAAAIAAEAAAAJAAEAAAAKAAEA AAALAAEAAAAMAAAAAAAAAwAA1DoAAOV6AAA+AD8AAAMAAB8HAADMEgAAKRYA AJ4ZAAD2JAAAES4AAIowAAATOgAAOT0AAEAAQQBCAEMARABFAEYARwBIAAAA AACKAAAAjwAAAJoAAACgAAAAoQAAAMEAAADMAAAA1AAAANUAAADtAAAARwEA AE4BAABNAwAAUQMAAFMDAABXAwAAKgQAADIEAAAzBAAAOwQAAF0EAABqBAAA awQAAHUEAAAABQAACwUAAMMFAADOBQAAGQYAABwGAAAeBgAAIwYAACQGAAAs BgAAswYAALwGAAAPBwAAFwcAACAHAAAnBwAAKAcAADAHAABBBwAATAcAAE0H AABYBwAAbQcAAHoHAAB7BwAAgQcAAIIHAACFBwAAiQcAAIwHAACPBwAAmwcA ACQLAAAsCwAAPAsAAEgLAABQDAAAYQwAABYNAAAdDQAAHg0AACINAACSDQAA mQ0AAJoNAACeDQAAow0AAKoNAACWDwAAmg8AAB0QAAAkEAAAJRAAACkQAAAu EAAAMxAAAD4RAABEEQAAnRMAAKkTAAD8FQAACBYAABkWAAAlFgAALhYAADcW AABGFgAAShYAAFUXAABfFwAANBgAADwYAABFGAAATBgAAE0YAABVGAAAmBgA AJ8YAACgGAAAqBgAAKkYAACtGAAA8BgAAPwYAAD9GAAACBkAAPMZAAAAGgAA vRsAAMMbAADEGwAAxxsAAMgbAADLGwAAzBsAANMbAAA6HAAARhwAAOscAADy HAAA8xwAAPccAAD8HAAAAx0AAAwdAAATHQAAFB0AABgdAAAdHQAAIh0AAH0g AACAIAAA1yIAAOIiAADlIgAA6iIAAL8jAADHIwAANSQAAEMkAABGJAAAVSQA AJUkAACbJAAASiUAAFYlAACeLAAAqiwAAI0tAACZLQAAqi4AALYuAAAWMAAA IjAAANcxAADgMQAAGjIAACIyAAArMgAAMjIAADMyAAA7MgAAezIAAIAyAACF MgAAjDIAAKgyAAC0MgAA0jMAANkzAABINAAAUjQAAD41AABHNQAASTUAAE81 AABiNQAAajUAAJY1AACfNQAA+jUAAAM2AAAUNgAAGzYAAJs2AACnNgAA0jYA ANY2AADYNgAA3DYAAEE3AABJNwAAUjcAAFk3AABaNwAAYjcAAHE3AAB0NwAA dTcAAHg3AAB5NwAAgTcAAII3AACKNwAAizcAAJI3AACgNwAArTcAAN03AADj NwAA5TcAAOo3AABuOAAAdDgAAHk4AACAOAAAhTgAAIo4AACPOAAAkzgAAJQ4 AACdOAAAnjgAAKE4AACpOAAAsDgAAOA4AADnOAAA7DgAAPA4AAD1OAAA/jgA AEE5AABQOQAAUTkAAFU5AABeOQAAZjkAAHE5AAB1OQAAeDkAAIc5AACIOQAA izkAAME5AADJOQAAyjkAANI5AADTOQAA2jkAAOc5AAD0OQAA/zkAAAc6AAA7 OgAABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAc AAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAQARdMSU5BIE1BUklBIEFSVEVU QSBST01BTiZDOlxZRVpJRFxNQUdJU1RFUlxURVNJU19JSVxBUlQyX1QyLkRP Qx9BbGZvbnNvIE1hbnVlbCBNYW5jaWxsYSBIZXJyZXJhFkM6XFlET05PU09c QVJUMl9UMi5ET0MBWSZDOlxZRVpJRFxNQUdJU1RFUlxURVNJU19JSVxBUlQy X1QyLkRPQxFQcm9mZXNvciBTaXN0ZW1hcyZDOlxZRVpJRFxNQUdJU1RFUlxU RVNJU19JSVxBUlQyX1QyLkRPQw5EcHRvLiBTaXN0ZW1hcyZDOlxZRVpJRFxN QUdJU1RFUlxURVNJU19JSVxBUlQyX1QyLkRPQ/8BDwBV5gAAAAABAD5wAAAs CQAAAAAAAEZwAABV6QEAAgABAGp5AAAmAAAAAAAAAHJ5AABVngIAAwABAJB5 AAAiAAAAAAAAAJh5AABV7wMABAAFALJ5AAAcAAAAAAAAALp5AABV9QQABgAH AM55AAAcAAAAAAAAANZ5AABV3gUACAABAOp5AAAiAAAAAAAAAPJ5AABVggYA CQAKAAx6AAAcAAAAAAAAABR6AABVjQcACwAMACh6AAAdAAAAAAAAADB6AABV AAgADQAOAEV6AAANAAAAAAAAAE16AABV7wkADwAFAFJ6AAAcAAAAAAAAAFp6 AABVzwoAEAABAG56AAANAAAAAAAAAHZ6AABV9QsAEQAHAHt6AAAcAAAAAAAA AIN6AABVzwwAEgABAJd6AAANAAAAAAAAAJ96AABVjQ0AEwAMAKR6AAAdAAAA AAAAAKx6AABVgg4AFAAKAMF6AAAcAAAAAAAAAMl6AAAQ/wADQ0FQAQACRiUG AAhBdXRvRXhlYwEACEF1dG9PcGVuAQAIRmlsZU9wZW4BAANGJU8CAAhGaWxl U2F2ZQEAA0YlUwIACUF1dG9DbG9zZQEACUZpbGVDbG9zZQEAA0YlQwIACkZp bGVTYXZlQXMBAARGJVNBAgAKVG9vbHNNYWNybwEABEYlMzkBAAxBcmNoaXZv QWJyaXIBAA1GaWxlVGVtcGxhdGVzAQAOQXJjaGl2b0d1YXJkYXIBABFBcmNo aXZvUGxhbnRpbGxhcwEAEkFyY2hpdm9HdWFyZGFyQ29tbwEAGEFyY2hpdm9D ZXJyYXJPQ2VycmFyVG9kbwEAEQ8AAAADQ0FQAAEACEFVVE9FWEVDAAIACEFV VE9PUEVOAAMACEZJTEVPUEVOAAQACEZJTEVTQVZFAAUACUFVVE9DTE9TRQAG AAlGSUxFQ0xPU0UABwAKRklMRVNBVkVBUwAIAApUT09MU01BQ1JPAAkADEFS Q0hJVk9BQlJJUgAKAA1GSUxFVEVNUExBVEVTAAsADkFSQ0hJVk9HVUFSREFS AAwAEUFSQ0hJVk9QTEFOVElMTEFTAA0AEkFSQ0hJVk9HVUFSREFSQ09NTwAO ABhBUkNISVZPQ0VSUkFST0NFUlJBUlRPRE8AQAOAAQAAAAAAAAAAAAgAAQAA AAAAAAAAAAAAAAAAAEYAFRaQAQAAVGltZXMgTmV3IFJvbWFuAAwWkAECAFN5 bWJvbAALJpABAABBcmlhbAAUBpABAgBNb25vdHlwZSBTb3J0cwAiAAQAQQiI GAAAxAIAAKkBAAAAAHkKJGbi6jMmAAAAACoAcwAAAGwIAAACMAAADQAYAAAA BACDEGYAAAAAAAAAAAAAAA0AAQAAAAEAAAAAAAAA1AIAAAAArwAAAHZC2lNR VUVEQSBERUwgTc1OSU1PIE1UVSAoVW5pZGFkIGRlIFRyYW5zZmVyZW5jdWEg TeF4aW1hKSBFTiBMQSBSVVRBIERFU0RFIEVMIE5PRE8gT1JJR0VOIEhBU1RB IEVOIE5PRE8gREVTVElOTyBFTiBJUHY2AAAAF0xJTkEgTUFSSUEgQVJURVRB IFJPTUFODkRwdG8uIFNpc3RlbWFzAAAAAAAAAAAAAP////////////////// //////////////////////////////////////////////////////////// ////////////////////////////////////AQAAAAIAAAADAAAABAAAAAUA AAAGAAAABwAAAAgAAAAJAAAACgAAAAsAAAAMAAAADQAAAA4AAAAPAAAAEAAA ABEAAAASAAAAEwAAABQAAAAVAAAAFgAAABcAAAAYAAAAGQAAABoAAAAbAAAA HAAAAB0AAAAeAAAAHwAAACAAAAAhAAAAIgAAACMAAAAkAAAAJQAAACYAAAAn AAAAKAAAACkAAAAqAAAAKwAAACwAAAAtAAAALgAAAC8AAAAwAAAAMQAAADIA AAAzAAAANAAAADUAAAA2AAAANwAAADgAAAA5AAAAOgAAADsAAAA8AAAAPQAA AD4AAAA/AAAAQAAAAEEAAABCAAAAQwAAAEQAAABFAAAARgAAAEcAAABIAAAA SQAAAEoAAABLAAAATAAAAE0AAABOAAAATwAAAP7////9////VAAAAP7///9c AAAA/v////////////////////////////////////////9eAAAA//////7/ //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////9S AG8AbwB0ACAARQBuAHQAcgB5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAFgAFAf//////////AQAAAAAJAgAAAAAAwAAA AAAAAEYAAAAAQKli75VavgFgLt4GAnq+AVMAAABABAAAAAAAAFcAbwByAGQA RABvAGMAdQBtAGUAbgB0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAaAAIBAgAAAAMAAAD/////AAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAKqfAAAAAAAAAQBDAG8AbQBwAE8AYgBq AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAABIAAgH///////////////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAbAAAAAAAAAAFAFMAdQBtAG0AYQByAHkASQBuAGYA bwByAG0AYQB0AGkAbwBuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAAC Af////8EAAAA/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAIAAAAsAgAAAAAAAAEAAAD+////AwAAAAQAAAAFAAAABgAAAAcAAAAI AAAACQAAAAoAAAD+////DAAAAA0AAAAOAAAADwAAABAAAAD+//////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// ////////////////////////////////////////////AQD+/wMKAAD///// AAkCAAAAAADAAAAAAAAARhoAAABEb2N1bWVudG8gTWljcm9zb2Z0IFdvcmQg AAoAAABNU1dvcmREb2MAEAAAAFdvcmQuRG9jdW1lbnQuNgD0ObJxAAAAAAAA AAAAAAAA0M8R4KGxGuEAAAAAAAAAAAAAAAD+/wAABAACAAAAAAAAAAAAAAAA AAAAAAABAAAA4IWf8vlPaBCrkQgAKyez2TAAAAD8AQAAEQAAAAEAAACQAAAA AgAAAJgAAAADAAAAGAEAAAQAAAAkAQAABQAAAEQBAAAGAAAAUAEAAAcAAABc AQAACAAAAGwBAAAJAAAAhAEAABIAAACQAQAACgAAALgBAAAMAAAAxAEAAA0A AADQAQAADgAAANwBAAAPAAAA5AEAABAAAADsAQAAEwAAAPQBAAACAAAA5AQA AB4AAAB3AAAAQtpTUVVFREEgREVMIE3NTklNTyBNVFUgKFVuaWRhZCBkZSBU cmFuc2ZlcmVuY3VhIE3heGltYSkgRU4gTEEgUlVUQSBERVNERSBFTCBOT0RP IE9SSUdFTiBIQVNUQSBFTiBOT0RPIERFU1RJTk8gRU4gSVB2NgAAHgAAAAEA AAAAOmkQHgAAABgAAABMSU5BIE1BUklBIEFSVEVUQSBST01BTgAeAAAAAQAA AAAAQAAFAEQAbwBjAHUAbQBlAG4AdABTAHUAbQBtAGEAcgB5AEkAbgBmAG8A cgBtAGEAdABpAG8AbgAAAAAAAAAAAAAAOAACAP///////////////wAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsAAABgAQAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAA////////////////AAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAD///////////////8AAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAP///////////////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7/AAAEAAIAAAAAAAAAAAAAAAAAAAAA AAEAAAAC1c3VnC4bEJOXCAArLPmuMAAAADABAAAIAAAAAQAAAEgAAAAPAAAA UAAAAAQAAAB4AAAABQAAAIAAAAAGAAAAiAAAAAsAAACQAAAAEAAAAJgAAAAM AAAAoAAAAAIAAADkBAAAHgAAACAAAABGdW5kYWNp824gVW5pdmVyc2lkYWQg ZGVsIE5vcnRlAAMAAAAA5gAAAwAAAGYAAAADAAAAGAAAAAsAAAAAAAAACwAA AAAAAAAMEAAAAgAAAB4AAAB3AAAAQtpTUVVFREEgREVMIE3NTklNTyBNVFUg KFVuaWRhZCBkZSBUcmFuc2ZlcmVuY3VhIE3heGltYSkgRU4gTEEgUlVUQSBE RVNERSBFTCBOT0RPIE9SSUdFTiBIQVNUQSBFTiBOT0RPIERFU1RJTk8gRU4g SVB2NgADAAAAAAAAAAD///////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// /////////////////9Wy1dax1tW31tXW1tXQ1day1tXW1tbWt9bWt9bW17fW 1tbX1rfW1tfW19bXt9fX29fX19fX19bXuNe419fX17jX19jX17jY19jY2N3Z CrnZvwq6//////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// ///////////////////////////////P1tXV1bbP1dXQ1dDV1tbW1dbW1ta3 1tbW1tbW1tbW1rjW1tbX1rjWuNbX1tfW19a41te33Ne43NfX19fc19fX3dfX udfY3djd2N3Z3dkKCgraCgr///////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// ////////////////////////////////////////////1c/PstXQ1tWy1bfV 1tWy1bLV1tDV0Na31tbW1rLW1tbW1tfW1tbX1tbX1rjW19bX19fX19bX19fX uNfXuNe419fX2NfY3de52Ni52QrY2QrZCtkK//////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// /////////////////////////////////////////////////////////9XV 1dXW1c/WHgAAAAEAAAAAZXN0HgAAAAgAAABBcnQyX3QyAB4AAAAPAAAARHB0 by4gU2lzdGVtYXMAAB4AAAADAAAANDIAAB4AAAAeAAAATWljcm9zb2Z0IFdv cmQgZm9yIFdpbmRvd3MgOTUAZFxAAAAAAHK4EBAAAABAAAAAAIZFbH5dvQFA AAAAAIzM8gF6vgEDAAAADQAAAAMAAABsCAAAAwAAAAIwAAADAAAAAAAAANDP EeChsRrhAAAAAAAAAAAAAAAA/v8AAAQAAgAAAAAAAAAAAAAAAAAAAAAAAQAA AALVzdWcLhsQk5cIACss+a4wAAAAMAEAAAgAAAABAAAASAAAAA8AAABQAAAA BAAAAHgAAAAFAAAAgAAAAAYAAACIAAAACwAAAJAAAAAQAAAAmAAAAAwAAACg AAAAAgAAAOQEAAAeAAAAIAAAAEZ1bmRhY2nzbiBVbml2ZXJzaWRhZCBkZWwg Tm9ydGUAAwAAAADmAAADAAAAZgAAAAMAAAAYAAAACwAAAAAAAAALAAAAAAAA AAwQAAACAAAAHgAAAHcAAABC2lNRVUVEQSBERUwgTc1OSU1PIE1UVSAoVW5p ZGFkIGRlIFRyYW5zZmVyZW5jdWEgTeF4aW1hKSBFTiBMQSBSVVRBIERFU0RF IEVMIE5PRE8gT1JJR0VOIEhBU1RBIEX///////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// ///////////P1rHVsda2z9bVt9XW0LfP1rLWt9XQ1rfW1ta31tbW1k4gTk9E TyBERVNUSU5PIEVOIElQdjYAAwAAAAAAAAAA0M8R4KGxGuEAAAAAAAAAAAAA AAAAAAAAPgADAP7/CQDQzxHgobEa4QAAAAAAAAAAAAAAAAAAAAA+AAMA/v8J AAYAAAAAAAAAAAAAAAEAAABRAAAAAAAAAAAQAABSAAAAAQAAAP7///8AAAAA UAAAAP////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////// //////////////// --0-170988754-926537153=:15488-- -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 12 13:33:57 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id NAA28574 for ipng-dist; Wed, 12 May 1999 13:16:56 -0700 (PDT) Received: from engmail4.Eng.Sun.COM (engmail4 [129.144.134.6]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id NAA28567 for ; Wed, 12 May 1999 13:16:42 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail4.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id NAA15068 for ; Wed, 12 May 1999 13:16:41 -0700 (PDT) Received: from inner.net (avarice.inner.net [199.33.248.2]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id NAA12041 for ; Wed, 12 May 1999 13:16:35 -0700 (PDT) Received: from inner.net (cmetz.cstone.net [205.197.102.217]) by inner.net (8.9.1/8.9.1) with ESMTP id UAA15515; Wed, 12 May 1999 20:08:52 GMT Message-Id: <199905122008.UAA15515@inner.net> To: Richard Draves cc: ipng@sunroof.eng.sun.com Subject: (IPng 7513) Re: Last Call: IPv6 Jumbograms to Proposed Standa rd In-reply-to: Your message of "Wed, 12 May 1999 07:16:50 PDT." <4D0A23B3F74DD111ACCD00805F31D81014515049@RED-MSG-50> X-Copyright: Copyright 1999, Craig Metz, All Rights Reserved. X-Reposting: With explicit permission only Date: Wed, 12 May 1999 16:15:34 -0400 From: Craig Metz Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk In message <4D0A23B3F74DD111ACCD00805F31D81014515049@RED-MSG-50>, you write: >One concern with switching to this implementation model is that it would >seem to be less efficient. We have in mind optimizing the common-case header >construction for a TCP connection by having precomputed the headers as much >as possible. Now in the common case there is no other IPsec header between >the AH and IP headers, so it doesn't make a difference. But this points in >the direction of having the AH ICV computation use IP header length & >next-header values that reflect all the headers. Also on the receive side, >it's more work to remove intervening IPsec headers. We have been thinking a lot about efficiently building headers and I don't believe that our technique inherently prevents it. (actually, the way our current stuff was architected was designed to help it) One can still precompute cached header templates, one for each header. Or you can tweak AH to skip over preceding AH headers in the current layer of encapsulation, but that doesn't work so well with some fast hash implementations. >Another concern is that semantically it seems a little strange that AH >should be designed to protect the packet's integrity, especially including >proceeding extension headers, but then have preceeding IPsec headers not be >accounted for in any way. If you go down this path, it's not clear to me how the AHs will interact. Do they always compute with the other AH's ICV fields zeroed? Or do they compute with previous ICV fields zeroed and subsequent fields as computed? Wouldn't that also imply an implementation's assembly order? AH is a little strange. But at the end of the day, it protects a lot of things before the payload. As a trade-off, it doesn't protect a lot of other things before the payload. Compare this to ESP's ICV, however, which protects basically *nothing* before the payload. It might have been possible to define AH such that it gave you more integrity protection, but it's too late now. -Craig -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 12 13:35:34 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id NAA28642 for ipng-dist; Wed, 12 May 1999 13:25:37 -0700 (PDT) Received: from engmail4.Eng.Sun.COM (engmail4 [129.144.134.6]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id NAA28635 for ; Wed, 12 May 1999 13:25:07 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail4.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id NAA17555 for ; Wed, 12 May 1999 13:25:07 -0700 (PDT) Received: from maile.surrey.ac.uk (maile.surrey.ac.uk [131.227.102.10]) by earth.sun.com (8.9.1/8.9.1) with SMTP id NAA18174 for ; Wed, 12 May 1999 13:25:05 -0700 (PDT) Received: from regan-e1.ee.surrey.ac.uk by maile.surrey.ac.uk with SMTP (PP); Wed, 12 May 1999 21:22:59 +0100 Date: Wed, 12 May 1999 21:23:23 +0100 (BST) From: Lloyd Wood X-Sender: eep1lw@regan.ee.surrey.ac.uk Reply-To: Lloyd Wood To: Yesid Donoso cc: ipng@sunroof.eng.sun.com Subject: (IPng 7514) Re: About IPng In-Reply-To: Message-ID: Organization: speaking for none X-URL: http://www.ee.surrey.ac.uk/Personal/L.Wood/ X-no-archive: yes MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk On Wed, 12 May 1999, Yesid Donoso wrote: > In this mail, I am sending my article about MTU in IPv6. > > Thanks and I will wait your opinions. Ideally, you would put your article up on a webserver or ftp server. In a non-proprietary format everyone can read. You would mention a URL to the mailing list so that those who are interested can obtain copies of your article and comment on it. You would not spam large mailing lists with 100's of K of uncompressed Word containing suspiciously odd macros (the English version). L. > ========================================================================== > Ing.Yezid Donoso Meisel > Departamento de sistemas, Universidad del Norte > ydonoso@uninorte.edu.co > ydonoso@guayacan.uninorte.edu.co > ydonoso@mango.uninorte.edu.co > Barranquilla, Colombia > ========================================================================== PGP -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 12 13:52:03 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id NAA28712 for ipng-dist; Wed, 12 May 1999 13:46:04 -0700 (PDT) Received: from engmail4.Eng.Sun.COM (engmail4 [129.144.134.6]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id NAA28705 for ; Wed, 12 May 1999 13:45:54 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail4.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id NAA24228 for ; Wed, 12 May 1999 13:45:53 -0700 (PDT) Received: from swbcs005.sbc.com (swbcs005.sbc.com [209.184.192.25]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id NAA02890 for ; Wed, 12 May 1999 13:45:52 -0700 (PDT) Received: from swgate1.sbc.com (swgate1.sbc.com [132.201.82.89]) by swbcs005.sbc.com (8.8.8/8.8.8) with SMTP id PAA13785 for ; Wed, 12 May 1999 15:45:51 -0500 (CDT) Received: by swgate1.sbc.com (Smail-3.2 1996-Jul-4 #6 built 1997-Dec-24) id ; Wed, 12 May 1999 15:45:43 -0500 (CDT) Received: from d072036.sbc.com(really [132.201.87.40]) by swgate1.sbc.com via sendmail with esmtp id for ; Wed, 12 May 1999 15:45:30 -0500 (CDT) Received: by d072036.sbc.com with Internet Mail Service (5.5.2448.0) id ; Wed, 12 May 1999 15:45:30 -0500 Message-ID: From: "ROULEAU, LOUIS J (SWBT)" To: "'Yesid Donoso'" Cc: ipng@sunroof.eng.sun.com Subject: (IPng 7515) Macro virus detected in attachment Date: Wed, 12 May 1999 15:45:28 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2448.0) Content-Type: text/plain; charset="iso-8859-1" Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk ScanMail for Microsoft Exchange has detected virus-infected attachments. Place = ROULEAU, LOUIS J (SWBT) Sender = Yesid Donoso Subject = (IPng 7512) Re: About IPng Delivery Time = May 12, 1999 (Wednesday) 15:22:21 Action on the virus found: "WM_CAP" virus was found in the attachment "IPv6_MTU_English.doc", ScanMail has cleaned the virus. The attachment can now be safely used. Message from recipient's administrator: -----Original Message----- From: Yesid Donoso [mailto:ydonoso@guayacan.uninorte.edu.co] Sent: Wednesday, May 12, 1999 2:26 PM To: ipng@sunroof.eng.sun.com Subject: (IPng 7512) Re: About IPng In this mail, I am sending my article about MTU in IPv6. Thanks and I will wait your opinions. ========================================================================== Ing.Yezid Donoso Meisel Departamento de sistemas, Universidad del Norte ydonoso@uninorte.edu.co ydonoso@guayacan.uninorte.edu.co ydonoso@mango.uninorte.edu.co Barranquilla, Colombia ========================================================================== -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 12 13:56:10 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id NAA28730 for ipng-dist; Wed, 12 May 1999 13:53:12 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id NAA28723 for ; Wed, 12 May 1999 13:52:47 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id NAA18730 for ; Wed, 12 May 1999 13:52:43 -0700 (PDT) Received: from orchard.arlington.ma.us (orchard.epilogue.com [128.224.138.4]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id NAA07565 for ; Wed, 12 May 1999 13:52:42 -0700 (PDT) Received: from orchard.arlington.ma.us (localhost [[UNIX: localhost]]) by orchard.arlington.ma.us (8.8.8/1.34) with ESMTP id UAA22759; Wed, 12 May 1999 20:52:27 GMT Message-Id: <199905122052.UAA22759@orchard.arlington.ma.us> To: Craig Metz cc: Richard Draves , ipng@sunroof.eng.sun.com Subject: (IPng 7516) Re: Last Call: IPv6 Jumbograms to Proposed Standa rd In-Reply-To: Message from Craig Metz of "Wed, 12 May 1999 16:15:34 EDT." <199905122008.UAA15515@inner.net> Date: Wed, 12 May 1999 16:52:26 -0400 From: Bill Sommerfeld Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk I guess I'm one of the people convinced of Steve Bellovin's view of AH as unnecessary. The fields in the header which are protected by AH either (a) can be changed en route and thus need to be excluded from the ICV, or (b) are extremely likely to be constant for the duration of an SA, so it just seems so much simpler to protect them by binding them to the SA (i.e., drop inbound packets if the header field(s) in question don't match what the SA says it should contain). - Bill -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 12 14:00:22 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id NAA28771 for ipng-dist; Wed, 12 May 1999 13:56:00 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id NAA28764 for ; Wed, 12 May 1999 13:55:50 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id NAA19760 for ; Wed, 12 May 1999 13:55:47 -0700 (PDT) Received: from inner.net (avarice.inner.net [199.33.248.2]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id NAA09729 for ; Wed, 12 May 1999 13:55:45 -0700 (PDT) Received: from inner.net (cmetz.cstone.net [205.197.102.217]) by inner.net (8.9.1/8.9.1) with ESMTP id UAA15574; Wed, 12 May 1999 20:48:03 GMT Message-Id: <199905122048.UAA15574@inner.net> To: Bill Sommerfeld cc: ipng@sunroof.eng.sun.com Subject: (IPng 7517) Re: Last Call: IPv6 Jumbograms to Proposed Standa rd In-reply-to: Your message of "Wed, 12 May 1999 16:52:26 EDT." <199905122052.UAA22759@orchard.arlington.ma.us> X-Copyright: Copyright 1999, Craig Metz, All Rights Reserved. X-Reposting: With explicit permission only Date: Wed, 12 May 1999 16:54:43 -0400 From: Craig Metz Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk In message <199905122052.UAA22759@orchard.arlington.ma.us>, you write: >The fields in the header which are protected by AH either (a) can be >changed en route and thus need to be excluded from the ICV, or (b) are >extremely likely to be constant for the duration of an SA, so it just >seems so much simpler to protect them by binding them to the SA (i.e., >drop inbound packets if the header field(s) in question don't match >what the SA says it should contain). The latter is a solution that I believe would work. However, (a) that's just not what the IPsec WG came up with (b) please, PLEASE don't open up old wounds in that WG, it's taken so long to get to this point and (c) IKE is already far too complex, adding this is not going to help. -Craig -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 12 14:29:05 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id OAA28854 for ipng-dist; Wed, 12 May 1999 14:14:09 -0700 (PDT) Received: from engmail4.Eng.Sun.COM (engmail4 [129.144.134.6]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id OAA28847 for ; Wed, 12 May 1999 14:14:00 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail4.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id OAA04765 for ; Wed, 12 May 1999 14:13:59 -0700 (PDT) Received: from guayacan.uninorte.edu.co ([216.72.67.3]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id OAA22965 for ; Wed, 12 May 1999 14:13:52 -0700 (PDT) Received: from localhost (ydonoso@localhost) by guayacan.uninorte.edu.co (AIX4.2/UCB 8.7/8.7) with SMTP id QAA51694 for ; Wed, 12 May 1999 16:01:49 -0500 (EST) Date: Wed, 12 May 1999 16:01:49 -0500 (EST) From: Yesid Donoso To: ipng@sunroof.eng.sun.com Subject: (IPng 7518) I am sorry. In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk I am sorry for virus. I don't know. ========================================================================== Ing.Yezid Donoso Meisel Departamento de sistemas, Universidad del Norte ydonoso@uninorte.edu.co ydonoso@guayacan.uninorte.edu.co ydonoso@mango.uninorte.edu.co Barranquilla, Colombia ========================================================================== -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 12 16:11:08 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id QAA29009 for ipng-dist; Wed, 12 May 1999 16:06:33 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id QAA29002 for ; Wed, 12 May 1999 16:06:08 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id QAA12350 for ; Wed, 12 May 1999 16:05:19 -0700 (PDT) Received: from mail-blue.research.att.com (mail-blue.research.att.com [135.207.30.102]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id QAA09819 for ; Wed, 12 May 1999 16:04:55 -0700 (PDT) Received: from bigmail.research.att.com (bigmail.research.att.com [135.207.30.101]) by mail-blue.research.att.com (Postfix) with ESMTP id 84AA64CE3D; Wed, 12 May 1999 19:04:53 -0400 (EDT) Received: from SIGABA.research.att.com (sigaba.research.att.com [135.207.23.169]) by bigmail.research.att.com (8.8.8/8.8.8) with ESMTP id TAA02865; Wed, 12 May 1999 19:04:53 -0400 (EDT) Received: by SIGABA.research.att.com (Postfix, from userid 54047) id 0B80C41F16; Wed, 12 May 1999 19:04:52 -0400 (EDT) Received: from roc (localhost [127.0.0.1]) by SIGABA.research.att.com (Postfix) with ESMTP id F0965400B4; Wed, 12 May 1999 19:04:46 -0400 (EDT) X-Mailer: exmh version 2.0.2 2/24/98 To: Craig Metz Cc: Bill Sommerfeld , ipng@sunroof.eng.sun.com Subject: (IPng 7519) Re: Last Call: IPv6 Jumbograms to Proposed Standa rd Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Wed, 12 May 1999 19:04:46 -0400 From: "Steven M. Bellovin" Message-Id: <19990512230452.0B80C41F16@SIGABA.research.att.com> Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk In message <199905122048.UAA15574@inner.net>, Craig Metz writes: > In message <199905122052.UAA22759@orchard.arlington.ma.us>, you write: > >The fields in the header which are protected by AH either (a) can be > >changed en route and thus need to be excluded from the ICV, or (b) are > >extremely likely to be constant for the duration of an SA, so it just > >seems so much simpler to protect them by binding them to the SA (i.e., > >drop inbound packets if the header field(s) in question don't match > >what the SA says it should contain). > > The latter is a solution that I believe would work. However, (a) that's jus > t > not what the IPsec WG came up with (b) please, PLEASE don't open up old wound > s > in that WG, it's taken so long to get to this point and (c) IKE is already fa > r > too complex, adding this is not going to help. No one is suggesting, at this date, that the question of AH be reopened. But some remedy is clearly needed -- there's an interoperability problem caused by different interpretations of the spec. You would prefer saying "no bump in the wire", I'd prefer saying "no AH" -- but realistically, the answer is going to be a clarification when the IPSEC documents move to "Draft Standard". For now, I suggest that someone write up the problem clearly and send it to the IPSEC list. -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 12 21:12:49 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id VAA29178 for ipng-dist; Wed, 12 May 1999 21:10:32 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id VAA29171 for ; Wed, 12 May 1999 21:10:23 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id VAA21954 for ; Wed, 12 May 1999 21:10:21 -0700 (PDT) Received: from mail3.microsoft.com (mail3.microsoft.com [131.107.3.123]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id VAA02705 for ; Wed, 12 May 1999 21:10:23 -0700 (PDT) Received: by mail3.microsoft.com with Internet Mail Service (5.5.2524.0) id ; Wed, 12 May 1999 21:10:24 -0700 Message-ID: <4D0A23B3F74DD111ACCD00805F31D81014515069@RED-MSG-50> From: Richard Draves To: "'Steven M. Bellovin'" , Craig Metz Cc: Bill Sommerfeld , ipng@sunroof.eng.sun.com Subject: (IPng 7520) Re: Last Call: IPv6 Jumbograms to Proposed Standa rd Date: Wed, 12 May 1999 21:10:22 -0700 X-Mailer: Internet Mail Service (5.5.2524.0) Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk > No one is suggesting, at this date, that the question of AH > be reopened. > But some remedy is clearly needed -- there's an > interoperability problem > caused by different interpretations of the spec. You would > prefer saying > "no bump in the wire", I'd prefer saying "no AH" -- but realistically, > the answer is going to be a clarification when the IPSEC > documents move > to "Draft Standard". For now, I suggest that someone write > up the problem > clearly and send it to the IPSEC list. The interoperability problem occurs with AH-AH and ESP-AH header combinations. These are optional combinations, so I doubt they'll stir up much interest on the IPsec list. Rich -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 12 21:18:13 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id VAA29216 for ipng-dist; Wed, 12 May 1999 21:17:15 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id VAA29209 for ; Wed, 12 May 1999 21:17:06 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id VAA22869 for ; Wed, 12 May 1999 21:17:05 -0700 (PDT) Received: from mail3.microsoft.com (mail3.microsoft.com [131.107.3.123]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id VAA05586 for ; Wed, 12 May 1999 21:17:07 -0700 (PDT) Received: by mail3.microsoft.com with Internet Mail Service (5.5.2524.0) id ; Wed, 12 May 1999 21:17:07 -0700 Message-ID: <4D0A23B3F74DD111ACCD00805F31D8101451506A@RED-MSG-50> From: Richard Draves To: "'Craig Metz'" Cc: ipng@sunroof.eng.sun.com Subject: (IPng 7521) Re: Last Call: IPv6 Jumbograms to Proposed Standa rd Date: Wed, 12 May 1999 21:17:03 -0700 X-Mailer: Internet Mail Service (5.5.2524.0) Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk > We have been thinking a lot about efficiently building > headers and I don't > believe that our technique inherently prevents it. (actually, > the way our > current stuff was architected was designed to help it) One > can still precompute > cached header templates, one for each header. Or you can > tweak AH to skip over > preceding AH headers in the current layer of encapsulation, > but that doesn't > work so well with some fast hash implementations. Suppose you are building IP-AH-TCP. Will you precompute separate IP, AH, and TCP header templates and then modify the IP header when you insert AH? It seems simpler to build a combined IP-AH-TCP template. This reasoning leads me away from the incremental header insertion implementation model. > If you go down this path, it's not clear to me how the AHs > will interact. > Do they always compute with the other AH's ICV fields zeroed? > Or do they > compute with previous ICV fields zeroed and subsequent fields > as computed? > Wouldn't that also imply an implementation's assembly order? I would compute the AH ICV with previous (outer) AH ICV fields zeroed. I think it's OK to imply that headers are assembled from inner to outer, that's logically what happens when an outgoing packet descends the protocol stack. Rich -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 12 21:30:39 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id VAA29255 for ipng-dist; Wed, 12 May 1999 21:28:19 -0700 (PDT) Received: from engmail4.Eng.Sun.COM (engmail4 [129.144.134.6]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id VAA29248 for ; Wed, 12 May 1999 21:28:10 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail4.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id VAA05597 for ; Wed, 12 May 1999 21:28:11 -0700 (PDT) Received: from jazz-1.trumpet.com.au (jazz-1.trumpet.com.au [203.5.119.62]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id VAA09611 for ; Wed, 12 May 1999 21:28:05 -0700 (PDT) Received: from localhost (peter@localhost) by jazz-1.trumpet.com.au (8.8.7/8.8.7) with SMTP id OAA04641; Thu, 13 May 1999 14:27:48 +1000 (EST) (envelope-from peter@jazz-1.trumpet.com.au) Date: Thu, 13 May 1999 14:27:48 +1000 (EST) From: Peter Tattam Reply-To: Peter Tattam To: deployment@ipv6.org, 6bone@isi.edu, ipng@sunroof.eng.sun.com Subject: (IPng 7522) Yet another Dynamic Tunnel Configuration Protocol Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk I am publishing a draft specification of a tunnel configuration protocol that I have designed and implemented. Another implementation was quickly developed by the KAME group, to which we obtained good interoperability. HTTP://jazz-1.trumpet.com.au/ipv6-draft/dtcp-draft-prt-13-may-1999.htm Comments either to me or to the lists. I will be using this protocol or further derivations of it to roll out IPv6 to our regular IPv4 internet customers. Apologies if this is sent to the wrong lists, or if I have duplicated the work of others. I did review the tunnel broker model and I believe that this protocol can only serve to complement it. Peter -- Peter R. Tattam peter@trumpet.com Managing Director, Trumpet Software International Pty Ltd Hobart, Australia, Ph. +61-3-6245-0220, Fax +61-3-62450210 -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Thu May 13 02:12:31 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id CAA29494 for ipng-dist; Thu, 13 May 1999 02:10:26 -0700 (PDT) Received: from engmail4.Eng.Sun.COM (engmail4 [129.144.134.6]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id CAA29487 for ; Thu, 13 May 1999 02:10:15 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail4.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id CAA22974 for ; Thu, 13 May 1999 02:10:13 -0700 (PDT) Received: from dfw-ix10.ix.netcom.com (dfw-ix10.ix.netcom.com [206.214.98.10]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id CAA11874 for ; Thu, 13 May 1999 02:10:13 -0700 (PDT) Received: (from smap@localhost) by dfw-ix10.ix.netcom.com (8.8.4/8.8.4) id EAA14396; Thu, 13 May 1999 04:09:05 -0500 (CDT) Received: from dal-tx5-51.ix.netcom.com(207.94.121.179) by dfw-ix10.ix.netcom.com via smap (V1.3) id rma014392; Thu May 13 04:09:03 1999 Message-ID: <373A299D.4878B084@ix.netcom.com> Date: Thu, 13 May 1999 02:23:42 +0100 From: Jeff Williams Organization: INEG. Inc. X-Mailer: Mozilla 4.08 [en] (Win16; I) MIME-Version: 1.0 To: Peter Tattam CC: deployment@ipv6.org, 6bone@ISI.EDU, ipng@sunroof.eng.sun.com Subject: (IPng 7523) Re: Yet another Dynamic Tunnel Configuration Protocol X-Priority: 2 (High) References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk Peter and all, The URL you are listing does not resolve either. "No DNS Entry". Do you possibly have a URL with this information on your Trumpet.com domain? Peter Tattam wrote: > I am publishing a draft specification of a tunnel configuration protocol that I > have designed and implemented. Another implementation was quickly > developed by the KAME group, to which we obtained good interoperability. > > HTTP://jazz-1.trumpet.com.au/ipv6-draft/dtcp-draft-prt-13-may-1999.htm > > Comments either to me or to the lists. > > I will be using this protocol or further derivations of it to roll out IPv6 to > our regular IPv4 internet customers. > > Apologies if this is sent to the wrong lists, or if I have duplicated the work > of others. I did review the tunnel broker model and I believe that this > protocol can only serve to complement it. > > Peter > > -- > Peter R. Tattam peter@trumpet.com > Managing Director, Trumpet Software International Pty Ltd > Hobart, Australia, Ph. +61-3-6245-0220, Fax +61-3-62450210 Regards, -- Jeffrey A. Williams CEO/DIR. Internet Network Eng/SR. Java/CORBA Development Eng. Information Network Eng. Group. INEG. INC. E-Mail jwkckid1@ix.netcom.com Contact Number: 972-447-1894 Address: 5 East Kirkwood Blvd. Grapevine Texas 75208 -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Thu May 13 04:29:14 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id EAA29550 for ipng-dist; Thu, 13 May 1999 04:26:39 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id EAA29543 for ; Thu, 13 May 1999 04:26:08 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id EAA20126 for ; Thu, 13 May 1999 04:26:05 -0700 (PDT) Received: from boreas.isi.edu (boreas.isi.edu [128.9.160.161]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id EAA17832 for ; Thu, 13 May 1999 04:26:06 -0700 (PDT) Received: (from bmanning@localhost) by boreas.isi.edu (8.8.7/8.8.6) id EAA05277; Thu, 13 May 1999 04:25:33 -0700 (PDT) From: Bill Manning Message-Id: <199905131125.EAA05277@boreas.isi.edu> Subject: (IPng 7524) Re: Yet another Dynamic Tunnel Configuration Protocol To: jwkckid1@ix.netcom.com (Jeff Williams) Date: Thu, 13 May 1999 04:25:32 -0700 (PDT) Cc: peter@jazz-1.trumpet.com.au (Peter Tattam), deployment@ipv6.org, 6bone@ISI.EDU, ipng@sunroof.eng.sun.com In-Reply-To: <373A299D.4878B084@ix.netcom.com> from "Jeff Williams" at May 13, 1999 02:23:42 AM X-Mailer: ELM [version 2.5 PL0] MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk Odd, it resolves just fine. ; <<>> DiG 8.1 <<>> jazz-1.trumpet.com.au ;; res options: init recurs defnam dnsrch ;; got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 8, ADDITIONAL: 7 ;; QUERY SECTION: ;; jazz-1.trumpet.com.au, type = A, class = IN ;; ANSWER SECTION: jazz-1.trumpet.com.au. 1D IN A 203.5.119.62 > > Peter and all, > > The URL you are listing does not resolve either. "No DNS Entry". > Do you possibly have a URL with this information on your > Trumpet.com domain? > > Peter Tattam wrote: > > > I am publishing a draft specification of a tunnel configuration protocol that I > > have designed and implemented. Another implementation was quickly > > developed by the KAME group, to which we obtained good interoperability. > > > > HTTP://jazz-1.trumpet.com.au/ipv6-draft/dtcp-draft-prt-13-may-1999.htm > > > > Comments either to me or to the lists. > > > > I will be using this protocol or further derivations of it to roll out IPv6 to > > our regular IPv4 internet customers. > > > > Apologies if this is sent to the wrong lists, or if I have duplicated the work > > of others. I did review the tunnel broker model and I believe that this > > protocol can only serve to complement it. > > > > Peter > > > > -- > > Peter R. Tattam peter@trumpet.com > > Managing Director, Trumpet Software International Pty Ltd > > Hobart, Australia, Ph. +61-3-6245-0220, Fax +61-3-62450210 > > Regards, > > -- > Jeffrey A. Williams > CEO/DIR. Internet Network Eng/SR. Java/CORBA Development Eng. > Information Network Eng. Group. INEG. INC. > E-Mail jwkckid1@ix.netcom.com > Contact Number: 972-447-1894 > Address: 5 East Kirkwood Blvd. Grapevine Texas 75208 > > > -- --bill -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Thu May 13 05:55:39 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id FAA29583 for ipng-dist; Thu, 13 May 1999 05:52:41 -0700 (PDT) Received: from engmail4.Eng.Sun.COM (engmail4 [129.144.134.6]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id FAA29576 for ; Thu, 13 May 1999 05:52:30 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail4.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id FAA03026 for ; Thu, 13 May 1999 05:52:28 -0700 (PDT) Received: from turbot.pdc.kth.se (turbot.pdc.kth.se [130.237.221.42]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id FAA15831 for ; Thu, 13 May 1999 05:52:28 -0700 (PDT) Received: (from d95-mah@localhost) by turbot.pdc.kth.se (8.8.7/8.8.7) id OAA07650; Thu, 13 May 1999 14:52:08 +0200 (MET DST) To: Peter Tattam Cc: deployment@ipv6.org, 6bone@isi.edu, ipng@sunroof.eng.sun.com Subject: (IPng 7525) Re: Yet another Dynamic Tunnel Configuration Protocol References: From: Magnus Ahltorp Content-Type: text/plain; charset="iso-8859-1" Date: 13 May 1999 14:52:08 +0200 In-Reply-To: Peter Tattam's message of "Thu, 13 May 1999 14:27:48 +1000 (EST)" Message-ID: Lines: 31 X-Mailer: Gnus v5.6.45/Emacs 19.34 Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk > HTTP://jazz-1.trumpet.com.au/ipv6-draft/dtcp-draft-prt-13-may-1999.htm > > Comments either to me or to the lists. "Once a tunnel is established, the client may use normal tunnel protocols for IPv6 tunnelling using the endpoints supplied by the server, typically over IP port 41." I would suggest using the term "IP protocol 41" instead of "IP port 41". "It is important to note that in this protocol, the is a valid command and should result in a -ERR response." If it is a valid command, why should the command result in a -ERR response? Why is the a valid command? "Unrecognized commands should invoke a -ERR response." "Any other commands are totally ignored by the tunnel server, and no response must be sent." It is just me, or is this inconsistent? The latter tells me that unrecognized commands must result in no response, but the former tells me that it should result in a -ERR response. The quit command response is actually specified to be "+OK tunnel server quitting" which I think should be "+OK " which is consistent with the example in the appendix. /Magnus -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Thu May 13 09:58:30 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id JAA29916 for ipng-dist; Thu, 13 May 1999 09:55:10 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id JAA29909 for ; Thu, 13 May 1999 09:54:43 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id JAA18604 for ; Thu, 13 May 1999 09:54:39 -0700 (PDT) Received: from popcorn.cisco.com (popcorn.cisco.com [171.69.198.195]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id JAA14985 for ; Thu, 13 May 1999 09:54:40 -0700 (PDT) Received: from [171.68.181.149] (deering-home-mac.cisco.com [171.69.116.90]) by popcorn.cisco.com (8.8.5-Cisco.2-SunOS.5.5.1.sun4/8.6.5) with ESMTP id JAA02657; Thu, 13 May 1999 09:53:30 -0700 (PDT) Mime-Version: 1.0 X-Sender: deering@postoffice Message-Id: In-Reply-To: <199905122052.UAA22759@orchard.arlington.ma.us> References: <199905122052.UAA22759@orchard.arlington.ma.us> Date: Thu, 13 May 1999 09:53:30 -0700 To: Bill Sommerfeld From: Steve Deering Subject: (IPng 7526) Re: Last Call: IPv6 Jumbograms to Proposed Standa rd Cc: Craig Metz , Richard Draves , ipng@sunroof.eng.sun.com Content-Type: text/plain; charset="us-ascii" Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk At 4:52 PM -0400 5/12/99, Bill Sommerfeld wrote: >I guess I'm one of the people convinced of Steve Bellovin's view of AH >as unnecessary. > >The fields in the header which are protected by AH either (a) can be >changed en route and thus need to be excluded from the ICV,... Bill, The above sentence seems to say that the fields that change en-route both are and are not protected by AH. I presume that's not what you meant. > ...or (b) are >extremely likely to be constant for the duration of an SA, so it just >seems so much simpler to protect them by binding them to the SA (i.e., >drop inbound packets if the header field(s) in question don't match >what the SA says it should contain). That's clearly false for the Payload Length field in the IPv6 header, and of unknown truth value for yet-to-be-defined Hop-by-Hop options. I've never seen Steve Bellovin's analysis that you refer to above. Is there an emailmessage or a paper containing that analysis which could be forwarded to this list? Steve -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Thu May 13 15:33:48 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id PAA00339 for ipng-dist; Thu, 13 May 1999 15:31:03 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id PAA00332 for ; Thu, 13 May 1999 15:30:51 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id PAA26430 for ; Thu, 13 May 1999 15:30:48 -0700 (PDT) Received: from mail-green.research.att.com (mail-green.research.att.com [135.207.30.103]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id PAA15326 for ; Thu, 13 May 1999 15:30:48 -0700 (PDT) Received: from postal.research.att.com (postal.research.att.com [135.207.23.30]) by mail-green.research.att.com (Postfix) with ESMTP id 3A5C11E021; Thu, 13 May 1999 18:30:48 -0400 (EDT) Received: from SIGABA.research.att.com (sigaba.research.att.com [135.207.23.169]) by postal.research.att.com (8.8.7/8.8.7) with ESMTP id SAA06032; Thu, 13 May 1999 18:30:43 -0400 (EDT) Received: by SIGABA.research.att.com (Postfix, from userid 54047) id BCBC241F16; Thu, 13 May 1999 18:30:42 -0400 (EDT) Received: from roc (localhost [127.0.0.1]) by SIGABA.research.att.com (Postfix) with ESMTP id ADB54400B4; Thu, 13 May 1999 18:30:37 -0400 (EDT) X-Mailer: exmh version 2.0.2 2/24/98 To: Steve Deering Cc: Bill Sommerfeld , Craig Metz , Richard Draves , ipng@sunroof.eng.sun.com Subject: (IPng 7527) Re: Last Call: IPv6 Jumbograms to Proposed Standa rd Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Thu, 13 May 1999 18:30:36 -0400 From: "Steven M. Bellovin" Message-Id: <19990513223042.BCBC241F16@SIGABA.research.att.com> Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk In message , Steve Deering writes: > That's clearly false for the Payload Length field in the IPv6 header, > and of unknown truth value for yet-to-be-defined Hop-by-Hop options. > > I've never seen Steve Bellovin's analysis that you refer to above. > Is there an emailmessage or a paper containing that analysis which > could be forwarded to this list? Here's the analysis I sent in July '95, from (as I recall) the terminal room in Stockholm. It concerns IPv4, not IPv6, but I see little that would change, with the possible exception of the flow id. You're right that the payload length field is important; however, the actual length of the payload is included in the MD5 or SHA-1 pass over the payload, so tampering would be detected. I don't know what to do about the flow-id. RFC 2460 is explicitly vague about how flow-ids are to be used, and is silent on one crucial point -- can routers change the flow-id en route? There are architectures that make that a very useful ability. In any event, it doesn't matter much for purposes of AH -- flow-ids are mostly useful to routers, not end systems, and routers can't verify the AH field. Besides, AH can only cover what the host *says* it's using, not what it's entitled to use. That doesn't matter much for flow-ids; it matters a great deal for IP addresses, which are the main things people want assurance about. If my IP address matters, it has to be in my certificate (and that's one of the choices in the ipsec architecture); if it doesn't, why check it? Bear in mind that this analysis was written before RFCs 1825-1829 were published; the language about option processing was cleaned up. But my conclusion -- that we had not established any particular benefit to AH's semantics -- remains. For IPv6 end-system options, my personal preference it to put those after the ESP (with null encryption) header. For hop-by-hop options, AH can't help; again, such options are by definition of interest to routers, and routers can't verify the AH checksum. --- With one possible exception I haven't analyzed -- the multicast case -- it does not make sense to include the IP header in the AH checksum. In fact, as currently specified it cannot be implemented by a stack that conforms to other standards, notably RFC 1122. Here's a field-by-field analysis of the IPv4 header: u_char ip_hl:4, /* header length */ Options only -- see below ip_v:4; /* version */ Constant, and hence meaningless u_char ip_tos; /* type of service */ Of interest to routers, which don't check AH short ip_len; /* total length */ Included in the MD5 calculation anyway u_short ip_id; /* identification */ meaningless after reassembly short ip_off; /* fragment offset field */ changes en route u_char ip_ttl; /* time to live */ changes en route u_char ip_p; /* protocol */ Probably doesn't need checking; can be bound to SPI if needed. u_short ip_sum; /* checksum */ No point to verifying struct in_addr ip_src Bound to SPI ip_dst; /* source and dest address */ Bound to SPI As for options, except for security label the remaining options are either changeable en route, and hence exempt, or of interest to routers, or both. Furthermore, the AH spec says that we can't enumerate the v4 options, and hence whether or not they should be included or not -- but RFC1122 says that unknown IP options MUST be silently ignored. So an implementation can receive an option that it doesn't recognize, doesn't know if it changes en route, must be ignored anyway -- but may or may not be included in the AH calculation, and the receiver doesn't know. The security label is one that might require integrity. But I'd expect it to be bound to the SPI, since sensitivy level is one of the factors that has to be used in negotiating algorithms. If it's not -- well, arguably authenticated explicit security labels could be used on a multilevel cable, but if you have folks tinkering with security levels on such a cable they could inject phony labels or packets; I'd expect that encryption would -- and should -- be used instead. In short -- with the exception of multicast, which as I said I haven't analyzed yet -- David Wagner is right; there seems to be no reason to include the IP header in the AH calculation. And it adds a lot of implementation complexity. At most, we should emulate the approach taken for the TCP and UDP pseudo-header in their checksum calculations. But that seems to be a waste of effort. The length is already in the MD5 checksum, the source and destination addresses are bound to the SPI, and it is generally agreed that the need for verifying the protocol field never materialized. -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Thu May 13 16:20:30 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id QAA00397 for ipng-dist; Thu, 13 May 1999 16:12:42 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id QAA00390 for ; Thu, 13 May 1999 16:12:32 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id QAA06484 for ; Thu, 13 May 1999 16:12:28 -0700 (PDT) Received: from jazz-1.trumpet.com.au (jazz-1.trumpet.com.au [203.5.119.62]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id QAA12296 for ; Thu, 13 May 1999 16:12:28 -0700 (PDT) Received: from localhost (peter@localhost) by jazz-1.trumpet.com.au (8.8.7/8.8.7) with SMTP id JAA10586; Fri, 14 May 1999 09:12:19 +1000 (EST) (envelope-from peter@jazz-1.trumpet.com.au) Date: Fri, 14 May 1999 09:12:19 +1000 (EST) From: Peter Tattam To: deployment@ipv6.org, 6bone@ISI.EDU, ipng@sunroof.eng.sun.com Subject: (IPng 7529) Re: Yet another Dynamic Tunnel Configuration Protocol In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk A fresh draft with corrections is now available. HTTP://jazz-1.trumpet.com.au/ipv6-draft/dtcp-draft-prt-14-may-1999.htm On Thu, 13 May 1999, Peter Tattam wrote: > I am publishing a draft specification of a tunnel configuration protocol that I > have designed and implemented. Another implementation was quickly > developed by the KAME group, to which we obtained good interoperability. > > HTTP://jazz-1.trumpet.com.au/ipv6-draft/dtcp-draft-prt-13-may-1999.htm > > Comments either to me or to the lists. > > I will be using this protocol or further derivations of it to roll out IPv6 to > our regular IPv4 internet customers. > > Apologies if this is sent to the wrong lists, or if I have duplicated the work > of others. I did review the tunnel broker model and I believe that this > protocol can only serve to complement it. > > Peter > > -- > Peter R. Tattam peter@trumpet.com > Managing Director, Trumpet Software International Pty Ltd > Hobart, Australia, Ph. +61-3-6245-0220, Fax +61-3-62450210 > > -- Peter R. Tattam peter@trumpet.com Managing Director, Trumpet Software International Pty Ltd Hobart, Australia, Ph. +61-3-6245-0220, Fax +61-3-62450210 -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Thu May 13 16:20:32 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id QAA00388 for ipng-dist; Thu, 13 May 1999 16:12:14 -0700 (PDT) Received: from engmail4.Eng.Sun.COM (engmail4 [129.144.134.6]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id QAA00381 for ; Thu, 13 May 1999 16:12:05 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail4.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id QAA09524 for ; Thu, 13 May 1999 16:12:03 -0700 (PDT) Received: from inner.net (avarice.inner.net [199.33.248.2]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id QAA12034 for ; Thu, 13 May 1999 16:12:02 -0700 (PDT) Received: from inner.net (cmetz.cstone.net [205.197.102.217]) by inner.net (8.9.1/8.9.1) with ESMTP id XAA17010; Thu, 13 May 1999 23:03:37 GMT Message-Id: <199905132303.XAA17010@inner.net> To: "Steven M. Bellovin" cc: ipng@sunroof.eng.sun.com Subject: (IPng 7528) Re: Last Call: IPv6 Jumbograms to Proposed Standa rd In-reply-to: Your message of "Thu, 13 May 1999 18:30:36 EDT." <19990513223042.BCBC241F16@SIGABA.research.att.com> X-Copyright: Copyright 1999, Craig Metz, All Rights Reserved. X-Reposting: With explicit permission only Date: Thu, 13 May 1999 19:10:52 -0400 From: Craig Metz Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk In message <19990513223042.BCBC241F16@SIGABA.research.att.com>, you write: >and routers can't verify the AH field. Um, actually, there are good reasons why routers might want to (they would, of course, have a SA for this purpose). This is one of the reasons why multiple AHs can sometimes be useful. >u_char ip_p; /* protocol */ > Probably doesn't need checking; can be bound to SPI > if needed. IMO, ICMP about a flow should use the same SA as the bulk of the flow, which wouldn't be possible if we bound this to the SA. >As for options, except for security label the remaining options >are either changeable en route, and hence exempt, or of interest >to routers, or both. The easy solution is to just not use options (or IPv6 options bag headers and routing headers). In many parts of the 'net, you already can't get very far if there are options in your packets. If you simply don't use options, then I agree with you that we can get away with basically only doing the transport header/encapsulating header and the payload beyond. >The security label is one that might require integrity. It requires integrity and might require intermediate checking. -Craig -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Thu May 13 23:09:09 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id VAA00490 for ipng-dist; Thu, 13 May 1999 21:58:59 -0700 (PDT) Received: from engmail4.Eng.Sun.COM (engmail4 [129.144.134.6]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id VAA00483 for ; Thu, 13 May 1999 21:58:31 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail4.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id VAA21199 for ; Thu, 13 May 1999 21:58:30 -0700 (PDT) Received: from dfw-ix8.ix.netcom.com (dfw-ix8.ix.netcom.com [206.214.98.8]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id VAA09098 for ; Thu, 13 May 1999 21:58:27 -0700 (PDT) Received: (from smap@localhost) by dfw-ix8.ix.netcom.com (8.8.4/8.8.4) id XAA17608; Thu, 13 May 1999 23:57:09 -0500 (CDT) Received: from dal-tx6-17.ix.netcom.com(207.94.122.81) by dfw-ix8.ix.netcom.com via smap (V1.3) id rma017586; Thu May 13 23:56:39 1999 Message-ID: <373B3FED.5527630C@ix.netcom.com> Date: Thu, 13 May 1999 22:11:11 +0100 From: Jeff Williams Organization: INEG. Inc. X-Mailer: Mozilla 4.08 [en] (Win16; I) MIME-Version: 1.0 To: Peter Tattam CC: deployment@ipv6.org, 6bone@ISI.EDU, ipng@sunroof.eng.sun.com, register@aunic.net Subject: (IPng 7530) Re: Yet another Dynamic Tunnel Configuration Protocol References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk Peter and all, maybe this is why your listed URL is showing partly lame here Peter. http://www.aunic.net/cgi-bin/whois?trumpet.com.au shows No match for "TRUMPET.COM.AU" Also: however, http://www.aunic.net/cgi-bin/whois.aunic?trumpet.com.au shows the following for trumpet.com.au : domain: trumpet.com.au descr: Trumpet Software International descr: GPO Box 1649 descr: Hobart descr: TAS 7001 admin-c: PT1-AU tech-c: SDB200-AU zone-c: PT1-AU remarks: Created 19950731 changed: register@aunic.net 19970120 source: AUNIC person: Peter Tattam address: GPO Box 1649 address: Hobart address: TASMANIA 7001 phone: +61 02 450220 fax-no: +61 02 450210 e-mail: peter@trumpet.com.au nic-hdl: PT1-AU remarks: (Organisation) Trumpet Software International remarks: Created 19960409 changed: register@aunic.net 19981105 source: AUNIC person: Simon David de Bomford address: 24 Cambridge Road address: Bellerive address: TAS 7018 phone: +61 3 6245 0220 fax-no: +61 3 6245 0210 e-mail: simon@trumpet.com.au nic-hdl: SDB200-AU remarks: (Organisation) Trumpet Software International remarks: (position) Network Manager remarks: Created 19961029 changed: register@aunic.net 19961029 source: AUNIC Peter Tattam wrote: > A fresh draft with corrections is now available. > > HTTP://jazz-1.trumpet.com.au/ipv6-draft/dtcp-draft-prt-14-may-1999.htm > > On Thu, 13 May 1999, Peter Tattam wrote: > > > I am publishing a draft specification of a tunnel configuration protocol that I > > have designed and implemented. Another implementation was quickly > > developed by the KAME group, to which we obtained good interoperability. > > > > HTTP://jazz-1.trumpet.com.au/ipv6-draft/dtcp-draft-prt-13-may-1999.htm > > > > Comments either to me or to the lists. > > > > I will be using this protocol or further derivations of it to roll out IPv6 to > > our regular IPv4 internet customers. > > > > Apologies if this is sent to the wrong lists, or if I have duplicated the work > > of others. I did review the tunnel broker model and I believe that this > > protocol can only serve to complement it. > > > > Peter > > > > -- > > Peter R. Tattam peter@trumpet.com > > Managing Director, Trumpet Software International Pty Ltd > > Hobart, Australia, Ph. +61-3-6245-0220, Fax +61-3-62450210 > > > > > > -- > Peter R. Tattam peter@trumpet.com > Managing Director, Trumpet Software International Pty Ltd > Hobart, Australia, Ph. +61-3-6245-0220, Fax +61-3-62450210 Regards, -- Jeffrey A. Williams CEO/DIR. Internet Network Eng/SR. Java/CORBA Development Eng. Information Network Eng. Group. INEG. INC. E-Mail jwkckid1@ix.netcom.com Contact Number: 972-447-1894 Address: 5 East Kirkwood Blvd. Grapevine Texas 75208 -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Fri May 14 03:37:30 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id CAA00602 for ipng-dist; Fri, 14 May 1999 02:41:45 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id CAA00595 for ; Fri, 14 May 1999 02:41:27 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id CAA12522 for ; Fri, 14 May 1999 02:41:25 -0700 (PDT) Received: from mail-gw.hursley.ibm.com (mail-gw.hursley.ibm.com [194.196.110.15]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id CAA02228 for ; Fri, 14 May 1999 02:41:24 -0700 (PDT) Received: from sp3at21.hursley.ibm.com (sp3at21.hursley.ibm.com [9.20.45.21]) by mail-gw.hursley.ibm.com (AIX4.3/UCB 8.8.8/8.8.8) with ESMTP id KAA34852 for ; Fri, 14 May 1999 10:41:22 +0100 Received: from hursley.ibm.com (carpenterb.hursley.ibm.com [9.20.22.153]) by sp3at21.hursley.ibm.com (AIX4.2/UCB 8.7/8.7.3) with ESMTP id KAA14378 for ; Fri, 14 May 1999 10:41:19 +0100 (BST) Message-ID: <373BEF93.BEE2A6EE@hursley.ibm.com> Date: Fri, 14 May 1999 10:40:35 +0100 From: Brian E Carpenter Organization: IBM Internet Division X-Mailer: Mozilla 4.04 [en] (Win95; I) MIME-Version: 1.0 To: ipng@sunroof.eng.sun.com Subject: (IPng 7531) Options [ was Re: Re: Last Call: IPv6 Jumbograms to Proposed Standa rd References: <199905132303.XAA17010@inner.net> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk Craig Metz wrote: ... > >As for options, except for security label the remaining options > >are either changeable en route, and hence exempt, or of interest > >to routers, or both. > > The easy solution is to just not use options (or IPv6 options bag headers and > routing headers). In many parts of the 'net, you already can't get very far if > there are options in your packets. That's really not acceptable. It's a bug that we can't implement new IPv4 options in practice, and this is a bug we must not propagate in IPv6. Brian - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Brian E Carpenter (IAB Chair) Program Director, Internet Standards & Technology, IBM Internet Div As of May 24, 1999: on assignment for IBM at http://www.iCAIR.org Non-IBM email: brian@icair.org -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Fri May 14 07:50:23 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id GAA00733 for ipng-dist; Fri, 14 May 1999 06:55:33 -0700 (PDT) Received: from engmail3.Eng.Sun.COM (engmail3 [129.144.170.5]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id GAA00726 for ; Fri, 14 May 1999 06:54:38 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail3.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id GAA24154 for ; Fri, 14 May 1999 06:54:37 -0700 (PDT) Received: from gungnir.fnal.gov (gungnir.fnal.gov [131.225.80.1]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id GAA26049 for ; Fri, 14 May 1999 06:54:35 -0700 (PDT) Received: from gungnir.fnal.gov (localhost [127.0.0.1]) by gungnir.fnal.gov (8.9.1/8.9.1) with ESMTP id IAA22871; Fri, 14 May 1999 08:54:30 -0500 (CDT) Message-Id: <199905141354.IAA22871@gungnir.fnal.gov> To: "Steven M. Bellovin" Cc: ipng@sunroof.eng.sun.com From: "Matt Crawford" Subject: (IPng 7532) Re: Last Call: IPv6 Jumbograms to Proposed Standa rd In-reply-to: Your message of Thu, 13 May 1999 18:30:36 EDT. <19990513223042.BCBC241F16@SIGABA.research.att.com> Date: Fri, 14 May 1999 08:54:30 -0500 Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk > u_short ip_id; /* identification */ > meaningless after reassembly > short ip_off; /* fragment offset field */ > changes en route When fragmentation is done en route, the bad guy can insert bogus fragments, making correct reassembly an exponential problem. Even when fragmentation is done solely by the source, the rules for AH (reassembly before ICV check) make the same attack possible. -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Fri May 14 07:56:22 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id HAA00747 for ipng-dist; Fri, 14 May 1999 07:04:47 -0700 (PDT) Received: from engmail3.Eng.Sun.COM (engmail3 [129.144.170.5]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id HAA00740 for ; Fri, 14 May 1999 07:04:14 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail3.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id HAA25140 for ; Fri, 14 May 1999 07:04:09 -0700 (PDT) Received: from mail-blue.research.att.com (mail-blue.research.att.com [135.207.30.102]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id HAA01357 for ; Fri, 14 May 1999 07:04:09 -0700 (PDT) Received: from hermes.research.att.com (hermes.research.att.com [135.207.16.38]) by mail-blue.research.att.com (Postfix) with ESMTP id BAFB24CE5A; Fri, 14 May 1999 10:04:08 -0400 (EDT) Received: from SIGABA.research.att.com (sigaba.research.att.com [135.207.23.169]) by hermes.research.att.com (8.8.7/8.8.7) with ESMTP id KAA11641; Fri, 14 May 1999 10:04:05 -0400 (EDT) Received: by SIGABA.research.att.com (Postfix, from userid 54047) id 0EB5D41F16; Fri, 14 May 1999 10:04:06 -0400 (EDT) Received: from roc (localhost [127.0.0.1]) by SIGABA.research.att.com (Postfix) with ESMTP id F3DAC400B4; Fri, 14 May 1999 10:04:00 -0400 (EDT) X-Mailer: exmh version 2.0.2 2/24/98 To: Craig Metz Cc: ipng@sunroof.eng.sun.com Subject: (IPng 7533) Re: Last Call: IPv6 Jumbograms to Proposed Standa rd Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Fri, 14 May 1999 10:04:00 -0400 From: "Steven M. Bellovin" Message-Id: <19990514140406.0EB5D41F16@SIGABA.research.att.com> Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk In message <199905132303.XAA17010@inner.net>, Craig Metz writes: > In message <19990513223042.BCBC241F16@SIGABA.research.att.com>, you write: > >and routers can't verify the AH field. > > Um, actually, there are good reasons why routers might want to (they would, > of course, have a SA for this purpose). This is one of the reasons why > multiple AHs can sometimes be useful. Sure, they might want to verify the flow. But that in turn requires that the packet be addressed *to* the router, so we can have such an SA, which in turn implies tunnel mode with the real flow-id in the inside header. > > >u_char ip_p; /* protocol */ > > Probably doesn't need checking; can be bound to SPI > > if needed. > > IMO, ICMP about a flow should use the same SA as the bulk of the flow, whic > h > wouldn't be possible if we bound this to the SA. OK. Since the protocol id is covered by the transport pseudo-header, which in turn is protected by ESP's MAC. > > >As for options, except for security label the remaining options > >are either changeable en route, and hence exempt, or of interest > >to routers, or both. > > The easy solution is to just not use options (or IPv6 options bag headers a > nd > routing headers). In many parts of the 'net, you already can't get very far i > f > there are options in your packets. > > If you simply don't use options, then I agree with you that we can get away > with basically only doing the transport header/encapsulating header and the > payload beyond. Apart from Brian's point -- that we want to ensure that options are useful in v6 -- I've yet to see a hop-by-hop option that's (a) important to the end system, and (b) not modified en route. > > >The security label is one that might require integrity. > > It requires integrity and might require intermediate checking. As with the flow-id, intermediate routers can't validate it except in tunnel mode. > On a metanote, I fear we're restarting the AH debate, which I really didn't want to do, especially on this mailing list. Let me suggest that one focus of IPv6 deployment and testing be on interoperability issues concerning all of IPSEC -- there's certainly room for minor tweaks between now and when we go to "Draft" status. We especially need information on transport mode, since tunnel mode is being deployed extensively for VPNs. -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Fri May 14 08:54:17 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id HAA00823 for ipng-dist; Fri, 14 May 1999 07:56:50 -0700 (PDT) Received: from engmail3.Eng.Sun.COM (engmail3 [129.144.170.5]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id HAA00808 for ; Fri, 14 May 1999 07:56:27 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail3.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id HAA00011 for ; Fri, 14 May 1999 07:56:25 -0700 (PDT) Received: from coconut.itojun.org (coconut.itojun.org [210.160.95.97]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id HAA00684 for ; Fri, 14 May 1999 07:56:24 -0700 (PDT) Received: from kiwi.itojun.org (localhost.itojun.org [127.0.0.1]) by coconut.itojun.org (8.9.3+3.2W/3.7W) with ESMTP id XAA20425; Fri, 14 May 1999 23:55:42 +0900 (JST) To: "Matt Crawford" cc: ipng@sunroof.eng.sun.com In-reply-to: crawdad's message of Fri, 14 May 1999 08:54:30 EST. <199905141354.IAA22871@gungnir.fnal.gov> X-Template-Reply-To: itojun@itojun.org X-Template-Return-Receipt-To: itojun@itojun.org X-PGP-Fingerprint: F8 24 B4 2C 8C 98 57 FD 90 5F B4 60 79 54 16 E2 Subject: (IPng 7534) Re: Last Call: IPv6 Jumbograms to Proposed Standa rd From: itojun@iijlab.net Date: Fri, 14 May 1999 23:55:41 +0900 Message-ID: <20423.926693741@coconut.itojun.org> Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk >> u_short ip_id; /* identification */ >> meaningless after reassembly >> short ip_off; /* fragment offset field */ >> changes en route >When fragmentation is done en route, the bad guy can insert bogus >fragments, making correct reassembly an exponential problem. Even >when fragmentation is done solely by the source, the rules for AH >(reassembly before ICV check) make the same attack possible. But you'll be able to detect the fragment insertion by ICV, don't you? itojun -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Fri May 14 10:15:38 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id IAA00879 for ipng-dist; Fri, 14 May 1999 08:54:27 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id IAA00872 for ; Fri, 14 May 1999 08:53:29 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id IAA02971 for ; Fri, 14 May 1999 08:53:27 -0700 (PDT) Received: from gungnir.fnal.gov (gungnir.fnal.gov [131.225.80.1]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id IAA28804 for ; Fri, 14 May 1999 08:53:26 -0700 (PDT) Received: from gungnir.fnal.gov (localhost [127.0.0.1]) by gungnir.fnal.gov (8.9.1/8.9.1) with ESMTP id KAA23614; Fri, 14 May 1999 10:53:07 -0500 (CDT) Message-Id: <199905141553.KAA23614@gungnir.fnal.gov> To: itojun@iijlab.net Cc: ipng@sunroof.eng.sun.com From: "Matt Crawford" Subject: (IPng 7535) Re: Last Call: IPv6 Jumbograms to Proposed Standa rd In-reply-to: Your message of Fri, 14 May 1999 23:55:41 +0900. <20423.926693741@coconut.itojun.org> Date: Fri, 14 May 1999 10:53:07 -0500 Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk > >When fragmentation is done en route, the bad guy can insert bogus > >fragments, making correct reassembly an exponential problem. Even > >when fragmentation is done solely by the source, the rules for AH > >(reassembly before ICV check) make the same attack possible. > > But you'll be able to detect the fragment insertion by ICV, > don't you? You'll detect that something is wrong. If you want to reassemble a good packet, you'll have to try every possible combination of frgaments until you find one that passes the check. Matt -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Fri May 14 14:56:21 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id MAA01039 for ipng-dist; Fri, 14 May 1999 12:17:06 -0700 (PDT) Received: from engmail4.Eng.Sun.COM (engmail4 [129.144.134.6]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id MAA01032 for ; Fri, 14 May 1999 12:16:46 -0700 (PDT) Received: from venus.Sun.COM (venus.EBay.Sun.COM [129.150.69.5]) by engmail4.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id MAA02667 for ; Fri, 14 May 1999 12:16:44 -0700 (PDT) Received: from mail-green.research.att.com (mail-green.research.att.com [135.207.30.103]) by venus.Sun.COM (8.9.3+Sun/8.9.3) with ESMTP id MAA26150 for ; Fri, 14 May 1999 12:16:44 -0700 (PDT) Received: from amontillado.research.att.com (amontillado.research.att.com [135.207.24.32]) by mail-green.research.att.com (Postfix) with ESMTP id 712161E03B; Fri, 14 May 1999 15:16:43 -0400 (EDT) Received: from SIGABA.research.att.com (sigaba.research.att.com [135.207.23.169]) by amontillado.research.att.com (8.8.7/8.8.7) with ESMTP id PAA02642; Fri, 14 May 1999 15:16:38 -0400 (EDT) Received: by SIGABA.research.att.com (Postfix, from userid 54047) id A869C41F16; Fri, 14 May 1999 15:16:40 -0400 (EDT) Received: from roc (localhost [127.0.0.1]) by SIGABA.research.att.com (Postfix) with ESMTP id 996CC400B4; Fri, 14 May 1999 15:16:35 -0400 (EDT) X-Mailer: exmh version 2.0.2 2/24/98 To: "Matt Crawford" Cc: ipng@sunroof.eng.sun.com Subject: (IPng 7536) Re: Last Call: IPv6 Jumbograms to Proposed Standa rd Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Fri, 14 May 1999 15:16:35 -0400 From: "Steven M. Bellovin" Message-Id: <19990514191640.A869C41F16@SIGABA.research.att.com> Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk In message <199905141354.IAA22871@gungnir.fnal.gov>, "Matt Crawford" writes: > > u_short ip_id; /* identification */ > > meaningless after reassembly > > short ip_off; /* fragment offset field */ > > changes en route > > When fragmentation is done en route, the bad guy can insert bogus > fragments, making correct reassembly an exponential problem. Even > when fragmentation is done solely by the source, the rules for AH > (reassembly before ICV check) make the same attack possible. If fragmentation is done en route, as in IPv4, the offset field is mutable, and hence isn't checkable. We could presumably check the 'id' field, but that doesn't help; the bad guy could still replay fragments with changed offset fields. For IPv6, there might be some merit to checking the 'id' field (though frankly I need to think about that one some more); however, RFC 2402 explicitly excludes the fragmentation header from AH calculations (see Appendix A.2). -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Fri May 14 20:42:13 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id RAA01383 for ipng-dist; Fri, 14 May 1999 17:50:37 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id RAA01376 for ; Fri, 14 May 1999 17:49:41 -0700 (PDT) Received: from venus.Sun.COM (venus.EBay.Sun.COM [129.150.69.5]) by engmail1.Eng.Sun.COM (8.8.8+Sun/8.8.8/ENS_USDOMAIN,v%I%) with ESMTP id RAA23909 for ; Fri, 14 May 1999 17:49:19 -0700 (PDT) Received: from popcorn.cisco.com (popcorn.cisco.com [171.69.198.195]) by venus.Sun.COM (8.9.3+Sun/8.9.3) with ESMTP id RAA24400 for ; Fri, 14 May 1999 17:49:19 -0700 (PDT) Received: from [171.69.199.124] (deering-office-mac.cisco.com [171.69.199.124]) by popcorn.cisco.com (8.8.5-Cisco.2-SunOS.5.5.1.sun4/8.6.5) with ESMTP id RAA05904; Fri, 14 May 1999 17:48:47 -0700 (PDT) Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" X-Sender: deering@postoffice Message-Id: In-Reply-To: <19990514191640.A869C41F16@SIGABA.research.att.com> References: <19990514191640.A869C41F16@SIGABA.research.att.com> Date: Fri, 14 May 1999 17:48:39 -0700 To: "Steven M. Bellovin" From: Steve Deering Subject: (IPng 7537) Re: Last Call: IPv6 Jumbograms to Proposed Standa rd Cc: "Matt Crawford" , ipng@sunroof.eng.sun.com Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk At 3:16 PM -0400 5/14/99, Steven M. Bellovin wrote: >For IPv6, there might be some merit to checking the 'id' field (though >frankly I need to think about that one some more); however, RFC 2402 explicitly excludes the fragmentation header from AH calculations Steve The IPv6 spec requires that the Fragment Header be discarded after reassembly, which occurs before AH verification, so there won't be any ID field for AH to check. (Symmetrically, at the sender end, AH computation is assumed to be performed before fragmentation, i.e., before a Fragment Header is inserted into the packet and a new ID generated, so here also there is no ID for AH to cover.) Steve -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Mon May 17 11:28:46 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id IAA03092 for ipng-dist; Mon, 17 May 1999 08:21:59 -0700 (PDT) Received: from engmail3.Eng.Sun.COM (engmail3 [129.144.170.5]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id IAA03085 for ; Mon, 17 May 1999 08:20:22 -0700 (PDT) Received: from venus.Sun.COM (venus.EBay.Sun.COM [129.150.69.5]) by engmail3.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id IAA13533 for ; Mon, 17 May 1999 08:19:41 -0700 (PDT) Received: from homer.persogo.com.br (mail.persogo.com.br [200.241.233.4]) by venus.Sun.COM (8.9.3+Sun/8.9.3) with ESMTP id IAA08860 for ; Mon, 17 May 1999 08:19:39 -0700 (PDT) Received: from persogo.com.br ([200.241.233.161]) by homer.persogo.com.br (Post.Office MTA v3.5.3 release 223 ID# 0-55032U2500L250S0V35) with ESMTP id br for ; Mon, 17 May 1999 12:19:36 -0300 Message-ID: <37403310.BDEF90B1@persogo.com.br> Date: Mon, 17 May 1999 12:17:36 -0300 From: pedro.bueno@persogo.com.br (Pedro Paulo Ferreira Bueno) X-Mailer: Mozilla 4.5 [en] (Win95; I) X-Accept-Language: en MIME-Version: 1.0 To: ipng@sunroof.eng.sun.com Subject: (IPng 7538) Portuguese HOWTO Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk Hello, i was talking to Mr.Bieringer to translate his Linux IPv6 HOWTO to portuguese and he asked me to ask first in the ipv6 lists before start the translation.So i want to know if is there any translation of this HOWTO to portuguese. I already looked at IPv6 http://ipng.ip6.fc.ul.pt and http://www.fccn.pt/rccn/projectos/ipv6/index.html but i didnt find it. Thank you all. Pedro Bueno -- ************************************************************************** Pedro Paulo Ferreira Bueno - Email :pedro.bueno@persogo.com.br Universidade Catolica de Goias | Grupo de Tecnologia em Informatica - GTI Manager of LinuxGO - Goias Linux User Group http://www.linux.goias.net ************************************************************************** -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Tue May 18 11:15:22 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id LAA04759 for ipng-dist; Tue, 18 May 1999 11:08:58 -0700 (PDT) Received: from engmail3.Eng.Sun.COM (engmail3 [129.144.170.5]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id LAA04752 for ; Tue, 18 May 1999 11:08:49 -0700 (PDT) Received: from venus.Sun.COM (venus.EBay.Sun.COM [129.150.69.5]) by engmail3.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id LAA27924 for ; Tue, 18 May 1999 11:08:33 -0700 (PDT) Received: from smtp.adc.com (smtp.adc.com [155.226.10.207]) by venus.Sun.COM (8.9.3+Sun/8.9.3) with ESMTP id LAA27139 for ; Tue, 18 May 1999 11:08:31 -0700 (PDT) Received: from bbg.adc.com (wst564.bbg.adc.com [155.226.177.77]) by smtp.adc.com (8.9.0/8.9.0) with ESMTP id NAA12001 for ; Tue, 18 May 1999 13:08:28 -0500 (CDT) Received: from adc.com (wst265 [155.226.177.73]) by bbg.adc.com (8.9.1/8.9.1) with ESMTP id NAA12348 for ; Tue, 18 May 1999 13:08:26 -0500 (CDT) Message-ID: <3741AC9A.806A7F28@adc.com> Date: Tue, 18 May 1999 13:08:26 -0500 From: Dan Kneip Organization: ADC Telecommunications X-Mailer: Mozilla 4.5 [en] (X11; U; SunOS 5.6 sun4u) X-Accept-Language: en MIME-Version: 1.0 To: "ipng@sunroof.eng.sun.com" Subject: (IPng 7542) Privacy concern with globally unique interface id number Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk After hearing and reading a little about the Pentium III Processor Serial Number (PSN) and the privacy concern, I read about the desire to use a globally unique number for the interface id portion of the IPv6 address, such as one of the IEEE MAC address standards (48/64 bit). Doesn't this seem to bring up the same concern? Can anyone address this concern? Just curious. Dan Kneip -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Tue May 18 12:05:28 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id LAA04828 for ipng-dist; Tue, 18 May 1999 11:58:01 -0700 (PDT) Received: from engmail2.Eng.Sun.COM (engmail2 [129.146.1.25]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id LAA04821 for ; Tue, 18 May 1999 11:57:52 -0700 (PDT) Received: from venus.Sun.COM (venus.EBay.Sun.COM [129.150.69.5]) by engmail2.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id LAA08436 for ; Tue, 18 May 1999 11:57:52 -0700 (PDT) Received: from munnari.OZ.AU (munnari.OZ.AU [128.250.1.21]) by venus.Sun.COM (8.9.3+Sun/8.9.3) with SMTP id LAA02247 for ; Tue, 18 May 1999 11:57:47 -0700 (PDT) Received: from mundamutti.cs.mu.OZ.AU ([128.250.1.5]) by munnari.OZ.AU with SMTP (5.83--+1.3.1+0.59) id SA20122; Wed, 19 May 1999 04:57:35 +1000 (from kre@munnari.OZ.AU) From: Robert Elz To: Dan Kneip Cc: "ipng@sunroof.eng.sun.com" Subject: (IPng 7543) Re: Privacy concern with globally unique interface id number In-Reply-To: Your message of "Tue, 18 May 1999 13:08:26 EST." <3741AC9A.806A7F28@adc.com> Date: Wed, 19 May 1999 04:57:34 +1000 Message-Id: <25247.927053854@munnari.OZ.AU> Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk Date: Tue, 18 May 1999 13:08:26 -0500 From: Dan Kneip Message-ID: <3741AC9A.806A7F28@adc.com> | Doesn't this seem to bring up the same concern? Not really. Embedded MAC addresses are just one (easy) way to assign IPv6 addresses locally. Anyone who doesn't like that way is perfectly free to assign their addresses using whatever other scheme they like. kre -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Tue May 18 13:17:20 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id NAA04978 for ipng-dist; Tue, 18 May 1999 13:03:41 -0700 (PDT) Received: from engmail3.Eng.Sun.COM (engmail3 [129.144.170.5]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id NAA04971 for ; Tue, 18 May 1999 13:03:29 -0700 (PDT) Received: from venus.Sun.COM (venus.EBay.Sun.COM [129.150.69.5]) by engmail3.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id NAA22555 for ; Tue, 18 May 1999 13:03:28 -0700 (PDT) Received: from rs.arin.net (rs1.arin.net [192.149.252.21]) by venus.Sun.COM (8.9.3+Sun/8.9.3) with SMTP id NAA17280 for ; Tue, 18 May 1999 13:03:26 -0700 (PDT) Received: (qmail 14010 invoked from network); 18 May 1999 20:03:25 -0000 Received: from ops.arin.net (192.149.252.141) by rs1.arin.net with SMTP; 18 May 1999 20:03:25 -0000 Received: from sunshine.arin.net (sunshine.arin.net [192.149.252.183]) by ops.arin.net (8.9.0/8.9.0) with ESMTP id QAA14819; Tue, 18 May 1999 16:03:25 -0400 (EDT) Received: from localhost (kerr@localhost) by sunshine.arin.net (8.9.0/8.9.0) with SMTP id QAA06930; Tue, 18 May 1999 16:03:24 -0400 (EDT) X-Authentication-Warning: sunshine.arin.net: kerr owned process doing -bs Date: Tue, 18 May 1999 16:03:24 -0400 (EDT) From: Shane Kerr X-Sender: kerr@sunshine To: Dan Kneip cc: "ipng@sunroof.eng.sun.com" Subject: (IPng 7544) Re: Privacy concern with globally unique interface id number In-Reply-To: <3741AC9A.806A7F28@adc.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk On Tue, 18 May 1999, Dan Kneip wrote: > After hearing and reading a little about the Pentium III Processor > Serial Number (PSN) and the privacy concern, I read about the desire to > use a globally unique number for the interface id portion of the IPv6 > address, such as one of the IEEE MAC address standards (48/64 bit). > > Doesn't this seem to bring up the same concern? > > Can anyone address this concern? This concern was raised at the last IETF. IIRC, it was placed in the, "huh, this may be bad and maybe we should do something about it" category. Kind of like multi-homing. ;) All of the obvious suggestions apply, but I don't think any have made it as far as a draft (although I could be wrong). -- Shane Kerr Software Engineer American Registry for Internet Numbers -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Tue May 18 13:33:31 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id NAA05001 for ipng-dist; Tue, 18 May 1999 13:22:13 -0700 (PDT) Received: from engmail2.Eng.Sun.COM (engmail2 [129.146.1.25]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id NAA04994 for ; Tue, 18 May 1999 13:22:02 -0700 (PDT) Received: from venus.Sun.COM (venus.EBay.Sun.COM [129.150.69.5]) by engmail2.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id NAA23281 for ; Tue, 18 May 1999 13:22:01 -0700 (PDT) Received: from gungnir.fnal.gov (gungnir.fnal.gov [131.225.80.1]) by venus.Sun.COM (8.9.3+Sun/8.9.3) with ESMTP id NAA29013 for ; Tue, 18 May 1999 13:21:58 -0700 (PDT) Received: from gungnir.fnal.gov (localhost [127.0.0.1]) by gungnir.fnal.gov (8.9.1/8.9.1) with ESMTP id PAA14981; Tue, 18 May 1999 15:21:28 -0500 (CDT) Message-Id: <199905182021.PAA14981@gungnir.fnal.gov> To: Shane Kerr , ipng@sunroof.eng.sun.com From: "Matt Crawford" Subject: (IPng 7545) Re: Privacy concern with globally unique interface id number In-reply-to: Your message of Tue, 18 May 1999 16:03:24 EDT. Date: Tue, 18 May 1999 15:21:28 -0500 Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk > This concern was raised at the last IETF. IIRC, it was placed in the, > "huh, this may be bad and maybe we should do something about it" category. > Kind of like multi-homing. ;) I thought someone took it as a work item. I've prodded that person. We'll see. Matt -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Tue May 18 17:31:04 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id RAA05330 for ipng-dist; Tue, 18 May 1999 17:27:30 -0700 (PDT) Received: from engmail2.Eng.Sun.COM (engmail2 [129.146.1.25]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id RAA05323 for ; Tue, 18 May 1999 17:27:21 -0700 (PDT) Received: from venus.Sun.COM (venus.EBay.Sun.COM [129.150.69.5]) by engmail2.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id RAA16035 for ; Tue, 18 May 1999 17:27:21 -0700 (PDT) Received: from jazz-1.trumpet.com.au (jazz-1.trumpet.com.au [203.5.119.62]) by venus.Sun.COM (8.9.3+Sun/8.9.3) with ESMTP id RAA22770 for ; Tue, 18 May 1999 17:27:18 -0700 (PDT) Received: from localhost (peter@localhost) by jazz-1.trumpet.com.au (8.8.7/8.8.7) with SMTP id KAA21661; Wed, 19 May 1999 10:27:11 +1000 (EST) (envelope-from peter@jazz-1.trumpet.com.au) Date: Wed, 19 May 1999 10:27:10 +1000 (EST) From: Peter Tattam To: Dan Kneip cc: "ipng@sunroof.eng.sun.com" Subject: (IPng 7546) Re: Privacy concern with globally unique interface id number In-Reply-To: <3741AC9A.806A7F28@adc.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk There was a recent furore over ethernet addresses leaking out via some MS document like Word or Excel or something - can't remember the full story. The same group of people would complain about EUI addresses. I was going to raise this issue as well - glad someone else has perceived the same issue. Peter On Tue, 18 May 1999, Dan Kneip wrote: > After hearing and reading a little about the Pentium III Processor > Serial Number (PSN) and the privacy concern, I read about the desire > to use a globally unique number for the interface id portion of the > IPv6 address, such as one of the IEEE MAC address standards (48/64 > bit). > > Doesn't this seem to bring up the same concern? > > Can anyone address this concern? > > Just curious. > > Dan Kneip > -------------------------------------------------------------------- > IETF IPng Working Group Mailing List > IPng Home Page: http://playground.sun.com/ipng > FTP archive: ftp://playground.sun.com/pub/ipng > Direct all administrative requests to majordomo@sunroof.eng.sun.com > -------------------------------------------------------------------- > -- Peter R. Tattam peter@trumpet.com Managing Director, Trumpet Software International Pty Ltd Hobart, Australia, Ph. +61-3-6245-0220, Fax +61-3-62450210 -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 19 02:52:26 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id CAA05854 for ipng-dist; Wed, 19 May 1999 02:49:45 -0700 (PDT) Received: from engmail2.Eng.Sun.COM (engmail2 [129.146.1.25]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id CAA05847 for ; Wed, 19 May 1999 02:49:36 -0700 (PDT) Received: from venus.Sun.COM (venus.EBay.Sun.COM [129.150.69.5]) by engmail2.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id CAA00571 for ; Wed, 19 May 1999 02:49:36 -0700 (PDT) Received: from mail-gw.hursley.ibm.com (mail-gw.hursley.ibm.com [194.196.110.15]) by venus.Sun.COM (8.9.3+Sun/8.9.3) with ESMTP id CAA19941 for ; Wed, 19 May 1999 02:49:34 -0700 (PDT) Received: from sp3at21.hursley.ibm.com (sp3at21.hursley.ibm.com [9.20.45.21]) by mail-gw.hursley.ibm.com (AIX4.3/UCB 8.8.8/8.8.8) with ESMTP id KAA65408 for ; Wed, 19 May 1999 10:49:31 +0100 Received: from hursley.ibm.com (carpenterb.hursley.ibm.com [9.20.22.153]) by sp3at21.hursley.ibm.com (AIX4.2/UCB 8.7/8.7.3) with ESMTP id KAA22062 for ; Wed, 19 May 1999 10:49:30 +0100 (BST) Message-ID: <37428900.CA301D3@hursley.ibm.com> Date: Wed, 19 May 1999 10:48:48 +0100 From: Brian E Carpenter Organization: IBM Internet Division X-Mailer: Mozilla 4.04 [en] (Win95; I) MIME-Version: 1.0 To: ipng@sunroof.eng.sun.com Subject: (IPng 7547) Re: Privacy concern with globally unique interface id number References: <199905182021.PAA14981@gungnir.fnal.gov> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk I thought this was a non-issue. It surely doesn't matter for link-local addresses (they are only visible locally:) and for anything else, the paranoid can use whatever arbitrary value they want in the ID field. The practical thing that needs to be done is finishing off DHCPv6. Brian Matt Crawford wrote: > > > This concern was raised at the last IETF. IIRC, it was placed in the, > > "huh, this may be bad and maybe we should do something about it" category. > > Kind of like multi-homing. ;) > > I thought someone took it as a work item. I've prodded that person. > We'll see. > Matt > -------------------------------------------------------------------- > IETF IPng Working Group Mailing List > IPng Home Page: http://playground.sun.com/ipng > FTP archive: ftp://playground.sun.com/pub/ipng > Direct all administrative requests to majordomo@sunroof.eng.sun.com > -------------------------------------------------------------------- -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 19 04:00:44 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id DAA05899 for ipng-dist; Wed, 19 May 1999 03:57:48 -0700 (PDT) Received: from engmail2.Eng.Sun.COM (engmail2 [129.146.1.25]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id DAA05892 for ; Wed, 19 May 1999 03:57:39 -0700 (PDT) Received: from venus.Sun.COM (venus.EBay.Sun.COM [129.150.69.5]) by engmail2.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id DAA04577 for ; Wed, 19 May 1999 03:57:39 -0700 (PDT) Received: from spine.adsl.duke.edu (spine.adsl.duke.edu [152.16.67.45]) by venus.Sun.COM (8.9.3+Sun/8.9.3) with ESMTP id DAA16335 for ; Wed, 19 May 1999 03:57:38 -0700 (PDT) Received: from hygro.adsl.duke.edu (hygro.adsl.duke.edu [152.16.67.44]) by spine.adsl.duke.edu (8.8.7/8.8.7) with ESMTP id GAA06853; Wed, 19 May 1999 06:53:55 -0400 Received: from hygro.adsl.duke.edu (localhost [127.0.0.1]) by hygro.adsl.duke.edu (8.8.7/8.7.3) with ESMTP id GAA01521; Wed, 19 May 1999 06:59:36 -0400 Message-Id: <199905191059.GAA01521@hygro.adsl.duke.edu> To: "Matt Crawford" cc: Shane Kerr , ipng@sunroof.eng.sun.com Subject: (IPng 7548) Re: Privacy concern with globally unique interface id number In-Reply-To: Message from "Matt Crawford" of "Tue, 18 May 1999 15:21:28 CDT." <199905182021.PAA14981@gungnir.fnal.gov> Date: Wed, 19 May 1999 06:59:36 -0400 From: Thomas Narten Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk "Matt Crawford" writes: > > This concern was raised at the last IETF. IIRC, it was placed in the, > > "huh, this may be bad and maybe we should do something about it" category. > > Kind of like multi-homing. ;) > I thought someone took it as a work item. I've prodded that person. > We'll see. I believe I am that person. At the interim meeting in Grenoble, we discussed this issue. I don't believe that that the way IPv6 uses MAC addresses in forming addresses leads to the exact same concerns as have been raised with Intel's chip-embedded serial number. For example, - many machines have associated DNS names. If the DNS name stays the same over time, this is little different than the address staying the same over a long period of time. In practice, this is often the case today (e.g., I have an ADSL-connected home machine that uses DHCP to get an address. I always get the same address and DNS name). - switching network adaptors automatically results in a different address. - one could use DHCP, in which case the interface ID wouldn't need to be the MAC address. Plus, the server could change the address used over time to prevent the same one from being used for an extended period of time. - its not clear that the privacy issues are significantly worse than the way the web uses cookies, a practice that is widespread. Finally, as kre mentions, it's pretty straightforward to use a different Interface ID if you want to use a different address (e.g., my manually configuring a token). The action item I have is to produce a draft describing how one could automate this in stateless address autoconfiguration. The basic idea would be to take the EUI identifier as today, but run it through some sort of hash function to produce a different identifier, and generate an IPv6 address from it. To ensure that addresses change over time, one could (for example) upon reboot hash to a new Interface ID using the previous value as a input to the hash. This would be an optional standalone document that complements but does not replace the existing stateless address autoconfiguration document. Thomas -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 19 05:55:25 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id FAA05950 for ipng-dist; Wed, 19 May 1999 05:52:08 -0700 (PDT) Received: from engmail3.Eng.Sun.COM (engmail3 [129.144.170.5]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id FAA05943 for ; Wed, 19 May 1999 05:51:57 -0700 (PDT) Received: from venus.Sun.COM (venus.EBay.Sun.COM [129.150.69.5]) by engmail3.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id FAA11329 for ; Wed, 19 May 1999 05:51:56 -0700 (PDT) Received: from ietf.org (odin.ietf.org [132.151.1.176]) by venus.Sun.COM (8.9.3+Sun/8.9.3) with ESMTP id FAA04323 for ; Wed, 19 May 1999 05:51:55 -0700 (PDT) Received: from CNRI.Reston.VA.US (localhost [127.0.0.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA09775; Wed, 19 May 1999 08:51:53 -0400 (EDT) Message-Id: <199905191251.IAA09775@ietf.org> Mime-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" To: IETF-Announce: ; Cc: ipng@sunroof.eng.sun.com From: Internet-Drafts@ietf.org Reply-to: Internet-Drafts@ietf.org Subject: (IPng 7549) I-D ACTION:draft-ietf-ipngwg-url-literal-00.txt Date: Wed, 19 May 1999 08:51:52 -0400 Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the IPNG Working Group of the IETF. Title : Preferred Format for Literal IPv6 Addresses in URL's Author(s) : B. Hinden, B. Carpenter Filename : draft-ietf-ipngwg-url-literal-00.txt Pages : 3 Date : 18-May-99 This document defines the preferred format for literal IPv6 Addresses in URL's for implementation in World Wide Web browsers. This format has been implemented in the IPv6 versions of several widely deployed browsers including Microsoft Internet Explorer and Mozilla. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-ipngwg-url-literal-00.txt Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-ietf-ipngwg-url-literal-00.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-ietf-ipngwg-url-literal-00.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv@ietf.org" Content-Type: text/plain Content-ID: <19990518142828.I-D@ietf.org> ENCODING mime FILE /internet-drafts/draft-ietf-ipngwg-url-literal-00.txt --OtherAccess Content-Type: Message/External-body; name="draft-ietf-ipngwg-url-literal-00.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <19990518142828.I-D@ietf.org> --OtherAccess-- --NextPart-- -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 19 06:12:55 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id GAA05985 for ipng-dist; Wed, 19 May 1999 06:09:51 -0700 (PDT) Received: from engmail4.Eng.Sun.COM (engmail4 [129.144.134.6]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id GAA05978 for ; Wed, 19 May 1999 06:09:40 -0700 (PDT) Received: from venus.Sun.COM (venus.EBay.Sun.COM [129.150.69.5]) by engmail4.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id GAA15897 for ; Wed, 19 May 1999 06:09:38 -0700 (PDT) Received: from ietf.org (odin.ietf.org [132.151.1.176]) by venus.Sun.COM (8.9.3+Sun/8.9.3) with ESMTP id GAA13093 for ; Wed, 19 May 1999 06:09:38 -0700 (PDT) Received: from CNRI.Reston.VA.US (localhost [127.0.0.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA10843; Wed, 19 May 1999 09:09:35 -0400 (EDT) Message-Id: <199905191309.JAA10843@ietf.org> Mime-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" To: IETF-Announce: ; Cc: ipng@sunroof.eng.sun.com From: Internet-Drafts@ietf.org Reply-to: Internet-Drafts@ietf.org Subject: (IPng 7550) I-D ACTION:draft-ietf-ipngwg-url-literal-00.txt Date: Wed, 19 May 1999 09:09:35 -0400 Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the IPNG Working Group of the IETF. Title : Preferred Format for Literal IPv6 Addresses in URL's Author(s) : B. Hinden, B. Carpenter Filename : draft-ietf-ipngwg-url-literal-00.txt Pages : 3 Date : 18-May-99 This document defines the preferred format for literal IPv6 Addresses in URL's for implementation in World Wide Web browsers. This format has been implemented in the IPv6 versions of several widely deployed browsers including Microsoft Internet Explorer and Mozilla. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-ipngwg-url-literal-00.txt Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-ietf-ipngwg-url-literal-00.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-ietf-ipngwg-url-literal-00.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv@ietf.org" Content-Type: text/plain Content-ID: <19990518142828.I-D@ietf.org> ENCODING mime FILE /internet-drafts/draft-ietf-ipngwg-url-literal-00.txt --OtherAccess Content-Type: Message/External-body; name="draft-ietf-ipngwg-url-literal-00.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <19990518142828.I-D@ietf.org> --OtherAccess-- --NextPart-- -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 19 10:01:09 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id JAA06170 for ipng-dist; Wed, 19 May 1999 09:57:26 -0700 (PDT) Received: from engmail2.Eng.Sun.COM (engmail2 [129.146.1.25]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id JAA06163 for ; Wed, 19 May 1999 09:57:15 -0700 (PDT) Received: from earth.sun.com (earth.EBay.Sun.COM [129.150.69.3]) by engmail2.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id JAA13018 for ; Wed, 19 May 1999 09:57:15 -0700 (PDT) Received: from gungnir.fnal.gov (gungnir.fnal.gov [131.225.80.1]) by earth.sun.com (8.9.1/8.9.1) with ESMTP id JAA05095 for ; Wed, 19 May 1999 09:57:13 -0700 (PDT) Received: from gungnir.fnal.gov (localhost [127.0.0.1]) by gungnir.fnal.gov (8.9.1/8.9.1) with ESMTP id LAA19086; Wed, 19 May 1999 11:53:29 -0500 (CDT) Message-Id: <199905191653.LAA19086@gungnir.fnal.gov> To: Thomas Narten Cc: Shane Kerr , ipng@sunroof.eng.sun.com From: "Matt Crawford" Subject: (IPng 7551) Re: Privacy concern with globally unique interface id number In-reply-to: Your message of Wed, 19 May 1999 06:59:36 EDT. <199905191059.GAA01521@hygro.adsl.duke.edu> Date: Wed, 19 May 1999 11:53:28 -0500 Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk > The action item I have is to produce a draft describing how one > could automate this in stateless address autoconfiguration. The > basic idea would be ... Exactly the item I was referring to. As we agreed in February, this needs to be out there and be seen. -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Mon May 24 00:29:01 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id AAA09363 for ipng-dist; Mon, 24 May 1999 00:25:43 -0700 (PDT) Received: from engmail4.Eng.Sun.COM (engmail4 [129.144.134.6]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id AAA09356 for ; Mon, 24 May 1999 00:25:34 -0700 (PDT) Received: from venus.Sun.COM (venus.EBay.Sun.COM [129.150.69.5]) by engmail4.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id AAA25228 for ; Mon, 24 May 1999 00:25:35 -0700 (PDT) Received: from ban-server.banyan.tenet.res.in ([203.197.129.74]) by venus.Sun.COM (8.9.3+Sun/8.9.3) with ESMTP id AAA24225 for ; Mon, 24 May 1999 00:25:27 -0700 (PDT) Received: from localhost (murali@localhost) by ban-server.banyan.tenet.res.in (8.8.7/8.8.3) with SMTP id MAA11412 for ; Mon, 24 May 1999 12:46:38 +0530 Date: Mon, 24 May 1999 12:44:56 +0530 (IST) From: Murali Krishna To: ipng@sunroof.eng.sun.com Subject: (IPng 7556) Doubt on IPV6 Addressing Scheme Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk hello all, can you answer the following: 1.what is the fraction of address space in Ipv6 Addressing Architectue( RFC1884, page 5) and how does it effect the addressing scheme. 2, Ipv6 address is 128-bit. But why is the node address attached/subnet prefix/ interface Id to it? thank you, murali. Banyan Networks, Chennai - INDIA. -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Mon May 24 04:36:07 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id EAA09469 for ipng-dist; Mon, 24 May 1999 04:33:19 -0700 (PDT) Received: from engmail2.Eng.Sun.COM (engmail2 [129.146.1.25]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id EAA09462 for ; Mon, 24 May 1999 04:33:09 -0700 (PDT) Received: from venus.Sun.COM (venus.EBay.Sun.COM [129.150.69.5]) by engmail2.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id EAA09381 for ; Mon, 24 May 1999 04:33:08 -0700 (PDT) Received: from ietf.org (odin.ietf.org [132.151.1.176]) by venus.Sun.COM (8.9.3+Sun/8.9.3) with ESMTP id EAA14310 for ; Mon, 24 May 1999 04:33:07 -0700 (PDT) Received: from CNRI.Reston.VA.US (localhost [127.0.0.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id HAA29560; Mon, 24 May 1999 07:33:05 -0400 (EDT) Message-Id: <199905241133.HAA29560@ietf.org> Mime-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" To: IETF-Announce: ; Cc: ipng@sunroof.eng.sun.com From: Internet-Drafts@ietf.org Reply-to: Internet-Drafts@ietf.org Subject: (IPng 7557) I-D ACTION:draft-ietf-ipngwg-dns-lookups-04.txt Date: Mon, 24 May 1999 07:33:04 -0400 Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the IPNG Working Group of the IETF. Title : DNS Extensions to Support IP Version 6 Author(s) : M.Crawford, C. Huitema, S. Thomson Filename : draft-ietf-ipngwg-dns-lookups-04.txt Pages : 17 Date : 21-May-99 This document defines the changes that need to be made to the Domain Name System to support hosts running IP version 6 (IPv6). The changes include a new resource record type to store an IPv6 address in a manner which expedites network renumbering, and updated definitions of existing query types that return Internet addresses as part of additional section processing. For lookups keyed on IPv6 addresses (often called reverse lookups), this document defines a new domain to hold the top-level delegation information and a zone structure which allows a zone to be used without modification for parallel copies of an address space (as for a multihomed provider or site) and across network renumbering events. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-ipngwg-dns-lookups-04.txt Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-ietf-ipngwg-dns-lookups-04.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-ietf-ipngwg-dns-lookups-04.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv@ietf.org" Content-Type: text/plain Content-ID: <19990521103159.I-D@ietf.org> ENCODING mime FILE /internet-drafts/draft-ietf-ipngwg-dns-lookups-04.txt --OtherAccess Content-Type: Message/External-body; name="draft-ietf-ipngwg-dns-lookups-04.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <19990521103159.I-D@ietf.org> --OtherAccess-- --NextPart-- -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 26 12:39:32 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id MAA11880 for ipng-dist; Wed, 26 May 1999 12:30:22 -0700 (PDT) Received: from engmail2.Eng.Sun.COM (engmail2 [129.146.1.25]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id MAA11873 for ; Wed, 26 May 1999 12:29:58 -0700 (PDT) Received: from venus.Sun.COM (venus.Sun.NET [129.150.69.5] (may be forged)) by engmail2.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id MAA04800 for ; Wed, 26 May 1999 12:29:58 -0700 (PDT) Received: from thrawn.cs.ohiou.edu (thrawn.cs.ohiou.edu [132.235.3.130]) by venus.Sun.COM (8.9.3+Sun/8.9.3) with ESMTP id MAA00429 for ; Wed, 26 May 1999 12:29:57 -0700 (PDT) Received: (from vchipits@localhost) by thrawn.cs.ohiou.edu (8.8.5/8.7.1) id PAA16557; Wed, 26 May 1999 15:29:55 -0400 (EDT) From: Vitaly Chipitsyn MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Date: Wed, 26 May 1999 15:29:55 -0400 (EDT) To: IPNG (ipngwg) Subject: (IPng 7560) X-Mailer: VM 6.43 under 20.4 "Emerald" XEmacs Lucid Message-ID: <14156.18868.713715.85042@thrawn.cs.ohiou.edu> Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk Hello, everyone!! Were there any comments on the draft "Mobility Support in IPv6" ? If yes, where can those be found, please? Thank you. --vc -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 26 13:33:37 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id NAA11936 for ipng-dist; Wed, 26 May 1999 13:29:15 -0700 (PDT) Received: from engmail2.Eng.Sun.COM (engmail2 [129.146.1.25]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id NAA11929 for ; Wed, 26 May 1999 13:29:06 -0700 (PDT) Received: from venus.Sun.COM (venus.Sun.NET [129.150.69.5] (may be forged)) by engmail2.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id NAA15190 for ; Wed, 26 May 1999 13:29:06 -0700 (PDT) Received: from thrawn.cs.ohiou.edu (thrawn.cs.ohiou.edu [132.235.3.130]) by venus.Sun.COM (8.9.3+Sun/8.9.3) with ESMTP id NAA25181 for ; Wed, 26 May 1999 13:29:05 -0700 (PDT) Received: (from vchipits@localhost) by thrawn.cs.ohiou.edu (8.8.5/8.7.1) id QAA17624; Wed, 26 May 1999 16:29:04 -0400 (EDT) From: Vitaly Chipitsyn MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Date: Wed, 26 May 1999 16:29:03 -0400 (EDT) To: IPNG (ipngwg) Subject: (IPng 7561) mutlihomed sites X-Mailer: VM 6.43 under 20.4 "Emerald" XEmacs Lucid Message-ID: <14156.22322.38351.789030@thrawn.cs.ohiou.edu> Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk Hello, everyone!! 1) Considering a multihomed site, is it sufficient to have all nodes belonging to the site have global IPv6 addresses incorporating prefixes of all NLAs/sTLAs/etc to which the site connects? So, if there are two connection points to the internet, AAAA::/28 and BBBB::/28, then interfaces of each node inside the site would have two addresses AAAA::host_id and BBBB::host_id assigned. Right or wrong? :-) 2) If the assumption (1) is correct, then what happens to routing of packets? Based on what assumption should a particular node choose which of its two addresses to use for better efficiency/throughput/etc while communicating with nodes outside the site? Thank you. --vc -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 26 14:52:35 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id OAA12101 for ipng-dist; Wed, 26 May 1999 14:48:52 -0700 (PDT) Received: from engmail2.Eng.Sun.COM (engmail2 [129.146.1.25]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id OAA12094 for ; Wed, 26 May 1999 14:48:43 -0700 (PDT) Received: from lukla.Sun.COM (lukla.Central.Sun.COM [129.147.5.31]) by engmail2.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id OAA29699 for ; Wed, 26 May 1999 14:48:43 -0700 (PDT) Received: from rs.arin.net (rs1.arin.net [192.149.252.21]) by lukla.Sun.COM (8.9.3+Sun/8.9.3) with SMTP id PAA19463 for ; Wed, 26 May 1999 15:48:42 -0600 (MDT) Received: (qmail 23191 invoked from network); 26 May 1999 21:48:41 -0000 Received: from ops.arin.net (192.149.252.141) by rs1.arin.net with SMTP; 26 May 1999 21:48:41 -0000 Received: from orr.arin.net (orr.arin.net [192.149.252.201]) by ops.arin.net (8.9.0/8.9.0) with ESMTP id RAA10179; Wed, 26 May 1999 17:48:40 -0400 (EDT) Received: from localhost by orr.arin.net (8.9.3/8.9.0) with SMTP id RAA02157; Wed, 26 May 1999 17:48:40 -0400 (EDT) X-Authentication-Warning: orr.arin.net: raminr owned process doing -bs Date: Wed, 26 May 1999 17:48:39 -0400 (EDT) From: Ramin Sepehr Rad To: Vitaly Chipitsyn cc: IPNG Subject: (IPng 7562) Re: mutlihomed sites In-Reply-To: <14156.22322.38351.789030@thrawn.cs.ohiou.edu> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk On Wed, 26 May 1999, Vitaly Chipitsyn wrote: > 1) Considering a multihomed site, is it sufficient to have all nodes > belonging to the site have global IPv6 addresses incorporating > prefixes of all NLAs/sTLAs/etc to which the site connects? > > So, if there are two connection points to the internet, AAAA::/28 and > BBBB::/28, then interfaces of each node inside the site would have two > addresses AAAA::host_id and BBBB::host_id assigned. Right or wrong? :-) There hasn't been many discussions on multi-homing. (well, not that I know of.) I actually thought of the same solution as yours, but the problem that I see with this is wasted IP address space and, being an employee of ARIN, that kinda bothers me. :) > 2) If the assumption (1) is correct, then what happens to routing of > packets? Based on what assumption should a particular node choose > which of its two addresses to use for better efficiency/throughput/etc > while communicating with nodes outside the site? How about an interior routing protocol? ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ | Ramin Sepehr Rad American Registry for Internet Numbers | | raminr@arin.net 4506 Daly Drive | | (703) 227-9876 Suite 200 | | (703) 227-0676 (FAX) Chantilly, VA 20151 | ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Wed May 26 15:31:21 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id PAA12149 for ipng-dist; Wed, 26 May 1999 15:24:15 -0700 (PDT) Received: from engmail3.Eng.Sun.COM (engmail3 [129.144.170.5]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id PAA12142 for ; Wed, 26 May 1999 15:24:07 -0700 (PDT) Received: from lukla.Sun.COM (lukla.Central.Sun.COM [129.147.5.31]) by engmail3.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id PAA15419 for ; Wed, 26 May 1999 15:24:05 -0700 (PDT) Received: from mail4.microsoft.com (mail4.microsoft.com [131.107.3.122]) by lukla.Sun.COM (8.9.3+Sun/8.9.3) with ESMTP id QAA29878 for ; Wed, 26 May 1999 16:24:05 -0600 (MDT) Received: by mail4.microsoft.com with Internet Mail Service (5.5.2524.0) id ; Wed, 26 May 1999 15:24:04 -0700 Message-ID: <4D0A23B3F74DD111ACCD00805F31D81014515179@RED-MSG-50> From: Richard Draves To: "'Vitaly Chipitsyn'" Cc: IPNG Subject: (IPng 7563) RE: mutlihomed sites Date: Wed, 26 May 1999 15:23:53 -0700 X-Mailer: Internet Mail Service (5.5.2524.0) Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk > 1) Considering a multihomed site, is it sufficient to have all nodes > belonging to the site have global IPv6 addresses incorporating > prefixes of all NLAs/sTLAs/etc to which the site connects? > > So, if there are two connection points to the internet, AAAA::/28 and > BBBB::/28, then interfaces of each node inside the site would have two > addresses AAAA::host_id and BBBB::host_id assigned. Right or > wrong? :-) Yup, that's how it should work. There's no shortage of addresses, so we can use multiple addresses to make routing easier. > 2) If the assumption (1) is correct, then what happens to routing of > packets? Based on what assumption should a particular node choose > which of its two addresses to use for better efficiency/throughput/etc > while communicating with nodes outside the site? Yes, it exacerbates the problems of source & destination address selection. I have an ID out talking about source address selection and there's been some recent discussion on this list. If you have comments I'd love to hear them. See http://www.ietf.org/internet-drafts/draft-draves-ipngwg-simple-srcaddr-00.tx t. Thanks, Rich -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Thu May 27 01:39:59 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id BAA12560 for ipng-dist; Thu, 27 May 1999 01:21:49 -0700 (PDT) Received: from engmail3.Eng.Sun.COM (engmail3 [129.144.170.5]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id BAA12548 for ; Thu, 27 May 1999 01:21:22 -0700 (PDT) Received: from venus.Sun.COM (venus.Sun.NET [129.150.69.5] (may be forged)) by engmail3.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id BAA15934 for ; Thu, 27 May 1999 01:21:21 -0700 (PDT) Received: from bxnms.u-bordeaux.fr (bxnms.u-bordeaux.fr [147.210.253.1]) by venus.Sun.COM (8.9.3+Sun/8.9.3) with ESMTP id BAA07639 for ; Thu, 27 May 1999 01:21:20 -0700 (PDT) Received: from fish (cours01.cribx1.u-bordeaux.fr [147.210.36.21]) by bxnms.u-bordeaux.fr (8.9.3/) with ESMTP id KAA07192; Thu, 27 May 1999 10:21:17 +0200 Message-Id: <4.2.0.37.19990527100849.00aecd70@brahma.imag.fr> X-Sender: durand@brahma.imag.fr X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.0.37 (Beta) Date: Thu, 27 May 1999 10:23:08 +0200 To: mobile-ip@standards.nortelnetworks.com, ipng@sunroof.eng.sun.com From: Alain Durand Subject: (IPng 7564) Mobile IP connectathon in France Cc: g6@imag.fr Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk Hi, As I announced in Minneapolis, the G6 group is organizing a mobile-IPv6 connectathon in France, in Nancy, on September 15, 16 & 17th 1999. Nancy is in the east of France. If you have mobile-IPv6 code and would like to participate to this event, please contact me directly by mail. Yours, - Alain Durand. -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Thu May 27 02:20:18 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id CAA12637 for ipng-dist; Thu, 27 May 1999 02:12:20 -0700 (PDT) Received: from engmail3.Eng.Sun.COM (engmail3 [129.144.170.5]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id CAA12630 for ; Thu, 27 May 1999 02:12:11 -0700 (PDT) Received: from lukla.Sun.COM (lukla.Central.Sun.COM [129.147.5.31]) by engmail3.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id CAA18295 for ; Thu, 27 May 1999 02:12:10 -0700 (PDT) Received: from ban-server.banyan.tenet.res.in ([203.197.130.31]) by lukla.Sun.COM (8.9.3+Sun/8.9.3) with ESMTP id DAA21129 for ; Thu, 27 May 1999 03:12:01 -0600 (MDT) Received: from localhost (murali@localhost) by ban-server.banyan.tenet.res.in (8.8.7/8.8.3) with SMTP id OAA32512 for ; Thu, 27 May 1999 14:33:34 +0530 Date: Thu, 27 May 1999 14:33:20 +0530 (IST) From: Murali Krishna To: ipng@sunroof.eng.sun.com Subject: (IPng 7565) IPv6 code In-Reply-To: <4.2.0.37.19990527100849.00aecd70@brahma.imag.fr> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk Hi where can i get a comprehensive design for IPv6 (not specificatons or rfc(s)) and as well as IPv6 code. can you give me some suggestions / sites on this. murali. -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Thu May 27 05:44:32 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id FAA12704 for ipng-dist; Thu, 27 May 1999 05:37:58 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id FAA12697 for ; Thu, 27 May 1999 05:37:49 -0700 (PDT) Received: from venus.Sun.COM (venus.Sun.NET [129.150.69.5] (may be forged)) by engmail1.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id FAA19658 for ; Thu, 27 May 1999 05:37:48 -0700 (PDT) Received: from concorde.inria.fr (concorde.inria.fr [192.93.2.39]) by venus.Sun.COM (8.9.3+Sun/8.9.3) with ESMTP id FAA17006 for ; Thu, 27 May 1999 05:37:46 -0700 (PDT) Received: from givry.inria.fr (givry.inria.fr [193.51.193.144]) by concorde.inria.fr (8.8.7/8.8.7) with ESMTP id OAA27698; Thu, 27 May 1999 14:37:34 +0200 (MET DST) Received: from givry.inria.fr (givry.inria.fr [193.51.193.144]) by givry.inria.fr (8.7.6/8.7.3) with ESMTP id OAA17638; Thu, 27 May 1999 14:37:33 +0200 (MET DST) Message-Id: <199905271237.OAA17638@givry.inria.fr> From: Francis Dupont To: Vitaly Chipitsyn cc: IPNG (ipngwg) Subject: (IPng 7566) Re: mutlihomed sites In-reply-to: Your message of Wed, 26 May 1999 16:29:03 EDT. <14156.22322.38351.789030@thrawn.cs.ohiou.edu> Date: Thu, 27 May 1999 14:37:32 +0200 Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk In your previous mail you wrote: 1) Considering a multihomed site, is it sufficient to have all nodes belonging to the site have global IPv6 addresses incorporating prefixes of all NLAs/sTLAs/etc to which the site connects? So, if there are two connection points to the internet, AAAA::/28 and BBBB::/28, then interfaces of each node inside the site would have two addresses AAAA::host_id and BBBB::host_id assigned. Right or wrong? :-) => it is necessary (I have to find time to update and post a new version of my I-D about this topics). 2) If the assumption (1) is correct, then what happens to routing of packets? Based on what assumption should a particular node choose which of its two addresses to use for better efficiency/throughput/etc while communicating with nodes outside the site? => I'll try to propose a BOF about IPv6 multihoming in Oslo because it is a technical & research (*) interesting issue. There are some I-D about this issue and at least one RFC. Francis.Dupont@inria.fr PS: (*) Research because we don't really know the best solution, one can consider this is more for IRTF than IETF too... -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Thu May 27 08:04:28 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id HAA12785 for ipng-dist; Thu, 27 May 1999 07:54:59 -0700 (PDT) Received: from engmail3.Eng.Sun.COM (engmail3 [129.144.170.5]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id HAA12778 for ; Thu, 27 May 1999 07:54:47 -0700 (PDT) Received: from lukla.Sun.COM (lukla.Central.Sun.COM [129.147.5.31]) by engmail3.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id HAA04377 for ; Thu, 27 May 1999 07:54:45 -0700 (PDT) Received: from gungnir.fnal.gov (gungnir.fnal.gov [131.225.80.1]) by lukla.Sun.COM (8.9.3+Sun/8.9.3) with ESMTP id IAA15617 for ; Thu, 27 May 1999 08:54:47 -0600 (MDT) Received: from gungnir.fnal.gov (localhost [127.0.0.1]) by gungnir.fnal.gov (8.9.1/8.9.1) with ESMTP id JAA23397; Thu, 27 May 1999 09:54:28 -0500 (CDT) Message-Id: <199905271454.JAA23397@gungnir.fnal.gov> To: Ramin Sepehr Rad Cc: IPNG From: "Matt Crawford" Subject: (IPng 7567) Re: mutlihomed sites In-reply-to: Your message of Wed, 26 May 1999 17:48:39 EDT. Date: Thu, 27 May 1999 09:54:27 -0500 Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk > > So, if there are two connection points to the internet, AAAA::/28 and > > BBBB::/28, then interfaces of each node inside the site would have two > > addresses AAAA::host_id and BBBB::host_id assigned. Right or wrong? :-) > > There hasn't been many discussions on multi-homing. (well, not that I know > of.) There were many long ones. > I actually thought of the same solution as yours, but the problem that I > see with this is wasted IP address space and, being an employee of ARIN, that > kinda bothers me. :) The alternative is to have the global routing tables incorporate the topology of every multihomed site and, being a user of the internet, that kinda bothers me. ______________________________________________________________________________ Matt Crawford crawdad@fnal.gov Fermilab -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Thu May 27 12:45:21 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id MAA13033 for ipng-dist; Thu, 27 May 1999 12:41:09 -0700 (PDT) Received: from engmail2.Eng.Sun.COM (engmail2 [129.146.1.25]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id MAA13026 for ; Thu, 27 May 1999 12:40:51 -0700 (PDT) Received: from venus.Sun.COM (venus.Sun.NET [129.150.69.5] (may be forged)) by engmail2.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id MAA15520 for ; Thu, 27 May 1999 12:40:50 -0700 (PDT) Received: from popcorn.cisco.com (popcorn.cisco.com [171.69.198.195]) by venus.Sun.COM (8.9.3+Sun/8.9.3) with ESMTP id MAA01901 for ; Thu, 27 May 1999 12:40:49 -0700 (PDT) Received: from [171.69.199.124] (deering-office-mac.cisco.com [171.69.199.124]) by popcorn.cisco.com (8.8.5-Cisco.2-SunOS.5.5.1.sun4/8.6.5) with ESMTP id MAA29979; Thu, 27 May 1999 12:40:46 -0700 (PDT) Mime-Version: 1.0 X-Sender: deering@postoffice Message-Id: In-Reply-To: <199905271237.OAA17638@givry.inria.fr> References: <199905271237.OAA17638@givry.inria.fr> Date: Thu, 27 May 1999 12:40:44 -0700 To: Francis Dupont From: Steve Deering Subject: (IPng 7568) Re: mutlihomed sites Cc: ipng@sunroof.eng.sun.com Content-Type: text/plain; charset="us-ascii" Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk At 2:37 PM +0200 5/27/99, Francis Dupont wrote: >=> I'll try to propose a BOF about IPv6 multihoming in Oslo... Francis, That should not be necessary. The IPng working group already decided that multihoming was our major piece of unfinished business, and that it will be included in our updated charter (currently being drafted by the chairs). We plan to devote at least half of our WG meeting time (e.g., one of our two meeting slots) in Oslo to the topic of multihoming, which is the same amount of time you would get for a BOF. >=> it is necessary (I have to find time to update and post a new >version of my I-D about this topics). That would be great. We also encourage anyone else to submit drafts or start discussions on the mailing list, if you have new ideas for how to solve or alleviate the Internet-old problems of multihomed hosts and multi-homed sites. Steve -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Thu May 27 12:58:34 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id MAA13063 for ipng-dist; Thu, 27 May 1999 12:55:02 -0700 (PDT) Received: from engmail3.Eng.Sun.COM (engmail3 [129.144.170.5]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id MAA13056 for ; Thu, 27 May 1999 12:54:53 -0700 (PDT) Received: from lukla.Sun.COM (lukla.Central.Sun.COM [129.147.5.31]) by engmail3.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id MAA28896 for ; Thu, 27 May 1999 12:54:52 -0700 (PDT) Received: from popcorn.cisco.com (popcorn.cisco.com [171.69.198.195]) by lukla.Sun.COM (8.9.3+Sun/8.9.3) with ESMTP id NAA19660 for ; Thu, 27 May 1999 13:54:54 -0600 (MDT) Received: from [171.69.199.124] (deering-office-mac.cisco.com [171.69.199.124]) by popcorn.cisco.com (8.8.5-Cisco.2-SunOS.5.5.1.sun4/8.6.5) with ESMTP id MAA01190; Thu, 27 May 1999 12:54:51 -0700 (PDT) Mime-Version: 1.0 X-Sender: deering@postoffice Message-Id: Date: Thu, 27 May 1999 12:54:49 -0700 To: ipng@sunroof.eng.sun.com From: Steve Deering Subject: (IPng 7569) request for agenda items Cc: Bob Hinden Content-Type: text/plain; charset="us-ascii" Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk Please send requests for agenda items for the Oslo meetings of the IPng Working Group to Bob Hinden and me. As I mentioned in my previous message, we especially solicit items on all facets of IPv6 multihoming. If you have new ideas to propose (on multihoming or any other relevant topic), we strongly urge you to float those ideas in an Internet Draft or a mailing list discussion in advance of the Oslo meetings. The cut-off date for Internet Drafts to be published before Oslo is June 25, at 1700 Eastern Daylight Time. Steve -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Thu May 27 13:13:14 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id NAA13103 for ipng-dist; Thu, 27 May 1999 13:09:09 -0700 (PDT) Received: from engmail2.Eng.Sun.COM (engmail2 [129.146.1.25]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id NAA13096 for ; Thu, 27 May 1999 13:09:00 -0700 (PDT) Received: from lukla.Sun.COM (lukla.Central.Sun.COM [129.147.5.31]) by engmail2.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id NAA20802 for ; Thu, 27 May 1999 13:08:59 -0700 (PDT) Received: from thrawn.cs.ohiou.edu (thrawn.cs.ohiou.edu [132.235.3.130]) by lukla.Sun.COM (8.9.3+Sun/8.9.3) with ESMTP id OAA24175 for ; Thu, 27 May 1999 14:09:00 -0600 (MDT) Received: (from vchipits@localhost) by thrawn.cs.ohiou.edu (8.8.5/8.7.1) id QAA11256; Thu, 27 May 1999 16:08:55 -0400 (EDT) From: Vitaly Chipitsyn MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Date: Thu, 27 May 1999 16:08:55 -0400 (EDT) To: Richard Draves Cc: IPNG Subject: (IPng 7570) RE: mutlihomed sites In-Reply-To: <4D0A23B3F74DD111ACCD00805F31D81014515179@RED-MSG-50> References: <4D0A23B3F74DD111ACCD00805F31D81014515179@RED-MSG-50> X-Mailer: VM 6.43 under 20.4 "Emerald" XEmacs Lucid Message-ID: <14157.41817.453100.953831@thrawn.cs.ohiou.edu> Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk Richard Draves writes: > > 1) Considering a multihomed site, is it sufficient to have all nodes > > belonging to the site have global IPv6 addresses incorporating > > prefixes of all NLAs/sTLAs/etc to which the site connects? > > > > 2) If the assumption (1) is correct, then what happens to routing of > > packets? Based on what assumption should a particular node choose > > which of its two addresses to use for better efficiency/throughput/etc > > while communicating with nodes outside the site? > > Yes, it exacerbates the problems of source & destination address selection. > I have an ID out talking about source address selection and there's been > some recent discussion on this list. If you have comments I'd love to hear > them. > > See > http://www.ietf.org/internet-drafts/draft-draves-ipngwg-simple-srcaddr-00.tx > t. >From my understanding, the draft primarily describes ways to determine which source address to use based on _where_ the destination node is, as related to the sender. What seems to be interesting is how to determine _which_ of several available global addresses to use to get better reachibility to an outside node. Also, if a link that is being used by a long-term _connection_ becomes overwhelmed with traffic, while another link (available through use of another global address of sender) is not quite loaded, that would be very nice to be able to switch connection to use that other address for further communication. It sounds very artificial, but wouldn't it be useful for interactive type of traffic? Maybe this problem is more appropriate for the TCP WG. --vc -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Thu May 27 13:59:32 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id NAA13202 for ipng-dist; Thu, 27 May 1999 13:53:53 -0700 (PDT) Received: from engmail1.Eng.Sun.COM (engmail1 [129.146.1.13]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id NAA13195 for ; Thu, 27 May 1999 13:53:41 -0700 (PDT) Received: from lukla.Sun.COM (lukla.Central.Sun.COM [129.147.5.31]) by engmail1.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id NAA10104 for ; Thu, 27 May 1999 13:53:39 -0700 (PDT) Received: from hotmail.com (hm2.hotmail.com [207.82.250.81]) by lukla.Sun.COM (8.9.3+Sun/8.9.3) with SMTP id OAA09645 for ; Thu, 27 May 1999 14:53:41 -0600 (MDT) Received: (qmail 11132 invoked from network); 27 May 1999 20:53:25 -0000 Received: from ppp-tr6-15.satlink.com (HELO dejavu) (200.0.225.110) by hm2.hotmail.com with SMTP; 27 May 1999 20:53:25 -0000 Message-ID: <004801bea882$d59cf200$0200000a@dejavu> From: "lpmqtp" To: Subject: (IPng 7571) Guide Date: Thu, 27 May 1999 17:51:50 -0300 MIME-Version: 1.0 Content-Type: multipart/related; type="multipart/alternative"; boundary="----=_NextPart_000_0042_01BEA869.9944ADC0" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2314.1300 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk This is a multi-part message in MIME format. ------=_NextPart_000_0042_01BEA869.9944ADC0 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0043_01BEA869.9944ADC0" ------=_NextPart_001_0043_01BEA869.9944ADC0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi... I am really new in this thing of IPng, in fact i am new in the IPv4 too, = but i am studying really hard to understand it, and i want to understand = IPv6 as well... I 'm only asking if anybody could tell me what information or material = should i study ,,,remember i am a beginner in this subject...so please = be nice with me ... Thanks a lot. Nando. ------=_NextPart_001_0043_01BEA869.9944ADC0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Hi...
I am really new in this thing of IPng, in fact i am new in the = IPv4=20 too, but i am studying really hard to understand it, and i want to = understand=20 IPv6 as well...
I 'm only asking if anybody could tell me what information or = material=20 should i study ,,,remember i am a beginner in this subject...so please = be nice=20 with me ...
Thanks a lot.

Nando.
 
 
------=_NextPart_001_0043_01BEA869.9944ADC0-- ------=_NextPart_000_0042_01BEA869.9944ADC0 Content-Type: image/gif; name="Chess.gif" Content-Transfer-Encoding: base64 Content-ID: <004101bea882$be88be00$0200000a@dejavu> R0lGODlhQAZlAPcAAP////7+/v39/fz8/Pv7+/r6+vn5+fj4+Pf39/b29vX19fT09PPz8/Ly8vHx 8fDw8O/v7+7u7u3t7ezs7Ovr6+rq6unp6ejo6Ofn5+bm5uXl5ePj4+Li4uHh4eDg4N/f397e3t3d 3dzc3Nvb29ra2tnZ2djY2NfX19bW1tXV1dTU1NPT09LS0tHR0dDQ0M/Pz87Ozs3NzczMzMvLy8rK ysnJycjIyMfHx8bGxsXFxcTExMPDw8LCwsHBwcDAwL+/v76+vr29vby8vLu7u7q6urm5ubi4uLe3 t7a2trW1tbS0tLOzs7KysrGxsbCwsK+vr66urq2traysrKurq6qqqqmpqaioqKenp6ampqWlpaSk pKOjo6KioqGhoaCgoJ+fn56enp2dnZycnJubm5qampmZmZiYmJeXl5aWlpWVlZSUlJOTk5KSkpGR kZCQkI+Pj46Ojo2NjYyMjIuLi4qKiomJiYiIiIeHh4aGhoWFhYSEhIODg4KCgoGBgYCAgH9/f35+ fgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwAAAAAQAZlAEAI/wBvXPlC sKDBgwgTKlxY8M2XK0duvDjxoaLFixgzntj44sWNHz+OPLky8Mybk3dS3nlz5ckPihAQIABAs6bN mzhz6tzJs6fPn0CDCh1KtKjRo0iTKl3KtKnTp1CjSp1KtarVq1izat3KtavXr2DDih1LtqzZs2hz nvD4YyRBk29S/pl75wzDu3ffnIH4YyLFjIADC764cW3HGxgSx5yZtrHjx5AjS55MubLly5gza97M ubPnz6BDmxVc2PDHkCNLmlQ5909dvAb18vU7uLZtwaJz697Nu7fv38CDCx9OvLjx48jT3rZd+jBI kQO/wGVN1+TeI303Lt9+O7n37+DDi/8fT768+fPo06tHzr194OYeP8L+csR9+/X48+vfz7+///8A BijggETZZyBpJ8yn4Bc/2EfggxBGKOGEFFZo4YUY9nfghhhttOCHsN1gUYYklmjiiSimqOKKLJqI 1xN/cYggiDTCNhEGEMTU4o489ujjj0AGKeSQT9Wo0BExbuehkUwm5NILH2AgE5FUVmnllVhmqeWW wzVpJJIVLenlmE9GOSWXaKap5ppstunmmziNSaZbq90xl0NywlamlIzB6eefgAYq6KCElpdnk3p9 8URENzT60RHQvYWSna3hyeSeZxaq6aacdurpp6BidSiTsmFH22CFHXbaE25JN2lrf1j/ehCmfYZq 66245qrrrmy+EFJJKtk1KkOlZpfkgRSlGl9I0EUH0g0n4Jgpr9RWa+212GYLoEUcsYUaSdLVSalr wpJ6nbEyuqftuuy26+678Oqm5AfKettsuHHJVZ1CxZ6a7nbxBizwwAQXbDBU/wIG32n3SpcQmAkv d/DEFFds8cXrRmygmDQ2+C/GIIcs8sgkr6mxfRwPa5DHuJXs8sswxyxzhQbBeDJzCaoM4rQz9+zz z0AHLVyNNqebss56RgQTz0I37fTTUEftFdIFQfxezlQrSKvUXHft9ddg/5S1gh9FNzZDW4et9tps ty3z2bAl+lBBZ0w3bqw6p+323nz3/+33u3Dj1a92YXbbKLOt2g2rrC/2ZWatf0cu+eSUF3pD4MSe 6y93yh4uEp12q3RHS47zWfnpqKeuOpYeHVES5rFpTjiyhq8K+kknLep4jpCv7vvvwAdPIVsj1dna a1kPfuy/nT8KqV+K9S789NRXb315HHnuumr5jou8nMrffPUJMpV//fnop68+cB12/lxq+FJHbo3h i9/y+vjnr//+lN1WL8OJE9fxyrWQ+tkPMPxLoAIXyECtbIxehrEXq94iwH01RHbLO2BFGsjBDnrw g0HRWPPeF526TcpSppqdBi8Cwha68IUMXGGysgfACS6kPivcIAx3yMMeUi+HCOoIiP9wqDEfGvGI SJQcEGvzAjmxzEBJjKIUp9i1Jc4IaU+sDRW3yMUuxsyKV4PdF0SUES+a8YxoPFjRwMgtrInxIGmM oxzniC2FrFGDR3vjF6TFNDr68Y+A9NOC7sg8N+qRID+AVpR0FMhGOvKRWfKS1VBmyEOSDkrSgqQm N8nJFulskqiqpB4v+QHedfKUqEzlhDBHRMKIUo9lWowqZ0nLWubnkFVrIi5rtjtG2vKXwAzmcXZZ ENS4inGBi2UfhcnMZjqTM8RMCFzyVamxxdKXz8ymNrcJmWh+IVGsgtTnSjipcSHzUrtbJjfXyc52 iiqaxZIIR9aivcSVs5o0uqb03Mn/z376MyneHBy9NJKqepKze/hEWzr3+c+GOvShcYInBpVUO9TY E6F34iWUTAnRjnoUor56wi4NyDkImsZ54DqmSlhiqsd99KUwdWfrrgAXAsKNpBuqaFsCeIZFKVJK MQ2qUJ9JPFdR6nvJm2jERggpVl2hUZiU5VCnStVZrsWY36SmBXWG06XW7iMViZ46q0rWstIxe1g1 ofz+YNMxdfVmzeGd+cxK17r60aQSBJda9TU/tyrVijNhqF0HS9gpttFwJOTeWtu6oLdqsLCQjSwX Fea+bymWr0idj2MPKNnOetaItflfYuPHV7Zq9q9L/KxqVwtCzkUQgCWsYF/5hVog/7L2trhN4MZe m9i6yda0B9ms/XJL3OKij0NMjRRpvScs4YrPuNCNLvASJlrLqlR0d5DObFRoW+l697uTg2tBYUtB 3NUMWhl8LHjXy9624bFbyxonQ0Cp3vba975SW+LCnIeXLD4XvwAOMNDYiNfDLKiVRRSwghfsMgIP FIK6BJF/OcTgClv4Yg4+rJcmrK4Le/jDAstwGw/F4e6A+MQo1paIC6ezEgcmxTCO8a5WDMGxuXhE Ms6xjjtF4zxi8X47DrKQ/dTjV46NjDgespKXnKYiE1NETI6ylK9EEELq18iwE+yUt8zlEyHEygf0 sRgXo+Uum/nMELpLer3qzUVKFf/NcI4zgeYDZqNhGXPy5KOc98xn/oCozrv1pktEpOc+G/rQhjIS oCnqTb4srcyIjrSkeyMn+m4nwrskHUVMN+lOe/o3w1o0Qb2pqNKN9dOoTvVlqGbp9pFab6qOtawr A7dWixl2pMzkrHfNa8eIcZK3ht2esNnrYhv7K7hE0loaDetjO/vZVvHmEQRtakhD+9rYJoo3P1I8 Sw7b2tkOt7h1Iu0JriZWjKXat8fN7naLLZokKcmr6HK2XJ/a3fgOtzfrZhATYtQ16q52vgee74Da pSWsuqhWAX6oXBOb4BDHtsEVhR2QIO6g8jtnPkv38Ih7/NgG54tEOhJf5YYuoSBosje4P85yT4fc VH5pjkEl9W+NKxST9265zjv98r5MpH00vDjNMw4bh69850jnc883B3R6PsqpQ+erzUsd1aMn/epo Xjp3FYbXmV/XnAdROdbHznOJbnfN43M6SKB+XddkVOxkj/uhAwIAOw== ------=_NextPart_000_0042_01BEA869.9944ADC0-- -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Thu May 27 16:15:12 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id QAA13475 for ipng-dist; Thu, 27 May 1999 16:10:57 -0700 (PDT) Received: from engmail4.Eng.Sun.COM (engmail4 [129.144.134.6]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id QAA13468 for ; Thu, 27 May 1999 16:10:48 -0700 (PDT) Received: from venus.Sun.COM (venus.Sun.NET [129.150.69.5] (may be forged)) by engmail4.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id QAA21501 for ; Thu, 27 May 1999 16:10:47 -0700 (PDT) Received: from concorde.inria.fr (concorde.inria.fr [192.93.2.39]) by venus.Sun.COM (8.9.3+Sun/8.9.3) with ESMTP id QAA15494 for ; Thu, 27 May 1999 16:10:46 -0700 (PDT) Received: from givry.inria.fr (givry.inria.fr [193.51.193.144]) by concorde.inria.fr (8.8.7/8.8.7) with ESMTP id BAA06193; Fri, 28 May 1999 01:10:45 +0200 (MET DST) Received: from givry.inria.fr (givry.inria.fr [193.51.193.144]) by givry.inria.fr (8.7.6/8.7.3) with ESMTP id BAA19491; Fri, 28 May 1999 01:10:43 +0200 (MET DST) Message-Id: <199905272310.BAA19491@givry.inria.fr> From: Francis Dupont To: Vitaly Chipitsyn cc: IPNG (ipngwg) Subject: (IPng 7572) Re: In-reply-to: Your message of Wed, 26 May 1999 15:29:55 EDT. <14156.18868.713715.85042@thrawn.cs.ohiou.edu> Date: Fri, 28 May 1999 01:10:43 +0200 Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk In your previous mail you wrote: Were there any comments on the draft "Mobility Support in IPv6" ? => As an implementor I can say there are still unclear or improvable little points, for instance : - (old one but I never get an answer): proxy neighbor advertisements (9.5) as any neighbor advertisements have 3 flags and you can't find a word in the I-D or neighbor discovery specs about what to put for the router flag. If the mobile node may be a router (it should be a host but the I-D says "node") you are dead... - if you don't keep an old care-of address, for instance if you don't use 10.8 which is not always applicable, you MUST ask an acknowledge for updating bindings which use it. - movement detection based on the lost of the default router is less reliable then playing with prefixes. I believe the section 10.3 should be revisited then we'll get enough informations from implementations. If yes, where can those be found, please? => IPv6 and/or mobile IP mailing list archives (IPv6 WG is named IPng for historical reasons). Regards Francis.Dupont@inria.fr -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com -------------------------------------------------------------------- From owner-ipng@sunroof.eng.sun.com Fri May 28 13:57:09 1999 Received: by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) id NAA14577 for ipng-dist; Fri, 28 May 1999 13:52:36 -0700 (PDT) Received: from engmail3.Eng.Sun.COM (engmail3 [129.144.170.5]) by sunroof.eng.sun.com (8.9.3+Sun/8.9.3) with ESMTP id NAA14570 for ; Fri, 28 May 1999 13:52:27 -0700 (PDT) Received: from venus.Sun.COM (venus.Sun.NET [129.150.69.5] (may be forged)) by engmail3.Eng.Sun.COM (8.9.1b+Sun/8.9.1/ENSMAIL,v1.6) with ESMTP id NAA16292 for ; Fri, 28 May 1999 13:52:26 -0700 (PDT) Received: from homer.persogo.com.br (mail.persogo.com.br [200.241.233.4]) by venus.Sun.COM (8.9.3+Sun/8.9.3) with ESMTP id NAA15122 for ; Fri, 28 May 1999 13:52:24 -0700 (PDT) Received: from persogo.com.br ([200.241.233.147]) by homer.persogo.com.br (Post.Office MTA v3.5.3 release 223 ID# 0-55032U2500L250S0V35) with ESMTP id br for ; Fri, 28 May 1999 17:52:21 -0300 Message-ID: <374F013A.BE28A770@persogo.com.br> Date: Fri, 28 May 1999 17:48:59 -0300 From: pedro.bueno@persogo.com.br (Pedro Paulo Ferreira Bueno) X-Mailer: Mozilla 4.5 [en] (Win95; I) X-Accept-Language: en MIME-Version: 1.0 To: ipng@sunroof.eng.sun.com Subject: (IPng 7573) Site IPv6 Brazil Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-ipng@sunroof.eng.sun.com Precedence: bulk Hello, just to let everyone knows that there is a new Brazilian Site about IPv6 that i started recently,with news,links,howto's, projects,RFCs and a Portuguese Version of Biering's Linux IPv6 HowTo.It is still under construction,but it is a good point to start. http://www.ipv6.goias.net Thanks, Pedro Bueno -- ************************************************************************** Pedro Paulo Ferreira Bueno - Email :pedro.bueno@persogo.com.br Universidade Catolica de Goias | Grupo de Tecnologia em Informatica - GTI Manager of LinuxGO - Goias Linux User Group http://www.linux.goias.net ************************************************************************** -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to majordomo@sunroof.eng.sun.com --------------------------------------------------------------------