Received: by 10.223.176.46 with SMTP id f43csp17wra; Tue, 23 Jan 2018 14:56:24 -0800 (PST) X-Google-Smtp-Source: AH8x224IQNCgSTH+F9bIMaI9wm9+cYmhPj8BuczbQv/v+hr3lXfYMv3TfW5IMJExbUEBLfWnVPMY X-Received: by 10.107.173.17 with SMTP id w17mr5917399ioe.262.1516748183813; Tue, 23 Jan 2018 14:56:23 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1516748183; cv=none; d=google.com; s=arc-20160816; b=st1iUsh4aY/quRAliRf4BF/e4Xh33BNODc+0AkRQAd5kJEwqcgotyaObZdTy5MtxVK 2ErZFZTcDXlQvJMxVnEH6rDIBIi8QIJRw7vptgK0w+2Bm55qqnRUHgeCEWe1PlilRHYA 3DjrzbZGPsK/3nq303ENy0UO6Nsnfv8t5f8DAWvUnzmibMl5lxZuHtemrr38hDSLiETg cxQIb7cVCYoxR5H5NxflhB7XvNFRpM1WzVIQi507tMTPynT0QN1+UwQM7lmHKwsuEsI8 xH/pay1M71XqjVVfga82lkpE23d2qfe2jReeDCbx0yAE5uQh/pguiRfrTtSJ8wnpoB63 pXnA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:mime-version:date:face:references :in-reply-to:cc:to:from:subject:message-id:dkim-signature :arc-authentication-results; bh=teJ6p3bUinXdWRzsddOUFx9FNpV0vlkGe5G3CyNHDXQ=; b=qwegumwKSlaj1TEYhjMeQcKTwLIAe7CcD54dcs/4/mRlDeasZIKCITej7b5dTPm9SH IKCCrdYQQ+1imaCPheggfMZ2CG+GKzzaRjU2953wgtk2ZtC4WFu19qRU5yTk5feQCxTO XO9CK3lYsPWqG67p50gRt0r7kIubk+eoedDKbM3aO3JfEa/yvyvOmUjTfWp6q3+/kKMP HOjLjdyEgyUVoqYChC8XEBf57DLxOPV0/lSz01+t7MkbXK3AM+ApAi8tRLnxGR1+vlNd AM9oS6Qaozy4kZC9hyF8XmTbU42NEwUrHixYobHaRnnInwqj5UFjbuitoOSevpQpChmy KXzQ== ARC-Authentication-Results: i=1; mx.google.com; dkim=fail header.i=@infradead.org header.s=twosheds.20170209 header.b=d1tC8Irb; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id w23si9213069itc.158.2018.01.23.14.56.08; Tue, 23 Jan 2018 14:56:22 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=fail header.i=@infradead.org header.s=twosheds.20170209 header.b=d1tC8Irb; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S932459AbeAWWyU (ORCPT + 99 others); Tue, 23 Jan 2018 17:54:20 -0500 Received: from twosheds.infradead.org ([90.155.92.209]:33124 "EHLO twosheds.infradead.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S932334AbeAWWyS (ORCPT ); Tue, 23 Jan 2018 17:54:18 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=infradead.org; s=twosheds.20170209; h=Mime-Version:Date:Content-Type: References:In-Reply-To:Cc:To:From:Subject:Message-ID:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=teJ6p3bUinXdWRzsddOUFx9FNpV0vlkGe5G3CyNHDXQ=; b=d1tC8Irb/h2grBEa5YHrsTpI4 q+CkLGWo53mz5m37o4rSh6nLh/olWOvH4zYS0Frq+lxaR4+eRmXVkeWtOnOV/4rRkPwcTpaOdAcfH xp1cOymmBs5QJ1fi4dCZHKYSLN9LsfwJ39PYVrpUIRoX6Zs1zmln6eyAr19E7Wl6PmIkKXf9cBqxp pptzUFruQcWlKHNRxdR4GtGoJQfFASibf3yvDA/+lvzZVYx4u0e5EsXMrq5gfZodgTJlbaKrlGyVL p/UbbE0WOdQ90BqmFaLUV4Ln+a/lv3UJnlHqCw3TUgcFOwDKhVIi2U4fSg0dvOtWhpjCXDYEySck8 ADbyBrO9w==; Received: from [2001:8b0:10b:1:5c5:5b94:948a:4d8a] by twosheds.infradead.org with esmtpsa (Exim 4.89 #1 (Red Hat Linux)) id 1ee7Ry-0003lJ-IP; Tue, 23 Jan 2018 22:53:58 +0000 Message-ID: <1516748034.13558.15.camel@infradead.org> Subject: Re: [PATCH v8 04/12] x86/spectre: Add boot time option to select Spectre v2 mitigation From: David Woodhouse To: Borislav Petkov Cc: Andi Kleen , Paul Turner , LKML , Linus Torvalds , Greg Kroah-Hartman , Tim Chen , Dave Hansen , tglx@linutronix.de, Kees Cook , Rik van Riel , Peter Zijlstra , Andy Lutomirski , Jiri Kosina , gnomes@lxorguk.ukuu.org.uk, x86@kernel.org, thomas.lendacky@amd.com, Josh Poimboeuf In-Reply-To: <20180123224014.dsbzps4hydt6h7ed@pd.tnic> References: <1515707194-20531-1-git-send-email-dwmw@amazon.co.uk> <1515707194-20531-5-git-send-email-dwmw@amazon.co.uk> <20180123224014.dsbzps4hydt6h7ed@pd.tnic> Face: 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 Content-Type: multipart/signed; micalg="sha-256"; protocol="application/x-pkcs7-signature"; boundary="=-d8y+rGWLal+gveHzPnEA" Date: Tue, 23 Jan 2018 22:53:54 +0000 Mime-Version: 1.0 X-Mailer: Evolution 3.18.5.2-0ubuntu3.2 X-SRS-Rewrite: SMTP reverse-path rewritten from by twosheds.infradead.org. See http://www.infradead.org/rpr.html Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org --=-d8y+rGWLal+gveHzPnEA Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: base64 T24gVHVlLCAyMDE4LTAxLTIzIGF0IDIzOjQwICswMTAwLCBCb3Jpc2xhdiBQZXRrb3Ygd3JvdGU6 Cj4gCj4gQnR3LCB0aGlzIGNhbWUgdXAgdG9kYXk6IGRvIHdlIGhhdmUgYW4gaWRlYSBob3cgdG8g ZGV0ZWN0IG9iamVjdHMgYnVpbHQKPiB3aXRoIGdjYyB3aGljaCBoYXMgcmV0cG9saW5lIHN1cHBv cnQ/Cj4gCj4gVGhlIG9ubHkgd2F5IEkgY291bGQgdGhpbmsgb2YgaXMgYm9vdCB0aGUgcmVzcGVj dGl2ZSBrZXJuZWwgYW5kIHN0YXJlIGF0Cj4gZG1lc2c6Cj4gCj4gW8KgwqDCoCAwLjA2NDAwNl0g U3BlY3RyZSBWMiBtaXRpZ2F0aW9uOiBMRkVOQ0Ugbm90IHNlcmlhbGl6aW5nLiBTd2l0Y2hpbmcg dG8gZ2VuZXJpYyByZXRwb2xpbmUKPiBbwqDCoMKgIDAuMDY4MDAzXSBTcGVjdHJlIFYyIG1pdGln YXRpb246IFZ1bG5lcmFibGU6IE1pbmltYWwgZ2VuZXJpYyBBU00gcmV0cG9saW5lCj4gCj4gYW5k IHRoZW4gZGVkdWNlIHRoYXQgaXQgaXMgbm90IGEgcmV0cG9saW5lLWVuYWJsZWQgY29tcGlsZXI6 CgpSaWdodC4gVGhlcmUgKndhcyogYSB3YXJuaW5nIGR1cmluZyBidWlsZCBidXQgd2UgcmVtb3Zl ZCB0aGF0LiBBdCB0aGUKdGltZSwgdGhlIHBsYW4gKGF0IGxlYXN0IGluIG15IGhlYWQpIHdhcyB0 byB1c2UgSUJSUyBpbnN0ZWFkLCBpZiB0aGUKcmV0cG9saW5lIGNvbXBpbGVyIHdhc24ndCBhdmFp bGFibGUuIEZvciBub3cgd2UncmUganVzdCBnb2luZyB0byByZW1haW4KdnVsbmVyYWJsZS4gSSdt IG5vdyB3b25kZXJpbmcgaWYgd2Ugc2hvdWxkIHJlaW5zdGF0ZSB0aGF0IHdhcm5pbmcuCgo+ID4g K3JldHBvbGluZV9hdXRvOgo+ID4gK8KgwqDCoMKgwqBpZiAoYm9vdF9jcHVfZGF0YS54ODZfdmVu ZG9yID09IFg4Nl9WRU5ET1JfQU1EKSB7Cj4gPiArwqDCoMKgwqDCoHJldHBvbGluZV9hbWQ6Cj4g PiArwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqBpZiAoIWJvb3RfY3B1X2hhcyhYODZfRkVBVFVS RV9MRkVOQ0VfUkRUU0MpKSB7Cj4gPiArwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDC oMKgwqDCoMKgcHJfZXJyKCJMRkVOQ0Ugbm90IHNlcmlhbGl6aW5nLiBTd2l0Y2hpbmcgdG8gZ2Vu ZXJpYyByZXRwb2xpbmVcbiIpOwo+ID4gK8KgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKg wqDCoMKgwqDCoGdvdG8gcmV0cG9saW5lX2dlbmVyaWM7Cj4gPiArwqDCoMKgwqDCoMKgwqDCoMKg wqDCoMKgwqB9Cj4gPiArwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqBtb2RlID0gcmV0cF9jb21w aWxlcigpID8gU1BFQ1RSRV9WMl9SRVRQT0xJTkVfQU1EIDoKPiA+ICvCoMKgwqDCoMKgwqDCoMKg wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDC oCBTUEVDVFJFX1YyX1JFVFBPTElORV9NSU5JTUFMX0FNRDsKPiA+ICvCoMKgwqDCoMKgwqDCoMKg wqDCoMKgwqDCoHNldHVwX2ZvcmNlX2NwdV9jYXAoWDg2X0ZFQVRVUkVfUkVUUE9MSU5FX0FNRCk7 Cj4gPiArwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqBzZXR1cF9mb3JjZV9jcHVfY2FwKFg4Nl9G RUFUVVJFX1JFVFBPTElORSk7Cj4gPiArwqDCoMKgwqDCoH0gZWxzZSB7Cj4gPiArwqDCoMKgwqDC oHJldHBvbGluZV9nZW5lcmljOgo+ID4gK8KgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgbW9kZSA9 IHJldHBfY29tcGlsZXIoKSA/IFNQRUNUUkVfVjJfUkVUUE9MSU5FX0dFTkVSSUMgOgo+ID4gK8Kg wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDC oMKgwqDCoMKgwqDCoMKgIFNQRUNUUkVfVjJfUkVUUE9MSU5FX01JTklNQUw7Cj4gwqDCoMKgwqDC oMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKg wqDCoMKgwqDCoMKgwqBeXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eCj4gCj4gYnV0IHRoYXQg bWlnaHQgbm90IGFsd2F5cyBiZSBhbiBvcHRpb24uCj4gCj4gQW5kIGl0IHByb2JhYmx5IHNob3Vs ZCBiZSBhIG1vcmUgcmVsaWFibGUgbWV0aG9kIHdoaWNoIHdlIHByb2JhYmx5IGNvdWxkCj4gdXNl IHRvIGRldGVjdCAhcmV0cG9saW5lZCBtb2R1bGVzIHRvby4KCkFuZGkgYWN0dWFsbHkgaW1wbGVt ZW50ZWQgdGhpcywgYnV0IGl0IGVuZGVkIHVwIGJlaW5nIHdhdGVyZWQgZG93bgpzb21ld2hhdC4= --=-d8y+rGWLal+gveHzPnEA Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCEFQw ggUxMIIEGaADAgECAhBNRhEyk/HZ7naOeTHWrzuAMA0GCSqGSIb3DQEBCwUAMIGXMQswCQYDVQQG EwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYD VQQKExFDT01PRE8gQ0EgTGltaXRlZDE9MDsGA1UEAxM0Q09NT0RPIFJTQSBDbGllbnQgQXV0aGVu dGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTAeFw0xNzEyMjEwMDAwMDBaFw0xODEyMjEyMzU5 NTlaMCQxIjAgBgkqhkiG9w0BCQEWE2R3bXcyQGluZnJhZGVhZC5vcmcwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDgzLNWa18DNpGUj/ZeH0Sgz53ESIbzdPw3OJeuNP6jZhxZojbyfxbM hETscxI/Hj6UZ4a7sHm5BkVjlsB1Af2Za/PXUt8MmLAcPMHkMPGunvkUibEvblDvpqMkQZlaZM+t 5PqFmWkbehLaEvbpNY7dmEAAeKh4klTzJzrr5AAzaCQ32cA2e3+DEIv5O5l9ViMIjy/JM+xMQrfX 3PZ0chY1PaVWjg59d4Uno+5LRDbgCnPkKJX4ysBGadibjBGQGJEZCjh94iiEebn2KsRLvtrJ72Ph 3W2HDEdngW3YP0wujFQVs81U7L8XN3kdPRsa9zNqGtYQP/+1KMMJQ57hnfi9AgMBAAGjggHpMIIB 5TAfBgNVHSMEGDAWgBSCr2yM+MX+lmF86B89K3FIXsSLwDAdBgNVHQ4EFgQUpL+/5lli9jmj2KHj ryyhnB2xRt0wDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwIAYDVR0lBBkwFwYIKwYBBQUH AwQGCysGAQQBsjEBAwUCMBEGCWCGSAGG+EIBAQQEAwIFIDBGBgNVHSAEPzA9MDsGDCsGAQQBsjEB AgEBATArMCkGCCsGAQUFBwIBFh1odHRwczovL3NlY3VyZS5jb21vZG8ubmV0L0NQUzBaBgNVHR8E UzBRME+gTaBLhklodHRwOi8vY3JsLmNvbW9kb2NhLmNvbS9DT01PRE9SU0FDbGllbnRBdXRoZW50 aWNhdGlvbmFuZFNlY3VyZUVtYWlsQ0EuY3JsMIGLBggrBgEFBQcBAQR/MH0wVQYIKwYBBQUHMAKG SWh0dHA6Ly9jcnQuY29tb2RvY2EuY29tL0NPTU9ET1JTQUNsaWVudEF1dGhlbnRpY2F0aW9uYW5k U2VjdXJlRW1haWxDQS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNvbTAe BgNVHREEFzAVgRNkd213MkBpbmZyYWRlYWQub3JnMA0GCSqGSIb3DQEBCwUAA4IBAQCK28BdbVJ9 QKQqTDfXwogAYiRBEGptfE1Bjy4F5vC6eWJqOJ15vunxjLwdbZYb4L0qrJlh+ZHHHlbIK8uEZu7N XHUntmWMbGbZiu7JgrbSXJK1ct9gxrN/sdWYJ+JDjVHg7GfDTvTTPa26JMRqJsO1TjjyDX7A3K39 TjV8C0hqXvwF9BsNf+qBeWO6GVzJ5572awY221hc1umibmZaKV4fg+7fS7qscx5TSuIc6uvMBQhm 7NQiCq6euMMWBDUDlotQCDW0ilm0OuLW3IVLuZCm6Msc+6hT9+dCT4JUvxTHZnnO7uLCxV+Ujad+ PH3itRm38i96p2zvwgLr8vwWA0ckMIIFMTCCBBmgAwIBAgIQTUYRMpPx2e52jnkx1q87gDANBgkq hkiG9w0BAQsFADCBlzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQ MA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxPTA7BgNVBAMTNENP TU9ETyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0EwHhcNMTcx MjIxMDAwMDAwWhcNMTgxMjIxMjM1OTU5WjAkMSIwIAYJKoZIhvcNAQkBFhNkd213MkBpbmZyYWRl YWQub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MyzVmtfAzaRlI/2Xh9EoM+d xEiG83T8NziXrjT+o2YcWaI28n8WzIRE7HMSPx4+lGeGu7B5uQZFY5bAdQH9mWvz11LfDJiwHDzB 5DDxrp75FImxL25Q76ajJEGZWmTPreT6hZlpG3oS2hL26TWO3ZhAAHioeJJU8yc66+QAM2gkN9nA Nnt/gxCL+TuZfVYjCI8vyTPsTEK319z2dHIWNT2lVo4OfXeFJ6PuS0Q24Apz5CiV+MrARmnYm4wR kBiRGQo4feIohHm59irES77aye9j4d1thwxHZ4Ft2D9MLoxUFbPNVOy/Fzd5HT0bGvczahrWED// tSjDCUOe4Z34vQIDAQABo4IB6TCCAeUwHwYDVR0jBBgwFoAUgq9sjPjF/pZhfOgfPStxSF7Ei8Aw HQYDVR0OBBYEFKS/v+ZZYvY5o9ih468soZwdsUbdMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8E AjAAMCAGA1UdJQQZMBcGCCsGAQUFBwMEBgsrBgEEAbIxAQMFAjARBglghkgBhvhCAQEEBAMCBSAw RgYDVR0gBD8wPTA7BgwrBgEEAbIxAQIBAQEwKzApBggrBgEFBQcCARYdaHR0cHM6Ly9zZWN1cmUu Y29tb2RvLm5ldC9DUFMwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2NybC5jb21vZG9jYS5jb20v Q09NT0RPUlNBQ2xpZW50QXV0aGVudGljYXRpb25hbmRTZWN1cmVFbWFpbENBLmNybDCBiwYIKwYB BQUHAQEEfzB9MFUGCCsGAQUFBzAChklodHRwOi8vY3J0LmNvbW9kb2NhLmNvbS9DT01PRE9SU0FD bGllbnRBdXRoZW50aWNhdGlvbmFuZFNlY3VyZUVtYWlsQ0EuY3J0MCQGCCsGAQUFBzABhhhodHRw Oi8vb2NzcC5jb21vZG9jYS5jb20wHgYDVR0RBBcwFYETZHdtdzJAaW5mcmFkZWFkLm9yZzANBgkq hkiG9w0BAQsFAAOCAQEAitvAXW1SfUCkKkw318KIAGIkQRBqbXxNQY8uBebwunliajideb7p8Yy8 HW2WG+C9KqyZYfmRxx5WyCvLhGbuzVx1J7ZljGxm2YruyYK20lyStXLfYMazf7HVmCfiQ41R4Oxn w0700z2tuiTEaibDtU448g1+wNyt/U41fAtIal78BfQbDX/qgXljuhlcyeee9msGNttYXNbpom5m WileH4Pu30u6rHMeU0riHOrrzAUIZuzUIgqunrjDFgQ1A5aLUAg1tIpZtDri1tyFS7mQpujLHPuo U/fnQk+CVL8Ux2Z5zu7iwsVflI2nfjx94rUZt/Iveqds78IC6/L8FgNHJDCCBeYwggPOoAMCAQIC EGqb4Tg7/ytrnwHV2binUlYwDQYJKoZIhvcNAQEMBQAwgYUxCzAJBgNVBAYTAkdCMRswGQYDVQQI ExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBD QSBMaW1pdGVkMSswKQYDVQQDEyJDT01PRE8gUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4X DTEzMDExMDAwMDAwMFoXDTI4MDEwOTIzNTk1OVowgZcxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJH cmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBM aW1pdGVkMT0wOwYDVQQDEzRDT01PRE8gUlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2Vj dXJlIEVtYWlsIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrOeV6wodnVAFsc4 A5jTxhh2IVDzJXkLTLWg0X06WD6cpzEup/Y0dtmEatrQPTRI5Or1u6zf+bGBSyD9aH95dDSmeny1 nxdlYCeXIoymMv6pQHJGNcIDpFDIMypVpVSRsivlJTRENf+RKwrB6vcfWlP8dSsE3Rfywq09N0Zf xcBa39V0wsGtkGWC+eQKiz4pBZYKjrc5NOpG9qrxpZxyb4o4yNNwTqzaaPpGRqXB7IMjtf7tTmU2 jqPMLxFNe1VXj9XB1rHvbRikw8lBoNoSWY66nJN/VCJv5ym6Q0mdCbDKCMPybTjoNCQuelc0IAaO 4nLUXk0BOSxSxt8kCvsUtQIDAQABo4IBPDCCATgwHwYDVR0jBBgwFoAUu69+Aj36pvE8hI6t7jiY 7NkyMtQwHQYDVR0OBBYEFIKvbIz4xf6WYXzoHz0rcUhexIvAMA4GA1UdDwEB/wQEAwIBhjASBgNV HRMBAf8ECDAGAQH/AgEAMBEGA1UdIAQKMAgwBgYEVR0gADBMBgNVHR8ERTBDMEGgP6A9hjtodHRw Oi8vY3JsLmNvbW9kb2NhLmNvbS9DT01PRE9SU0FDZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNybDBx BggrBgEFBQcBAQRlMGMwOwYIKwYBBQUHMAKGL2h0dHA6Ly9jcnQuY29tb2RvY2EuY29tL0NPTU9E T1JTQUFkZFRydXN0Q0EuY3J0MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5jb21vZG9jYS5jb20w DQYJKoZIhvcNAQEMBQADggIBAHhcsoEoNE887l9Wzp+XVuyPomsX9vP2SQgG1NgvNc3fQP7TcePo 7EIMERoh42awGGsma65u/ITse2hKZHzT0CBxhuhb6txM1n/y78e/4ZOs0j8CGpfb+SJA3GaBQ+39 4k+z3ZByWPQedXLL1OdK8aRINTsjk/H5Ns77zwbjOKkDamxlpZ4TKSDMKVmU/PUWNMKSTvtlenlx Bhh7ETrN543j/Q6qqgCWgWuMAXijnRglp9fyadqGOncjZjaaSOGTTFB+E2pvOUtY+hPebuPtTbq7 vODqzCM6ryEhNhzf+enm0zlpXK7q332nXttNtjv7VFNYG+I31gnMrwfHM5tdhYF/8v5UY5g2xANP ECTQdu9vWPoqNSGDt87b3gXb1AiGGaI06vzgkejL580ul+9hz9D0S0U4jkhJiA7EuTecP/CFtR72 uYRBcunwwH3fciPjviDDAI9SnC/2aPY8ydehzuZutLbZdRJ5PDEJM/1tyZR2niOYihZ+FCbtf3D9 mB12D4ln9icgc7CwaxpNSCPt8i/GqK2HsOgkL3VYnwtx7cJUmpvVdZ4ognzgXtgtdk3ShrtOS1iA N2ZBXFiRmjVzmehoMof06r1xub+85hFQzVxZx5/bRaTKTlL8YXLI8nAbR9HWdFqzcOoB/hxfEyIQ px9/s81rgzdEZOofSlZHynoSMYIDxzCCA8MCAQEwgawwgZcxCzAJBgNVBAYTAkdCMRswGQYDVQQI ExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBD QSBMaW1pdGVkMT0wOwYDVQQDEzRDT01PRE8gUlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQg U2VjdXJlIEVtYWlsIENBAhBNRhEyk/HZ7naOeTHWrzuAMA0GCWCGSAFlAwQCAQUAoIIB6zAYBgkq hkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xODAxMjMyMjUzNTRaMC8GCSqG SIb3DQEJBDEiBCBSnCQJWJoLBmK9hoo3BzTs+Y5WBLXWrVjjm4VITj9oYDCBvQYJKwYBBAGCNxAE MYGvMIGsMIGXMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYD VQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDE9MDsGA1UEAxM0Q09NT0RP IFJTQSBDbGllbnQgQXV0aGVudGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQQIQTUYRMpPx2e52 jnkx1q87gDCBvwYLKoZIhvcNAQkQAgsxga+ggawwgZcxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJH cmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBM aW1pdGVkMT0wOwYDVQQDEzRDT01PRE8gUlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2Vj dXJlIEVtYWlsIENBAhBNRhEyk/HZ7naOeTHWrzuAMA0GCSqGSIb3DQEBAQUABIIBAC1pmcVgqKCa VARbzKmE8L/urHbWn2A4eTzDit3LNT+sLIfj6Hu/eALdYAxiieZYs+ICKBFLehtZ1KTwuGe3w2yM e9kNjQh5gkBTw8Q8tonsAI6+FktQ4ByttLVqImqZJpLsB0zrdexVw+58L6XUsUcFijlMA1U38abb J4BNwX6WaIzG7eb4Z4pFRlxZ5vtEwVsxSY8tfx72WEeMmPqiVmPXaTmAW2he3zAUhF9T8HR3bLYM pBBQpUPzP1RiO7ucN8TqP68/iy7n8aTUdW5dzpTM+R9A0GPcwl7H4mcaypomjvz/L59XwMy++h87 3Revl8jjHrehDg6wRVI8OxvSlI0AAAAAAAA= --=-d8y+rGWLal+gveHzPnEA--