Re: Fwd: PQC in Firefox and Thunderbird

Falko Strenzke <[email protected]> Thu, 12 Oct 2023 04:52:16 -0700 (PDT)
Newsgroups gmane.comp.mozilla.crypto
Message-ID <[email protected]>
------=_Part_13650_1863011887.1697111536405
Content-Type: multipart/alternative; 
	boundary="----=_Part_13651_1053018910.1697111536405"

------=_Part_13651_1053018910.1697111536405
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi Robert, thanks for your feedback. See my answers below.

Robert Relyea schrieb am Montag, 25. September 2023 um 19:23:04 UTC+2:

On 8/21/23 11:52 PM, Falko Strenzke wrote:

Hi John,

that is great to hear. Our two interests are PQC algorithms for TLS in=20
Firefox and S/MIME in Thunderbird. As I understand it you are working on=20
the former. Hash-based signatures are also interesting for us, mainly=20
stateless ones. Are you going to support SPHINCS+ certificates for TLS, too=
?

I don't know of anyone that's talking about hash-based signatures in any of=
=20
the on-line protocols (TLS, SSH, IKE). The stateful ones have deployment=20
issues and signature limitations, the stateless ones are have too big of=20
keys.=20

The use case for hash-based appears to be mostly code-signing. It's also=20
one of the few signing operations that have long lived signatures that=20
could create real problems for a signature made today and a quantum=20
computer 10 years in the future.

I agree that hash-based schemes will most likely not appear in EE=20
certificates. But in the certificate chain they might very well appear, I=
=20
think. There are currently concepts being discussed for stateful hash-based=
=20
root CAs.

We'll probably have SPHINCS+ support in NSS. We'll recognize the OIDS so if=
=20
you have them in your certs, we'll validate them, but I'm pretty sure TLS=
=20
will not define SPHINCS+ authentication, and I wouldn't bet that you could=
=20
fit a change of SPHINCS+ signed certificates in an SSL Certificate Chain=20
message. That's not exactly a next 12 months statement, though.

Indeed I wouldn't see SPHINCS=E2=81=BA in TLS primarily (if at all).

You best indicator on what will be supportable is what the actual standards=
=20
bodies define.

The point here is that waiting for final standards delays large scale=20
proof-of-concept testing for PQC migration =E2=80=93 maybe by years. What I=
 think=20
would be useful is having at least ML-DSA (Dilithium) as a signature=20
algorithm for authenticating the handshake in TLS. Could you imagine=20
integrating that in NSS? Do you think an existing (individual) RFC draft=20
for PQC signature identifiers  in TLS would help here?


Will there also be a publicly available version of Firefox with PQC support=
?

As we add support for PQC, they will be publicly available. NSS and Firefox=
=20
are open source and developed out of publicly available repositories.

=20



And do you already have a decision or idea about the (temporary)=20
certificate standard you are going to follow? If we could agree on a set of=
=20
algorithms and the preliminary certificate format, that would be ideal.


Temporary standards, if used, are likely to be marked experimental because=
=20
they are transient standards and can change (so we worry about=20
interoperability). Even the X25519+Kyber768 is experimental.

The two areas of most work (In the entire cyrpto industry, not just firefox=
=20
or NSS) is getting standardize hybrid into our streaming protocols which=20
are subject to 'record now/decrypt later' attacks and firmware/code=20
signing. These are the two main areas where the useful life of the=20
encrypted/signed objects may outstrip the potential advent of a crypto=20
relevant quantum computer. I expect that will be where most of the work=20
occurs in 2024. Remember: the only standardized PQ algorithms right now is=
=20
LMS/HSS and XMSS,XMSS/MT. That will change by early 2024 (NIST now has=20
drafts for Kyber, Dilithium, and SPHINCS).

I understand being cautious to release experimental / not yet standardised=
=20
features. Is there a concept in the NSS / Firefox code base and a=20
development workflow for such features to be integrated into the code but=
=20
not being accessible in the release version? That might facilitate=20
contributions of experimental features that are not too invasive with=20
respect to the source code structure such as merely adding new algorithms.

- Falko


- Falko

Am Mi., 16. Aug. 2023 um 17:55 Uhr schrieb John Schanck <[email protected]=
m
>:

Hi Falko, we are adding support for the X25519+Kyber768 TLS key exchange to=
=20
NSS. There's work-in-progress attached to Bug 1775046, although we are=20
waiting for the (draft) NIST standard version of Kyber.

We will also be adding support for some hash-based signatures to NSS. I=20
don't expect that we will do much experimentation with non-hash-based PQ=20
signatures in the near-term, although if there are specific systems that=20
you're interested in evaluating I'd be happy to discuss further.

John

On Tue, Aug 15, 2023 at 4:38=E2=80=AFAM Falko Strenzke <[email protected]>=
 wrote:

Hi,=20

I am interested to learn whether there are any short term or medium term=20
plans to already add experimental support for post quantum cryptography to=
=20
Firefox for TLS and to Thunderbird for S/MIME. We are ourselves working on=
=20
integrations of PQC into our PKI products and would be interested to be=20
compatible with these clients in order to have a small compatible ecosystem=
=20
for evaluation and demonstration of PQC readiness. Maybe some kind of=20
cooperation is possible in this field?

- Falko
--=20

*MTG AG*
Dr. Falko Strenzke
Executive System Architect

Phone: +49 6151 8000 24
E-Mail: [email protected]
Web: mtg.de <https://www.mtg.de>


*MTG Exhibitions =E2=80=93 See you in 2023*=20
------------------------------
<https://community.e-world-essen.com/institutions/allExhibitors?query=3Dtru=
e&keywords=3Dmtg>=20
<https://www.itsa365.de/de-de/companies/m/mtg-ag>=20

MTG AG - Dolivostr. 11 - 64293 Darmstadt, Germany
Commercial register: HRB 8901
Register Court: Amtsgericht Darmstadt
Management Board: J=C3=BCrgen Ruf (CEO), Tamer Kemer=C3=B6z
Chairman of the Supervisory Board: Dr. Thomas Milde

This email may contain confidential and/or privileged information. If you=
=20
are not the correct recipient or have received this email in error,=20
please inform the sender immediately and delete this email. Unauthorised=20
copying or distribution of this email is not permitted.

Data protection information: Privacy policy=20
<https://www.mtg.de/en/privacy-policy>=20
--=20
You received this message because you are subscribed to the Google Groups "
[email protected]" group.
To unsubscribe from this group and stop receiving emails from it, send an=
=20
email to [email protected].
To view this discussion on the web visit=20
https://groups.google.com/a/mozilla.org/d/msgid/dev-tech-crypto/773bc910-31=
07-4969-adc5-f28abd79b1b2%40gmail.com=20
<https://groups.google.com/a/mozilla.org/d/msgid/dev-tech-crypto/773bc910-3=
107-4969-adc5-f28abd79b1b2%40gmail.com?utm_medium=3Demail&utm_source=3Dfoot=
er>
.

--=20
You received this message because you are subscribed to the Google Groups "
[email protected]" group.
To unsubscribe from this group and stop receiving emails from it, send an=
=20
email to [email protected].
To view this discussion on the web visit=20
https://groups.google.com/a/mozilla.org/d/msgid/dev-tech-crypto/CAFgAd7HfM4=
RRisPC0m1JThFVtKdzVCYQD8NGu8%2BG0EXwuMtfsw%40mail.gmail.com=20
<https://groups.google.com/a/mozilla.org/d/msgid/dev-tech-crypto/CAFgAd7HfM=
4RRisPC0m1JThFVtKdzVCYQD8NGu8%2BG0EXwuMtfsw%40mail.gmail.com?utm_medium=3De=
mail&utm_source=3Dfooter>
.

--=20
You received this message because you are subscribed to the Google Groups=
=20
"[email protected]" group.
To unsubscribe from this group and stop receiving emails from it, send an=
=20
email to [email protected].

To view this discussion on the web visit=20
https://groups.google.com/a/mozilla.org/d/msgid/dev-tech-crypto/CAJoiKZgdwt=
Q%2BRd6Qi%3DwqRqbwkKRzBkyrSFUQrOuL%3DwxdnBh-0A%40mail.gmail.com=20
<https://groups.google.com/a/mozilla.org/d/msgid/dev-tech-crypto/CAJoiKZgdw=
tQ%2BRd6Qi%3DwqRqbwkKRzBkyrSFUQrOuL%3DwxdnBh-0A%40mail.gmail.com?utm_medium=
=3Demail&utm_source=3Dfooter>
.


--=20
You received this message because you are subscribed to the Google Groups "=
[email protected]" group.
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to [email protected].
To view this discussion on the web visit https://groups.google.com/a/mozill=
a.org/d/msgid/dev-tech-crypto/96817fc6-800a-44e2-91ea-b714020b98een%40mozil=
la.org.

------=_Part_13651_1053018910.1697111536405
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi Robert, thanks for your feedback. See my answers below.<br /><br /><div>=
<div dir=3D"auto">Robert Relyea schrieb am Montag, 25. September 2023 um 19=
:23:04 UTC+2:<br /></div><blockquote style=3D"margin: 0px 0px 0px 0.8ex; bo=
rder-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><div>
    <div>On 8/21/23 11:52 PM, Falko Strenzke
      wrote:<br />
    </div>
    <blockquote type=3D"cite">
     =20
      <div dir=3D"ltr">
        <div>Hi John,</div>
        <div><br />
        </div>
        <div>that is great to hear. Our two interests are PQC algorithms
          for TLS in Firefox and S/MIME in Thunderbird. As I understand
          it you are working on the former. Hash-based signatures are
          also interesting for us, mainly stateless ones. Are you going
          to support SPHINCS+ certificates for TLS, too?</div>
      </div>
    </blockquote>
    </div><div><p>I don't know of anyone that's talking about hash-based si=
gnatures
      in any of the on-line protocols (TLS, SSH, IKE). The stateful ones
      have deployment issues and signature limitations, the stateless
      ones are have too big of keys. <br /></p></div></blockquote><blockquo=
te style=3D"margin: 0px 0px 0px 0.8ex; border-left: 1px solid rgb(204, 204,=
 204); padding-left: 1ex;"><div>
    <p>The use case for hash-based appears to be mostly code-signing.
      It's also one of the few signing operations that have long lived
      signatures that could create real problems for a signature made
      today and a quantum computer 10 years in the future.<br /></p></div><=
/blockquote><div>I agree that hash-based schemes will most likely not appea=
r in EE certificates. But in the certificate chain they might very well app=
ear, I think. There are currently concepts being discussed for stateful has=
h-based root CAs.<br /></div><blockquote style=3D"margin: 0px 0px 0px 0.8ex=
; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><div><p></=
p>
    <p>We'll probably have SPHINCS+ support in NSS. We'll recognize the
      OIDS so if you have them in your certs, we'll validate them, but
      I'm pretty sure TLS will not define SPHINCS+ authentication, and I
      wouldn't bet that you could fit a change of SPHINCS+ signed
      certificates in an SSL Certificate Chain message. That's not
      exactly a next 12 months statement, though.<br /></p></div></blockquo=
te><div>Indeed I wouldn't see SPHINCS=E2=81=BA in TLS primarily (if at all)=
.<br /></div><blockquote style=3D"margin: 0px 0px 0px 0.8ex; border-left: 1=
px solid rgb(204, 204, 204); padding-left: 1ex;"><div><p>
    </p>
    <p>You best indicator on what will be supportable is what the actual
      standards bodies define.<br /></p></div></blockquote><div>The point h=
ere is that waiting for final standards delays large scale proof-of-concept=
 testing for PQC migration =E2=80=93 maybe by years. What I think would be =
useful is having at least ML-DSA (Dilithium) as a signature algorithm for a=
uthenticating the handshake in TLS. Could you imagine integrating that in N=
SS? Do you think an existing (individual) RFC draft for PQC signature ident=
ifiers=C2=A0 in TLS would help here?</div><blockquote style=3D"margin: 0px =
0px 0px 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex=
;"><div><p>
    </p></div><div>
    <blockquote type=3D"cite">
      <div dir=3D"ltr">
        <div><br />
        </div>
        <div>Will there also be a publicly available version of Firefox
          with PQC support?<br />
        </div>
      </div>
    </blockquote></div><div>
    As we add support for PQC, they will be publicly available. NSS and
    Firefox are open source and developed out of publicly available
    repositories.</div></blockquote><div>=C2=A0</div><blockquote style=3D"m=
argin: 0px 0px 0px 0.8ex; border-left: 1px solid rgb(204, 204, 204); paddin=
g-left: 1ex;"><div><br />
    <blockquote type=3D"cite">
      <div dir=3D"ltr">
        <div><br />
        </div>
        <div>And do you already have a decision or idea about the
          (temporary) certificate standard you are going to follow?=C2=A0If
          we could agree on a set of algorithms and the preliminary
          certificate format, that would be ideal.<br />
        </div>
      </div>
    </blockquote>
    <p><br />
    </p>
    </div><div><p>Temporary standards, if used, are likely to be marked
      experimental because they are transient standards and can change
      (so we worry about interoperability). Even the X25519+Kyber768 is
      experimental.</p>
    <p>The two areas of most work (In the entire cyrpto industry, not
      just firefox or NSS) is getting standardize hybrid into our
      streaming protocols which are subject to 'record now/decrypt
      later' attacks and firmware/code signing. These are the two main
      areas where the useful life of the encrypted/signed objects may
      outstrip the potential advent of a crypto relevant quantum
      computer. I expect that will be where most of the work occurs in
      2024. Remember: the only standardized PQ algorithms right now is
      LMS/HSS and XMSS,XMSS/MT. That will change by early 2024 (NIST now
      has drafts for Kyber, Dilithium, and SPHINCS).<br /></p></div></block=
quote><div>I understand being cautious to release experimental / not yet st=
andardised features. Is there a concept in the NSS / Firefox code base and =
a development workflow for such features to be integrated into the code but=
 not being accessible in the release version? That might facilitate contrib=
utions of experimental features that are not too invasive with respect to t=
he source code structure such as merely adding new algorithms.<br /></div><=
div><br /></div><div>- Falko<br /></div><blockquote style=3D"margin: 0px 0p=
x 0px 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"=
><div><p>
    </p>
    <blockquote type=3D"cite"></blockquote></div><div><blockquote type=3D"c=
ite">
      <div dir=3D"ltr">
        <div><br />
        </div>
        <div>- Falko<br />
        </div>
      </div>
      <br />
      <div>
        <div dir=3D"ltr">Am Mi., 16. Aug. 2023 um
          17:55=C2=A0Uhr schrieb John Schanck &lt;<a href=3D"" rel=3D"nofol=
low">[email protected]</a>&gt;:<br />
        </div>
        <blockquote style=3D"margin: 0px 0px 0px 0.8ex; border-left: 1px so=
lid rgb(204, 204, 204); padding-left: 1ex;">
          <div dir=3D"ltr">
            <div>Hi Falko, we are adding support for the X25519+Kyber768
              TLS key exchange to NSS. There's work-in-progress attached
              to Bug 1775046, although we are waiting for the (draft)
              NIST standard version of Kyber.<br />
            </div>
            <div><br />
            </div>
            <div>We will also be adding support for some hash-based
              signatures to NSS. I don't expect that we will do much
              experimentation with non-hash-based PQ signatures in the
              near-term, although if there are specific systems that
              you're interested in evaluating I'd be happy to discuss
              further.</div>
            <div><br />
            </div>
            <div>John<br />
            </div>
          </div>
          <br />
          <div>
            <div dir=3D"ltr">On Tue, Aug 15, 2023 at
              4:38=E2=80=AFAM Falko Strenzke &lt;<a href=3D"" rel=3D"nofoll=
ow">[email protected]</a>&gt;
              wrote:<br />
            </div>
            <blockquote style=3D"margin: 0px 0px 0px 0.8ex; border-left: 1p=
x solid rgb(204, 204, 204); padding-left: 1ex;">
              <div>
                <p>Hi, <br />
                </p>
                <p>I am interested to learn whether there are any short
                  term or medium term plans to already add experimental
                  support for post quantum cryptography to Firefox for
                  TLS and to Thunderbird for S/MIME. We are ourselves
                  working on integrations of PQC into our PKI products
                  and would be interested to be compatible with these
                  clients in order to have a small compatible ecosystem
                  for evaluation and demonstration of PQC readiness.
                  Maybe some kind of cooperation is possible in this
                  field?</p>
                <div>
                  <p>- Falko<br />
                  </p>
                  <div>-- <br />
                    <p style=3D"line-height: 1.1;"><font face=3D"Arial"><sp=
an style=3D"font-size: small; color: rgb(93, 93, 95);"> <strong>MTG
                            AG</strong><br />
                          Dr. Falko Strenzke<br />
                          Executive System Architect<br />
                        </span></font></p>
                    <font face=3D"Arial">
                      <p> <span style=3D"font-size: small; color: rgb(93, 9=
3, 95);"> <span style=3D"display: inline-block; width: 4em;">Phone:
                          </span><a value=3D"+496151800024" target=3D"_blan=
k" rel=3D"nofollow">+49 6151 8000 24</a><br />
                          <span style=3D"display: inline-block; width: 4em;=
">E-Mail:
                          </span><a href=3D"" rel=3D"nofollow">falko.s...@m=
tg.de</a><br />
                          <span style=3D"display: inline-block; width: 4em;=
">Web:
                          </span><a href=3D"https://www.mtg.de" title=3D"MT=
G&#xA;                            AG Internet" target=3D"_blank" rel=3D"nof=
ollow">mtg.de</a><br />
                          <br />
                          <br />
                          <strong>MTG Exhibitions =E2=80=93 See you in 2023=
</strong>
                        </span></p>
                      <font face=3D"Arial">
                        <hr style=3D"width: 320px; text-align: left; margin=
-left: 0px;" />
                        <a href=3D"https://community.e-world-essen.com/inst=
itutions/allExhibitors?query=3Dtrue&amp;keywords=3Dmtg" title=3D"Info E-wor=
ld 2023" rel=3D"=E2=80=9Cnoopener nofollow" target=3D"_blank"> <img style=
=3D"width: 126px; margin-left: 6px;" src=3D"cid:part1.I1uXorab.CKNp0hg2@red=
hat.com" /></a> <span style=3D"font-size: small; color: rgb(93, 93, 95);"> =
<a href=3D"https://www.itsa365.de/de-de/companies/m/mtg-ag" title=3D"Info&#=
xA;                            itsa365 2023" rel=3D"=E2=80=9Cnoopener nofol=
low" target=3D"_blank"> <img style=3D"width: 83px; margin-left: 60px;" src=
=3D"cid:[email protected]" /></a></span></font>
                      <span style=3D"font-size: small; color: rgb(93, 93, 9=
5);">
                      </span><br />
                      <br />
                    </font>
                    <p style=3D"line-height: 1.2;"><font face=3D"Arial"> <s=
pan style=3D"font-size: x-small; color: rgb(93, 93, 95);">
                          MTG AG - Dolivostr. 11 - 64293 Darmstadt,
                          Germany<br />
                          Commercial register: HRB 8901<br />
                          Register Court: Amtsgericht Darmstadt<br />
                          Management Board: J=C3=BCrgen Ruf (CEO), Tamer
                          Kemer=C3=B6z<br />
                          Chairman of the Supervisory Board: Dr. Thomas
                          Milde<br />
                          <br />
                          This email may contain confidential and/or
                          privileged information. If you are not the
                          correct recipient or have received this email
                          in error, <br />
                          please inform the sender immediately and
                          delete this email. Unauthorised copying or
                          distribution of this email is not permitted.<br /=
>
                          <br />
                          Data protection information: <a href=3D"https://w=
ww.mtg.de/en/privacy-policy" title=3D"MTG Privacy policy" target=3D"_blank"=
 rel=3D"nofollow">Privacy policy</a> </span></font></p>
                  </div>
                </div>
              </div>
              -- <br />
              You received this message because you are subscribed to
              the Google Groups "<a href=3D"" rel=3D"nofollow">dev-tec...@m=
ozilla.org</a>"
              group.<br />
              To unsubscribe from this group and stop receiving emails
              from it, send an email to <a href=3D"" rel=3D"nofollow">dev-t=
[email protected]</a>.<br />
              To view this discussion on the web visit <a href=3D"https://g=
roups.google.com/a/mozilla.org/d/msgid/dev-tech-crypto/773bc910-3107-4969-a=
dc5-f28abd79b1b2%40gmail.com?utm_medium=3Demail&amp;utm_source=3Dfooter" ta=
rget=3D"_blank" rel=3D"nofollow">https://groups.google.com/a/mozilla.org/d/=
msgid/dev-tech-crypto/773bc910-3107-4969-adc5-f28abd79b1b2%40gmail.com</a>.=
<br />
            </blockquote>
          </div>
          -- <br />
          You received this message because you are subscribed to the
          Google Groups "<a href=3D"" rel=3D"nofollow">[email protected]=
rg</a>"
          group.<br />
          To unsubscribe from this group and stop receiving emails from
          it, send an email to <a href=3D"" rel=3D"nofollow">dev-tech-cryp.=
[email protected]</a>.<br />
          To view this discussion on the web visit <a href=3D"https://group=
s.google.com/a/mozilla.org/d/msgid/dev-tech-crypto/CAFgAd7HfM4RRisPC0m1JThF=
VtKdzVCYQD8NGu8%2BG0EXwuMtfsw%40mail.gmail.com?utm_medium=3Demail&amp;utm_s=
ource=3Dfooter" target=3D"_blank" rel=3D"nofollow">https://groups.google.co=
m/a/mozilla.org/d/msgid/dev-tech-crypto/CAFgAd7HfM4RRisPC0m1JThFVtKdzVCYQD8=
NGu8%2BG0EXwuMtfsw%40mail.gmail.com</a>.<br />
        </blockquote>
      </div>
      -- <br />
      You received this message because you are subscribed to the Google
      Groups <a href=3D"" rel=3D"nofollow">"[email protected]"</a> gro=
up.<br />
      To unsubscribe from this group and stop receiving emails from it,
      send an email to <a href=3D"" rel=3D"nofollow">dev-tech-cryp...@mozil=
la.org</a>.<br /></blockquote></div><div><blockquote type=3D"cite">
      To view this discussion on the web visit <a href=3D"https://groups.go=
ogle.com/a/mozilla.org/d/msgid/dev-tech-crypto/CAJoiKZgdwtQ%2BRd6Qi%3DwqRqb=
wkKRzBkyrSFUQrOuL%3DwxdnBh-0A%40mail.gmail.com?utm_medium=3Demail&amp;utm_s=
ource=3Dfooter" target=3D"_blank" rel=3D"nofollow">https://groups.google.co=
m/a/mozilla.org/d/msgid/dev-tech-crypto/CAJoiKZgdwtQ%2BRd6Qi%3DwqRqbwkKRzBk=
yrSFUQrOuL%3DwxdnBh-0A%40mail.gmail.com</a>.<br />
    </blockquote>
    <p><br />
    </p>
  </div>
</blockquote></div>

<p></p>

-- <br />
You received this message because you are subscribed to the Google Groups &=
quot;[email protected]&quot; group.<br />
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:[email protected]">dev-tech=
[email protected]</a>.<br />
To view this discussion on the web visit <a href=3D"https://groups.google.c=
om/a/mozilla.org/d/msgid/dev-tech-crypto/96817fc6-800a-44e2-91ea-b714020b98=
een%40mozilla.org?utm_medium=3Demail&utm_source=3Dfooter">https://groups.go=
ogle.com/a/mozilla.org/d/msgid/dev-tech-crypto/96817fc6-800a-44e2-91ea-b714=
020b98een%40mozilla.org</a>.<br />

------=_Part_13651_1053018910.1697111536405--

------=_Part_13650_1863011887.1697111536405
Content-Type: image/png; name=dP11AyE6H0Y2zaW4.png
Content-Transfer-Encoding: base64
Content-Disposition: inline; filename=dP11AyE6H0Y2zaW4.png
X-Attachment-Id: <[email protected]>
Content-ID: <[email protected]>

iVBORw0KGgoAAAANSUhEUgAAAPkAAACeCAMAAADHYFxAAAADAFBMVEX///8AAAD+/v3//fLw8PAT
ExOpqanp6ekxMTH8/Pz4+PgICAj19fXPz8/HxsYiIiKKioooKCgZGRn/++ulpaXgISn//fgNDQ1g
YGA7Ozv/+vPl5eTAv79/KiZXKSK7urp6enrmUy1HR0c2NjZiMSX/8tFsbGzagUMdHR3TfEJwKiWz
rahbLiT/9uf+6be4trWHXUDtgDzfGSj/78eOZUdBQUHpajPoYjG0LSlmNSiIKydpKyX88OexsbGv
qaXzsV3zqlDyokrhKCl4KiXa2dn1tl/4w15NTU3IdEGBVjvnWy/6zHr5ymb2u2PwkULOeELiOSy6
KyldKCPf3t6hmpf83ZJzc3P4xG98TjbkQiz/9+D/797/9dn+5q25sq1nZ2diYmLxmUfuiD/BLCna
Eyj/7b+spaL94p6AgID6z2/3wWfhhEPAcUFvQS7/7dRcXFz3vFlTU1PmSiviMSluNijV1NT/9bX+
5aWgoKD94pb824f82H/viWGYb090STMtLS3JLCnYICj/+8+pop+cnJylnpubmJf71If71Hfyl3Dr
eTjrcjb99O/95s2WlpaOjo7lTTGJOC386NrGubD/8KfrqlvQLCmwLCnQFSiRkZGch3zvpmhYWFim
elPsfFLmVTXfBiZiKiT83Lf71Zf0sFStPTD/+sPQvraekovs6+v94sX3w5P94YuxkX+yUTnbSi9o
PSz816rzu4XmoVjTjE2TRDP1qnjinVTxolPel1HnjEnJgknBe0nejUjHXDl5QjDGOyz3zLr4yqT1
t5n+65i1opjPhk6YZ0fSRzCtMCnazcqFhYXYklDsdEvSPyvor5rYrJP1poL1t23xmF6Yc16va1n2
t1PpZ0qUV0TpZj/aeD7nWj3Razx5NSrYt6ibgG/ogm2thmDv1tT508b21bS+q6Ktl47Hn4f5yYTN
lXSxe2iSc2fCgljol1L54+HFqJPdkoe5mn+8j22ZZFt6Uky2ZkS4PS3WLin0va7pooa4f1jwj1Wn
XkWBXljwnaLcSFVwvcr7AAARQ0lEQVR42uza629LYRzA8ZMziRC8aZwXB5EmRJCWqqwujQ6Z0LpU
aKrrJjGqUSxLXZa1JS6h69YmU9do0tK6tkM6VnOnc49hm/slxP1+v99/z/P0qPEXPHW+kSXi1cfv
Oc95ngMjJiYmJiYmJiYmJiYmJiYmJiYmJiYmRmNcliQvLz8/P0/Gs8z/EpslWbRp7twVK1YcPVrl
LJumi4T9HJPxsVl5izZBcxGdyEcOuzQ4EPNl9ug5mDbAkZzQqxzOaSOLNwyeNFrh+uRlMjVWskgI
8YFeUlrlKJtmy80ZPLpQUVFfl6F2TiIky0O7W9euSou8oMQQceuMjZraSYD/eoTJvLisLPglJJHJ
kB0qQvl80XA81lg7qTChZjIsST54m8vzZDKeY1mO5yXwW5m5KJpMfC0MZtjY8zctkvzhzoIln8Wx
DMSSnxzHy4qi4ViTIvtcBu3y7KK5c4lciCdsEqDN5iKz2eyPxmNfK1QensmQWOXc5vI/2bysq7zE
4NbpHkXCUV80Wb03W3s7Q+isZcUKLP/XzfL5SnlJqcOpM9pyN+TGwr5oLFCulWYI3XL0KNBB/reb
k+R1tchLrAZ0nLEVb8jJiYX992DoUvvtTHjWlVVVSN5V0hzOgpu80EsNDnSELb6UM1gTLypKNlVo
pfbPDPXlOx1VMPS5Sgl2p3e1vHwMxyMX5LUxnywcKFdp7SbqX268s8xZVQpDR/L0wHkZuAm8FN9a
iHxwdZT3JRTZKqn9+guG7iLTppU5qkqtICdwYaGjgf8xcYBvQHIf50dyLTzqDNX5ioeNLHM6SktL
LBJOcPMyYON5o7eZcZQmZ/AkOLUXKsrLG3ys36Oym0z6We0/MRTHNRYX26ah9W61ZAlwvKMTN36Z
1YK6vALNuTJU52d8QX37Pn2mrFunp/nmFs7ZcGnYSFjvBmtXVjiv5eUr8fNNBk4uaQRuv3xEzRy5
PAvk66AfDLVxgcE5G4qB7nTIebKzSfLQnl5gtRrSKx2WOYZXSj1+jq0LDUnJ29M79LujJyG6zagr
kHH4pkruphbkRksdwdNrvRKNXO0yAZzyobOB0Sl6xIzkMHAMV8qRGz3jBK5IwUMNfo45cnUWkk+Z
AvKftJ7k/ApFIaLnPooWSVg2K+VWWgqwe1TuBgQnax3kIdddPHIMJ91h6KyuohzTG+NhMxxdkBvD
5Vbs1vyGk309mDTDU36djBy1ZsorhspYVwWm1z6KRGW+iKVryi0vMBgFN8CFF1p9nZ9nokG9AF8D
/WzF0NiLq9nZQB/dWB0vChuNcmBjd0GJe9QGcOOBwzOO4FIE9zJqTyVs7IgNcGgBnUfYI1qVKrtC
0ZSIReONgxsLlBbitpa6YWcTBk7g2vo6n5rzNsBaX4haQ1pF5znusxbRC5sS8WRg0iRNieAuNTht
sNYRHuvh0KpoSvrMPJ8Mhip3oE7iDh8+eI6hsdswSlXF16ZYMlBYODrHCmzsrkJ3FHQ7g2tK8aVL
8HegqQ6b1Tx/L7B3OnQNN+bGjRvDH59mKKzVZbtUqqr/mogFFOUKRW2kxIrdAHeWIbpgzzVGfGYZ
7wU4lnfr1q179+5jxgwf83jzHBrf6N6Q3S69GmyqTigqYJOf5Aa2wQA/YOTEjeHFox6Fi8xqrzoZ
+NMN8P2PN7dt15qhrxcmE5InEsFs1GidweEwlMiVcqu7DMGJ2/Yo7jMD3B/bubeZG+DL27Xr2Iah
rzt6kz1U39TgUmlVUKHO4XBYlRKO72otAzfKZnwUj8LA1eq71c/3ghsibgLv2LFzC4a+7upNpuvB
hOeqFHY6rVZhdDodBTL4A97iHjnSZjMa4Qu7D7v9ycDzAyl3d+ye8ezhcnD36tWSoS+QV151JYJS
uxRVbiwrc+O7KmsuiLgjkbgc2Nh9r3rnX24EB/fEiRM7MPR1d5YpVO/xXLXjpOWjdDo3njkrKcKB
2utFbjLw7r/dAH+5HLl79txG450FnvPrLk+w0gQBvWLUNPgfMUo0dE4mM5tlMi+4feDefeAAmbfg
3v/mJXEP2vaNRvkLfeVlj+uqSa83obJzjUajLiI3S3gUmnb0Xqw6sHMPwNNuDL9P3IvXfquhUe4N
hYKeYEhPMmVrbJBR547E4+FwOJ6MVTcGVu4G94G0G/Xl9cReyD11ya0rNTVbGfpiL8NirzfNghBd
pbGNwgG/MdD0HL/F4JR6A3Uw1fbt778cm4jdix9cuFKz7AqNJxnmNlrs+lmpVDkEngvVquBWcpZ0
GPdh8od+/fqd2rj9yTHiXrL2RM2AAQMuMjR2rt7juj5rCArk2pwUW6PR7N3x8ePHVdACaPLkyWOh
fv1Wr974fltP7F48/taVZQOgbQyN3Q16XKEhQtra3JR75UqQ/3ZDwMZuGDiZ95Itb2uQu9OAzQyN
qV0eF3xigZA8VCu4V+6cfvJf96mNF7cNIu7xa/HAO3XqtIzGgwzUgOUkkGM2uHfu7nY2vc4F9zcY
OHFvuVCzDNyotzReUqEj8JyDnCStFdy793Q7+5cbFvqDQcg9fvwWeMKJe+jQoccYOvM2uC6DvE8f
JK98Lrj3nOl+eHJzNyx04l66FgYuuHvcHMfQGfvJE9QPAXkf+Ky447ngPrNrzOG/3FNT7i1Pr6Td
PXrQutgZxt/guo7kC6EdewX3ruPDDzdzHxPct/rWpN0QnTs7iq3DQ1+I5QcE9/F9Mz7g9/ep5vNe
+7Zm2R/ugQPfUXmA+z30ej2Grzp5QHDv2zdj+4cPGzdu3P6N7GvEfeHKMgQX3NByht7YTw2u4A58
XjvZDdy7kHv//hkz3r9/f/HJtmNp99O+vUdMmHDo0KGbN2dDCP6dzn9aSqWu++y5ffkkvL9Pdhfc
0Jcvb17DeS3tngdwIp+J4P37d+nSn8pv7emO1J37/PnVbbiNHccr/dmzZ29AfR/Yzdxo4hOIuz+4
obUM3fHnoPOklw8fPnz58v59cg0l55a1ty70RW6Azz80k8CBvb7LOxq/uv5q19xBnYbCAPyfkKRN
0yRtKSQh1RsSKR2EOhhQoU6FzFrIWscOSulQcJEuF8cWcarUwUHUQXFx9TGoqIMOCi4KCio+8I2D
KNhzTnLSaLW+HzXfci9Jmpwv/3/+82gTPH1+7TbhyJH9GKxNvYn2HuZNxWm8t6//13Mdc+7Cw2tT
7SnYm8abaWPvUDz2Xj/lHiwBV0/vfPLwwbPQe+v5+/ePT62v7/nIe9dJ2sHXY47CUvD87JvpNtPL
Fy9eHD9+/M6dOwcP7tmz52LoHYmfxOLUe+36A//stDUJ93zbpksn3t4h0kQ76U3FmffatQf+6ZE8
GfXpBP0g1mbeTJx4x+JrpxxdkogTbh8+nPROBnxWfN1SFLeYuzfeXSRsvLkhso7inQj46yUYzpLk
H5w6dWof5RaGzc/XHTp0aPt2oj2tbf/8BGYOl29swdD1GFuQYe0pawnvly7gFO7IKyz+We/X+5en
pn+MdPnRvjXzvdc/PrK83gTr3qszVJx6E/XN78//q5uN38SxI/cfvz6zmXivO/n68f0j/+JvQr4X
ibealy9fblr8kuf4X84yTRqXGonPNC1YTG7asTKwkHzmsxz7a36PKO0ODN8c1ATZ/GKe8qNq1zGL
NV1uw0KKwuex4S+BF1BI9ovmCorowkLQ56n9NUMuX/tWc+NHzPUV+Fv4xebBSpIm/DX8YvPd8Bvh
pG+4brG5RA/3v8989VuCsNIo7x1dsavVfnysIVIafHzMrgad0Wq5oYamvFLu7PA9N5t1Tadrr6qZ
xHiUUcRO1/QVmGI1OpPpha5jiPnPmUtNsWP4pjvITu/WadTlX26e0VCIyYIXoIgqfHKsiy87Vp5o
6CNKzoh1K7EoIIKgSo2eELcsN9+8aWeJKkP+vpgP87Nw8EXqKKIRNUOPa2PkoshRg49NvTs1NBfd
CBMnY6IQzUUxw/nZzgc6msN3mAvaLB4PX6SKQtwcELoopg0Ezo9urQCoRRaZ3nBFUSrldok9ei8Q
+gmXmmMYPVcbwVxzy2RvbjKsq9MbigXnZ4xqurWgpzMRcSa8Oj2q0yA2Zi5RBZbfFQhpeShiBIS4
6Zqt8oDJw1zzHPtsUYnT/yeaS/wc8jBlhWUyCToNrzlGhB2kzQNEseP/k2NIi8VYVlgmUSoLRrXd
8ZU/PKq1y7NUJNqU0hw0NapeTKUS1qKWTEVw0EeI4uRo+ClCBmKc+OkfmatfNudYyLXcD5uXYQ4e
mkeDNCcKYzEPEr1ukAePzZutUtg0nD0dFFHMQUwbRbjfZh4fMeGHzVe/3rwOmIrMuvEKO14Ps7cZ
yerEwf7J5hnhV5tXCnMY04RlOj50o0BH0UcdLiyBuGwnsv0YxPjfm+18KX6TP918MXk3lOnXyJ/W
zEjvqsyIVrt5vcpikZPVrzQHCud89Mkfmb3uzX0MLEIN8z0gf8eztUegiWzmo0uZZE1l4nGBK8CX
zPMaq2c4Y7jEVMptxRmKInrfYl4qfkwDFtEJg04kc4npnU7u2YxbNTOT2VtRFFWsskjqY5hjPncM
GBg7/Gybm60cQns3vl99PDPh1XKLzb/AGBaRM9EnWSd58bE6xByzS2guercPC8xpMU2OQ2MBfYHR
D5kPYSEKa1J1zpz+CiTI7O7V0EcIXqEJsMgcVtzkOgfX2JY9QAlqEzFMQrnmwyJWyuJnKIsZWIy4
w9gxxbDjks2Nd1AKHCRgq1TTzQ7IKnVvJfmMPns2D0kkddR2zOwg63r+jk6Zns4pu4OJh2/mTYJV
Mt0du051uNL8a7+b5jiJg+9g/sc4Kf3mICUl5R+Es/6arzt+lHyzlYevpy8YsBRkqppW0goSfC0K
2gF/hvoOpzfKAIa/sptf7TpGHSgrbadXsADTChTe9neTINm+H1SqDfyBYRkwlZHFJrtyOdP0Z5dr
9Ss4BcqrHADfqRDZQtfx7T4APmKggW3bJOMl0XB6Qx4wSrVlBX4dfhk5QzbGVbnYopsB+sALAl1W
yKm23B0HstankXEH7gS3u6ELVdvXUQcALJ3uPDlohe0QOlgWBcCwkQpgyagJ0CALBc7IVjs7ZKGJ
H2k4SOtOduA3x/tye9xGboYu9z3NmzThlzEii3YxzDiT7EJ1aMRW0YhI9ADjIjv8GkjvE9cmtSrg
hJCzObZhqyuQ6yU3DW2AgiyPACY6sSIXX0G7P8p2mzx9iGxSLUpoCL8QKYvESqUihms+U8YtKxBz
zkTl6amGLOSjU5gV1KNRbtGNhxqPP7A3XiXoRdERdieeMeByWttzIaOHknl19YoTmqvIiJboen36
wN3I5Yi5Br+SfA0Nshg/1LOYuVQMT3l8dApTRm1mTuK0d6omHEssxrLJcaqAWiuouYpaIl2fcUOt
ZE7cj80zupwlTELzHPxCpAHqc5JE1gNMj8Vc+fgUyX6fbq81gQa9KCkz61fLETqmfIWDTJvFvYmG
PQ8sudDLSrQLTzIAez+JeU3P4AcC5pebwxXaakn6xBzGyOCSpzDHSrrK8Y0a6rPOaSOF5ZCJ6sD3
UDevxkWO8zS9AdAryXtn+nOAVkPzLsuWDqkC3G8xz/eQVxhWiyPAZJEV155cF5mFYVDssFOEek0u
aoMiUsMg61nN4+JqZuKXZSOvpysQsZdsnzaQEJUKbXXV0ZAvhQNKYdQr4JfqIGc0bGvk6Xmh9GvN
QRInrtsb0Z45tHkchUChsWp0XdcvNNkpyrF6uZIP2DhWHiARIlpyqRXu3lWBYXXxFbwxBkrDd52C
FdhUTZ1kzXaFvOvdPdedDC3y/5XC3/lTyjYbt7hiMQ+MsSxUh6NuKVvSV5dtM2GvIfb7u/VimB2t
Ngk5Qwm8rGmIub5fXjbzsicgpNPZ1Yqp66UxpKSkpKSkpKSkpKSkpKSkpKSk/Od8AFkia8nAn+XY
AAAAAElFTkSuQmCC
------=_Part_13650_1863011887.1697111536405
Content-Type: image/png; name=kAPeC9SJJPdpnZYl.png
Content-Transfer-Encoding: base64
Content-Disposition: inline; filename=kAPeC9SJJPdpnZYl.png
X-Attachment-Id: <[email protected]>
Content-ID: <[email protected]>
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------=_Part_13650_1863011887.1697111536405--