[TLS] Re: Last Call: <draft-ietf-tls-mlkem-09.txt> (ML-KEM Post-Quantum Key Agreement for TLS 1.3) to Informat ional RFC
"Bellebaum, Thomas" <[email protected]> Fri, 31 Jul 2026 08:07:58 +0000
| Newsgroups | gmane.ietf.tls |
|---|---|
| Message-ID | <bc4b422f8d1b98e90054c3fc8b325af9b72d47e8.camel@aisec.fraunhofer.de> |
--===============2430864209632315509== Content-Language: en-US Content-Type: multipart/signed; micalg=sha-256; protocol="application/pkcs7-signature"; boundary="=-JAUhlCT3uefUXTzvqiAP" --=-JAUhlCT3uefUXTzvqiAP Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Dear IESG members, I have no doubt that the TLS chairs have been in a very difficult position,= having to judge whether WG consensus for this document existed, and I am t= hankful for their service. I believe the controversies surrounding this draft from adoption call up to= now deserve to be mentioned, as a simple "WGLC successful" is insufficient= to summarize the temperature on the mailing list. So here is an attempt at a slightly richer picture, with emphasis on the ma= in counterargument: - Mailing list participation has seen many proponents as well as many oppon= ents to this draft. - The argument raised a lot of public interest, leading to many newcomers' = voices being heard on list [0]. - Discussion of technical merits and concerns were insufficient to reach an= y wide-arching consensus, to the point where the people "in the rough" make= up a sizable portion of people responding. - The main philosophical concern unresolvable by technical arguments was wh= ether this draft represents a security regression, coming from existing dra= fts specifying hybrid key exchanges. Following the opponents (including, for transparency, me), it is known (and= by now machine-verified at a symbolical level) that the widely deployed dr= aft-ietf-tls-ecdhe-mlkem-05 provides some (limited[1]) security even if the= ML-KEM implementation is not secure, due to either ongoing cryptanalysis o= r lack of implementation experience. In contrast, this draft does have no s= uch benefits. It is also known that both schemes are secure if ML-KEM is, and that standa= lone ML-KEM (this draft) has received substantial backing by people willing= to implement it if (and sometimes only if) it becomes an RFC. This direct chain between this draft becoming an RFC and the fear of a loss= of the ECDHE-fallback has made any desirable form of consensus unlikely. Given the heated debate, I kindly ask you to make your decision in light of= this controversy. -- TBB [0] Some have phrased this as social media and/or three-letter-agency recru= iting campaigns, which I believe can only represent the temperature of the = argument. I have no reason to believe that someone who voiced their oppinio= n had no genuine interest in influencing the decision outcome, for either t= heir own or their company's use of TLS. [1] The scheme would fall back to the security of regular ECDHE based key e= xchanges. I.e. helpful for communication which is most vulnerable at presen= t, yet vulnerable to store-now-decrypt-later once a quantum computer can br= eak it. --=-JAUhlCT3uefUXTzvqiAP Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCFpow ggUSMIID+qADAgECAgkA4wvV+K8l2YEwDQYJKoZIhvcNAQELBQAwgYIxCzAJBgNVBAYTAkRFMSsw KQYDVQQKDCJULVN5c3RlbXMgRW50ZXJwcmlzZSBTZXJ2aWNlcyBHbWJIMR8wHQYDVQQLDBZULVN5 c3RlbXMgVHJ1c3QgQ2VudGVyMSUwIwYDVQQDDBxULVRlbGVTZWMgR2xvYmFsUm9vdCBDbGFzcyAy MB4XDTE2MDIyMjEzMzgyMloXDTMxMDIyMjIzNTk1OVowgZUxCzAJBgNVBAYTAkRFMUUwQwYDVQQK EzxWZXJlaW4genVyIEZvZXJkZXJ1bmcgZWluZXMgRGV1dHNjaGVuIEZvcnNjaHVuZ3NuZXR6ZXMg ZS4gVi4xEDAOBgNVBAsTB0RGTi1QS0kxLTArBgNVBAMTJERGTi1WZXJlaW4gQ2VydGlmaWNhdGlv biBBdXRob3JpdHkgMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMtg1/9moUHN0vqH l4pzq5lN6mc5WqFggEcVToyVsuXPztNXS43O+FZsFVV2B+pG/cgDRWM+cNSrVICxI5y+NyipCf8F XRgPxJiZN7Mg9mZ4F4fCnQ7MSjLnFp2uDo0peQcAIFTcFV9Kltd4tjTTwXS1nem/wHdN6r1ZB+Ba L2w8pQDcNb1lDY9/Mm3yWmpLYgHurDg0WUU2SQXaeMpqbVvAgWsRzNI8qIv4cRrKO+KA3Ra0Z3qL NupOkSk9s1FcragMvp0049ENF4N1xDkesJQLEvHVaY4l9Lg9K7/AjsMeO6W/VRCrKq4Xl14zzsjz 9AkH4wKGMUZrAcUQDBHHWekCAwEAAaOCAXQwggFwMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQU k+PYMiba1fFKpZFK4OpL4qIMz+EwHwYDVR0jBBgwFoAUv1kgNgB5oKAia4zV8mHSuCzLgkowEgYD VR0TAQH/BAgwBgEB/wIBAjAzBgNVHSAELDAqMA8GDSsGAQQBga0hgiwBAQQwDQYLKwYBBAGBrSGC LB4wCAYGZ4EMAQICMEwGA1UdHwRFMEMwQaA/oD2GO2h0dHA6Ly9wa2kwMzM2LnRlbGVzZWMuZGUv cmwvVGVsZVNlY19HbG9iYWxSb290X0NsYXNzXzIuY3JsMIGGBggrBgEFBQcBAQR6MHgwLAYIKwYB BQUHMAGGIGh0dHA6Ly9vY3NwMDMzNi50ZWxlc2VjLmRlL29jc3ByMEgGCCsGAQUFBzAChjxodHRw Oi8vcGtpMDMzNi50ZWxlc2VjLmRlL2NydC9UZWxlU2VjX0dsb2JhbFJvb3RfQ2xhc3NfMi5jZXIw DQYJKoZIhvcNAQELBQADggEBAIcL/z4Cm2XIVi3WO5qYi3FP2ropqiH5Ri71sqQPrhE4eTizDnS6 dl2e6BiClmLbTDPo3flq3zK9LExHYFV/53RrtCyD2HlrtrdNUAtmB7Xts5et6u5/MOaZ/SLick0+ hFvu+c+Z6n/XUjkurJgARH5pO7917tALOxrN5fcPImxHhPalR6D90Bo0fa3SPXez7vTXTf/D6OWS T1k+kEcQSrCFWMBvf/iu7QhCnh7U3xQuTY+8npTD5+32GPg8SecmqKc22CzeIs2LgtjZeOJVEqM7 h0S2EQvVDFKvaYwPBt/QolOLV5h7z/0HJPT8vcP9SpIClxvyt7bPZYoaorVyGTkwggWrMIIEk6AD AgECAgcbY7rGi1JCMA0GCSqGSIb3DQEBCwUAMIGVMQswCQYDVQQGEwJERTFFMEMGA1UEChM8VmVy ZWluIHp1ciBGb2VyZGVydW5nIGVpbmVzIERldXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYu MRAwDgYDVQQLEwdERk4tUEtJMS0wKwYDVQQDEyRERk4tVmVyZWluIENlcnRpZmljYXRpb24gQXV0 aG9yaXR5IDIwHhcNMTYwNTI0MTEzODMwWhcNMzEwMjIyMjM1OTU5WjCBjDELMAkGA1UEBhMCREUx DzANBgNVBAgMBkJheWVybjERMA8GA1UEBwwITXVlbmNoZW4xEzARBgNVBAoMCkZyYXVuaG9mZXIx ITAfBgNVBAsMGEZyYXVuaG9mZXIgQ29ycG9yYXRlIFBLSTEhMB8GA1UEAwwYRnJhdW5ob2ZlciBV c2VyIENBIC0gRzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUXEQz2W/aGWLRm8 MIM29WfaYhwgnhy8pRDfSXlkBGQoS1gqWpKyuh/ZaZYV3HHUM/AW2nfxCBuxs48pIOhiJbD7Jxbj Td/VkkC+fpzk3TuhPUCPfHNgb9DGBj6qQuEomdXSmvtp8L5UgUH/CY0WG+XJekBXLTs06KSJEWUH PD+zj8cd0dMvZUoSMKd8PqvMq1M34P7bhRheIy83OY/JZAxCEjG4Mw9PB+ioEUvuV6jffjOAebvy V5osrnYNPOke+U0c/gOdNFraKlWnKPfJBZw4HD7vmhUTvUBvIU/PDVrQn0/CKxmWNDR5Nvr+2QXz Vbl/pQPs03gh7aDES9mTKwIDAQABo4ICBTCCAgEwEgYDVR0TAQH/BAgwBgEB/wIBATAOBgNVHQ8B Af8EBAMCAQYwKQYDVR0gBCIwIDANBgsrBgEEAYGtIYIsHjAPBg0rBgEEAYGtIYIsAQEEMB0GA1Ud DgQWBBSjJvWaT9vaO+G1qu5Yi9D8/7VtUTAfBgNVHSMEGDAWgBST49gyJtrV8UqlkUrg6kviogzP 4TCBjwYDVR0fBIGHMIGEMECgPqA8hjpodHRwOi8vY2RwMS5wY2EuZGZuLmRlL2dsb2JhbC1yb290 LWcyLWNhL3B1Yi9jcmwvY2FjcmwuY3JsMECgPqA8hjpodHRwOi8vY2RwMi5wY2EuZGZuLmRlL2ds b2JhbC1yb290LWcyLWNhL3B1Yi9jcmwvY2FjcmwuY3JsMIHdBggrBgEFBQcBAQSB0DCBzTAzBggr BgEFBQcwAYYnaHR0cDovL29jc3AucGNhLmRmbi5kZS9PQ1NQLVNlcnZlci9PQ1NQMEoGCCsGAQUF BzAChj5odHRwOi8vY2RwMS5wY2EuZGZuLmRlL2dsb2JhbC1yb290LWcyLWNhL3B1Yi9jYWNlcnQv Y2FjZXJ0LmNydDBKBggrBgEFBQcwAoY+aHR0cDovL2NkcDIucGNhLmRmbi5kZS9nbG9iYWwtcm9v dC1nMi1jYS9wdWIvY2FjZXJ0L2NhY2VydC5jcnQwDQYJKoZIhvcNAQELBQADggEBAMSSUnm2ESpx sjKugGuGdaXTSgBRdi5hCpcOkFMLMXTxoGTjUXItlcfnjDs1R5x1NmlqrRKC56iBtK/2+JPwTNDk G3ptqk6XmlWMRvrIGtXRjd3lVveHxYD78T4NHP+5XkyAp1Ud1rOKa5crUcd/RQdIWISSCJjfFJCv oJEftTPOK9aP2zoHYZS4/jPN8quADFA3YhoRS29aLCXky2/nmnrCacE6EKcK2PUZ7kO7uNHyjbEC H/99ni3PlRDtddWh67mK55mneo1vRxO2IYY8nFW0WahoU2W2n7Mj/LnaEX1eCML6YkFVhhqGZpxb fAykgA5HSWy2aUN+Iq95zITpLi8wggXaMIIEwqADAgECAgwla+RyMjtQxS2PTLwwDQYJKoZIhvcN AQELBQAwgYwxCzAJBgNVBAYTAkRFMQ8wDQYDVQQIDAZCYXllcm4xETAPBgNVBAcMCE11ZW5jaGVu MRMwEQYDVQQKDApGcmF1bmhvZmVyMSEwHwYDVQQLDBhGcmF1bmhvZmVyIENvcnBvcmF0ZSBQS0kx ITAfBgNVBAMMGEZyYXVuaG9mZXIgVXNlciBDQSAtIEcwMjAeFw0yMTA5MjMxMTM3MDdaFw0yNjA5 MjIxMTM3MDdaMF4xCzAJBgNVBAYTAkRFMRMwEQYDVQQKDApGcmF1bmhvZmVyMQ4wDAYDVQQLDAVB SVNFQzEPMA0GA1UECwwGUGVvcGxlMRkwFwYDVQQDDBBUaG9tYXMgQmVsbGViYXVtMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7h6m+boX4dHSJNDsnXfvZsZJodtbVINCvyp4vEmk0u6b ns+T67znV6J2eqnI/4t4y8j8LfLCqmqLLxyvF6iX4REmhPLVcQUsDhYjely6CYXkfs2QjbOhuow7 6QCcwi+SpKzLkcFVy359L9VM52d8DjYKazkfQjtKLZ7jUuW+LID7SMlh3S6oDf+Oru1OXqXOgDdf zpVpH0XJqkci6ORtheJlW4JyKsYjtKYh7VD9ZCY6nzA8Ak3dxvn0NMn8dsGQ8BY5TPvvQYbq9GLD hJB68w2sACoSMf5B/zrZf/QJ+KCaPNYx0jOaEohkvavI/WSE1BEX+eiSro1rO8nTESunIQIDAQAB o4ICZzCCAmMwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBsAwEwYDVR0lBAwwCgYIKwYBBQUHAwQw HQYDVR0OBBYEFOJjno0nn6P+szv7S7lPmZL/OArKMB8GA1UdIwQYMBaAFKMm9ZpP29o74bWq7liL 0Pz/tW1RMC8GA1UdEQQoMCaBJHRob21hcy5iZWxsZWJhdW1AYWlzZWMuZnJhdW5ob2Zlci5kZTCB lwYDVR0fBIGPMIGMMESgQqBAhj5odHRwOi8vY2RwMS5wY2EuZGZuLmRlL2ZyYXVuaG9mZXItdXNl ci1nMi1jYS9wdWIvY3JsL2NhY3JsLmNybDBEoEKgQIY+aHR0cDovL2NkcDIucGNhLmRmbi5kZS9m cmF1bmhvZmVyLXVzZXItZzItY2EvcHViL2NybC9jYWNybC5jcmwwgeUGCCsGAQUFBwEBBIHYMIHV MDMGCCsGAQUFBzABhidodHRwOi8vb2NzcC5wY2EuZGZuLmRlL09DU1AtU2VydmVyL09DU1AwTgYI KwYBBQUHMAKGQmh0dHA6Ly9jZHAxLnBjYS5kZm4uZGUvZnJhdW5ob2Zlci11c2VyLWcyLWNhL3B1 Yi9jYWNlcnQvY2FjZXJ0LmNydDBOBggrBgEFBQcwAoZCaHR0cDovL2NkcDIucGNhLmRmbi5kZS9m cmF1bmhvZmVyLXVzZXItZzItY2EvcHViL2NhY2VydC9jYWNlcnQuY3J0MD4GA1UdIAQ3MDUwDwYN KwYBBAGBrSGCLAEBBDAQBg4rBgEEAYGtIYIsAQEECTAQBg4rBgEEAYGtIYIsAgEECTANBgkqhkiG 9w0BAQsFAAOCAQEAAnbu/JrJapC9Cpu0RfLt4wVhxB3rWwo/YxW8Ic8yjuLo5Gno9vSGonal5crU w4J7ZMAtmB9eHr8z7ufQt7Px/LAWNAMHi0eEuQ/iiTS7V24k31hbN9eNxAsI3JhIc975Sp0RMvhP eyp78HtCa2Pok/xy1Qhi6GZAZD/Y6ahYGS2UfoKiVWlNZPl+5s0xLbuPvWMbLNevY4eO7TOty3Ui UD8x2u3wFhzMwJR+1Xacqg1zJ7HI5euTt6LGRfmAGXFKpbDW2bJ5pRg2uJnYwtTVvA1xe/CQG3aW 1THQhaY5o9W6ywrSFw9gQSzAcrwBGbOr0HHErB5zM2H67NudI9oFXjCCBfMwggTboAMCAQICDCVr 5QsToCIyVVgpETANBgkqhkiG9w0BAQsFADCBjDELMAkGA1UEBhMCREUxDzANBgNVBAgMBkJheWVy bjERMA8GA1UEBwwITXVlbmNoZW4xEzARBgNVBAoMCkZyYXVuaG9mZXIxITAfBgNVBAsMGEZyYXVu aG9mZXIgQ29ycG9yYXRlIFBLSTEhMB8GA1UEAwwYRnJhdW5ob2ZlciBVc2VyIENBIC0gRzAyMB4X DTIxMDkyMzExMzk0MVoXDTI2MDkyMjExMzk0MVowXjELMAkGA1UEBhMCREUxEzARBgNVBAoMCkZy YXVuaG9mZXIxDjAMBgNVBAsMBUFJU0VDMQ8wDQYDVQQLDAZQZW9wbGUxGTAXBgNVBAMMEFRob21h cyBCZWxsZWJhdW0wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg029Y3F3PcVTc/ThO NAFU8f4XQyO6GWQpkl/oWA85NafIj8MwT355aaG5f5gbB7IeKpPRnZ4bfjyp643KHP71ggV2dJwu lb3Ky5yG7Dy4Tk7wpzVj9DaOFbblcq4G6S3SIrwavDR6N86WP+HL9Xmy9B3RrHFw7PSq/VmDY4EW jArhwuyoTJlfJsnwoKGmg/Jhb42col7xz/3abj7ZH5z8ZnSoWm2WizcudgtJYMZxf8O8ImlqP4A0 cuSKeTiunTWHGhsK7X59EsDvwV8ChCWFFinLowGazl+jqOy3a/5SiXAM1656R8hkUdJf8JSm3pon cTvVnzEhEjHEEMyvk5pxAgMBAAGjggKAMIICfDAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFIDAs BgNVHSUEJTAjBggrBgEFBQcDBAYKKwYBBAGCNwoDBAYLKwYBBAGCNwoDBAEwHQYDVR0OBBYEFFsX GFPhlYHjTfHnG7Ws4WrSF+EaMB8GA1UdIwQYMBaAFKMm9ZpP29o74bWq7liL0Pz/tW1RMC8GA1Ud EQQoMCaBJHRob21hcy5iZWxsZWJhdW1AYWlzZWMuZnJhdW5ob2Zlci5kZTCBlwYDVR0fBIGPMIGM MESgQqBAhj5odHRwOi8vY2RwMS5wY2EuZGZuLmRlL2ZyYXVuaG9mZXItdXNlci1nMi1jYS9wdWIv Y3JsL2NhY3JsLmNybDBEoEKgQIY+aHR0cDovL2NkcDIucGNhLmRmbi5kZS9mcmF1bmhvZmVyLXVz ZXItZzItY2EvcHViL2NybC9jYWNybC5jcmwwgeUGCCsGAQUFBwEBBIHYMIHVMDMGCCsGAQUFBzAB hidodHRwOi8vb2NzcC5wY2EuZGZuLmRlL09DU1AtU2VydmVyL09DU1AwTgYIKwYBBQUHMAKGQmh0 dHA6Ly9jZHAxLnBjYS5kZm4uZGUvZnJhdW5ob2Zlci11c2VyLWcyLWNhL3B1Yi9jYWNlcnQvY2Fj ZXJ0LmNydDBOBggrBgEFBQcwAoZCaHR0cDovL2NkcDIucGNhLmRmbi5kZS9mcmF1bmhvZmVyLXVz ZXItZzItY2EvcHViL2NhY2VydC9jYWNlcnQuY3J0MD4GA1UdIAQ3MDUwDwYNKwYBBAGBrSGCLAEB BDAQBg4rBgEEAYGtIYIsAQEECTAQBg4rBgEEAYGtIYIsAgEECTANBgkqhkiG9w0BAQsFAAOCAQEA fR3axB/sF4nurmcMD8bGz35sCs++a++FlWDvV7Yfa5QIXmVBW/vsV7axgURWKnXi5dvptx0jSUSJ aNI02nZAQuOdhEYy2Kewg48yx2ejrZidQ1Mv2fmwfzMy4w2as40vYs72wZTIhK9Q+G/7+sZCxb22 keOxFVUa4a3U+sLmG5pMSPtuK7bnwXCovkp96gpjKMjQnpOnDOai13ISLjYsC2iEoxGD1Kn+9Dd5 YONUq74odr06Tl0JiEvEFKMTmVq0AHkMUZKcs23sdGrXuNVw1ZmVFyrivFd9k5QA7oMuXRJroWQ+ RjVZcb7DGpPH4OZTvznIUjCJu6Yy6VYuN4snWzGCA5owggOWAgEBMIGdMIGMMQswCQYDVQQGEwJE RTEPMA0GA1UECAwGQmF5ZXJuMREwDwYDVQQHDAhNdWVuY2hlbjETMBEGA1UECgwKRnJhdW5ob2Zl cjEhMB8GA1UECwwYRnJhdW5ob2ZlciBDb3Jwb3JhdGUgUEtJMSEwHwYDVQQDDBhGcmF1bmhvZmVy IFVzZXIgQ0EgLSBHMDICDCVr5HIyO1DFLY9MvDANBglghkgBZQMEAgEFAKCCAc0wGAYJKoZIhvcN AQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjYwNzMxMDgwNzU3WjAvBgkqhkiG9w0B CQQxIgQgmbLdiWXZIfP5MwCIi0x5Zgqa+UFTeZGHlRRqnRlv21wwga4GCSsGAQQBgjcQBDGBoDCB nTCBjDELMAkGA1UEBhMCREUxDzANBgNVBAgMBkJheWVybjERMA8GA1UEBwwITXVlbmNoZW4xEzAR BgNVBAoMCkZyYXVuaG9mZXIxITAfBgNVBAsMGEZyYXVuaG9mZXIgQ29ycG9yYXRlIFBLSTEhMB8G A1UEAwwYRnJhdW5ob2ZlciBVc2VyIENBIC0gRzAyAgwla+ULE6AiMlVYKREwgbAGCyqGSIb3DQEJ EAILMYGgoIGdMIGMMQswCQYDVQQGEwJERTEPMA0GA1UECAwGQmF5ZXJuMREwDwYDVQQHDAhNdWVu Y2hlbjETMBEGA1UECgwKRnJhdW5ob2ZlcjEhMB8GA1UECwwYRnJhdW5ob2ZlciBDb3Jwb3JhdGUg UEtJMSEwHwYDVQQDDBhGcmF1bmhvZmVyIFVzZXIgQ0EgLSBHMDICDCVr5QsToCIyVVgpETANBgkq hkiG9w0BAQEFAASCAQAPuD6NiGJZQcSSS4JEE81Iu4ZM+eTgW9pgN0ZeOOkkpvmzaVsNrGVhLM0r mYqTUd922qLHo+6j90fYu0PY/CDtNo24lRdAkBhHjeR5rbhvRorqHrUWDqTahxlsCd1RV1jdWV0w xkeXi8fU6JJUMU9xLtzlUxP7NtgT1b4SjngPfBtU7BTUJ8tN9EwUucMTmI9M9KCuzlSFMLQYFUtt DuXPqrYdiSIaYJy5Tw+Ju2sdLSzIi6ozpPKWme64IE7vtNMBimyjUWNvNzNbzLkMXG1zPLUfYQQ7 kc/xYtdV/dDdX4pyZrkX8urhQYnrI3g68sFWHmF7CJPPTizdFXVGSDjXAAAAAAAA --=-JAUhlCT3uefUXTzvqiAP-- --===============2430864209632315509== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KVExTIG1haWxp bmcgbGlzdCAtLSB0bHNAaWV0Zi5vcmcKVG8gdW5zdWJzY3JpYmUgc2VuZCBhbiBlbWFpbCB0byB0 bHMtbGVhdmVAaWV0Zi5vcmcK --===============2430864209632315509==--