From 33e7019577d5fc28a48b5fcad37984e88c43403e Mon Sep 17 00:00:00 2001
From: Matt Johnston <matt@ucc.asn.au>
Date: Fri, 6 May 2005 13:23:02 +0000
Subject: [PATCH] Import of libtomcrypt 1.02 with manual path rename
rearrangement etc
--HG--
branch : libtomcrypt-orig
extra : convert_revision : 128d85f93acd46086c361a9a17274f94beadd465
---
Doxyfile | 1155 ++++++++++++
LICENSE | 4 -
TODO | 1 +
authors | 55 -
cbc_decrypt.c | 57 -
cbc_encrypt.c | 52 -
changes | 135 ++
crypt.tex | 1273 +++++++++++---
crypt_cipher_descriptor.c | 14 -
crypt_hash_descriptor.c | 14 -
crypt_prng_descriptor.c | 13 -
crypt_register_hash.c | 36 -
crypt_register_prng.c | 36 -
cscope.tmplst | 219 ---
demos/encrypt.c | 8 +-
demos/hashsum.c | 2 +-
demos/multi.c | 106 ++
demos/small.c | 3 +-
demos/test.c | 19 +
demos/test/.ccmalloc | 356 ----
demos/test/mac_test.c | 12 -
demos/test/makefile | 25 -
demos/test/makefile.icc | 14 -
demos/test/makefile.msvc | 14 -
demos/test/makefile.shared | 19 -
demos/test/test.c | 262 ---
demos/test/test.h | 40 -
demos/timing.c | 23 +
demos/tv_gen.c | 131 +-
doc/crypt.pdf | Bin 403993 -> 457121 bytes
doc/footer.html | 4 +
doc/header.html | 6 +
eax_addheader.c | 25 -
eax_encrypt_authenticate_memory.c | 53 -
ecb_decrypt.c | 34 -
genlist.sh | 6 +
hash_file.c | 41 -
hash_memory.c | 50 -
hmac_memory.c | 58 -
hmac_process.c | 29 -
makefile | 298 ++--
makefile.cygwin_dll | 95 -
makefile.icc | 218 +--
makefile.msvc | 161 +-
makefile.shared | 238 +--
mycrypt_cipher.h | 396 -----
mycrypt_hash.h | 472 -----
mycrypt_misc.h | 17 -
mycrypt_prng.h | 141 --
notes/ccm_tv.txt | 214 +++
notes/cipher_tv.txt | 428 +++++
notes/eax_tv.txt | 130 ++
notes/etc/saferp_optimizer.c | 173 ++
notes/gcm_tv.txt | 214 +++
notes/ocb_tv.txt | 130 ++
notes/omac_tv.txt | 130 ++
notes/pmac_tv.txt | 130 ++
ocb_decrypt_verify_memory.c | 65 -
ocb_done_encrypt.c | 29 -
omac_done.c | 68 -
omac_memory.c | 56 -
omac_process.c | 53 -
parsenames.pl | 22 +
pmac_memory.c | 56 -
pmac_process.c | 62 -
pmac_shift_xor.c | 26 -
pretty.build | 84 -
rsa_decrypt_key.c | 77 -
rsa_export.c | 56 -
rsa_sign_hash.c | 59 -
rsa_v15_decrypt_key.c | 66 -
rsa_v15_encrypt_key.c | 54 -
rsa_v15_sign_hash.c | 57 -
sprng.c | 80 -
aes.c => src/ciphers/aes/aes.c | 124 +-
aes_tab.c => src/ciphers/aes/aes_tab.c | 20 +-
src/ciphers/anubis.c | 1550 +++++++++++++++++
blowfish.c => src/ciphers/blowfish.c | 144 +-
cast5.c => src/ciphers/cast5.c | 176 +-
des.c => src/ciphers/des.c | 203 ++-
src/ciphers/khazad.c | 847 +++++++++
noekeon.c => src/ciphers/noekeon.c | 119 +-
rc2.c => src/ciphers/rc2.c | 159 +-
rc5.c => src/ciphers/rc5.c | 131 +-
rc6.c => src/ciphers/rc6.c | 135 +-
safer.c => src/ciphers/safer/safer.c | 77 +-
safer_tab.c => src/ciphers/safer/safer_tab.c | 9 +-
saferp.c => src/ciphers/safer/saferp.c | 91 +-
skipjack.c => src/ciphers/skipjack.c | 109 +-
twofish.c => src/ciphers/twofish/twofish.c | 219 ++-
.../ciphers/twofish/twofish_tab.c | 6 +-
xtea.c => src/ciphers/xtea.c | 104 +-
src/encauth/ccm/ccm_memory.c | 306 ++++
src/encauth/ccm/ccm_test.c | 170 ++
src/encauth/eax/eax_addheader.c | 34 +
.../encauth/eax/eax_decrypt.c | 26 +-
.../encauth/eax/eax_decrypt_verify_memory.c | 52 +-
eax_done.c => src/encauth/eax/eax_done.c | 35 +-
.../encauth/eax/eax_encrypt.c | 26 +-
.../eax/eax_encrypt_authenticate_memory.c | 78 +
eax_init.c => src/encauth/eax/eax_init.c | 62 +-
eax_test.c => src/encauth/eax/eax_test.c | 13 +-
src/encauth/gcm/gcm_add_aad.c | 117 ++
src/encauth/gcm/gcm_add_iv.c | 90 +
src/encauth/gcm/gcm_done.c | 77 +
src/encauth/gcm/gcm_gf_mult.c | 89 +
src/encauth/gcm/gcm_init.c | 88 +
src/encauth/gcm/gcm_memory.c | 89 +
src/encauth/gcm/gcm_process.c | 143 ++
src/encauth/gcm/gcm_reset.c | 40 +
src/encauth/gcm/gcm_test.c | 365 ++++
.../encauth/ocb/ocb_decrypt.c | 26 +-
src/encauth/ocb/ocb_decrypt_verify_memory.c | 82 +
.../encauth/ocb/ocb_done_decrypt.c | 44 +-
src/encauth/ocb/ocb_done_encrypt.c | 42 +
.../encauth/ocb/ocb_encrypt.c | 24 +-
.../ocb/ocb_encrypt_authenticate_memory.c | 42 +-
ocb_init.c => src/encauth/ocb/ocb_init.c | 24 +-
ocb_ntz.c => src/encauth/ocb/ocb_ntz.c | 15 +-
.../encauth/ocb/ocb_shift_xor.c | 14 +-
ocb_test.c => src/encauth/ocb/ocb_test.c | 13 +-
s_ocb_done.c => src/encauth/ocb/s_ocb_done.c | 38 +-
chc.c => src/hashes/chc/chc.c | 66 +-
src/hashes/helper/hash_file.c | 53 +
.../hashes/helper/hash_filehandle.c | 31 +-
src/hashes/helper/hash_memory.c | 64 +
src/hashes/helper/hash_memory_multi.c | 82 +
md2.c => src/hashes/md2.c | 62 +-
md4.c => src/hashes/md4.c | 52 +-
md5.c => src/hashes/md5.c | 72 +-
rmd128.c => src/hashes/rmd128.c | 65 +-
rmd160.c => src/hashes/rmd160.c | 89 +-
sha1.c => src/hashes/sha1.c | 62 +-
sha224.c => src/hashes/sha2/sha224.c | 35 +-
sha256.c => src/hashes/sha2/sha256.c | 60 +-
sha384.c => src/hashes/sha2/sha384.c | 37 +-
sha512.c => src/hashes/sha2/sha512.c | 55 +-
tiger.c => src/hashes/tiger.c | 53 +-
whirl.c => src/hashes/whirl/whirl.c | 50 +-
whirltab.c => src/hashes/whirl/whirltab.c | 20 +-
ltc_tommath.h => src/headers/ltc_tommath.h | 26 +-
mycrypt.h => src/headers/tomcrypt.h | 35 +-
.../headers/tomcrypt_argchk.h | 8 +-
mycrypt_cfg.h => src/headers/tomcrypt_cfg.h | 30 +-
src/headers/tomcrypt_cipher.h | 619 +++++++
.../headers/tomcrypt_custom.h | 81 +-
src/headers/tomcrypt_hash.h | 324 ++++
src/headers/tomcrypt_mac.h | 297 ++++
.../headers/tomcrypt_macros.h | 122 +-
src/headers/tomcrypt_misc.h | 17 +
mycrypt_pk.h => src/headers/tomcrypt_pk.h | 173 +-
mycrypt_pkcs.h => src/headers/tomcrypt_pkcs.h | 0
src/headers/tomcrypt_prng.h | 190 ++
.../headers/tommath_class.h | 55 +-
.../headers/tommath_superclass.h | 4 +-
hmac_done.c => src/mac/hmac/hmac_done.c | 55 +-
hmac_file.c => src/mac/hmac/hmac_file.c | 36 +-
hmac_init.c => src/mac/hmac/hmac_init.c | 46 +-
src/mac/hmac/hmac_memory.c | 73 +
src/mac/hmac/hmac_memory_multi.c | 88 +
src/mac/hmac/hmac_process.c | 39 +
hmac_test.c => src/mac/hmac/hmac_test.c | 31 +-
src/mac/omac/omac_done.c | 80 +
omac_file.c => src/mac/omac/omac_file.c | 32 +-
omac_init.c => src/mac/omac/omac_init.c | 29 +-
src/mac/omac/omac_memory.c | 71 +
src/mac/omac/omac_memory_multi.c | 86 +
src/mac/omac/omac_process.c | 79 +
omac_test.c => src/mac/omac/omac_test.c | 14 +-
src/mac/pelican/pelican.c | 149 ++
src/mac/pelican/pelican_memory.c | 55 +
src/mac/pelican/pelican_test.c | 116 ++
pmac_done.c => src/mac/pmac/pmac_done.c | 16 +-
pmac_file.c => src/mac/pmac/pmac_file.c | 31 +-
pmac_init.c => src/mac/pmac/pmac_init.c | 32 +-
src/mac/pmac/pmac_memory.c | 70 +
src/mac/pmac/pmac_memory_multi.c | 85 +
pmac_ntz.c => src/mac/pmac/pmac_ntz.c | 12 +-
src/mac/pmac/pmac_process.c | 92 +
src/mac/pmac/pmac_shift_xor.c | 40 +
pmac_test.c => src/mac/pmac/pmac_test.c | 14 +-
.../misc/base64/base64_decode.c | 42 +-
.../misc/base64/base64_encode.c | 37 +-
burn_stack.c => src/misc/burn_stack.c | 13 +-
crypt.c => src/misc/crypt/crypt.c | 85 +-
.../misc/crypt/crypt_argchk.c | 11 +-
src/misc/crypt/crypt_cipher_descriptor.c | 21 +
.../misc/crypt/crypt_cipher_is_valid.c | 14 +-
.../misc/crypt/crypt_find_cipher.c | 16 +-
.../misc/crypt/crypt_find_cipher_any.c | 19 +-
.../misc/crypt/crypt_find_cipher_id.c | 14 +-
.../misc/crypt/crypt_find_hash.c | 16 +-
.../misc/crypt/crypt_find_hash_any.c | 19 +-
.../misc/crypt/crypt_find_hash_id.c | 14 +-
.../misc/crypt/crypt_find_prng.c | 16 +-
src/misc/crypt/crypt_hash_descriptor.c | 20 +
.../misc/crypt/crypt_hash_is_valid.c | 14 +-
src/misc/crypt/crypt_prng_descriptor.c | 19 +
.../misc/crypt/crypt_prng_is_valid.c | 14 +-
.../misc/crypt/crypt_register_cipher.c | 20 +-
src/misc/crypt/crypt_register_hash.c | 46 +
src/misc/crypt/crypt_register_prng.c | 46 +
.../misc/crypt/crypt_unregister_cipher.c | 20 +-
.../misc/crypt/crypt_unregister_hash.c | 20 +-
.../misc/crypt/crypt_unregister_prng.c | 20 +-
.../misc/error_to_string.c | 14 +-
is_prime.c => src/misc/mpi/is_prime.c | 13 +-
mpi.c => src/misc/mpi/mpi.c | 1069 +++++++-----
.../misc/mpi/mpi_to_ltc_error.c | 14 +-
rand_prime.c => src/misc/mpi/rand_prime.c | 11 +-
pkcs_5_1.c => src/misc/pkcs5/pkcs_5_1.c | 45 +-
pkcs_5_2.c => src/misc/pkcs5/pkcs_5_2.c | 46 +-
src/misc/zeromem.c | 30 +
src/modes/cbc/cbc_decrypt.c | 91 +
src/modes/cbc/cbc_done.c | 38 +
src/modes/cbc/cbc_encrypt.c | 92 +
cbc_getiv.c => src/modes/cbc/cbc_getiv.c | 21 +-
cbc_setiv.c => src/modes/cbc/cbc_setiv.c | 20 +-
cbc_start.c => src/modes/cbc/cbc_start.c | 25 +-
cfb_decrypt.c => src/modes/cfb/cfb_decrypt.c | 23 +-
src/modes/cfb/cfb_done.c | 38 +
cfb_encrypt.c => src/modes/cfb/cfb_encrypt.c | 23 +-
cfb_getiv.c => src/modes/cfb/cfb_getiv.c | 21 +-
cfb_setiv.c => src/modes/cfb/cfb_setiv.c | 20 +-
cfb_start.c => src/modes/cfb/cfb_start.c | 26 +-
ctr_decrypt.c => src/modes/ctr/ctr_decrypt.c | 23 +-
src/modes/ctr/ctr_done.c | 38 +
ctr_encrypt.c => src/modes/ctr/ctr_encrypt.c | 54 +-
ctr_getiv.c => src/modes/ctr/ctr_getiv.c | 21 +-
ctr_setiv.c => src/modes/ctr/ctr_setiv.c | 21 +-
ctr_start.c => src/modes/ctr/ctr_start.c | 26 +-
src/modes/ecb/ecb_decrypt.c | 55 +
ecb_encrypt.c => src/modes/ecb/ecb_done.c | 25 +-
src/modes/ecb/ecb_encrypt.c | 55 +
ecb_start.c => src/modes/ecb/ecb_start.c | 23 +-
ofb_decrypt.c => src/modes/ofb/ofb_decrypt.c | 23 +-
src/modes/ofb/ofb_done.c | 38 +
ofb_encrypt.c => src/modes/ofb/ofb_encrypt.c | 23 +-
ofb_getiv.c => src/modes/ofb/ofb_getiv.c | 21 +-
ofb_setiv.c => src/modes/ofb/ofb_setiv.c | 19 +-
ofb_start.c => src/modes/ofb/ofb_start.c | 26 +-
.../pk/asn1/der/der_decode_integer.c | 25 +-
.../pk/asn1/der/der_encode_integer.c | 26 +-
.../pk/asn1/der/der_get_multi_integer.c | 25 +-
.../pk/asn1/der/der_length_integer.c | 21 +-
.../pk/asn1/der/der_put_multi_integer.c | 34 +-
dh.c => src/pk/dh/dh.c | 90 +-
dh_sys.c => src/pk/dh/dh_sys.c | 182 +-
dsa_export.c => src/pk/dsa/dsa_export.c | 23 +-
dsa_free.c => src/pk/dsa/dsa_free.c | 15 +-
dsa_import.c => src/pk/dsa/dsa_import.c | 22 +-
dsa_make_key.c => src/pk/dsa/dsa_make_key.c | 34 +-
dsa_sign_hash.c => src/pk/dsa/dsa_sign_hash.c | 74 +-
.../pk/dsa/dsa_verify_hash.c | 67 +-
.../pk/dsa/dsa_verify_key.c | 22 +-
ecc.c => src/pk/ecc/ecc.c | 433 +++--
ecc_sys.c => src/pk/ecc/ecc_sys.c | 155 +-
.../pk/packet_store_header.c | 6 +-
.../pk/packet_valid_header.c | 6 +-
pkcs_1_i2osp.c => src/pk/pkcs1/pkcs_1_i2osp.c | 17 +-
pkcs_1_mgf1.c => src/pk/pkcs1/pkcs_1_mgf1.c | 37 +-
.../pk/pkcs1/pkcs_1_oaep_decode.c | 62 +-
.../pk/pkcs1/pkcs_1_oaep_encode.c | 56 +-
pkcs_1_os2ip.c => src/pk/pkcs1/pkcs_1_os2ip.c | 16 +-
.../pk/pkcs1/pkcs_1_pss_decode.c | 62 +-
.../pk/pkcs1/pkcs_1_pss_encode.c | 59 +-
.../pk/pkcs1/pkcs_1_v15_es_decode.c | 25 +-
.../pk/pkcs1/pkcs_1_v15_es_encode.c | 26 +-
.../pk/pkcs1/pkcs_1_v15_sa_decode.c | 26 +-
.../pk/pkcs1/pkcs_1_v15_sa_encode.c | 25 +-
src/pk/rsa/rsa_decrypt_key.c | 89 +
.../pk/rsa/rsa_encrypt_key.c | 41 +-
src/pk/rsa/rsa_export.c | 98 ++
rsa_exptmod.c => src/pk/rsa/rsa_exptmod.c | 54 +-
rsa_free.c => src/pk/rsa/rsa_free.c | 15 +-
rsa_import.c => src/pk/rsa/rsa_import.c | 63 +-
rsa_make_key.c => src/pk/rsa/rsa_make_key.c | 20 +-
src/pk/rsa/rsa_sign_hash.c | 75 +
src/pk/rsa/rsa_v15_decrypt_key.c | 73 +
src/pk/rsa/rsa_v15_encrypt_key.c | 68 +
src/pk/rsa/rsa_v15_sign_hash.c | 66 +
.../pk/rsa/rsa_v15_verify_hash.c | 39 +-
.../pk/rsa/rsa_verify_hash.c | 40 +-
fortuna.c => src/prngs/fortuna.c | 129 +-
rc4.c => src/prngs/rc4.c | 102 +-
rng_get_bytes.c => src/prngs/rng_get_bytes.c | 31 +-
rng_make_prng.c => src/prngs/rng_make_prng.c | 22 +-
sober128.c => src/prngs/sober128.c | 147 +-
sober128tab.c => src/prngs/sober128tab.c | 10 +-
src/prngs/sprng.c | 132 ++
yarrow.c => src/prngs/yarrow.c | 99 +-
{demos/test => testprof}/base64_test.c | 4 +-
{demos/test => testprof}/cipher_hash_test.c | 2 +-
{demos/test => testprof}/der_tests.c | 16 +-
{demos/test => testprof}/dh_tests.c | 12 +-
{demos/test => testprof}/dsa_test.c | 6 +-
{demos/test => testprof}/ecc_test.c | 35 +-
testprof/mac_test.c | 31 +
testprof/makefile | 15 +
testprof/makefile.icc | 15 +
testprof/makefile.msvc | 10 +
testprof/makefile.shared | 15 +
{demos/test => testprof}/modes_test.c | 36 +-
{demos/test => testprof}/pkcs_1_test.c | 8 +-
{demos/test => testprof}/rsa_test.c | 98 +-
{demos/test => testprof}/store_test.c | 4 +-
testprof/test.c | 9 +
testprof/tomcrypt_test.h | 73 +
{demos => testprof}/x86_prof.c | 450 ++++-
tim_exptmod.c | 77 -
zeromem.c | 19 -
311 files changed, 19455 insertions(+), 7217 deletions(-)
create mode 100644 Doxyfile
create mode 100644 TODO
delete mode 100644 authors
delete mode 100644 cbc_decrypt.c
delete mode 100644 cbc_encrypt.c
delete mode 100644 crypt_cipher_descriptor.c
delete mode 100644 crypt_hash_descriptor.c
delete mode 100644 crypt_prng_descriptor.c
delete mode 100644 crypt_register_hash.c
delete mode 100644 crypt_register_prng.c
delete mode 100644 cscope.tmplst
create mode 100644 demos/multi.c
create mode 100644 demos/test.c
delete mode 100644 demos/test/.ccmalloc
delete mode 100644 demos/test/mac_test.c
delete mode 100644 demos/test/makefile
delete mode 100644 demos/test/makefile.icc
delete mode 100644 demos/test/makefile.msvc
delete mode 100644 demos/test/makefile.shared
delete mode 100644 demos/test/test.c
delete mode 100644 demos/test/test.h
create mode 100644 demos/timing.c
create mode 100644 doc/footer.html
create mode 100644 doc/header.html
delete mode 100644 eax_addheader.c
delete mode 100644 eax_encrypt_authenticate_memory.c
delete mode 100644 ecb_decrypt.c
create mode 100644 genlist.sh
delete mode 100644 hash_file.c
delete mode 100644 hash_memory.c
delete mode 100644 hmac_memory.c
delete mode 100644 hmac_process.c
delete mode 100644 makefile.cygwin_dll
delete mode 100644 mycrypt_cipher.h
delete mode 100644 mycrypt_hash.h
delete mode 100644 mycrypt_misc.h
delete mode 100644 mycrypt_prng.h
create mode 100644 notes/ccm_tv.txt
create mode 100644 notes/etc/saferp_optimizer.c
create mode 100644 notes/gcm_tv.txt
delete mode 100644 ocb_decrypt_verify_memory.c
delete mode 100644 ocb_done_encrypt.c
delete mode 100644 omac_done.c
delete mode 100644 omac_memory.c
delete mode 100644 omac_process.c
create mode 100644 parsenames.pl
delete mode 100644 pmac_memory.c
delete mode 100644 pmac_process.c
delete mode 100644 pmac_shift_xor.c
delete mode 100644 pretty.build
delete mode 100644 rsa_decrypt_key.c
delete mode 100644 rsa_export.c
delete mode 100644 rsa_sign_hash.c
delete mode 100644 rsa_v15_decrypt_key.c
delete mode 100644 rsa_v15_encrypt_key.c
delete mode 100644 rsa_v15_sign_hash.c
delete mode 100644 sprng.c
rename aes.c => src/ciphers/aes/aes.c (85%)
rename aes_tab.c => src/ciphers/aes/aes_tab.c (99%)
create mode 100644 src/ciphers/anubis.c
rename blowfish.c => src/ciphers/blowfish.c (87%)
rename cast5.c => src/ciphers/cast5.c (90%)
rename des.c => src/ciphers/des.c (97%)
create mode 100644 src/ciphers/khazad.c
rename noekeon.c => src/ciphers/noekeon.c (66%)
rename rc2.c => src/ciphers/rc2.c (69%)
rename rc5.c => src/ciphers/rc5.c (70%)
rename rc6.c => src/ciphers/rc6.c (74%)
rename safer.c => src/ciphers/safer/safer.c (92%)
rename safer_tab.c => src/ciphers/safer/safer_tab.c (95%)
rename saferp.c => src/ciphers/safer/saferp.c (90%)
rename skipjack.c => src/ciphers/skipjack.c (75%)
rename twofish.c => src/ciphers/twofish/twofish.c (80%)
rename twofish_tab.c => src/ciphers/twofish/twofish_tab.c (99%)
rename xtea.c => src/ciphers/xtea.c (51%)
create mode 100644 src/encauth/ccm/ccm_memory.c
create mode 100644 src/encauth/ccm/ccm_test.c
create mode 100644 src/encauth/eax/eax_addheader.c
rename eax_decrypt.c => src/encauth/eax/eax_decrypt.c (51%)
rename eax_decrypt_verify_memory.c => src/encauth/eax/eax_decrypt_verify_memory.c (50%)
rename eax_done.c => src/encauth/eax/eax_done.c (66%)
rename eax_encrypt.c => src/encauth/eax/eax_encrypt.c (50%)
create mode 100644 src/encauth/eax/eax_encrypt_authenticate_memory.c
rename eax_init.c => src/encauth/eax/eax_init.c (65%)
rename eax_test.c => src/encauth/eax/eax_test.c (96%)
create mode 100644 src/encauth/gcm/gcm_add_aad.c
create mode 100644 src/encauth/gcm/gcm_add_iv.c
create mode 100644 src/encauth/gcm/gcm_done.c
create mode 100644 src/encauth/gcm/gcm_gf_mult.c
create mode 100644 src/encauth/gcm/gcm_init.c
create mode 100644 src/encauth/gcm/gcm_memory.c
create mode 100644 src/encauth/gcm/gcm_process.c
create mode 100644 src/encauth/gcm/gcm_reset.c
create mode 100644 src/encauth/gcm/gcm_test.c
rename ocb_decrypt.c => src/encauth/ocb/ocb_decrypt.c (67%)
create mode 100644 src/encauth/ocb/ocb_decrypt_verify_memory.c
rename ocb_done_decrypt.c => src/encauth/ocb/ocb_done_decrypt.c (50%)
create mode 100644 src/encauth/ocb/ocb_done_encrypt.c
rename ocb_encrypt.c => src/encauth/ocb/ocb_encrypt.c (68%)
rename ocb_encrypt_authenticate_memory.c => src/encauth/ocb/ocb_encrypt_authenticate_memory.c (52%)
rename ocb_init.c => src/encauth/ocb/ocb_init.c (83%)
rename ocb_ntz.c => src/encauth/ocb/ocb_ntz.c (57%)
rename ocb_shift_xor.c => src/encauth/ocb/ocb_shift_xor.c (63%)
rename ocb_test.c => src/encauth/ocb/ocb_test.c (96%)
rename s_ocb_done.c => src/encauth/ocb/s_ocb_done.c (72%)
rename chc.c => src/hashes/chc/chc.c (79%)
create mode 100644 src/hashes/helper/hash_file.c
rename hash_filehandle.c => src/hashes/helper/hash_filehandle.c (57%)
create mode 100644 src/hashes/helper/hash_memory.c
create mode 100644 src/hashes/helper/hash_memory_multi.c
rename md2.c => src/hashes/md2.c (80%)
rename md4.c => src/hashes/md4.c (87%)
rename md5.c => src/hashes/md5.c (86%)
rename rmd128.c => src/hashes/rmd128.c (89%)
rename rmd160.c => src/hashes/rmd160.c (88%)
rename sha1.c => src/hashes/sha1.c (78%)
rename sha224.c => src/hashes/sha2/sha224.c (72%)
rename sha256.c => src/hashes/sha2/sha256.c (90%)
rename sha384.c => src/hashes/sha2/sha384.c (77%)
rename sha512.c => src/hashes/sha2/sha512.c (89%)
rename tiger.c => src/hashes/tiger.c (97%)
rename whirl.c => src/hashes/whirl/whirl.c (88%)
rename whirltab.c => src/hashes/whirl/whirltab.c (99%)
rename ltc_tommath.h => src/headers/ltc_tommath.h (95%)
rename mycrypt.h => src/headers/tomcrypt.h (79%)
rename mycrypt_argchk.h => src/headers/tomcrypt_argchk.h (56%)
rename mycrypt_cfg.h => src/headers/tomcrypt_cfg.h (81%)
create mode 100644 src/headers/tomcrypt_cipher.h
rename mycrypt_custom.h => src/headers/tomcrypt_custom.h (62%)
create mode 100644 src/headers/tomcrypt_hash.h
create mode 100644 src/headers/tomcrypt_mac.h
rename mycrypt_macros.h => src/headers/tomcrypt_macros.h (78%)
create mode 100644 src/headers/tomcrypt_misc.h
rename mycrypt_pk.h => src/headers/tomcrypt_pk.h (53%)
rename mycrypt_pkcs.h => src/headers/tomcrypt_pkcs.h (100%)
create mode 100644 src/headers/tomcrypt_prng.h
rename tommath_class.h => src/headers/tommath_class.h (94%)
rename tommath_superclass.h => src/headers/tommath_superclass.h (95%)
rename hmac_done.c => src/mac/hmac/hmac_done.c (61%)
rename hmac_file.c => src/mac/hmac/hmac_file.c (59%)
rename hmac_init.c => src/mac/hmac/hmac_init.c (67%)
create mode 100644 src/mac/hmac/hmac_memory.c
create mode 100644 src/mac/hmac/hmac_memory_multi.c
create mode 100644 src/mac/hmac/hmac_process.c
rename hmac_test.c => src/mac/hmac/hmac_test.c (92%)
create mode 100644 src/mac/omac/omac_done.c
rename omac_file.c => src/mac/omac/omac_file.c (59%)
rename omac_init.c => src/mac/omac/omac_init.c (77%)
create mode 100644 src/mac/omac/omac_memory.c
create mode 100644 src/mac/omac/omac_memory_multi.c
create mode 100644 src/mac/omac/omac_process.c
rename omac_test.c => src/mac/omac/omac_test.c (92%)
create mode 100644 src/mac/pelican/pelican.c
create mode 100644 src/mac/pelican/pelican_memory.c
create mode 100644 src/mac/pelican/pelican_test.c
rename pmac_done.c => src/mac/pmac/pmac_done.c (82%)
rename pmac_file.c => src/mac/pmac/pmac_file.c (58%)
rename pmac_init.c => src/mac/pmac/pmac_init.c (82%)
create mode 100644 src/mac/pmac/pmac_memory.c
create mode 100644 src/mac/pmac/pmac_memory_multi.c
rename pmac_ntz.c => src/mac/pmac/pmac_ntz.c (68%)
create mode 100644 src/mac/pmac/pmac_process.c
create mode 100644 src/mac/pmac/pmac_shift_xor.c
rename pmac_test.c => src/mac/pmac/pmac_test.c (93%)
rename base64_decode.c => src/misc/base64/base64_decode.c (67%)
rename base64_encode.c => src/misc/base64/base64_encode.c (58%)
rename burn_stack.c => src/misc/burn_stack.c (67%)
rename crypt.c => src/misc/crypt/crypt.c (69%)
rename crypt_argchk.c => src/misc/crypt/crypt_argchk.c (64%)
create mode 100644 src/misc/crypt/crypt_cipher_descriptor.c
rename crypt_cipher_is_valid.c => src/misc/crypt/crypt_cipher_is_valid.c (60%)
rename crypt_find_cipher.c => src/misc/crypt/crypt_find_cipher.c (59%)
rename crypt_find_cipher_any.c => src/misc/crypt/crypt_find_cipher_any.c (55%)
rename crypt_find_cipher_id.c => src/misc/crypt/crypt_find_cipher_id.c (62%)
rename crypt_find_hash.c => src/misc/crypt/crypt_find_hash.c (61%)
rename crypt_find_hash_any.c => src/misc/crypt/crypt_find_hash_any.c (58%)
rename crypt_find_hash_id.c => src/misc/crypt/crypt_find_hash_id.c (62%)
rename crypt_find_prng.c => src/misc/crypt/crypt_find_prng.c (61%)
create mode 100644 src/misc/crypt/crypt_hash_descriptor.c
rename crypt_hash_is_valid.c => src/misc/crypt/crypt_hash_is_valid.c (60%)
create mode 100644 src/misc/crypt/crypt_prng_descriptor.c
rename crypt_prng_is_valid.c => src/misc/crypt/crypt_prng_is_valid.c (60%)
rename crypt_register_cipher.c => src/misc/crypt/crypt_register_cipher.c (55%)
create mode 100644 src/misc/crypt/crypt_register_hash.c
create mode 100644 src/misc/crypt/crypt_register_prng.c
rename crypt_unregister_cipher.c => src/misc/crypt/crypt_unregister_cipher.c (51%)
rename crypt_unregister_hash.c => src/misc/crypt/crypt_unregister_hash.c (50%)
rename crypt_unregister_prng.c => src/misc/crypt/crypt_unregister_prng.c (50%)
rename error_to_string.c => src/misc/error_to_string.c (77%)
rename is_prime.c => src/misc/mpi/is_prime.c (71%)
rename mpi.c => src/misc/mpi/mpi.c (90%)
rename mpi_to_ltc_error.c => src/misc/mpi/mpi_to_ltc_error.c (66%)
rename rand_prime.c => src/misc/mpi/rand_prime.c (87%)
rename pkcs_5_1.c => src/misc/pkcs5/pkcs_5_1.c (65%)
rename pkcs_5_2.c => src/misc/pkcs5/pkcs_5_2.c (70%)
create mode 100644 src/misc/zeromem.c
create mode 100644 src/modes/cbc/cbc_decrypt.c
create mode 100644 src/modes/cbc/cbc_done.c
create mode 100644 src/modes/cbc/cbc_encrypt.c
rename cbc_getiv.c => src/modes/cbc/cbc_getiv.c (53%)
rename cbc_setiv.c => src/modes/cbc/cbc_setiv.c (56%)
rename cbc_start.c => src/modes/cbc/cbc_start.c (58%)
rename cfb_decrypt.c => src/modes/cfb/cfb_decrypt.c (70%)
create mode 100644 src/modes/cfb/cfb_done.c
rename cfb_encrypt.c => src/modes/cfb/cfb_encrypt.c (70%)
rename cfb_getiv.c => src/modes/cfb/cfb_getiv.c (53%)
rename cfb_setiv.c => src/modes/cfb/cfb_setiv.c (64%)
rename cfb_start.c => src/modes/cfb/cfb_start.c (61%)
rename ctr_decrypt.c => src/modes/ctr/ctr_decrypt.c (50%)
create mode 100644 src/modes/ctr/ctr_done.c
rename ctr_encrypt.c => src/modes/ctr/ctr_encrypt.c (50%)
rename ctr_getiv.c => src/modes/ctr/ctr_getiv.c (53%)
rename ctr_setiv.c => src/modes/ctr/ctr_setiv.c (66%)
rename ctr_start.c => src/modes/ctr/ctr_start.c (61%)
create mode 100644 src/modes/ecb/ecb_decrypt.c
rename ecb_encrypt.c => src/modes/ecb/ecb_done.c (50%)
create mode 100644 src/modes/ecb/ecb_encrypt.c
rename ecb_start.c => src/modes/ecb/ecb_start.c (53%)
rename ofb_decrypt.c => src/modes/ofb/ofb_decrypt.c (50%)
create mode 100644 src/modes/ofb/ofb_done.c
rename ofb_encrypt.c => src/modes/ofb/ofb_encrypt.c (69%)
rename ofb_getiv.c => src/modes/ofb/ofb_getiv.c (53%)
rename ofb_setiv.c => src/modes/ofb/ofb_setiv.c (64%)
rename ofb_start.c => src/modes/ofb/ofb_start.c (57%)
rename der_decode_integer.c => src/pk/asn1/der/der_decode_integer.c (79%)
rename der_encode_integer.c => src/pk/asn1/der/der_encode_integer.c (79%)
rename der_get_multi_integer.c => src/pk/asn1/der/der_get_multi_integer.c (65%)
rename der_length_integer.c => src/pk/asn1/der/der_length_integer.c (68%)
rename der_put_multi_integer.c => src/pk/asn1/der/der_put_multi_integer.c (52%)
rename dh.c => src/pk/dh/dh.c (83%)
rename dh_sys.c => src/pk/dh/dh_sys.c (73%)
rename dsa_export.c => src/pk/dsa/dsa_export.c (69%)
rename dsa_free.c => src/pk/dsa/dsa_free.c (60%)
rename dsa_import.c => src/pk/dsa/dsa_import.c (71%)
rename dsa_make_key.c => src/pk/dsa/dsa_make_key.c (84%)
rename dsa_sign_hash.c => src/pk/dsa/dsa_sign_hash.c (71%)
rename dsa_verify_hash.c => src/pk/dsa/dsa_verify_hash.c (60%)
rename dsa_verify_key.c => src/pk/dsa/dsa_verify_key.c (82%)
rename ecc.c => src/pk/ecc/ecc.c (57%)
rename ecc_sys.c => src/pk/ecc/ecc_sys.c (75%)
rename packet_store_header.c => src/pk/packet_store_header.c (84%)
rename packet_valid_header.c => src/pk/packet_valid_header.c (86%)
rename pkcs_1_i2osp.c => src/pk/pkcs1/pkcs_1_i2osp.c (67%)
rename pkcs_1_mgf1.c => src/pk/pkcs1/pkcs_1_mgf1.c (71%)
rename pkcs_1_oaep_decode.c => src/pk/pkcs1/pkcs_1_oaep_decode.c (74%)
rename pkcs_1_oaep_encode.c => src/pk/pkcs1/pkcs_1_oaep_encode.c (73%)
rename pkcs_1_os2ip.c => src/pk/pkcs1/pkcs_1_os2ip.c (58%)
rename pkcs_1_pss_decode.c => src/pk/pkcs1/pkcs_1_pss_decode.c (76%)
rename pkcs_1_pss_encode.c => src/pk/pkcs1/pkcs_1_pss_encode.c (76%)
rename pkcs_1_v15_es_decode.c => src/pk/pkcs1/pkcs_1_v15_es_decode.c (65%)
rename pkcs_1_v15_es_encode.c => src/pk/pkcs1/pkcs_1_v15_es_encode.c (63%)
rename pkcs_1_v15_sa_decode.c => src/pk/pkcs1/pkcs_1_v15_sa_decode.c (71%)
rename pkcs_1_v15_sa_encode.c => src/pk/pkcs1/pkcs_1_v15_sa_encode.c (69%)
create mode 100644 src/pk/rsa/rsa_decrypt_key.c
rename rsa_encrypt_key.c => src/pk/rsa/rsa_encrypt_key.c (50%)
create mode 100644 src/pk/rsa/rsa_export.c
rename rsa_exptmod.c => src/pk/rsa/rsa_exptmod.c (61%)
rename rsa_free.c => src/pk/rsa/rsa_free.c (64%)
rename rsa_import.c => src/pk/rsa/rsa_import.c (51%)
rename rsa_make_key.c => src/pk/rsa/rsa_make_key.c (88%)
create mode 100644 src/pk/rsa/rsa_sign_hash.c
create mode 100644 src/pk/rsa/rsa_v15_decrypt_key.c
create mode 100644 src/pk/rsa/rsa_v15_encrypt_key.c
create mode 100644 src/pk/rsa/rsa_v15_sign_hash.c
rename rsa_v15_verify_hash.c => src/pk/rsa/rsa_v15_verify_hash.c (52%)
rename rsa_verify_hash.c => src/pk/rsa/rsa_verify_hash.c (51%)
rename fortuna.c => src/prngs/fortuna.c (73%)
rename rc4.c => src/prngs/rc4.c (62%)
rename rng_get_bytes.c => src/prngs/rng_get_bytes.c (77%)
rename rng_make_prng.c => src/prngs/rng_make_prng.c (66%)
rename sober128.c => src/prngs/sober128.c (73%)
rename sober128tab.c => src/prngs/sober128tab.c (96%)
create mode 100644 src/prngs/sprng.c
rename yarrow.c => src/prngs/yarrow.c (72%)
rename {demos/test => testprof}/base64_test.c (86%)
rename {demos/test => testprof}/cipher_hash_test.c (97%)
rename {demos/test => testprof}/der_tests.c (93%)
rename {demos/test => testprof}/dh_tests.c (84%)
rename {demos/test => testprof}/dsa_test.c (90%)
rename {demos/test => testprof}/ecc_test.c (61%)
create mode 100644 testprof/mac_test.c
create mode 100644 testprof/makefile
create mode 100644 testprof/makefile.icc
create mode 100644 testprof/makefile.msvc
create mode 100644 testprof/makefile.shared
rename {demos/test => testprof}/modes_test.c (84%)
rename {demos/test => testprof}/pkcs_1_test.c (94%)
rename {demos/test => testprof}/rsa_test.c (65%)
rename {demos/test => testprof}/store_test.c (95%)
create mode 100644 testprof/test.c
create mode 100644 testprof/tomcrypt_test.h
rename {demos => testprof}/x86_prof.c (59%)
delete mode 100644 tim_exptmod.c
delete mode 100644 zeromem.c
diff --git a/Doxyfile b/Doxyfile
new file mode 100644
index 00000000..d42b778d
--- /dev/null
+++ b/Doxyfile
@@ -0,0 +1,1155 @@
+# Doxyfile 1.3.9.1
+
+# This file describes the settings to be used by the documentation system
+# doxygen (www.doxygen.org) for a project
+#
+# All text after a hash (#) is considered a comment and will be ignored
+# The format is:
+# TAG = value [value, ...]
+# For lists items can also be appended using:
+# TAG += value [value, ...]
+# Values that contain spaces should be placed between quotes (" ")
+
+#---------------------------------------------------------------------------
+# Project related configuration options
+#---------------------------------------------------------------------------
+
+# The PROJECT_NAME tag is a single word (or a sequence of words surrounded
+# by quotes) that should identify the project.
+
+PROJECT_NAME = LibTomCrypt
+
+# The PROJECT_NUMBER tag can be used to enter a project or revision number.
+# This could be handy for archiving the generated documentation or
+# if some version control system is used.
+
+PROJECT_NUMBER = 1.02
+
+# The OUTPUT_DIRECTORY tag is used to specify the (relative or absolute)
+# base path where the generated documentation will be put.
+# If a relative path is entered, it will be relative to the location
+# where doxygen was started. If left blank the current directory will be used.
+
+OUTPUT_DIRECTORY = doc/doxygen
+
+# If the CREATE_SUBDIRS tag is set to YES, then doxygen will create
+# 4096 sub-directories (in 2 levels) under the output directory of each output
+# format and will distribute the generated files over these directories.
+# Enabling this option can be useful when feeding doxygen a huge amount of source
+# files, where putting all generated files in the same directory would otherwise
+# cause performance problems for the file system.
+
+CREATE_SUBDIRS = NO
+
+# The OUTPUT_LANGUAGE tag is used to specify the language in which all
+# documentation generated by doxygen is written. Doxygen will use this
+# information to generate all constant output in the proper language.
+# The default language is English, other supported languages are:
+# Brazilian, Catalan, Chinese, Chinese-Traditional, Croatian, Czech, Danish,
+# Dutch, Finnish, French, German, Greek, Hungarian, Italian, Japanese,
+# Japanese-en (Japanese with English messages), Korean, Korean-en, Norwegian,
+# Polish, Portuguese, Romanian, Russian, Serbian, Slovak, Slovene, Spanish,
+# Swedish, and Ukrainian.
+
+OUTPUT_LANGUAGE = English
+
+# This tag can be used to specify the encoding used in the generated output.
+# The encoding is not always determined by the language that is chosen,
+# but also whether or not the output is meant for Windows or non-Windows users.
+# In case there is a difference, setting the USE_WINDOWS_ENCODING tag to YES
+# forces the Windows encoding (this is the default for the Windows binary),
+# whereas setting the tag to NO uses a Unix-style encoding (the default for
+# all platforms other than Windows).
+
+USE_WINDOWS_ENCODING = NO
+
+# If the BRIEF_MEMBER_DESC tag is set to YES (the default) Doxygen will
+# include brief member descriptions after the members that are listed in
+# the file and class documentation (similar to JavaDoc).
+# Set to NO to disable this.
+
+BRIEF_MEMBER_DESC = YES
+
+# If the REPEAT_BRIEF tag is set to YES (the default) Doxygen will prepend
+# the brief description of a member or function before the detailed description.
+# Note: if both HIDE_UNDOC_MEMBERS and BRIEF_MEMBER_DESC are set to NO, the
+# brief descriptions will be completely suppressed.
+
+REPEAT_BRIEF = YES
+
+# This tag implements a quasi-intelligent brief description abbreviator
+# that is used to form the text in various listings. Each string
+# in this list, if found as the leading text of the brief description, will be
+# stripped from the text and the result after processing the whole list, is used
+# as the annotated text. Otherwise, the brief description is used as-is. If left
+# blank, the following values are used ("$name" is automatically replaced with the
+# name of the entity): "The $name class" "The $name widget" "The $name file"
+# "is" "provides" "specifies" "contains" "represents" "a" "an" "the"
+
+ABBREVIATE_BRIEF =
+
+# If the ALWAYS_DETAILED_SEC and REPEAT_BRIEF tags are both set to YES then
+# Doxygen will generate a detailed section even if there is only a brief
+# description.
+
+ALWAYS_DETAILED_SEC = NO
+
+# If the INLINE_INHERITED_MEMB tag is set to YES, doxygen will show all inherited
+# members of a class in the documentation of that class as if those members were
+# ordinary class members. Constructors, destructors and assignment operators of
+# the base classes will not be shown.
+
+INLINE_INHERITED_MEMB = NO
+
+# If the FULL_PATH_NAMES tag is set to YES then Doxygen will prepend the full
+# path before files name in the file list and in the header files. If set
+# to NO the shortest path that makes the file name unique will be used.
+
+FULL_PATH_NAMES = YES
+
+# If the FULL_PATH_NAMES tag is set to YES then the STRIP_FROM_PATH tag
+# can be used to strip a user-defined part of the path. Stripping is
+# only done if one of the specified strings matches the left-hand part of
+# the path. The tag can be used to show relative paths in the file list.
+# If left blank the directory from which doxygen is run is used as the
+# path to strip.
+
+STRIP_FROM_PATH = src
+
+# The STRIP_FROM_INC_PATH tag can be used to strip a user-defined part of
+# the path mentioned in the documentation of a class, which tells
+# the reader which header file to include in order to use a class.
+# If left blank only the name of the header file containing the class
+# definition is used. Otherwise one should specify the include paths that
+# are normally passed to the compiler using the -I flag.
+
+STRIP_FROM_INC_PATH = src/headers
+
+# If the SHORT_NAMES tag is set to YES, doxygen will generate much shorter
+# (but less readable) file names. This can be useful is your file systems
+# doesn't support long names like on DOS, Mac, or CD-ROM.
+
+SHORT_NAMES = NO
+
+# If the JAVADOC_AUTOBRIEF tag is set to YES then Doxygen
+# will interpret the first line (until the first dot) of a JavaDoc-style
+# comment as the brief description. If set to NO, the JavaDoc
+# comments will behave just like the Qt-style comments (thus requiring an
+# explicit @brief command for a brief description.
+
+JAVADOC_AUTOBRIEF = YES
+
+# The MULTILINE_CPP_IS_BRIEF tag can be set to YES to make Doxygen
+# treat a multi-line C++ special comment block (i.e. a block of //! or ///
+# comments) as a brief description. This used to be the default behaviour.
+# The new default is to treat a multi-line C++ comment block as a detailed
+# description. Set this tag to YES if you prefer the old behaviour instead.
+
+MULTILINE_CPP_IS_BRIEF = NO
+
+# If the DETAILS_AT_TOP tag is set to YES then Doxygen
+# will output the detailed description near the top, like JavaDoc.
+# If set to NO, the detailed description appears after the member
+# documentation.
+
+DETAILS_AT_TOP = YES
+
+# If the INHERIT_DOCS tag is set to YES (the default) then an undocumented
+# member inherits the documentation from any documented member that it
+# re-implements.
+
+INHERIT_DOCS = YES
+
+# If member grouping is used in the documentation and the DISTRIBUTE_GROUP_DOC
+# tag is set to YES, then doxygen will reuse the documentation of the first
+# member in the group (if any) for the other members of the group. By default
+# all members of a group must be documented explicitly.
+
+DISTRIBUTE_GROUP_DOC = NO
+
+# The TAB_SIZE tag can be used to set the number of spaces in a tab.
+# Doxygen uses this value to replace tabs by spaces in code fragments.
+
+TAB_SIZE = 4
+
+# This tag can be used to specify a number of aliases that acts
+# as commands in the documentation. An alias has the form "name=value".
+# For example adding "sideeffect=\par Side Effects:\n" will allow you to
+# put the command \sideeffect (or @sideeffect) in the documentation, which
+# will result in a user-defined paragraph with heading "Side Effects:".
+# You can put \n's in the value part of an alias to insert newlines.
+
+ALIASES =
+
+# Set the OPTIMIZE_OUTPUT_FOR_C tag to YES if your project consists of C sources
+# only. Doxygen will then generate output that is more tailored for C.
+# For instance, some of the names that are used will be different. The list
+# of all members will be omitted, etc.
+
+OPTIMIZE_OUTPUT_FOR_C = YES
+
+# Set the OPTIMIZE_OUTPUT_JAVA tag to YES if your project consists of Java sources
+# only. Doxygen will then generate output that is more tailored for Java.
+# For instance, namespaces will be presented as packages, qualified scopes
+# will look different, etc.
+
+OPTIMIZE_OUTPUT_JAVA = NO
+
+# Set the SUBGROUPING tag to YES (the default) to allow class member groups of
+# the same type (for instance a group of public functions) to be put as a
+# subgroup of that type (e.g. under the Public Functions section). Set it to
+# NO to prevent subgrouping. Alternatively, this can be done per class using
+# the \nosubgrouping command.
+
+SUBGROUPING = YES
+
+#---------------------------------------------------------------------------
+# Build related configuration options
+#---------------------------------------------------------------------------
+
+# If the EXTRACT_ALL tag is set to YES doxygen will assume all entities in
+# documentation are documented, even if no documentation was available.
+# Private class members and static file members will be hidden unless
+# the EXTRACT_PRIVATE and EXTRACT_STATIC tags are set to YES
+
+EXTRACT_ALL = YES
+
+# If the EXTRACT_PRIVATE tag is set to YES all private members of a class
+# will be included in the documentation.
+
+EXTRACT_PRIVATE = YES
+
+# If the EXTRACT_STATIC tag is set to YES all static members of a file
+# will be included in the documentation.
+
+EXTRACT_STATIC = YES
+
+# If the EXTRACT_LOCAL_CLASSES tag is set to YES classes (and structs)
+# defined locally in source files will be included in the documentation.
+# If set to NO only classes defined in header files are included.
+
+EXTRACT_LOCAL_CLASSES = YES
+
+# This flag is only useful for Objective-C code. When set to YES local
+# methods, which are defined in the implementation section but not in
+# the interface are included in the documentation.
+# If set to NO (the default) only methods in the interface are included.
+
+EXTRACT_LOCAL_METHODS = YES
+
+# If the HIDE_UNDOC_MEMBERS tag is set to YES, Doxygen will hide all
+# undocumented members of documented classes, files or namespaces.
+# If set to NO (the default) these members will be included in the
+# various overviews, but no documentation section is generated.
+# This option has no effect if EXTRACT_ALL is enabled.
+
+HIDE_UNDOC_MEMBERS = NO
+
+# If the HIDE_UNDOC_CLASSES tag is set to YES, Doxygen will hide all
+# undocumented classes that are normally visible in the class hierarchy.
+# If set to NO (the default) these classes will be included in the various
+# overviews. This option has no effect if EXTRACT_ALL is enabled.
+
+HIDE_UNDOC_CLASSES = NO
+
+# If the HIDE_FRIEND_COMPOUNDS tag is set to YES, Doxygen will hide all
+# friend (class|struct|union) declarations.
+# If set to NO (the default) these declarations will be included in the
+# documentation.
+
+HIDE_FRIEND_COMPOUNDS = NO
+
+# If the HIDE_IN_BODY_DOCS tag is set to YES, Doxygen will hide any
+# documentation blocks found inside the body of a function.
+# If set to NO (the default) these blocks will be appended to the
+# function's detailed documentation block.
+
+HIDE_IN_BODY_DOCS = NO
+
+# The INTERNAL_DOCS tag determines if documentation
+# that is typed after a \internal command is included. If the tag is set
+# to NO (the default) then the documentation will be excluded.
+# Set it to YES to include the internal documentation.
+
+INTERNAL_DOCS = NO
+
+# If the CASE_SENSE_NAMES tag is set to NO then Doxygen will only generate
+# file names in lower-case letters. If set to YES upper-case letters are also
+# allowed. This is useful if you have classes or files whose names only differ
+# in case and if your file system supports case sensitive file names. Windows
+# and Mac users are advised to set this option to NO.
+
+CASE_SENSE_NAMES = YES
+
+# If the HIDE_SCOPE_NAMES tag is set to NO (the default) then Doxygen
+# will show members with their full class and namespace scopes in the
+# documentation. If set to YES the scope will be hidden.
+
+HIDE_SCOPE_NAMES = NO
+
+# If the SHOW_INCLUDE_FILES tag is set to YES (the default) then Doxygen
+# will put a list of the files that are included by a file in the documentation
+# of that file.
+
+SHOW_INCLUDE_FILES = YES
+
+# If the INLINE_INFO tag is set to YES (the default) then a tag [inline]
+# is inserted in the documentation for inline members.
+
+INLINE_INFO = YES
+
+# If the SORT_MEMBER_DOCS tag is set to YES (the default) then doxygen
+# will sort the (detailed) documentation of file and class members
+# alphabetically by member name. If set to NO the members will appear in
+# declaration order.
+
+SORT_MEMBER_DOCS = YES
+
+# If the SORT_BRIEF_DOCS tag is set to YES then doxygen will sort the
+# brief documentation of file, namespace and class members alphabetically
+# by member name. If set to NO (the default) the members will appear in
+# declaration order.
+
+SORT_BRIEF_DOCS = NO
+
+# If the SORT_BY_SCOPE_NAME tag is set to YES, the class list will be
+# sorted by fully-qualified names, including namespaces. If set to
+# NO (the default), the class list will be sorted only by class name,
+# not including the namespace part.
+# Note: This option is not very useful if HIDE_SCOPE_NAMES is set to YES.
+# Note: This option applies only to the class list, not to the
+# alphabetical list.
+
+SORT_BY_SCOPE_NAME = YES
+
+# The GENERATE_TODOLIST tag can be used to enable (YES) or
+# disable (NO) the todo list. This list is created by putting \todo
+# commands in the documentation.
+
+GENERATE_TODOLIST = YES
+
+# The GENERATE_TESTLIST tag can be used to enable (YES) or
+# disable (NO) the test list. This list is created by putting \test
+# commands in the documentation.
+
+GENERATE_TESTLIST = YES
+
+# The GENERATE_BUGLIST tag can be used to enable (YES) or
+# disable (NO) the bug list. This list is created by putting \bug
+# commands in the documentation.
+
+GENERATE_BUGLIST = YES
+
+# The GENERATE_DEPRECATEDLIST tag can be used to enable (YES) or
+# disable (NO) the deprecated list. This list is created by putting
+# \deprecated commands in the documentation.
+
+GENERATE_DEPRECATEDLIST= YES
+
+# The ENABLED_SECTIONS tag can be used to enable conditional
+# documentation sections, marked by \if sectionname ... \endif.
+
+ENABLED_SECTIONS =
+
+# The MAX_INITIALIZER_LINES tag determines the maximum number of lines
+# the initial value of a variable or define consists of for it to appear in
+# the documentation. If the initializer consists of more lines than specified
+# here it will be hidden. Use a value of 0 to hide initializers completely.
+# The appearance of the initializer of individual variables and defines in the
+# documentation can be controlled using \showinitializer or \hideinitializer
+# command in the documentation regardless of this setting.
+
+MAX_INITIALIZER_LINES = 30
+
+# Set the SHOW_USED_FILES tag to NO to disable the list of files generated
+# at the bottom of the documentation of classes and structs. If set to YES the
+# list will mention the files that were used to generate the documentation.
+
+SHOW_USED_FILES = YES
+
+#---------------------------------------------------------------------------
+# configuration options related to warning and progress messages
+#---------------------------------------------------------------------------
+
+# The QUIET tag can be used to turn on/off the messages that are generated
+# by doxygen. Possible values are YES and NO. If left blank NO is used.
+
+QUIET = NO
+
+# The WARNINGS tag can be used to turn on/off the warning messages that are
+# generated by doxygen. Possible values are YES and NO. If left blank
+# NO is used.
+
+WARNINGS = YES
+
+# If WARN_IF_UNDOCUMENTED is set to YES, then doxygen will generate warnings
+# for undocumented members. If EXTRACT_ALL is set to YES then this flag will
+# automatically be disabled.
+
+WARN_IF_UNDOCUMENTED = YES
+
+# If WARN_IF_DOC_ERROR is set to YES, doxygen will generate warnings for
+# potential errors in the documentation, such as not documenting some
+# parameters in a documented function, or documenting parameters that
+# don't exist or using markup commands wrongly.
+
+WARN_IF_DOC_ERROR = YES
+
+# The WARN_FORMAT tag determines the format of the warning messages that
+# doxygen can produce. The string should contain the $file, $line, and $text
+# tags, which will be replaced by the file and line number from which the
+# warning originated and the warning text.
+
+WARN_FORMAT = "$file:$line: $text"
+
+# The WARN_LOGFILE tag can be used to specify a file to which warning
+# and error messages should be written. If left blank the output is written
+# to stderr.
+
+WARN_LOGFILE =
+
+#---------------------------------------------------------------------------
+# configuration options related to the input files
+#---------------------------------------------------------------------------
+
+# The INPUT tag can be used to specify the files and/or directories that contain
+# documented source files. You may enter file names like "myfile.cpp" or
+# directories like "/usr/src/myproject". Separate the files or directories
+# with spaces.
+
+INPUT = src
+
+# If the value of the INPUT tag contains directories, you can use the
+# FILE_PATTERNS tag to specify one or more wildcard pattern (like *.cpp
+# and *.h) to filter out the source-files in the directories. If left
+# blank the following patterns are tested:
+# *.c *.cc *.cxx *.cpp *.c++ *.java *.ii *.ixx *.ipp *.i++ *.inl *.h *.hh *.hxx *.hpp
+# *.h++ *.idl *.odl *.cs *.php *.php3 *.inc *.m *.mm
+
+FILE_PATTERNS =
+
+# The RECURSIVE tag can be used to turn specify whether or not subdirectories
+# should be searched for input files as well. Possible values are YES and NO.
+# If left blank NO is used.
+
+RECURSIVE = YES
+
+# The EXCLUDE tag can be used to specify files and/or directories that should
+# excluded from the INPUT source files. This way you can easily exclude a
+# subdirectory from a directory tree whose root is specified with the INPUT tag.
+
+EXCLUDE =
+
+# The EXCLUDE_SYMLINKS tag can be used select whether or not files or directories
+# that are symbolic links (a Unix filesystem feature) are excluded from the input.
+
+EXCLUDE_SYMLINKS = NO
+
+# If the value of the INPUT tag contains directories, you can use the
+# EXCLUDE_PATTERNS tag to specify one or more wildcard patterns to exclude
+# certain files from those directories.
+
+EXCLUDE_PATTERNS =
+
+# The EXAMPLE_PATH tag can be used to specify one or more files or
+# directories that contain example code fragments that are included (see
+# the \include command).
+
+EXAMPLE_PATH =
+
+# If the value of the EXAMPLE_PATH tag contains directories, you can use the
+# EXAMPLE_PATTERNS tag to specify one or more wildcard pattern (like *.cpp
+# and *.h) to filter out the source-files in the directories. If left
+# blank all files are included.
+
+EXAMPLE_PATTERNS =
+
+# If the EXAMPLE_RECURSIVE tag is set to YES then subdirectories will be
+# searched for input files to be used with the \include or \dontinclude
+# commands irrespective of the value of the RECURSIVE tag.
+# Possible values are YES and NO. If left blank NO is used.
+
+EXAMPLE_RECURSIVE = NO
+
+# The IMAGE_PATH tag can be used to specify one or more files or
+# directories that contain image that are included in the documentation (see
+# the \image command).
+
+IMAGE_PATH =
+
+# The INPUT_FILTER tag can be used to specify a program that doxygen should
+# invoke to filter for each input file. Doxygen will invoke the filter program
+# by executing (via popen()) the command <filter> <input-file>, where <filter>
+# is the value of the INPUT_FILTER tag, and <input-file> is the name of an
+# input file. Doxygen will then use the output that the filter program writes
+# to standard output. If FILTER_PATTERNS is specified, this tag will be
+# ignored.
+
+INPUT_FILTER =
+
+# The FILTER_PATTERNS tag can be used to specify filters on a per file pattern
+# basis. Doxygen will compare the file name with each pattern and apply the
+# filter if there is a match. The filters are a list of the form:
+# pattern=filter (like *.cpp=my_cpp_filter). See INPUT_FILTER for further
+# info on how filters are used. If FILTER_PATTERNS is empty, INPUT_FILTER
+# is applied to all files.
+
+FILTER_PATTERNS =
+
+# If the FILTER_SOURCE_FILES tag is set to YES, the input filter (if set using
+# INPUT_FILTER) will be used to filter the input files when producing source
+# files to browse (i.e. when SOURCE_BROWSER is set to YES).
+
+FILTER_SOURCE_FILES = NO
+
+#---------------------------------------------------------------------------
+# configuration options related to source browsing
+#---------------------------------------------------------------------------
+
+# If the SOURCE_BROWSER tag is set to YES then a list of source files will
+# be generated. Documented entities will be cross-referenced with these sources.
+# Note: To get rid of all source code in the generated output, make sure also
+# VERBATIM_HEADERS is set to NO.
+
+SOURCE_BROWSER = YES
+
+# Setting the INLINE_SOURCES tag to YES will include the body
+# of functions and classes directly in the documentation.
+
+INLINE_SOURCES = YES
+
+# Setting the STRIP_CODE_COMMENTS tag to YES (the default) will instruct
+# doxygen to hide any special comment blocks from generated source code
+# fragments. Normal C and C++ comments will always remain visible.
+
+STRIP_CODE_COMMENTS = NO
+
+# If the REFERENCED_BY_RELATION tag is set to YES (the default)
+# then for each documented function all documented
+# functions referencing it will be listed.
+
+REFERENCED_BY_RELATION = YES
+
+# If the REFERENCES_RELATION tag is set to YES (the default)
+# then for each documented function all documented entities
+# called/used by that function will be listed.
+
+REFERENCES_RELATION = YES
+
+# If the VERBATIM_HEADERS tag is set to YES (the default) then Doxygen
+# will generate a verbatim copy of the header file for each class for
+# which an include is specified. Set to NO to disable this.
+
+VERBATIM_HEADERS = YES
+
+#---------------------------------------------------------------------------
+# configuration options related to the alphabetical class index
+#---------------------------------------------------------------------------
+
+# If the ALPHABETICAL_INDEX tag is set to YES, an alphabetical index
+# of all compounds will be generated. Enable this if the project
+# contains a lot of classes, structs, unions or interfaces.
+
+ALPHABETICAL_INDEX = YES
+
+# If the alphabetical index is enabled (see ALPHABETICAL_INDEX) then
+# the COLS_IN_ALPHA_INDEX tag can be used to specify the number of columns
+# in which this list will be split (can be a number in the range [1..20])
+
+COLS_IN_ALPHA_INDEX = 5
+
+# In case all classes in a project start with a common prefix, all
+# classes will be put under the same header in the alphabetical index.
+# The IGNORE_PREFIX tag can be used to specify one or more prefixes that
+# should be ignored while generating the index headers.
+
+IGNORE_PREFIX =
+
+#---------------------------------------------------------------------------
+# configuration options related to the HTML output
+#---------------------------------------------------------------------------
+
+# If the GENERATE_HTML tag is set to YES (the default) Doxygen will
+# generate HTML output.
+
+GENERATE_HTML = YES
+
+# The HTML_OUTPUT tag is used to specify where the HTML docs will be put.
+# If a relative path is entered the value of OUTPUT_DIRECTORY will be
+# put in front of it. If left blank `html' will be used as the default path.
+
+HTML_OUTPUT = html
+
+# The HTML_FILE_EXTENSION tag can be used to specify the file extension for
+# each generated HTML page (for example: .htm,.php,.asp). If it is left blank
+# doxygen will generate files with .html extension.
+
+HTML_FILE_EXTENSION = .html
+
+# The HTML_HEADER tag can be used to specify a personal HTML header for
+# each generated HTML page. If it is left blank doxygen will generate a
+# standard header.
+
+HTML_HEADER = doc/header.html
+
+# The HTML_FOOTER tag can be used to specify a personal HTML footer for
+# each generated HTML page. If it is left blank doxygen will generate a
+# standard footer.
+
+HTML_FOOTER = doc/footer.html
+
+# The HTML_STYLESHEET tag can be used to specify a user-defined cascading
+# style sheet that is used by each HTML page. It can be used to
+# fine-tune the look of the HTML output. If the tag is left blank doxygen
+# will generate a default style sheet. Note that doxygen will try to copy
+# the style sheet file to the HTML output directory, so don't put your own
+# stylesheet in the HTML output directory as well, or it will be erased!
+
+HTML_STYLESHEET =
+
+# If the HTML_ALIGN_MEMBERS tag is set to YES, the members of classes,
+# files or namespaces will be aligned in HTML using tables. If set to
+# NO a bullet list will be used.
+
+HTML_ALIGN_MEMBERS = YES
+
+# If the GENERATE_HTMLHELP tag is set to YES, additional index files
+# will be generated that can be used as input for tools like the
+# Microsoft HTML help workshop to generate a compressed HTML help file (.chm)
+# of the generated HTML documentation.
+
+GENERATE_HTMLHELP = NO
+
+# If the GENERATE_HTMLHELP tag is set to YES, the CHM_FILE tag can
+# be used to specify the file name of the resulting .chm file. You
+# can add a path in front of the file if the result should not be
+# written to the html output directory.
+
+CHM_FILE =
+
+# If the GENERATE_HTMLHELP tag is set to YES, the HHC_LOCATION tag can
+# be used to specify the location (absolute path including file name) of
+# the HTML help compiler (hhc.exe). If non-empty doxygen will try to run
+# the HTML help compiler on the generated index.hhp.
+
+HHC_LOCATION =
+
+# If the GENERATE_HTMLHELP tag is set to YES, the GENERATE_CHI flag
+# controls if a separate .chi index file is generated (YES) or that
+# it should be included in the master .chm file (NO).
+
+GENERATE_CHI = NO
+
+# If the GENERATE_HTMLHELP tag is set to YES, the BINARY_TOC flag
+# controls whether a binary table of contents is generated (YES) or a
+# normal table of contents (NO) in the .chm file.
+
+BINARY_TOC = NO
+
+# The TOC_EXPAND flag can be set to YES to add extra items for group members
+# to the contents of the HTML help documentation and to the tree view.
+
+TOC_EXPAND = NO
+
+# The DISABLE_INDEX tag can be used to turn on/off the condensed index at
+# top of each HTML page. The value NO (the default) enables the index and
+# the value YES disables it.
+
+DISABLE_INDEX = NO
+
+# This tag can be used to set the number of enum values (range [1..20])
+# that doxygen will group on one line in the generated HTML documentation.
+
+ENUM_VALUES_PER_LINE = 1
+
+# If the GENERATE_TREEVIEW tag is set to YES, a side panel will be
+# generated containing a tree-like index structure (just like the one that
+# is generated for HTML Help). For this to work a browser that supports
+# JavaScript, DHTML, CSS and frames is required (for instance Mozilla 1.0+,
+# Netscape 6.0+, Internet explorer 5.0+, or Konqueror). Windows users are
+# probably better off using the HTML help feature.
+
+GENERATE_TREEVIEW = YES
+
+# If the treeview is enabled (see GENERATE_TREEVIEW) then this tag can be
+# used to set the initial width (in pixels) of the frame in which the tree
+# is shown.
+
+TREEVIEW_WIDTH = 250
+
+#---------------------------------------------------------------------------
+# configuration options related to the LaTeX output
+#---------------------------------------------------------------------------
+
+# If the GENERATE_LATEX tag is set to YES (the default) Doxygen will
+# generate Latex output.
+
+GENERATE_LATEX = YES
+
+# The LATEX_OUTPUT tag is used to specify where the LaTeX docs will be put.
+# If a relative path is entered the value of OUTPUT_DIRECTORY will be
+# put in front of it. If left blank `latex' will be used as the default path.
+
+LATEX_OUTPUT = latex
+
+# The LATEX_CMD_NAME tag can be used to specify the LaTeX command name to be
+# invoked. If left blank `latex' will be used as the default command name.
+
+LATEX_CMD_NAME = latex
+
+# The MAKEINDEX_CMD_NAME tag can be used to specify the command name to
+# generate index for LaTeX. If left blank `makeindex' will be used as the
+# default command name.
+
+MAKEINDEX_CMD_NAME = makeindex
+
+# If the COMPACT_LATEX tag is set to YES Doxygen generates more compact
+# LaTeX documents. This may be useful for small projects and may help to
+# save some trees in general.
+
+COMPACT_LATEX = NO
+
+# The PAPER_TYPE tag can be used to set the paper type that is used
+# by the printer. Possible values are: a4, a4wide, letter, legal and
+# executive. If left blank a4wide will be used.
+
+PAPER_TYPE = a4wide
+
+# The EXTRA_PACKAGES tag can be to specify one or more names of LaTeX
+# packages that should be included in the LaTeX output.
+
+EXTRA_PACKAGES =
+
+# The LATEX_HEADER tag can be used to specify a personal LaTeX header for
+# the generated latex document. The header should contain everything until
+# the first chapter. If it is left blank doxygen will generate a
+# standard header. Notice: only use this tag if you know what you are doing!
+
+LATEX_HEADER =
+
+# If the PDF_HYPERLINKS tag is set to YES, the LaTeX that is generated
+# is prepared for conversion to pdf (using ps2pdf). The pdf file will
+# contain links (just like the HTML output) instead of page references
+# This makes the output suitable for online browsing using a pdf viewer.
+
+PDF_HYPERLINKS = YES
+
+# If the USE_PDFLATEX tag is set to YES, pdflatex will be used instead of
+# plain latex in the generated Makefile. Set this option to YES to get a
+# higher quality PDF documentation.
+
+USE_PDFLATEX = YES
+
+# If the LATEX_BATCHMODE tag is set to YES, doxygen will add the \\batchmode.
+# command to the generated LaTeX files. This will instruct LaTeX to keep
+# running if errors occur, instead of asking the user for help.
+# This option is also used when generating formulas in HTML.
+
+LATEX_BATCHMODE = NO
+
+# If LATEX_HIDE_INDICES is set to YES then doxygen will not
+# include the index chapters (such as File Index, Compound Index, etc.)
+# in the output.
+
+LATEX_HIDE_INDICES = NO
+
+#---------------------------------------------------------------------------
+# configuration options related to the RTF output
+#---------------------------------------------------------------------------
+
+# If the GENERATE_RTF tag is set to YES Doxygen will generate RTF output
+# The RTF output is optimized for Word 97 and may not look very pretty with
+# other RTF readers or editors.
+
+GENERATE_RTF = NO
+
+# The RTF_OUTPUT tag is used to specify where the RTF docs will be put.
+# If a relative path is entered the value of OUTPUT_DIRECTORY will be
+# put in front of it. If left blank `rtf' will be used as the default path.
+
+RTF_OUTPUT = rtf
+
+# If the COMPACT_RTF tag is set to YES Doxygen generates more compact
+# RTF documents. This may be useful for small projects and may help to
+# save some trees in general.
+
+COMPACT_RTF = NO
+
+# If the RTF_HYPERLINKS tag is set to YES, the RTF that is generated
+# will contain hyperlink fields. The RTF file will
+# contain links (just like the HTML output) instead of page references.
+# This makes the output suitable for online browsing using WORD or other
+# programs which support those fields.
+# Note: wordpad (write) and others do not support links.
+
+RTF_HYPERLINKS = YES
+
+# Load stylesheet definitions from file. Syntax is similar to doxygen's
+# config file, i.e. a series of assignments. You only have to provide
+# replacements, missing definitions are set to their default value.
+
+RTF_STYLESHEET_FILE =
+
+# Set optional variables used in the generation of an rtf document.
+# Syntax is similar to doxygen's config file.
+
+RTF_EXTENSIONS_FILE =
+
+#---------------------------------------------------------------------------
+# configuration options related to the man page output
+#---------------------------------------------------------------------------
+
+# If the GENERATE_MAN tag is set to YES (the default) Doxygen will
+# generate man pages
+
+GENERATE_MAN = NO
+
+# The MAN_OUTPUT tag is used to specify where the man pages will be put.
+# If a relative path is entered the value of OUTPUT_DIRECTORY will be
+# put in front of it. If left blank `man' will be used as the default path.
+
+MAN_OUTPUT = man
+
+# The MAN_EXTENSION tag determines the extension that is added to
+# the generated man pages (default is the subroutine's section .3)
+
+MAN_EXTENSION = .3
+
+# If the MAN_LINKS tag is set to YES and Doxygen generates man output,
+# then it will generate one additional man file for each entity
+# documented in the real man page(s). These additional files
+# only source the real man page, but without them the man command
+# would be unable to find the correct page. The default is NO.
+
+MAN_LINKS = NO
+
+#---------------------------------------------------------------------------
+# configuration options related to the XML output
+#---------------------------------------------------------------------------
+
+# If the GENERATE_XML tag is set to YES Doxygen will
+# generate an XML file that captures the structure of
+# the code including all documentation.
+
+GENERATE_XML = NO
+
+# The XML_OUTPUT tag is used to specify where the XML pages will be put.
+# If a relative path is entered the value of OUTPUT_DIRECTORY will be
+# put in front of it. If left blank `xml' will be used as the default path.
+
+XML_OUTPUT = xml
+
+# The XML_SCHEMA tag can be used to specify an XML schema,
+# which can be used by a validating XML parser to check the
+# syntax of the XML files.
+
+XML_SCHEMA =
+
+# The XML_DTD tag can be used to specify an XML DTD,
+# which can be used by a validating XML parser to check the
+# syntax of the XML files.
+
+XML_DTD =
+
+# If the XML_PROGRAMLISTING tag is set to YES Doxygen will
+# dump the program listings (including syntax highlighting
+# and cross-referencing information) to the XML output. Note that
+# enabling this will significantly increase the size of the XML output.
+
+XML_PROGRAMLISTING = YES
+
+#---------------------------------------------------------------------------
+# configuration options for the AutoGen Definitions output
+#---------------------------------------------------------------------------
+
+# If the GENERATE_AUTOGEN_DEF tag is set to YES Doxygen will
+# generate an AutoGen Definitions (see autogen.sf.net) file
+# that captures the structure of the code including all
+# documentation. Note that this feature is still experimental
+# and incomplete at the moment.
+
+GENERATE_AUTOGEN_DEF = NO
+
+#---------------------------------------------------------------------------
+# configuration options related to the Perl module output
+#---------------------------------------------------------------------------
+
+# If the GENERATE_PERLMOD tag is set to YES Doxygen will
+# generate a Perl module file that captures the structure of
+# the code including all documentation. Note that this
+# feature is still experimental and incomplete at the
+# moment.
+
+GENERATE_PERLMOD = NO
+
+# If the PERLMOD_LATEX tag is set to YES Doxygen will generate
+# the necessary Makefile rules, Perl scripts and LaTeX code to be able
+# to generate PDF and DVI output from the Perl module output.
+
+PERLMOD_LATEX = NO
+
+# If the PERLMOD_PRETTY tag is set to YES the Perl module output will be
+# nicely formatted so it can be parsed by a human reader. This is useful
+# if you want to understand what is going on. On the other hand, if this
+# tag is set to NO the size of the Perl module output will be much smaller
+# and Perl will parse it just the same.
+
+PERLMOD_PRETTY = YES
+
+# The names of the make variables in the generated doxyrules.make file
+# are prefixed with the string contained in PERLMOD_MAKEVAR_PREFIX.
+# This is useful so different doxyrules.make files included by the same
+# Makefile don't overwrite each other's variables.
+
+PERLMOD_MAKEVAR_PREFIX =
+
+#---------------------------------------------------------------------------
+# Configuration options related to the preprocessor
+#---------------------------------------------------------------------------
+
+# If the ENABLE_PREPROCESSING tag is set to YES (the default) Doxygen will
+# evaluate all C-preprocessor directives found in the sources and include
+# files.
+
+ENABLE_PREPROCESSING = YES
+
+# If the MACRO_EXPANSION tag is set to YES Doxygen will expand all macro
+# names in the source code. If set to NO (the default) only conditional
+# compilation will be performed. Macro expansion can be done in a controlled
+# way by setting EXPAND_ONLY_PREDEF to YES.
+
+MACRO_EXPANSION = NO
+
+# If the EXPAND_ONLY_PREDEF and MACRO_EXPANSION tags are both set to YES
+# then the macro expansion is limited to the macros specified with the
+# PREDEFINED and EXPAND_AS_PREDEFINED tags.
+
+EXPAND_ONLY_PREDEF = NO
+
+# If the SEARCH_INCLUDES tag is set to YES (the default) the includes files
+# in the INCLUDE_PATH (see below) will be search if a #include is found.
+
+SEARCH_INCLUDES = YES
+
+# The INCLUDE_PATH tag can be used to specify one or more directories that
+# contain include files that are not input files but should be processed by
+# the preprocessor.
+
+INCLUDE_PATH = src/headers
+
+# You can use the INCLUDE_FILE_PATTERNS tag to specify one or more wildcard
+# patterns (like *.h and *.hpp) to filter out the header-files in the
+# directories. If left blank, the patterns specified with FILE_PATTERNS will
+# be used.
+
+INCLUDE_FILE_PATTERNS =
+
+# The PREDEFINED tag can be used to specify one or more macro names that
+# are defined before the preprocessor is started (similar to the -D option of
+# gcc). The argument of the tag is a list of macros of the form: name
+# or name=definition (no spaces). If the definition and the = are
+# omitted =1 is assumed. To prevent a macro definition from being
+# undefined via #undef or recursively expanded use the := operator
+# instead of the = operator.
+
+PREDEFINED =
+
+# If the MACRO_EXPANSION and EXPAND_ONLY_PREDEF tags are set to YES then
+# this tag can be used to specify a list of macro names that should be expanded.
+# The macro definition that is found in the sources will be used.
+# Use the PREDEFINED tag if you want to use a different macro definition.
+
+EXPAND_AS_DEFINED =
+
+# If the SKIP_FUNCTION_MACROS tag is set to YES (the default) then
+# doxygen's preprocessor will remove all function-like macros that are alone
+# on a line, have an all uppercase name, and do not end with a semicolon. Such
+# function macros are typically used for boiler-plate code, and will confuse the
+# parser if not removed.
+
+SKIP_FUNCTION_MACROS = YES
+
+#---------------------------------------------------------------------------
+# Configuration::additions related to external references
+#---------------------------------------------------------------------------
+
+# The TAGFILES option can be used to specify one or more tagfiles.
+# Optionally an initial location of the external documentation
+# can be added for each tagfile. The format of a tag file without
+# this location is as follows:
+# TAGFILES = file1 file2 ...
+# Adding location for the tag files is done as follows:
+# TAGFILES = file1=loc1 "file2 = loc2" ...
+# where "loc1" and "loc2" can be relative or absolute paths or
+# URLs. If a location is present for each tag, the installdox tool
+# does not have to be run to correct the links.
+# Note that each tag file must have a unique name
+# (where the name does NOT include the path)
+# If a tag file is not located in the directory in which doxygen
+# is run, you must also specify the path to the tagfile here.
+
+TAGFILES =
+
+# When a file name is specified after GENERATE_TAGFILE, doxygen will create
+# a tag file that is based on the input files it reads.
+
+GENERATE_TAGFILE =
+
+# If the ALLEXTERNALS tag is set to YES all external classes will be listed
+# in the class index. If set to NO only the inherited external classes
+# will be listed.
+
+ALLEXTERNALS = NO
+
+# If the EXTERNAL_GROUPS tag is set to YES all external groups will be listed
+# in the modules index. If set to NO, only the current project's groups will
+# be listed.
+
+EXTERNAL_GROUPS = YES
+
+# The PERL_PATH should be the absolute path and name of the perl script
+# interpreter (i.e. the result of `which perl').
+
+PERL_PATH = /usr/bin/perl
+
+#---------------------------------------------------------------------------
+# Configuration options related to the dot tool
+#---------------------------------------------------------------------------
+
+# If the CLASS_DIAGRAMS tag is set to YES (the default) Doxygen will
+# generate a inheritance diagram (in HTML, RTF and LaTeX) for classes with base or
+# super classes. Setting the tag to NO turns the diagrams off. Note that this
+# option is superseded by the HAVE_DOT option below. This is only a fallback. It is
+# recommended to install and use dot, since it yields more powerful graphs.
+
+CLASS_DIAGRAMS = YES
+
+# If set to YES, the inheritance and collaboration graphs will hide
+# inheritance and usage relations if the target is undocumented
+# or is not a class.
+
+HIDE_UNDOC_RELATIONS = YES
+
+# If you set the HAVE_DOT tag to YES then doxygen will assume the dot tool is
+# available from the path. This tool is part of Graphviz, a graph visualization
+# toolkit from AT&T and Lucent Bell Labs. The other options in this section
+# have no effect if this option is set to NO (the default)
+
+HAVE_DOT = YES
+
+# If the CLASS_GRAPH and HAVE_DOT tags are set to YES then doxygen
+# will generate a graph for each documented class showing the direct and
+# indirect inheritance relations. Setting this tag to YES will force the
+# the CLASS_DIAGRAMS tag to NO.
+
+CLASS_GRAPH = YES
+
+# If the COLLABORATION_GRAPH and HAVE_DOT tags are set to YES then doxygen
+# will generate a graph for each documented class showing the direct and
+# indirect implementation dependencies (inheritance, containment, and
+# class references variables) of the class with other documented classes.
+
+COLLABORATION_GRAPH = YES
+
+# If the UML_LOOK tag is set to YES doxygen will generate inheritance and
+# collaboration diagrams in a style similar to the OMG's Unified Modeling
+# Language.
+
+UML_LOOK = NO
+
+# If set to YES, the inheritance and collaboration graphs will show the
+# relations between templates and their instances.
+
+TEMPLATE_RELATIONS = NO
+
+# If the ENABLE_PREPROCESSING, SEARCH_INCLUDES, INCLUDE_GRAPH, and HAVE_DOT
+# tags are set to YES then doxygen will generate a graph for each documented
+# file showing the direct and indirect include dependencies of the file with
+# other documented files.
+
+INCLUDE_GRAPH = YES
+
+# If the ENABLE_PREPROCESSING, SEARCH_INCLUDES, INCLUDED_BY_GRAPH, and
+# HAVE_DOT tags are set to YES then doxygen will generate a graph for each
+# documented header file showing the documented files that directly or
+# indirectly include this file.
+
+INCLUDED_BY_GRAPH = YES
+
+# If the CALL_GRAPH and HAVE_DOT tags are set to YES then doxygen will
+# generate a call dependency graph for every global function or class method.
+# Note that enabling this option will significantly increase the time of a run.
+# So in most cases it will be better to enable call graphs for selected
+# functions only using the \callgraph command.
+
+CALL_GRAPH = YES
+
+# If the GRAPHICAL_HIERARCHY and HAVE_DOT tags are set to YES then doxygen
+# will graphical hierarchy of all classes instead of a textual one.
+
+GRAPHICAL_HIERARCHY = YES
+
+# The DOT_IMAGE_FORMAT tag can be used to set the image format of the images
+# generated by dot. Possible values are png, jpg, or gif
+# If left blank png will be used.
+
+DOT_IMAGE_FORMAT = png
+
+# The tag DOT_PATH can be used to specify the path where the dot tool can be
+# found. If left blank, it is assumed the dot tool can be found on the path.
+
+DOT_PATH =
+
+# The DOTFILE_DIRS tag can be used to specify one or more directories that
+# contain dot files that are included in the documentation (see the
+# \dotfile command).
+
+DOTFILE_DIRS =
+
+# The MAX_DOT_GRAPH_WIDTH tag can be used to set the maximum allowed width
+# (in pixels) of the graphs generated by dot. If a graph becomes larger than
+# this value, doxygen will try to truncate the graph, so that it fits within
+# the specified constraint. Beware that most browsers cannot cope with very
+# large images.
+
+MAX_DOT_GRAPH_WIDTH = 1024
+
+# The MAX_DOT_GRAPH_HEIGHT tag can be used to set the maximum allows height
+# (in pixels) of the graphs generated by dot. If a graph becomes larger than
+# this value, doxygen will try to truncate the graph, so that it fits within
+# the specified constraint. Beware that most browsers cannot cope with very
+# large images.
+
+MAX_DOT_GRAPH_HEIGHT = 1024
+
+# The MAX_DOT_GRAPH_DEPTH tag can be used to set the maximum depth of the
+# graphs generated by dot. A depth value of 3 means that only nodes reachable
+# from the root by following a path via at most 3 edges will be shown. Nodes that
+# lay further from the root node will be omitted. Note that setting this option to
+# 1 or 2 may greatly reduce the computation time needed for large code bases. Also
+# note that a graph may be further truncated if the graph's image dimensions are
+# not sufficient to fit the graph (see MAX_DOT_GRAPH_WIDTH and MAX_DOT_GRAPH_HEIGHT).
+# If 0 is used for the depth value (the default), the graph is not depth-constrained.
+
+MAX_DOT_GRAPH_DEPTH = 0
+
+# If the GENERATE_LEGEND tag is set to YES (the default) Doxygen will
+# generate a legend page explaining the meaning of the various boxes and
+# arrows in the dot generated graphs.
+
+GENERATE_LEGEND = YES
+
+# If the DOT_CLEANUP tag is set to YES (the default) Doxygen will
+# remove the intermediate dot files that are used to generate
+# the various graphs.
+
+DOT_CLEANUP = YES
+
+#---------------------------------------------------------------------------
+# Configuration::additions related to the search engine
+#---------------------------------------------------------------------------
+
+# The SEARCHENGINE tag specifies whether or not a search engine should be
+# used. If set to NO the values of all tags below this one will be ignored.
+
+SEARCHENGINE = NO
diff --git a/LICENSE b/LICENSE
index 50e74359..5d678c5f 100644
--- a/LICENSE
+++ b/LICENSE
@@ -1,9 +1,5 @@
LibTomCrypt is public domain. As should all quality software be.
-All of the software was either written by or donated to Tom St Denis for the purposes
-of this project. The only exception is the SAFER.C source which has no known
-license status (assumed copyrighted) which is why SAFER.C is shipped as disabled.
-
Tom St Denis
diff --git a/TODO b/TODO
new file mode 100644
index 00000000..8b137891
--- /dev/null
+++ b/TODO
@@ -0,0 +1 @@
+
diff --git a/authors b/authors
deleted file mode 100644
index ba4ea6b3..00000000
--- a/authors
+++ /dev/null
@@ -1,55 +0,0 @@
-This is a list of people who have contributed [directly or indirectly] to the project
-[in no partcular order]. If you have helped and your name is not here email me at
-tomstdenis@yahoo.com.
-
-
-1) Richard.van.de.Laarschot@ict.nl
-
- Gave help porting the lib to MSVC particularly pointed out various warnings and errors.
-
-2) Richard Heathfield
-
- Gave a lot of help concerning valid C portable code.
-
-3) Ajay K. Agrawal
-
- Helped port the library to MSVC and spotted a few bugs and errors.
-
-4) Brian Gladman
-
- Wrote the AES and Serpent code used. Found a bug in the hash code for certain types of inputs.
-
-5) Svante Seleborg
-
- Submitted the "ampi.c" code as well as many suggestions on improving the readability of the source code.
-
-6) Clay Culver
-
- Submitted a fix for "rsa.c" which cleaned up some code. Submited some other fixes too. :-)
- Clay has helped find bugs in various pieces of code including the registry functions, base64 routines
- and the make process. He is also now the primary author of the libtomcrypt reference manual and has plan
- at making a HTML version.
-
-7) Jason Klapste
-
- Submitted fixes to the yarrow, hash, make process and test code as well as other subtle bug fixes. The
-yarrow code can now default to any cipher/hash that is left after you remove them from a build.
-
-8) Dobes Vandermeer <dobes@smartt.com>
-
- Submitted HMAC code that worked flawlessly out of the box... good job! Also submitted a MD4 routine.
- Submitted some modified DES code that was merged into the code base [using the libtomcrypt API]
-
-9) Wayne Scott (wscott@bitmover.com)
-
- Submitted base64 that complies with the RFC standards. Submitted some ideas to improve the RSA key generation
- as well.
-
-10) Sky Schulz (sky@ogn.com)
-
- Has submitted a set of ideas to improve the library and make it more attractive for professional users.
-
-11) Mike Frysinger
-
- Together with Clay came up with a more "unix friendly" makefile. Mike Frysinger has been keeping copies of
- the library for the Gentoo linux distribution.
\ No newline at end of file
diff --git a/cbc_decrypt.c b/cbc_decrypt.c
deleted file mode 100644
index 3f4958ac..00000000
--- a/cbc_decrypt.c
+++ /dev/null
@@ -1,57 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-#include "mycrypt.h"
-
-#ifdef CBC
-
-int cbc_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_CBC *cbc)
-{
- int x, err;
- unsigned char tmp[MAXBLOCKSIZE], tmp2[MAXBLOCKSIZE];
-
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(cbc != NULL);
-
- /* decrypt the block from ct into tmp */
- if ((err = cipher_is_valid(cbc->cipher)) != CRYPT_OK) {
- return err;
- }
- _ARGCHK(cipher_descriptor[cbc->cipher].ecb_decrypt != NULL);
-
- /* is blocklen valid? */
- if (cbc->blocklen < 0 || cbc->blocklen > (int)sizeof(cbc->IV)) {
- return CRYPT_INVALID_ARG;
- }
-
- /* decrypt and xor IV against the plaintext of the previous step */
- cipher_descriptor[cbc->cipher].ecb_decrypt(ct, tmp, &cbc->key);
- for (x = 0; x < cbc->blocklen; x++) {
- /* copy CT in case ct == pt */
- tmp2[x] = ct[x];
-
- /* actually decrypt the byte */
- pt[x] = tmp[x] ^ cbc->IV[x];
- }
-
- /* replace IV with this current ciphertext */
- for (x = 0; x < cbc->blocklen; x++) {
- cbc->IV[x] = tmp2[x];
- }
- #ifdef CLEAN_STACK
- zeromem(tmp, sizeof(tmp));
- zeromem(tmp2, sizeof(tmp2));
- #endif
- return CRYPT_OK;
-}
-
-#endif
-
diff --git a/cbc_encrypt.c b/cbc_encrypt.c
deleted file mode 100644
index 8db5b5b9..00000000
--- a/cbc_encrypt.c
+++ /dev/null
@@ -1,52 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-#include "mycrypt.h"
-
-#ifdef CBC
-
-int cbc_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_CBC *cbc)
-{
- int x, err;
- unsigned char tmp[MAXBLOCKSIZE];
-
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(cbc != NULL);
-
- if ((err = cipher_is_valid(cbc->cipher)) != CRYPT_OK) {
- return err;
- }
-
- /* is blocklen valid? */
- if (cbc->blocklen < 0 || cbc->blocklen > (int)sizeof(cbc->IV)) {
- return CRYPT_INVALID_ARG;
- }
-
- /* xor IV against plaintext */
- for (x = 0; x < cbc->blocklen; x++) {
- tmp[x] = pt[x] ^ cbc->IV[x];
- }
-
- /* encrypt */
- cipher_descriptor[cbc->cipher].ecb_encrypt(tmp, ct, &cbc->key);
-
- /* store IV [ciphertext] for a future block */
- for (x = 0; x < cbc->blocklen; x++) {
- cbc->IV[x] = ct[x];
- }
-
- #ifdef CLEAN_STACK
- zeromem(tmp, sizeof(tmp));
- #endif
- return CRYPT_OK;
-}
-
-#endif
diff --git a/changes b/changes
index f887acf2..54480cf3 100644
--- a/changes
+++ b/changes
@@ -1,3 +1,138 @@
+April 19th, 2005
+v1.02
+ -- Added LTC_TEST support to gcm_test()
+ -- "pt/ct" can now be NULL in gcm_process() if you are processing zero bytes
+ -- Optimized GCM by removing the "double copy" handling of the plaintext/aad
+ -- Richard Outerbridge pointed out that x86_prof won't build on MACOS and that the manual
+ erroneously refers to "mycrypt" all over the place. Fixed.
+
+April 17th, 2005
+v1.01
+ ** Secure Science Corporation has supported this release cycle by sponsoring the development time taken. Their
+ continuing support of this project has helped me maintain a steady pace in order to keep LibTomCrypt up to date,
+ stable and more efficient.
+ -----------------------------------------------------------------------------------------------------
+ -- Updated base64_decode.c so if there are more than 3 '=' signs it would stop parsing
+ -- Merged in latest mpi that fixed a few bugs here and there
+ -- Updated OAEP encoder/decoder to catch when the hash output is too large
+ Cleaned up PSS code too
+ -- Andy Bontoft fixed a bug in my demos/tests/makefile.msvc ... seems "dsa_test.c" isn't an object
+ afterall. Thanks.
+ -- Made invalid ECC key sizes (configuration) not hard fault the program (it returns an error code now)
+ -- SAFER has been re-enabled after I was pointed to http://www.ciphersbyritter.com/NEWS2/95032301.HTM
+ [Mark Kotiaho]
+ -- Added CCM mode to the encauth list (now has EAX, OCB and CCM, c'est un treo magnifique!)
+ -- Added missing ASN.1 header to the RSA keys ... oops... now the rsa_export/import are FULLY compatible
+ with other libs like OpenSSL (comment: Test vectors would go a long way RSA...)
+ -- Manually merged in fix to the prime_random_ex() LTM function that ensures the 2nd MSB is set properly. Now
+ When you say "I want a 1024/8 byte RSA key" the MSB bit of the modulus is set as expected. Note I generally
+ don't view this as a "huge issue" but it's just one less nit to worry about. [Bryan Klisch]
+ -- A new CVS has been setup on my Athlon64 box... if you want developer access send me an email (and at this point the email would have to be awesome).
+ -- Updated API for ECB and CBC shell code. Now can process N whole blocks in one call (like $DEITY intended)
+ -- Introduced a new "hardware accel" framework that can be used to speed up cipher ECB, CBC and CTR mode
+ calls. Later on dependent code (e.g. OMAC, CCM) will be re-written to use the generic cbc/ctr functions. But now
+ if you [say] call ctr_encrypt() with a cipher descriptor that has hardware CTR it will automatically
+ be used (e.g. no code rewrites)
+ -- Now ships with 20% more love.
+ -- x86_prof now uses ECB shell code (hint: accelerators) and outputs cycles per BLOCK not byte. This will make it a bit
+ easier to compare hardware vs. software cipher implementations. It also emits timings for CBC and CTR modes
+ -- [Peter LaDow] fixed a typo w.r.t. XREALLOC macro (spelling counts kids!)
+ -- Fixed bug with __x86_64__ where ROL64/ROR64 with LTC_NO_ROLC would be the 32-bit versions instead...
+ -- Shipping with preliminary GCM code (disabled). It's buggy (stack overflow hidden somewhere). If anyone can spot it let me know.
+ -- Added Pelican MAC [it's an AES based fast MAC] to the list of supported MACs
+ -- Added LTC_FAST [and you can disable by defining LTC_NO_FAST] so that CBC and CTR mode XOR whole words [e.g. 32 or 64 bits] at a time
+ instead of one byte. On my AMD64 this reduced the overhead for AES-128-CBC from 4.56 cycles/byte to around 1 cycle/byte. This requires
+ that you either allow unaligned read/writes [e.g. x86_32/x86_64] or align all your data. It won't go out of it's way to ensure
+ aligned access. Only enabled for x86_* platforms by default since they allow unaligned read/writes.
+ -- Added LTC_FAST support to PMAC (drops the cycle/byte by about 9 cycles on my AMD64) [note: I later rewrote this prior to release]
+ -- Updated "profiled" target to work with the new directory layout
+ -- Added [demo only] optimized RC5-CTR code to x86_prof demo to show off how to make an accelerator
+ [This has been removed prior to release... It may re-appear later]
+ -- Added CCM acelerator callbacks to the list [now supports ECB, CTR, CBC and now CCM].
+ -- Added chapter to manual about accelerators (you know you want it)
+ -- Added "bswap" optimizations to x86 LOAD/STORE with big endian. Can be disabled by defining LTC_NO_BSWAP
+ -- LTC_NO_ASM is now the official "disable all non-portable stuff" macro. When defined it will make the code endian-neutral,
+ disable any form of ASM and disable LTC_FAST load/stores. Essentially build the library with this defined if you're having
+ trouble building the library (old GCCs for instance dislike the ROLc macro)
+ -- Added tomcrypt_mac.h and moved MAC/encMAC functions from tomcrypt_hash.h into it
+ -- Added "done" function to ciphers and the five chaining modes [and things like omac/pmac/etc]
+ -- Changed install group to "wheel" from "root".
+ -- Replaced // comments with /**/ so it will build on older UNIX-like platforms
+ -- x86_prof builds and runs with IntelCC fine now
+ -- Added "stest" build to intel CC to test static linked from within the dir (so you don't have to install to test)
+ -- Moved testing/benchmark into testprof directory and build it as part of the build. Now you can link against libtomcrypt_prof.a to get
+ testing info (hint: hardware developers ;-) )
+ -- Added CCM to tv_gen
+ -- Added demos to MSVC makefile
+ -- Removed -funroll-all-loops from GCC makefile and replaced with -funroll-loops which is a bit more sane (P4 ain't got much cache for the IDATA)
+ -- Fixed GCM prior to release and re-enabled it. It has not been optimized but it does conform when compiled with optimizations.
+ -- I've since optimized GCM and CCM. They're close in speed but GCM is more flexible imho (though EAX is more flexible than both)
+ -- For kicks I optimized the ECC code to use projective points. Gets between 3.21x (Prescott P4) to 4.53x (AMD64) times faster than before at 160-bit keys and the
+ speedup grows as the keysize grows. Basically removing most practical reasons to "not use the ECC code". Enjoy.
+ -- Added LTC_FAST support to OMAC/PMAC and doubled it's speed on my amd64 [faster on the P4 too I guess]
+ -- Added GCM to tv_gen
+ -- Removed "makefile.cygwin_dll" as it's not really used by anyone and not worth the effort (hell I hardly maintain the MSVC makefiles ...)
+ -- Updated a few files in the "misc" directory to have correct @file comments for doxygen
+ -- Removed "profile" target since it was slower anyways (go figure...)
+
+December 31st, 2004
+v1.00
+ -- Added "r,s == 0" check to dsa_verify_hash()
+ -- Added "multi block" helpers for hash, hmac, pmac and omac routines so you can process multiple non-adjacent
+ blocks of data with one call (added demos/multi.c to make sure they work)
+ -- Note these are not documented but they do have doxygen comments inside them
+ -- Also I don't use them in other functions (like pkcs_5_2()) because I didn't have the time. Job for the new LTC maintainer ;-)
+ -- Added tweaked Anubis test vectors and made it default (undefined ANUBIS_TWEAK to get original Anubis)
+ -- Merged in fix for mp_prime_random_ex() to deal with MSB and LSB "bugs"
+ -- Removed tim_exptmod() completely, updated several RSA functions (notably v15 and the decrypt/verify) so they
+ don't require a prng now
+ -- This release brought to you by the fine tunes of Macy Gray. We miss you.
+
+December 23rd, 2004
+v1.00rc1
+ -- Renamed "mycrypt_*" to "tomcrypt_*" to be more specific and professional
+ Now just include "tomcrypt.h" instead of "mycrypt.h" to get LTC ;-)
+ -- Cleaned up makefiles to ensure all headers are correctly installed
+ -- Added "rotate by constant" macros for portable, x86-32 and x86-64
+ You can disable this new code with LTC_NO_ROLC which is useful for older GCCs
+ -- Cleaned up detection of x86-64 so it works for ROL/ROR macros
+ -- Fixed rsa_import() so that it would detect multi-prime RSA keys and error appropriately
+ -- Sorted the source files by category and updated the makefiles appropriately
+ -- Added LTC_DER define so you can trim out DER code if not required
+ -- Fixed up RSA's decrypt functions changing "res" to "stat" to be more in sync
+ with the signature variables nomenclature. (no code change just renamed the arguments)
+ -- Removed all labels starting with __ and replaced with LBL_ to avoid namespace conflicts (Randy Howard)
+ -- Merged in LTM fix to mp_prime_random_ex() which zap'ed the most significant byte if the bit size
+ requested was a multiple of eight.
+ -- Made RSA_TIMING off by default as it's not terribly useful [and likely to be deprecated]
+ -- Renamed SMALL_CODE, CLEAN_STACK and NO_FILE to have a LTC_ prefix to avoid namespace collisions
+ with other programs. e.g. SMALL_CODE => LTC_SMALL_CODE
+ -- Zed Shaw pointed out that on certain systems installing libs as "root" isn't possible as the super-user
+ is not root. Now the makefiles allow this to be changed easily.
+ -- Renamed "struct _*_descriptor" to "struct ltc_*_descriptor" to avoid using a leading _
+ Also renamed _ARGCHK to LTC_ARGCHK
+ -- Zed Shaw pointed out that I still defined the prng structs in tomcrypt_prng.h even if they
+ weren't defined. This made undef'ing FORTUNA break the build.
+ -- Added LTC_NO_ASM to disable inline asm macros [ROL/ROR/etc]
+ -- Changed RSA decrypt functions to change the output length variable name from "keylen" to "outlen" to make
+ it more consistent.
+ -- Added the 64-bit Khazad block cipher [NESSIE]
+ -- Added the 128-bit Anubis block cipher [with key support for 128...320 bit keys] [NESSIE]
+ -- Changes to several MAC functions to rename input arguments to more sensible names
+ -- Removed FAST_PK support from dh_sys.c
+ -- Declared deskey() from des.c as static instead of a global
+ -- Added pretty much all practical GCC warning tests to the GCC [related] makefiles. These additional
+ warnings can easily be disabled for those with older copies of GCC [or even non GNU cc's]
+ -- Added doxygen @ tags to the code... phew that was a hell of a lot of [repetitive] work
+ -- Also added pre-configured Doxygen script.
+ -- Cleaned up quite a few functions [ciphers, pk, etc] to make the parameters naming style consistent
+ E.g. ciphers keys are called "skey" consistently now. The input to PK encryption is called "in", etc.
+ These changes require no code changes on the behalf of developers fortunately
+ -- Started a SAFER+ optimizer [does encrypt only] which shaves a good 30 or so cycles/byte on my AMD64
+ at an expense of huge code. It's in notes/etc/saferp_optimizer.c
+ -- DSA sign/verify now uses DER encoded output/inputs and no LTC style headers.
+ -- Matt Johnston found a missing semi-colon in mp_exptmod(). Fix has been merged in.
+
October 29th, 2004
v0.99 -- Merged in the latest version of LTM which includes all of the recent bug fixes
-- Deprecated LTMSSE and removed it (to be replaced with TFM later on)
diff --git a/crypt.tex b/crypt.tex
index b8acb3fc..c785e83a 100644
--- a/crypt.tex
+++ b/crypt.tex
@@ -47,10 +47,10 @@
\def\gap{\vspace{0.5ex}}
\makeindex
\begin{document}
-\title{LibTomCrypt \\ Version 0.99}
+\title{LibTomCrypt \\ Version 1.02}
\author{Tom St Denis \\
\\
-tomstdenis@iahu.ca \\
+tomstdenis@gmail.com \\
http://libtomcrypt.org
}
\maketitle
@@ -79,56 +79,22 @@ Canada
\tableofcontents
\chapter{Introduction}
\section{What is the LibTomCrypt?}
-LibTomCrypt is a portable ANSI C cryptographic library that supports symmetric ciphers, one-way hashes,
-pseudo-random number generators, public key cryptography (via RSA,DH or ECC/DH) and a plethora of support
-routines. It is designed to compile out of the box with the GNU C Compiler (GCC) version 2.95.3 (and higher)
-and with MSVC version 6 in win32.
+LibTomCrypt is a portable ISO C cryptographic library that is meant to be a toolset for cryptographers who are
+designing a cryptosystem. It supports symmetric ciphers, one-way hashes, pseudo-random number generators,
+public key cryptography (via PKCS \#1 RSA, DH or ECCDH) and a plethora of support
+routines.
-The library has been successfully tested on quite a few other platforms ranging from the ARM7TDMI in a
-Gameboy Advanced to various PowerPC processors and even the MIPS processor in the PlayStation 2. Suffice it
-to say the code is portable.
-
-The library is designed so new ciphers/hashes/PRNGs can be added at runtime and the existing API (and helper API functions) will
-be able to use the new designs automatically. There exist self-check functions for each cipher and hash to ensure that
-they compile and execute to the published design specifications. The library also performs extensive parameter error checking
-and will give verbose error messages when possible.
-
-Essentially the library saves the time of having to implement the ciphers, hashes, prngs yourself. Typically implementing
-useful cryptography is an error prone business which means anything that can save considerable time and effort is a good
-thing.
+The library was designed such that new ciphers/hashes/PRNGs can be added at runtime and the existing API
+(and helper API functions) are able to use the new designs automatically. There exists self-check functions for each
+block cipher and hash function to ensure that they compile and execute to the published design specifications. The library
+also performs extensive parameter error checking to prevent any number of runtime exploits or errors.
\subsection{What the library IS for?}
-The library typically serves as a basis for other protocols and message formats. For example, it should be possible to
-take the RSA routines out of this library, apply the appropriate message padding and get PKCS compliant RSA routines.
-Similarly SSL protocols could be formed on top of the low-level symmetric cipher functions. The goal of this package is
-to provide these low level core functions in a robust and easy to use fashion.
-
-The library also serves well as a toolkit for applications where they don't need to be OpenPGP, PKCS, etc. compliant.
-Included are fully operational public key routines for encryption, decryption, signature generation and verification.
-These routines are fully portable but are not conformant to any known set of standards\footnote{With the exception of
-the RSA code which is based on the PKCS \#1 standards.}. They are all based on established
-number theory and cryptography.
-
-\subsection{What the library IS NOT for?}
-
-The library is not designed to be in anyway an implementation of the SSL or OpenPGP standards. The library
-is not designed to be compliant with any known form of API or programming hierarchy. It is not a port of any other
-library and it is not platform specific (like the MS CSP). So if you're looking to drop in some buzzword
-compliant crypto library this is not for you. The library has been written from scratch to provide basic functions as
-well as non-standard higher level functions.
-
-This is not to say that the library is a ``homebrew'' project. All of the symmetric ciphers and one-way hash functions
-conform to published test vectors. The public key functions are derived from publicly available material and the majority
-of the code has been reviewed by a growing community of developers.
-
-\subsubsection{Why not?}
-You may be asking why I didn't choose to go all out and support standards like P1363, PKCS and the whole lot. The reason
-is quite simple too much money gets in the way. When I tried to access the P1363 draft documents and was denied (it
-requires a password) I realized that they're just a business anyways. See what happens is a company will sit down and
-invent a ``standard''. Then they try to sell it to as many people as they can. All of a sudden this ``standard'' is
-everywhere. Then the standard is updated every so often to keep people dependent. Then you become RSA. If people are
-supposed to support these standards they had better make them more accessible.
+The library serves as a toolkit for developers who have to solve cryptographic problems. Out of the box LibTomCrypt
+does not process SSL or OpenPGP messages, it doesn't read x.591 certificates or write PEM encoded data. It does, however,
+provide all of the tools required to build such functionality. LibTomCrypt was designed to be a flexible library that
+was not tied to any particular cryptographic problem.
\section{Why did I write it?}
You may be wondering, ``Tom, why did you write a crypto library. I already have one.''. Well the reason falls into
@@ -143,24 +109,35 @@ The idea is that I am not striving to replace OpenSSL or Crypto++ or Cryptlib or
With this library all core functions (ciphers, hashes, prngs) have the {\bf exact} same prototype definition. They all load
and store data in a format independent of the platform. This means if you encrypt with Blowfish on a PPC it should decrypt
-on an x86 with zero problems. The consistent API also means that if you learn how to use blowfish with my library you
+on an x86 with zero problems. The consistent API also means that if you learn how to use Blowfish with my library you
know how to use Safer+ or RC6 or Serpent or ... as well. With all of the core functions there are central descriptor tables
that can be used to make a program automatically pick between ciphers, hashes and PRNGs at runtime. That means your
application can support all ciphers/hashes/prngs without changing the source code.
+Not only did I strive to make a consistent and simple API to work with but I also strived to make the library
+configurable in terms of its build options. Out of the box the library will build with any modern version of GCC
+without having to use configure scripts. This means that the library will work with platforms where development
+tools may be limited (e.g. no autoconf).
+
+On top of making the build simple and the API approachable I've also strived for a reasonably high level of
+robustness and efficiency. LibTomCrypt traps and returns a series of errors ranging from invalid
+arguments to buffer overflows/overruns. It is mostly thread safe and has been clocked on various platforms
+with ``cycles per byte'' timings that are comparable (and often favourable) to other libraries such as OpenSSL and
+Crypto++.
+
\subsection{Modular}
-The LibTomCrypt package has also been written to be very modular. The block ciphers, one-way hashes and
-pseudo-random number generators (PRNG) are all used within the API through ``descriptor'' tables which
+The LibTomCrypt package has also been written to be very modular. The block ciphers, one--way hashes and
+pseudo--random number generators (PRNG) are all used within the API through ``descriptor'' tables which
are essentially structures with pointers to functions. While you can still call particular functions
directly (\textit{e.g. sha256\_process()}) this descriptor interface allows the developer to customize their
usage of the library.
For example, consider a hardware platform with a specialized RNG device. Obviously one would like to tap
-that for the PRNG needs within the library (\textit{e.g. making a RSA key}). All the developer has todo
+that for the PRNG needs within the library (\textit{e.g. making a RSA key}). All the developer has to do
is write a descriptor and the few support routines required for the device. After that the rest of the
-API can make use of it without change. Similiarly imagine a few years down the road when AES2 (\textit{or whatever they call it}) is
-invented. It can be added to the library and used within applications with zero modifications to the
-end applications provided they are written properly.
+API can make use of it without change. Similiarly imagine a few years down the road when AES2
+(\textit{or whatever they call it}) has been invented. It can be added to the library and used within applications
+with zero modifications to the end applications provided they are written properly.
This flexibility within the library means it can be used with any combination of primitive algorithms and
unlike libraries like OpenSSL is not tied to direct routines. For instance, in OpenSSL there are CBC block
@@ -170,7 +147,6 @@ are not directly tied to the ciphers. That is a new cipher can be added to the
the key setup, ECB decrypt and encrypt and test vector routines. After that all five chaining mode routines
can make use of the cipher right away.
-
\section{License}
All of the source code except for the following files have been written by the author or donated to the project
@@ -178,14 +154,12 @@ under a public domain license:
\begin{enumerate}
\item rc2.c
- \item safer.c
\end{enumerate}
-`mpi.c'' was originally written by Michael Fromberger (sting@linguist.dartmouth.edu) but has since been replaced with my LibTomMath
-library.
+`mpi.c'' was originally written by Michael Fromberger (sting@linguist.dartmouth.edu) but has since been replaced with
+my LibTomMath library which is public domain.
-``rc2.c'' is based on publicly available code that is not attributed to a person from the given source. ``safer.c''
-was written by Richard De Moliner (demoliner@isi.ee.ethz.ch) and seems to be free for use.
+``rc2.c'' is based on publicly available code that is not attributed to a person from the given source.
The project is hereby released as public domain.
@@ -193,7 +167,7 @@ The project is hereby released as public domain.
The author (Tom St Denis) is not a patent lawyer so this section is not to be treated as legal advice. To the best
of the authors knowledge the only patent related issues within the library are the RC5 and RC6 symmetric block ciphers.
-They can be removed from a build by simply commenting out the two appropriate lines in ``mycrypt\_custom.h''. The rest
+They can be removed from a build by simply commenting out the two appropriate lines in ``tomcrypt\_custom.h''. The rest
of the ciphers and hashes are patent free or under patents that have since expired.
The RC2 and RC4 symmetric ciphers are not under patents but are under trademark regulations. This means you can use
@@ -221,7 +195,6 @@ early on:
There have been quite a few other people as well. Please check the change log to see who else has contributed from
time to time.
-
\chapter{The Application Programming Interface (API)}
\section{Introduction}
\index{CRYPT\_ERROR} \index{CRYPT\_OK}
@@ -255,24 +228,23 @@ There is no initialization routine for the library and for the most part the cod
related issue is if you use the same symmetric cipher, hash or public key state data in multiple threads. Normally
that is not an issue.
-To include the prototypes for ``LibTomCrypt.a'' into your own program simply include ``mycrypt.h'' like so:
+To include the prototypes for ``LibTomCrypt.a'' into your own program simply include ``tomcrypt.h'' like so:
\begin{verbatim}
-#include <mycrypt.h>
+#include <tomcrypt.h>
int main(void) {
return 0;
}
\end{verbatim}
-The header file ``mycrypt.h'' also includes ``stdio.h'', ``string.h'', ``stdlib.h'', ``time.h'', ``ctype.h'' and ``mpi.h''
-(the bignum library routines).
+The header file ``tomcrypt.h'' also includes ``stdio.h'', ``string.h'', ``stdlib.h'', ``time.h'', ``ctype.h'' and
+``ltc\_tommath.h'' (the bignum library routines).
\section{Macros}
There are a few helper macros to make the coding process a bit easier. The first set are related to loading and storing
32/64-bit words in little/big endian format. The macros are:
-\index{STORE32L} \index{STORE64L} \index{LOAD32L} \index{LOAD64L}
-\index{STORE32H} \index{STORE64H} \index{LOAD32H} \index{LOAD64H} \index{BSWAP}
+\index{STORE32L} \index{STORE64L} \index{LOAD32L} \index{LOAD64L} \index{STORE32H} \index{STORE64H} \index{LOAD32H} \index{LOAD64H} \index{BSWAP}
\begin{small}
\begin{center}
\begin{tabular}{|c|c|c|}
@@ -284,18 +256,25 @@ There are a few helper macros to make the coding process a bit easier. The firs
\hline STORE64H(x, y) & {\bf unsigned long long} x, {\bf unsigned char} *y & $x \to y[7 \ldots 0]$ \\
\hline LOAD32H(x, y) & {\bf unsigned long} x, {\bf unsigned char} *y & $y[3 \ldots 0] \to x$ \\
\hline LOAD64H(x, y) & {\bf unsigned long long} x, {\bf unsigned char} *y & $y[7 \ldots 0] \to x$ \\
- \hline BSWAP(x) & {\bf unsigned long} x & Swaps the byte order of x. \\
+ \hline BSWAP(x) & {\bf unsigned long} x & Swaps byte order (32--bits only) \\
\hline
\end{tabular}
\end{center}
\end{small}
-There are 32-bit cyclic rotations as well:
-\index{ROL} \index{ROR}
+There are 32 and 64-bit cyclic rotations as well:
+\index{ROL} \index{ROR} \index{ROL64} \index{ROR64} \index{ROLc} \index{RORc} \index{ROL64c} \index{ROR64c}
\begin{center}
\begin{tabular}{|c|c|c|}
- \hline ROL(x, y) & {\bf unsigned long} x, {\bf unsigned long} y & $x << y$ \\
- \hline ROR(x, y) & {\bf unsigned long} x, {\bf unsigned long} y & $x >> y$ \\
+ \hline ROL(x, y) & {\bf unsigned long} x, {\bf unsigned long} y & $x << y, 0 \le y \le 31$ \\
+ \hline ROLc(x, y) & {\bf unsigned long} x, {\bf const unsigned long} y & $x << y, 0 \le y \le 31$ \\
+ \hline ROR(x, y) & {\bf unsigned long} x, {\bf unsigned long} y & $x >> y, 0 \le y \le 31$ \\
+ \hline RORc(x, y) & {\bf unsigned long} x, {\bf const unsigned long} y & $x >> y, 0 \le y \le 31$ \\
+ \hline && \\
+ \hline ROL64(x, y) & {\bf unsigned long} x, {\bf unsigned long} y & $x << y, 0 \le y \le 63$ \\
+ \hline ROL64c(x, y) & {\bf unsigned long} x, {\bf const unsigned long} y & $x << y, 0 \le y \le 63$ \\
+ \hline ROR64(x, y) & {\bf unsigned long} x, {\bf unsigned long} y & $x >> y, 0 \le y \le 63$ \\
+ \hline ROR64c(x, y) & {\bf unsigned long} x, {\bf const unsigned long} y & $x >> y, 0 \le y \le 63$ \\
\hline
\end{tabular}
\end{center}
@@ -306,14 +285,14 @@ must pass it the length of the buffer\footnote{Extensive error checking is not i
the output will be stored. For example:
\begin{small}
\begin{verbatim}
-#include <mycrypt.h>
+#include <tomcrypt.h>
int main(void) {
rsa_key key;
unsigned char buffer[1024];
unsigned long x;
int err;
- /* ... Make up the RSA key somehow */
+ /* ... Make up the RSA key somehow ... */
/* lets export the key, set x to the size of the output buffer */
x = sizeof(buffer);
@@ -331,13 +310,17 @@ int main(void) {
}
\end{verbatim}
\end{small}
-In the above example if the size of the RSA public key was more than 1024 bytes this function would not store anything in
-either ``buffer'' or ``x'' and simply return an error code. If the function suceeds it stores the length of the output
-back into ``x'' so that the calling application will know how many bytes used.
+In the above example if the size of the RSA public key was more than 1024 bytes this function would return an error code
+indicating a buffer overflow would have occurred. If the function succeeds it stores the length of the output
+back into ``x'' so that the calling application will know how many bytes were used.
\section{Functions that need a PRNG}
-Certain functions such as ``rsa\_make\_key()'' require a PRNG. These functions do not setup the PRNG themselves so it is
-the responsibility of the calling function to initialize the PRNG before calling them.
+\index{Pseudo Random Number Generator} \index{PRNG}
+Certain functions such as ``rsa\_make\_key()'' require a Pseudo Random Number Generator (PRNG). These functions do not setup
+the PRNG themselves so it is the responsibility of the calling function to initialize the PRNG before calling them.
+
+Certain PRNG algorithms do not require a ``prng\_state'' argument (sprng for example). The ``prng\_state'' argument
+may be passed as \textbf{NULL} in such situations.
\section{Functions that use Arrays of Octets}
Most functions require inputs that are arrays of the data type ``unsigned char''. Whether it is a symmetric key, IV
@@ -352,14 +335,16 @@ type ``byte'' will be synonymous with an array of type ``unsigned char''.
\chapter{Symmetric Block Ciphers}
\section{Core Functions}
-Libtomcrypt provides several block ciphers all in a plain vanilla ECB block mode. Its important to first note that you
+LibTomCrypt provides several block ciphers with an ECB block mode interface. It's important to first note that you
should never use the ECB modes directly to encrypt data. Instead you should use the ECB functions to make a chaining mode
or use one of the provided chaining modes. All of the ciphers are written as ECB interfaces since it allows the rest of
the API to grow in a modular fashion.
+\subsection{Key Scheduling}
All ciphers store their scheduled keys in a single data type called ``symmetric\_key''. This allows all ciphers to
-have the same prototype and store their keys as naturally as possible. All ciphers provide five visible functions which
-are (given that XXX is the name of the cipher):
+have the same prototype and store their keys as naturally as possible. This also removes the need for dynamic memory
+allocation and allows you to allocate a fixed sized buffer for storing scheduled keys. All ciphers provide five visible
+functions which are (given that XXX is the name of the cipher):
\index{Cipher Setup}
\begin{verbatim}
int XXX_setup(const unsigned char *key, int keylen, int rounds,
@@ -369,12 +354,13 @@ int XXX_setup(const unsigned char *key, int keylen, int rounds,
The XXX\_setup() routine will setup the cipher to be used with a given number of rounds and a given key length (in bytes).
The number of rounds can be set to zero to use the default, which is generally a good idea.
-If the function returns successfully the variable ``skey'' will have a scheduled key stored in it. Its important to note
-that you should only used this scheduled key with the intended cipher. For example, if you call
-``blowfish\_setup()'' do not pass the scheduled key onto ``rc5\_ecb\_encrypt()''. All setup functions do not allocate
-memory off the heap so when you are done with a key you can simply discard it (e.g. they can be on the stack).
+If the function returns successfully the variable ``skey'' will have a scheduled key stored in it. It's important to note
+that you should only used this scheduled key with the intended cipher. For example, if you call ``blowfish\_setup()'' do not
+pass the scheduled key onto ``rc5\_ecb\_encrypt()''. All setup functions do not allocate memory off the heap so when you are
+done with a key you can simply discard it (e.g. they can be on the stack).
-To encrypt or decrypt a block in ECB mode there are these two functions:
+\subsection{ECB Encryption and Decryption}
+To encrypt or decrypt a block in ECB mode there are these two function classes
\index{Cipher Encrypt} \index{Cipher Decrypt}
\begin{verbatim}
void XXX_ecb_encrypt(const unsigned char *pt, unsigned char *ct,
@@ -385,13 +371,20 @@ void XXX_ecb_decrypt(const unsigned char *ct, unsigned char *pt,
\end{verbatim}
These two functions will encrypt or decrypt (respectively) a single block of text\footnote{The size of which depends on
which cipher you are using.} and store the result where you want it. It is possible that the input and output buffer are
-the same buffer. For the encrypt function ``pt''\footnote{pt stands for plaintext.} is the input and ``ct'' is the output.
-For the decryption function its the opposite. To test a particular cipher against test vectors\footnote{As published in their design papers.} call: \index{Cipher Testing}
+the same buffer. For the encrypt function ``pt''\footnote{pt stands for plaintext.} is the input and
+``ct''\footnote{ct stands for ciphertext.} is the output. For the decryption function it's the opposite. To test a particular
+cipher against test vectors\footnote{As published in their design papers.} call the self-test function
+
+\subsection{Self--Testing}
+\index{Cipher Testing}
\begin{verbatim}
int XXX_test(void);
\end{verbatim}
This function will return {\bf CRYPT\_OK} if the cipher matches the test vectors from the design publication it is
-based upon. Finally for each cipher there is a function which will help find a desired key size:
+based upon.
+
+\subsection{Key Sizing}
+For each cipher there is a function which will help find a desired key size:
\begin{verbatim}
int XXX_keysize(int *keysize);
\end{verbatim}
@@ -399,7 +392,7 @@ Essentially it will round the input keysize in ``keysize'' down to the next appr
return {\bf CRYPT\_OK} if the key size specified is acceptable. For example:
\begin{small}
\begin{verbatim}
-#include <mycrypt.h>
+#include <tomcrypt.h>
int main(void)
{
int keysize, err;
@@ -415,12 +408,23 @@ int main(void)
}
\end{verbatim}
\end{small}
-This should indicate a keysize of sixteen bytes is suggested. An example snippet that encodes a block with
-Blowfish in ECB mode is below.
+This should indicate a keysize of sixteen bytes is suggested.
+
+\subsection{Cipher Termination}
+When you are finished with a cipher you can de--initialize it with the done function.
+\begin{verbatim}
+void XXX_done(symmetric_key *skey);
+\end{verbatim}
+For the software based ciphers within LibTomCrypt this function will not do anything. However, user supplied
+cipher descriptors may require calls to it for resource management. To be compliant all functions which call a cipher
+setup function must also call the respective cipher done function when finished.
+
+\subsection{Simple Encryption Demonstration}
+An example snippet that encodes a block with Blowfish in ECB mode is below.
\begin{small}
\begin{verbatim}
-#include <mycrypt.h>
+#include <tomcrypt.h>
int main(void)
{
unsigned char pt[8], ct[8], key[8];
@@ -444,12 +448,19 @@ int main(void)
blowfish_ecb_encrypt(pt, /* encrypt this 8-byte array */
ct, /* store encrypted data here */
&skey); /* our previously scheduled key */
+
+ /* now ct holds the encrypted version of pt */
/* decrypt the block */
blowfish_ecb_decrypt(ct, /* decrypt this 8-byte array */
pt, /* store decrypted data here */
&skey); /* our previously scheduled key */
+ /* now we have decrypted ct to the original plaintext in pt */
+
+ /* Terminate the cipher context */
+ blowfish_done(&skey);
+
return 0;
}
\end{verbatim}
@@ -459,7 +470,7 @@ int main(void)
\index{Symmetric Keys}
As a general rule of thumb do not use symmetric keys under 80 bits if you can. Only a few of the ciphers support smaller
keys (mainly for test vectors anyways). Ideally your application should be making at least 256 bit keys. This is not
-because you're supposed to be paranoid. Its because if your PRNG has a bias of any sort the more bits the better. For
+because you're supposed to be paranoid. It's because if your PRNG has a bias of any sort the more bits the better. For
example, if you have $\mbox{Pr}\left[X = 1\right] = {1 \over 2} \pm \gamma$ where $\vert \gamma \vert > 0$ then the
total amount of entropy in N bits is $N \cdot -log_2\left ({1 \over 2} + \vert \gamma \vert \right)$. So if $\gamma$
were $0.25$ (a severe bias) a 256-bit string would have about 106 bits of entropy whereas a 128-bit string would have
@@ -467,31 +478,64 @@ only 53 bits of entropy.
The number of rounds of most ciphers is not an option you can change. Only RC5 allows you to change the number of
rounds. By passing zero as the number of rounds all ciphers will use their default number of rounds. Generally the
-ciphers are configured such that the default number of rounds provide adequate security for the given block size.
+ciphers are configured such that the default number of rounds provide adequate security for the given block and key
+size.
\section{The Cipher Descriptors}
\index{Cipher Descriptor}
To facilitate automatic routines an array of cipher descriptors is provided in the array ``cipher\_descriptor''. An element
of this array has the following format:
+\begin{small}
\begin{verbatim}
struct _cipher_descriptor {
char *name;
- unsigned long min_key_length, max_key_length,
- block_length, default_rounds;
- int (*setup) (const unsigned char *key, int keylength,
- int num_rounds, symmetric_key *skey);
- void (*ecb_encrypt)(const unsigned char *pt, unsigned char *ct,
- symmetric_key *key);
- void (*ecb_decrypt)(const unsigned char *ct, unsigned char *pt,
- symmetric_key *key);
- int (*test) (void);
- int (*keysize) (int *desired_keysize);
+ unsigned char ID;
+ int min_key_length,
+ max_key_length,
+ block_length,
+ default_rounds;
+ int (*setup)(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
+ void (*ecb_encrypt)(const unsigned char *pt, unsigned char *ct, symmetric_key *skey);
+ void (*ecb_decrypt)(const unsigned char *ct, unsigned char *pt, symmetric_key *skey);
+ int (*test)(void);
+ void (*done)(symmetric_key *skey);
+ int (*keysize)(int *keysize);
+
+ void (*accel_ecb_encrypt)(const unsigned char *pt,
+ unsigned char *ct,
+ unsigned long blocks, symmetric_key *skey);
+ void (*accel_ecb_decrypt)(const unsigned char *ct,
+ unsigned char *pt,
+ unsigned long blocks, symmetric_key *skey);
+ void (*accel_cbc_encrypt)(const unsigned char *pt,
+ unsigned char *ct,
+ unsigned long blocks, unsigned char *IV,
+ symmetric_key *skey);
+ void (*accel_cbc_decrypt)(const unsigned char *ct,
+ unsigned char *pt,
+ unsigned long blocks, unsigned char *IV,
+ symmetric_key *skey);
+ void (*accel_ctr_encrypt)(const unsigned char *pt,
+ unsigned char *ct,
+ unsigned long blocks, unsigned char *IV,
+ int mode, symmetric_key *skey);
+ void (*accel_ccm_memory)(
+ const unsigned char *key, unsigned long keylen,
+ const unsigned char *nonce, unsigned long noncelen,
+ const unsigned char *header, unsigned long headerlen,
+ unsigned char *pt, unsigned long ptlen,
+ unsigned char *ct,
+ unsigned char *tag, unsigned long *taglen,
+ int direction);
+
};
\end{verbatim}
+\end{small}
-Where ``name'' is the lower case ASCII version of the name. The fields ``min\_key\_length'', ``max\_key\_length'' and
-``block\_length'' are all the number of bytes not bits. As a good rule of thumb it is assumed that the cipher supports
+Where ``name'' is the lower case ASCII version of the name. The fields ``min\_key\_length'' and ``max\_key\_length''
+are the minimum and maximum key sizes in bytes. The ``block\_length'' member is the block size of the cipher
+in bytes. As a good rule of thumb it is assumed that the cipher supports
the min and max key lengths but not always everything in between. The ``default\_rounds'' field is the default number
of rounds that will be used.
@@ -511,10 +555,6 @@ As of this release the current cipher\_descriptors elements are
\hline RC5-32/12/b & rc5\_desc & 8 & 8 $\ldots$ 128 & 12 $\ldots$ 24 \\
\hline RC6-32/20/b & rc6\_desc & 16 & 8 $\ldots$ 128 & 20 \\
\hline SAFER+ & saferp\_desc &16 & 16, 24, 32 & 8, 12, 16 \\
- \hline Safer K64 & safer\_k64\_desc & 8 & 8 & 6 $\ldots$ 13 \\
- \hline Safer SK64 & safer\_sk64\_desc & 8 & 8 & 6 $\ldots$ 13 \\
- \hline Safer K128 & safer\_k128\_desc & 8 & 16 & 6 $\ldots$ 13 \\
- \hline Safer SK128 & safer\_sk128\_desc & 8 & 16 & 6 $\ldots$ 13 \\
\hline AES & aes\_desc & 16 & 16, 24, 32 & 10, 12, 14 \\
& aes\_enc\_desc & 16 & 16, 24, 32 & 10, 12, 14 \\
\hline Twofish & twofish\_desc & 16 & 16, 24, 32 & 16 \\
@@ -523,6 +563,8 @@ As of this release the current cipher\_descriptors elements are
\hline CAST5 (CAST-128) & cast5\_desc & 8 & 5 $\ldots$ 16 & 12, 16 \\
\hline Noekeon & noekeon\_desc & 16 & 16 & 16 \\
\hline Skipjack & skipjack\_desc & 8 & 10 & 32 \\
+ \hline Anubis & anubis\_desc & 16 & 16 $\ldots$ 40 & 12 $\ldots$ 18 \\
+ \hline Khazad & khazad\_desc & 8 & 16 & 8 \\
\hline
\end{tabular}
\end{center}
@@ -544,11 +586,6 @@ The ``encrypt only'' descriptors are useful for applications that only use the e
as EAX, PMAC and OMAC only require the encryption function. So far this ``encrypt only'' functionality has only been implemented for
Rijndael as it makes the most sense for this cipher.
-\item
-For the 64-bit SAFER famliy of ciphers (e.g K64, SK64, K128, SK128) the ecb\_encrypt() and ecb\_decrypt()
-functions are the same. So if you want to use those functions directly just call safer\_ecb\_encrypt()
-or safer\_ecb\_decrypt() respectively.
-
\item
Note that for ``DES'' and ``3DES'' they use 8 and 24 byte keys but only 7 and 21 [respectively] bytes of the keys are in
fact used for the purposes of encryption. My suggestion is just to use random 8/24 byte keys instead of trying to make a 8/24
@@ -556,7 +593,7 @@ byte string from the real 7/21 byte key.
\item
Note that ``Twofish'' has additional configuration options that take place at build time. These options are found in
-the file ``mycrypt\_cfg.h''. The first option is ``TWOFISH\_SMALL'' which when defined will force the Twofish code
+the file ``tomcrypt\_cfg.h''. The first option is ``TWOFISH\_SMALL'' which when defined will force the Twofish code
to not pre-compute the Twofish ``$g(X)$'' function as a set of four $8 \times 32$ s-boxes. This means that a scheduled
key will require less ram but the resulting cipher will be slower. The second option is ``TWOFISH\_TABLES'' which when
defined will force the Twofish code to use pre-computed tables for the two s-boxes $q_0, q_1$ as well as the multiplication
@@ -590,7 +627,7 @@ Which will search for a given name in the array. It returns negative one if the
the location in the array where the cipher was found. For example, to indirectly setup Blowfish you can also use:
\begin{small}
\begin{verbatim}
-#include <mycrypt.h>
+#include <tomcrypt.h>
int main(void)
{
unsigned char key[8];
@@ -631,7 +668,7 @@ int unregister_cipher(const struct _cipher_descriptor *cipher);
Which returns {\bf CRYPT\_OK} if it removes it otherwise it returns {\bf CRYPT\_ERROR}. Consider:
\begin{small}
\begin{verbatim}
-#include <mycrypt.h>
+#include <tomcrypt.h>
int main(void)
{
int err;
@@ -729,7 +766,7 @@ block of memory with either of the three modes.
The ECB and CBC modes process blocks of the same size as the cipher at a time. Therefore they are less flexible than the
other modes.
-\subsection{Implementation}
+\subsection{Initialization}
\index{CBC Mode} \index{CTR Mode}
\index{OFB Mode} \index{CFB Mode}
The library provides simple support routines for handling CBC, CTR, CFB, OFB and ECB encoded messages. Assuming the mode
@@ -752,30 +789,32 @@ of the cipher you choose. It is important that the IV be random for each uniqu
parameters ``key'', ``keylen'' and ``num\_rounds'' are the same as in the XXX\_setup() function call. The final parameter
is a pointer to the structure you want to hold the information for the mode of operation.
-Both routines return {\bf CRYPT\_OK} if the cipher initialized correctly, otherwise they return an error code. To
-actually encrypt or decrypt the following routines are provided:
+Both routines return {\bf CRYPT\_OK} if the cipher initialized correctly, otherwise they return an error code.
+
+\subsection{Encryption and Decryption}
+To actually encrypt or decrypt the following routines are provided:
\index{ecb\_encrypt()} \index{ecb\_decrypt()} \index{cfb\_encrypt()} \index{cfb\_decrypt()}
\index{cbc\_encrypt()} \index{cbc\_decrypt()} \index{ofb\_encrypt()} \index{ofb\_decrypt()} \index{ctr\_encrypt()} \index{ctr\_decrypt()}
\begin{verbatim}
int XXX_encrypt(const unsigned char *pt, unsigned char *ct,
- symmetric_XXX *XXX);
-int XXX_decrypt(const unsigned char *ct, unsigned char *pt,
- symmetric_XXX *XXX);
-
-int YYY_encrypt(const unsigned char *pt, unsigned char *ct,
unsigned long len, symmetric_YYY *YYY);
-int YYY_decrypt(const unsigned char *ct, unsigned char *pt,
+int XXX_decrypt(const unsigned char *ct, unsigned char *pt,
unsigned long len, symmetric_YYY *YYY);
\end{verbatim}
-Where ``XXX'' is one of (ecb, cbc) and ``YYY'' is one of (ctr, ofb, cfb). In the CTR, OFB and CFB cases ``len'' is the
-size of the buffer (as number of chars) to encrypt or decrypt. The CTR, OFB and CFB modes are order sensitive but not
+Where ``XXX'' is one of $\lbrace ecb, cbc, ctr, cfb, ofb \rbrace$.
+
+In all cases ``len'' is the size of the buffer (as number of octets) to encrypt or decrypt. The CTR, OFB and CFB modes are order sensitive but not
chunk sensitive. That is you can encrypt ``ABCDEF'' in three calls like ``AB'', ``CD'', ``EF'' or two like ``ABCDE'' and ``F''
and end up with the same ciphertext. However, encrypting ``ABC'' and ``DABC'' will result in different ciphertexts. All
five of the modes will return {\bf CRYPT\_OK} on success from the encrypt or decrypt functions.
+In the ECB and CBC cases ``len'' must be a multiple of the ciphers block size. In the CBC case you must manually pad the end of your message (either with
+zeroes or with whatever your protocol requires).
+
To decrypt in either mode you simply perform the setup like before (recall you have to fetch the IV value you used)
and use the decrypt routine on all of the blocks.
+\subsection{IV Manipulation}
To change or read the IV of a previously initialized chaining mode use the following two functions.
\index{cbc\_setiv()} \index{cbc\_getiv()} \index{ofb\_setiv()} \index{ofb\_getiv()} \index{cfb\_setiv()} \index{cfb\_getiv()}
@@ -785,16 +824,28 @@ int XXX_getiv(unsigned char *IV, unsigned long *len, symmetric_XXX *XXX);
int XXX_setiv(const unsigned char *IV, unsigned long len, symmetric_XXX *XXX);
\end{verbatim}
-The XXX\_getiv function will read the IV out of the chaining mode and store it into ``IV'' along with the length of the IV
+The XXX\_getiv() functions will read the IV out of the chaining mode and store it into ``IV'' along with the length of the IV
stored in ``len''. The XXX\_setiv will initialize the chaining mode state as if the original IV were the new IV specified. The length
of the IV passed in must be the size of the ciphers block size.
-The XXX\_setiv functions are handy if you wish to change the IV without re--keying the cipher.
+The XXX\_setiv() functions are handy if you wish to change the IV without re--keying the cipher.
+
+\subsection{Stream Termination}
+To terminate an open stream call the done function.
+
+\index{ecb\_done()} \index{cbc\_done()}\index{cfb\_done()}\index{ofb\_done()} \index{ctr\_done()}
+\begin{verbatim}
+int XXX_done(symmetric_XXX *XXX);
+\end{verbatim}
+
+This will terminate the stream (by terminating the cipher) and return \textbf{CRYPT\_OK} if successful.
+
+\subsection{Examples}
\newpage
\begin{small}
\begin{verbatim}
-#include <mycrypt.h>
+#include <tomcrypt.h>
int main(void)
{
unsigned char key[16], IV[16], buffer[512];
@@ -852,6 +903,12 @@ int main(void)
return -1;
}
+ /* terminate the stream */
+ if ((err = ctr_done(&ctr)) != CRYPT_OK) {
+ printf("ctr_done error: %s\n", error_to_string(err));
+ return -1;
+ }
+
/* clear up and return */
zeromem(key, sizeof(key));
zeromem(&ctr, sizeof(ctr));
@@ -944,7 +1001,7 @@ int eax_test(void);
This requires that the AES (or Rijndael) block cipher be registered with the cipher\_descriptor table first.
\begin{verbatim}
-#include <mycrypt.h>
+#include <tomcrypt.h>
int main(void)
{
int err;
@@ -1057,6 +1114,8 @@ They assume that ``pt'' and ``ct'' are the same size as the block cipher's block
both functions given a single ``ocb'' state. For bi-directional communication you will have to initialize two ``ocb''
states (with different nonces). Also ``pt'' and ``ct'' may point to the same location in memory.
+\subsubsection{State Termination}
+
When you are finished encrypting the message you call the following function to compute the tag.
\index{ocb\_done\_encrypt()}
@@ -1090,6 +1149,7 @@ tag of the message (internally) and then compare it against the ``taglen'' bytes
``res'' is set to zero. If all ``taglen'' bytes of ``tag'' can be verified then ``res'' is set to one (authenticated
message).
+\subsubsection{Packet Functions}
To make life simpler the following two functions are provided for memory bound OCB.
\index{ocb\_encrypt\_authenticate\_memory()}
@@ -1119,6 +1179,238 @@ int ocb_decrypt_verify_memory(int cipher,
Similarly this will OCB decrypt and compare the internally computed tag against the tag provided. ``res'' is set
appropriately.
+\subsection{CCM Mode}
+CCM is a NIST proposal for Encrypt+Authenticate that is centered around using AES (or any 16--byte cipher) as a primitive. Unlike EAX and OCB mode
+it is only meant for ``packet'' mode where the length of the input is known in advance. Since it is a packet mode function CCM only has one
+function that performs the protocol.
+
+\index{ccm\_memory()}
+\begin{verbatim}
+int ccm_memory(int cipher,
+ const unsigned char *key, unsigned long keylen,
+ const unsigned char *nonce, unsigned long noncelen,
+ const unsigned char *header, unsigned long headerlen,
+ unsigned char *pt, unsigned long ptlen,
+ unsigned char *ct,
+ unsigned char *tag, unsigned long *taglen,
+ int direction);
+\end{verbatim}
+
+This performs the ``CCM'' operation on the data. The ``cipher'' variable indicates which cipher in the descriptor table to use. It must have a
+16--byte block size for CCM. The key is ``key'' with a length of ``keylen'' octets. The nonce or salt is ``nonce'' of
+length ``noncelen'' octets. The header is meta--data you want to send with the message but not have encrypted, it is stored in ``header''
+of length ``headerlen'' octets. The header can be zero octets long (if $headerlen = 0$ then you can pass ``header'' as \textbf{NULL}).
+
+The plaintext is stored in ``pt'' and the ciphertext in ``ct''. The length of both are expected to be equal and is passed in as ``ptlen''. It is
+allowable that $pt = ct$. The ``direction'' variable indicates whether encryption (direction $=$ \textbf{CCM\_ENCRYPT}) or
+decryption (direction $=$ \textbf{CCM\_DECRYPT}) is to be performed.
+
+As implemented this copy of CCM cannot handle a header or plaintext longer than $2^{32} - 1$ octets long.
+
+You can test the implementation of CCM with the following function.
+
+\index{ccm\_test()}
+\begin{verbatim}
+int ccm_test(void);
+\end{verbatim}
+
+This will return \textbf{CRYPT\_OK} if the CCM routine passes known test vectors.
+
+\subsection{GCM Mode}
+Galois counter mode is an IEEE proposal for authenticated encryption. Like EAX and OCB it can be used in a streaming capacity however, unlike EAX it cannot
+accept ``additional authentication data'' (meta--data) after plaintext has been processed. This mode also only works with block ciphers with a sixteen
+byte block.
+
+A GCM stream is meant to be processed in three modes each one sequential serial. First the initial vector (per session) data is processed. This should be
+unique to every session. Next the the optional additional authentication data is processed and finally the plaintext.
+
+\subsubsection{Initialization}
+To initialize the GCM context with a secret key call the following function.
+
+\index{gcm\_init()}
+\begin{verbatim}
+int gcm_init(gcm_state *gcm, int cipher,
+ const unsigned char *key, int keylen);
+\end{verbatim}
+This initializes the GCM state ``gcm'' for the given cipher indexed by ``cipher'' with a secret key ``key'' of length ``keylen'' octets. The cipher chosen
+must have a 16--byte block size (e.g. AES).
+
+\subsubsection{Initial Vector}
+After the state has been initialized (or reset) the next step is to add the session (or packet) initial vector. It should be unique per packet encrypted.
+
+\index{gcm\_add\_iv()}
+\begin{verbatim}
+int gcm_add_iv(gcm_state *gcm,
+ const unsigned char *IV, unsigned long IVlen);
+\end{verbatim}
+
+This adds the initial vector octets from ``IV'' of length ``IVlen'' to the GCM state ``gcm''. You can call this function as many times as required
+to process the entire IV.
+
+Note that the GCM protocols provides a ``shortcut'' for 12--byte IVs where no preprocessing is to be done. If you want to minimize per packet latency it's ideal
+to only use 12--byte IVs. You can just increment it like a counter for each packet and the CTR [privacy] will be ensured.
+
+\subsubsection{Additional Authentication Data}
+After the entire IV has been processed the additional authentication data can be processed. Unlike the IV a packet/session does not require additional
+authentication data (AAD) for security. The AAD is meant to be used as side--channel data you want to be authenticated with the packet. Note that once
+you begin adding AAD to the GCM state you cannot return to adding IV data until the state is reset.
+
+\index{gcm\_add\_aad()}
+\begin{verbatim}
+int gcm_add_aad(gcm_state *gcm,
+ const unsigned char *adata, unsigned long adatalen);
+\end{verbatim}
+This adds the additional authentication data ``adata'' of length ``adatalen'' to the GCM state ``gcm''.
+
+\subsubsection{Plaintext Processing}
+After the AAD has been processed the plaintext (or ciphertext depending on the direction) can be processed.
+
+\index{gcm\_process()}
+\begin{verbatim}
+int gcm_process(gcm_state *gcm,
+ unsigned char *pt, unsigned long ptlen,
+ unsigned char *ct,
+ int direction);
+\end{verbatim}
+This processes message data where ``pt'' is the plaintext and ``ct'' is the ciphertext. The length of both are equal and stored in ``ptlen''. Depending on the
+mode ``pt'' is the input and ``ct'' is the output (or vice versa). When ``direction'' equals \textbf{GCM\_ENCRYPT} the plaintext is read, encrypted and stored
+in the ciphertext buffer. When ``direction'' equals \textbf{GCM\_DECRYPT} the opposite occurs.
+
+\subsubsection{State Termination}
+To terminate a GCM state and retrieve the message authentication tag call the following function.
+
+\index{gcm\_done()}
+\begin{verbatim}
+int gcm_done(gcm_state *gcm,
+ unsigned char *tag, unsigned long *taglen);
+\end{verbatim}
+This terminates the GCM state ``gcm'' and stores the tag in ``tag'' of length ``taglen'' octets.
+
+\subsubsection{State Reset}
+The call to gcm\_init() will perform considerable pre--computation (when \textbf{GCM\_TABLES} is defined) and if you're going to be dealing with a lot of packets
+it is very costly to have to call it repeatedly. To aid in this endeavour the reset function has been provided.
+
+\index{gcm\_reset()}
+\begin{verbatim}
+int gcm_reset(gcm_state *gcm);
+\end{verbatim}
+
+This will reset the GCM state ``gcm'' to the state that gcm\_init() left it. The user would then call gcm\_add\_iv(), gcm\_add\_aad(), etc.
+
+\subsubsection{One--Shot Packet}
+To process a single packet under any given key the following helper function can be used.
+
+\index{gcm\_memory()}
+\begin{verbatim}
+int gcm_memory( int cipher,
+ const unsigned char *key, unsigned long keylen,
+ const unsigned char *IV, unsigned long IVlen,
+ const unsigned char *adata, unsigned long adatalen,
+ unsigned char *pt, unsigned long ptlen,
+ unsigned char *ct,
+ unsigned char *tag, unsigned long *taglen,
+ int direction);
+\end{verbatim}
+
+This will initialize the GCM state with the given key, IV and AAD value then proceed to encrypt or decrypt the message text and store the final
+message tag. The definition of the variables is the same as it is for all the manual functions.
+
+If you are processing many packets under the same key you shouldn't use this function as it invokes the pre--computation with each call.
+
+\subsubsection{Example Usage}
+The following is an example usage of how to use GCM over multiple packets with a shared secret key.
+
+\begin{small}
+\begin{verbatim}
+#include <tomcrypt.h>
+
+int send_packet(const unsigned char *pt, unsigned long ptlen,
+ const unsigned char *iv, unsigned long ivlen,
+ const unsigned char *aad, unsigned long aadlen,
+ gcm_state *gcm)
+{
+ int err;
+ unsigned long taglen;
+ unsigned char tag[16];
+
+ /* reset the state */
+ if ((err = gcm_reset(gcm)) != CRYPT_OK) {
+ return err;
+ }
+
+ /* Add the IV */
+ if ((err = gcm_add_iv(gcm, iv, ivlen)) != CRYPT_OK) {
+ return err;
+ }
+
+ /* Add the AAD (note: aad can be NULL if aadlen == 0) */
+ if ((err = gcm_add_aad(gcm, aad, aadlen)) != CRYPT_OK) {
+ return err;
+ }
+
+ /* process the plaintext */
+ if ((err = gcm_add_process(gcm, pt, ptlen, pt, GCM_ENCRYPT)) != CRYPT_OK) {
+ return err;
+ }
+
+ /* Finish up and get the MAC tag */
+ taglen = sizeof(tag);
+ if ((err = gcm_done(gcm, tag, &taglen)) != CRYPT_OK) {
+ return err;
+ }
+
+ /* depending on the protocol and how IV is generated you may have to send it too... */
+ send(socket, iv, ivlen, 0);
+
+ /* send the aad */
+ send(socket, aad, aadlen, 0);
+
+ /* send the ciphertext */
+ send(socket, pt, ptlen, 0);
+
+ /* send the tag */
+ send(socket, tag, taglen, 0);
+
+ return CRYPT_OK;
+}
+
+int main(void)
+{
+ gcm_state gcm;
+ unsigned char key[16], IV[12], pt[PACKET_SIZE];
+ int err, x;
+ unsigned long ptlen;
+
+ /* somehow fill key/IV with random values */
+
+ /* register AES */
+ register_cipher(&aes_desc);
+
+ /* init the GCM state */
+ if ((err = gcm_init(&gcm, find_cipher("aes"), key, 16)) != CRYPT_OK) {
+ whine_and_pout(err);
+ }
+
+ /* handle us some packets */
+ for (;;) {
+ ptlen = make_packet_we_want_to_send(pt);
+
+ /* use IV as counter (12 byte counter) */
+ for (x = 11; x >= 0; x--) {
+ if (++IV[x]) {
+ break;
+ }
+ }
+
+ if ((err = send_packet(pt, ptlen, iv, 12, NULL, 0, &gcm)) != CRYPT_OK) {
+ whine_and_pout(err);
+ }
+ }
+ return EXIT_SUCCESS;
+}
+\end{verbatim}
+\end{small}
+
\chapter{One-Way Cryptographic Hash Functions}
\section{Core Functions}
@@ -1132,7 +1424,7 @@ void XXX_init(hash_state *md);
This simply sets up the hash to the default state governed by the specifications of the hash. To add data to the
message being hashed call:
\begin{verbatim}
-int XXX_process(hash_state *md, const unsigned char *in, unsigned long len);
+int XXX_process(hash_state *md, const unsigned char *in, unsigned long inlen);
\end{verbatim}
Essentially all hash messages are virtually infinitely\footnote{Most hashes are limited to $2^{64}$ bits or 2,305,843,009,213,693,952 bytes.} long message which
@@ -1167,7 +1459,7 @@ This will return {\bf CRYPTO\_OK} if the hash matches the test vectors, otherwis
example snippet that hashes a message with md5 is given below.
\begin{small}
\begin{verbatim}
-#include <mycrypt.h>
+#include <tomcrypt.h>
int main(void)
{
hash_state md;
@@ -1195,9 +1487,10 @@ struct _hash_descriptor {
char *name;
unsigned long hashsize; /* digest output size in bytes */
unsigned long blocksize; /* the block size the hash uses */
- void (*init) (hash_state *);
- int (*process)(hash_state *, const unsigned char *, unsigned long);
- int (*done) (hash_state *, unsigned char *);
+ void (*init) (hash_state *hash);
+ int (*process)(hash_state *hash,
+ const unsigned char *in, unsigned long inlen);
+ int (*done) (hash_state *hash, unsigned char *out);
int (*test) (void);
};
\end{verbatim}
@@ -1210,7 +1503,7 @@ position in the descriptor table of the hash.
You can use the table to indirectly call a hash function that is chosen at runtime. For example:
\begin{small}
\begin{verbatim}
-#include <mycrypt.h>
+#include <tomcrypt.h>
int main(void)
{
unsigned char buffer[100], hash[MAXBLOCKSIZE];
@@ -1258,29 +1551,27 @@ length. This provides a simple size you can set your automatic arrays to that w
There are three helper functions as well:
\index{hash\_memory()} \index{hash\_file()}
\begin{verbatim}
-int hash_memory(int hash, const unsigned char *data,
- unsigned long len, unsigned char *dst,
- unsigned long *outlen);
+int hash_memory(int hash,
+ const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen);
int hash_file(int hash, const char *fname,
- unsigned char *dst,
- unsigned long *outlen);
+ unsigned char *out, unsigned long *outlen);
int hash_filehandle(int hash, FILE *in,
- unsigned char *dst, unsigned long *outlen);
+ unsigned char *out, unsigned long *outlen);
\end{verbatim}
The ``hash'' parameter is the location in the descriptor table of the hash (\textit{e.g. the return of find\_hash()}).
-The ``*outlen'' variable is used to keep track of the output size. You
-must set it to the size of your output buffer before calling the functions. When they complete succesfully they store
-the length of the message digest back in it. The functions are otherwise straightforward. The ``hash\_filehandle''
-function assumes that ``in'' is an file handle opened in binary mode. It will hash to the end of file and not reset
-the file position when finished.
+The ``*outlen'' variable is used to keep track of the output size. You must set it to the size of your output buffer before
+calling the functions. When they complete succesfully they store the length of the message digest back in it. The functions
+are otherwise straightforward. The ``hash\_filehandle'' function assumes that ``in'' is an file handle opened in binary mode.
+It will hash to the end of file and not reset the file position when finished.
To perform the above hash with md5 the following code could be used:
\begin{small}
\begin{verbatim}
-#include <mycrypt.h>
+#include <tomcrypt.h>
int main(void)
{
int idx, err;
@@ -1364,7 +1655,7 @@ be bound to the CHC hash at a time. There are additional requirements for the s
Example of using CHC with the AES block cipher.
\begin{verbatim}
-#include <mycrypt.h>
+#include <tomcrypt.h>
int main(void)
{
int err;
@@ -1417,18 +1708,18 @@ to use to authenticate the message. ``key'' is the pointer to the array of char
length (in octets) of the key you want to use to authenticate the message. To send octets of a message through the HMAC system you must use the following function:
\index{hmac\_process()}
\begin{verbatim}
-int hmac_process(hmac_state *hmac, const unsigned char *buf,
- unsigned long len);
+int hmac_process(hmac_state *hmac,
+ const unsigned char *in, unsigned long inlen);
\end{verbatim}
``hmac'' is the HMAC state you are working with. ``buf'' is the array of octets to send into the HMAC process. ``len'' is the
number of octets to process. Like the hash process routines you can send the data in arbitrarly sized chunks. When you
are finished with the HMAC process you must call the following function to get the HMAC code:
\index{hmac\_done()}
\begin{verbatim}
-int hmac_done(hmac_state *hmac, unsigned char *hashOut,
- unsigned long *outlen);
+int hmac_done(hmac_state *hmac,
+ unsigned char *out, unsigned long *outlen);
\end{verbatim}
-``hmac'' is the HMAC state you are working with. ``hashOut'' is the array of octets where the HMAC code should be stored. You must
+``hmac'' is the HMAC state you are working with. ``out'' is the array of octets where the HMAC code should be stored. You must
set ``outlen'' to the size of the destination buffer before calling this function. It is updated with the length of the HMAC code
produced (depending on which hash was picked). If ``outlen'' is less than the size of the message digest (and ultimately
the HMAC code) then the HMAC code is truncated as per FIPS-198 specifications (e.g. take the first ``outlen'' bytes).
@@ -1439,22 +1730,23 @@ calling the three step process yourself.
\index{hmac\_memory()}
\begin{verbatim}
-int hmac_memory(int hash, const unsigned char *key, unsigned long keylen,
- const unsigned char *data, unsigned long len,
- unsigned char *dst, unsigned long *dstlen);
+int hmac_memory(int hash,
+ const unsigned char *key, unsigned long keylen,
+ const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen);
\end{verbatim}
-This will produce an HMAC code for the array of octets in ``data'' of length ``len''. The index into the hash descriptor
+This will produce an HMAC code for the array of octets in ``in'' of length ``inlen''. The index into the hash descriptor
table must be provided in ``hash''. It uses the key from ``key'' with a key length of ``keylen''.
-The result is stored in the array of octets ``dst'' and the length in ``dstlen''. The value of ``dstlen'' must be set
+The result is stored in the array of octets ``out'' and the length in ``outlen''. The value of ``outlen'' must be set
to the size of the destination buffer before calling this function. Similarly for files there is the following function:
\index{hmac\_file()}
\begin{verbatim}
-int hmac_file(int hash, const char *fname, const unsigned char *key,
- unsigned long keylen,
- unsigned char *dst, unsigned long *dstlen);
+int hmac_file(int hash, const char *fname,
+ const unsigned char *key, unsigned long keylen,
+ unsigned char *out, unsigned long *outlen);
\end{verbatim}
``hash'' is the index into the hash descriptor table of the hash you want to use. ``fname'' is the filename to process.
-``key'' is the array of octets to use as the key of length ``keylen''. ``dst'' is the array of octets where the
+``key'' is the array of octets to use as the key of length ``keylen''. ``out'' is the array of octets where the
result should be stored.
To test if the HMAC code is working there is the following function:
@@ -1467,7 +1759,7 @@ HMAC system is given below.
\begin{small}
\begin{verbatim}
-#include <mycrypt.h>
+#include <tomcrypt.h>
int main(void)
{
int idx, err;
@@ -1531,9 +1823,9 @@ To send data through the algorithm call
\index{omac\_process()}
\begin{verbatim}
int omac_process(omac_state *state,
- const unsigned char *buf, unsigned long len);
+ const unsigned char *in, unsigned long inlen);
\end{verbatim}
-This will send ``len'' bytes from ``buf'' through the active OMAC state ``state''. Returns \textbf{CRYPT\_OK} if the
+This will send ``inlen'' bytes from ``in'' through the active OMAC state ``state''. Returns \textbf{CRYPT\_OK} if the
function succeeds. The function is not sensitive to the granularity of the data. For example,
\begin{verbatim}
@@ -1567,10 +1859,10 @@ following function.
\begin{verbatim}
int omac_memory(int cipher,
const unsigned char *key, unsigned long keylen,
- const unsigned char *msg, unsigned long msglen,
- unsigned char *out, unsigned long *outlen);
+ const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen);
\end{verbatim}
-This will compute the OMAC of ``msglen'' bytes of ``msg'' using the key ``key'' of length ``keylen'' bytes and the cipher
+This will compute the OMAC of ``inlen'' bytes of ``in'' using the key ``key'' of length ``keylen'' bytes and the cipher
specified by the ``cipher'''th entry in the cipher\_descriptor table. It will store the MAC in ``out'' with the same
rules as omac\_done.
@@ -1580,7 +1872,7 @@ To OMAC a file use
int omac_file(int cipher,
const unsigned char *key, unsigned long keylen,
const char *filename,
- unsigned char *out, unsigned long *outlen);
+ unsigned char *out, unsigned long *outlen);
\end{verbatim}
Which will OMAC the entire contents of the file specified by ``filename'' using the key ``key'' of length ``keylen'' bytes
@@ -1597,7 +1889,7 @@ OMAC system is given below.
\begin{small}
\begin{verbatim}
-#include <mycrypt.h>
+#include <tomcrypt.h>
int main(void)
{
int idx, err;
@@ -1662,9 +1954,9 @@ To MAC data simply send it through the process function.
\index{pmac\_process()}
\begin{verbatim}
int pmac_process(pmac_state *state,
- const unsigned char *buf, unsigned long len);
+ const unsigned char *in, unsigned long inlen);
\end{verbatim}
-This will process ``len'' bytes of ``buf'' in the given ``state''. The function is not sensitive to the granularity of the
+This will process ``inlen'' bytes of ``in'' in the given ``state''. The function is not sensitive to the granularity of the
data. For example,
\begin{verbatim}
@@ -1694,9 +1986,9 @@ following function.
\index{pmac\_memory()}
\begin{verbatim}
int pmac_memory(int cipher,
- const unsigned char *key, unsigned long keylen,
- const unsigned char *msg, unsigned long msglen,
- unsigned char *out, unsigned long *outlen);
+ const unsigned char *key, unsigned long keylen,
+ const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen);
\end{verbatim}
This will compute the PMAC of ``msglen'' bytes of ``msg'' using the key ``key'' of length ``keylen'' bytes and the cipher
specified by the ``cipher'''th entry in the cipher\_descriptor table. It will store the MAC in ``out'' with the same
@@ -1716,13 +2008,80 @@ and the cipher specified by the ``cipher'''th entry in the cipher\_descriptor ta
the same rules as omac\_done.
To test if the PMAC code is working there is the following function:
+\index{pmac\_test()}
\begin{verbatim}
int pmac_test(void);
\end{verbatim}
Which returns {\bf CRYPT\_OK} if the code passes otherwise it returns an error code.
+\section{Pelican MAC}
+Pelican MAC is a new (experimental) MAC by the AES team that uses four rounds of AES as a ``mixing function''. It achieves a very high
+rate of processing and is potentially very secure. It requires AES to be enabled to function. You do not have to register\_cipher() AES first though
+as it calls AES directly.
+
+\index{pelican\_init()}
+\begin{verbatim}
+int pelican_init(pelican_state *pelmac, const unsigned char *key, unsigned long keylen);
+\end{verbatim}
+This will initialize the Pelican state with the given AES key. Once this has been done you can begin processing data.
+
+\index{pelican\_process()}
+\begin{verbatim}
+int pelican_process(pelican_state *pelmac, const unsigned char *in, unsigned long inlen);
+\end{verbatim}
+This will process ``inlen'' bytes of ``in'' through the Pelican MAC. It's best that you pass in multiples of 16 bytes as it makes the
+routine more efficient but you may pass in any length of text. You can call this function as many times as required to process
+an entire message.
+
+\index{pelican\_done()}
+\begin{verbatim}
+int pelican_done(pelican_state *pelmac, unsigned char *out);
+\end{verbatim}
+This terminates a Pelican MAC and writes the 16--octet tag to ``out''.
+
+\subsection{Example}
+
+\begin{verbatim}
+#include <tomcrypt.h>
+int main(void)
+{
+ pelican_state pelstate;
+ unsigned char key[32], tag[16];
+ int err;
+
+ /* somehow initialize a key */
+ /* initialize pelican mac */
+ if ((err = pelican_init(&pelstate, /* the state */
+ key, /* user key */
+ 32 /* key length in octets */
+ )) != CRYPT_OK) {
+ printf("Error initializing Pelican: %s", error_to_string(err));
+ return EXIT_FAILURE;
+ }
+
+ /* MAC some data */
+ if ((err = pelican_process(&pelstate, /* the state */
+ "hello world", /* data to mac */
+ 11 /* length of data */
+ )) != CRYPT_OK) {
+ printf("Error processing Pelican: %s", error_to_string(err));
+ return EXIT_FAILURE;
+ }
+
+ /* Terminate the MAC */
+ if ((err = pelican_done(&pelstate, /* the state */
+ tag /* where to store the tag */
+ )) != CRYPT_OK) {
+ printf("Error terminating Pelican: %s", error_to_string(err));
+ return EXIT_FAILURE;
+ }
+ /* tag[0..15] has the MAC output now */
+
+ return EXIT_SUCCESS;
+}
+\end{verbatim}
\chapter{Pseudo-Random Number Generators}
@@ -1735,12 +2094,11 @@ key generation. There is a universal structure called ``prng\_state''. To init
int XXX_start(prng_state *prng);
\end{verbatim}
-This will setup the PRNG for future use and not seed it. In order
-for the PRNG to be cryptographically useful you must give it entropy. Ideally you'd have some OS level source to tap
-like in UNIX (see section 5.3). To add entropy to the PRNG call:
+This will setup the PRNG for future use and not seed it. In order for the PRNG to be cryptographically useful you must give it
+entropy. Ideally you'd have some OS level source to tap like in UNIX. To add entropy to the PRNG call:
\index{PRNG add\_entropy}
\begin{verbatim}
-int XXX_add_entropy(const unsigned char *in, unsigned long len,
+int XXX_add_entropy(const unsigned char *in, unsigned long inlen,
prng_state *prng);
\end{verbatim}
@@ -1754,7 +2112,7 @@ int XXX_ready(prng_state *prng);
Which returns {\bf CRYPTO\_OK} if it is ready. Finally to actually read bytes call:
\index{PRNG read}
\begin{verbatim}
-unsigned long XXX_read(unsigned char *out, unsigned long len,
+unsigned long XXX_read(unsigned char *out, unsigned long outlen,
prng_state *prng);
\end{verbatim}
@@ -1831,7 +2189,7 @@ Below is a simple snippet to read 10 bytes from yarrow. Its important to note t
{\bf NOT} secure since the entropy added is not random.
\begin{verbatim}
-#include <mycrypt.h>
+#include <tomcrypt.h>
int main(void)
{
prng_state prng;
@@ -1961,7 +2319,7 @@ simulations which need a high quality (and fast) stream of bytes.
\subsubsection{Example Usage}
\begin{small}
\begin{verbatim}
-#include <mycrypt.h>
+#include <tomcrypt.h>
int main(void)
{
prng_state prng;
@@ -2029,7 +2387,7 @@ platform where the RNG doesn't work well. Example usage of this function is giv
\begin{small}
\begin{verbatim}
-#include <mycrypt.h>
+#include <tomcrypt.h>
int main(void)
{
ecc_key mykey;
@@ -2066,7 +2424,7 @@ the previous example using this PRNG.
\begin{small}
\begin{verbatim}
-#include <mycrypt.h>
+#include <tomcrypt.h>
int main(void)
{
ecc_key mykey;
@@ -2088,6 +2446,8 @@ int main(void)
\end{verbatim}
\end{small}
+
+
\chapter{RSA Public Key Cryptography}
\section{Introduction}
@@ -2307,8 +2667,8 @@ To do raw work with the RSA function call:
\index{rsa\_exptmod()}
\begin{verbatim}
int rsa_exptmod(const unsigned char *in, unsigned long inlen,
- unsigned char *out, unsigned long *outlen, int which,
- prng_state *prng, int prng_idx,
+ unsigned char *out, unsigned long *outlen,
+ int which, prng_state *prng, int prng_idx,
rsa_key *key);
\end{verbatim}
This loads the bignum from ``in'' as a big endian word in the format PKCS specifies, raises it to either ``e'' or ``d'' and stores the result
@@ -2324,26 +2684,26 @@ To facilitate encrypting short keys the following functions have been provided.
\index{rsa\_encrypt\_key()}
\begin{verbatim}
-int rsa_encrypt_key(const unsigned char *inkey, unsigned long inlen,
- unsigned char *outkey, unsigned long *outlen,
+int rsa_encrypt_key(const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen,
const unsigned char *lparam, unsigned long lparamlen,
prng_state *prng, int prng_idx, int hash_idx, rsa_key *key);
\end{verbatim}
-This function will OAEP pad ``inkey'' of length inlen bytes then RSA encrypt it and store the ciphertext
-in ``outkey'' of length ``outlen''. The ``lparam'' and ``lparamlen'' are the same parameters you would pass
+This function will OAEP pad ``in'' of length inlen bytes then RSA encrypt it and store the ciphertext
+in ``out'' of length ``outlen''. The ``lparam'' and ``lparamlen'' are the same parameters you would pass
to pkcs\_1\_oaep\_encode().
\index{rsa\_decrypt\_key()}
\begin{verbatim}
-int rsa_decrypt_key(const unsigned char *in, unsigned long inlen,
- unsigned char *outkey, unsigned long *keylen,
+int rsa_decrypt_key(const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen,
const unsigned char *lparam, unsigned long lparamlen,
prng_state *prng, int prng_idx,
int hash_idx, int *res,
rsa_key *key);
\end{verbatim}
This function will RSA decrypt ``in'' of length ``inlen'' then OAEP depad the resulting data and store it in
-``outkey'' of length ``outlen''. The ``lparam'' and ``lparamlen'' are the same parameters you would pass
+``out'' of length ``outlen''. The ``lparam'' and ``lparamlen'' are the same parameters you would pass
to pkcs\_1\_oaep\_decode().
If the RSA decrypted data isn't a valid OAEP packet then ``res'' is set to $0$. Otherwise, it is set to $1$.
@@ -2354,15 +2714,15 @@ process the following functions have been provided.
\index{rsa\_sign\_hash()}
\begin{verbatim}
-int rsa_sign_hash(const unsigned char *msghash, unsigned long msghashlen,
- unsigned char *sig, unsigned long *siglen,
+int rsa_sign_hash(const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen,
prng_state *prng, int prng_idx,
int hash_idx, unsigned long saltlen,
rsa_key *key);
\end{verbatim}
-This will PSS encode the message hash ``msghash'' of length ``msghashlen''. Next the PSS encoded message is
-RSA ``signed'' and the output is stored in ``sig'' of length ``siglen''.
+This will PSS encode the message hash ``in'' of length ``inlen''. Next the PSS encoded message will be RSA ``signed'' and
+the output is stored in ``out'' of length ``outlen''.
\index{rsa\_verify\_hash()}
@@ -2382,7 +2742,7 @@ the value ``res'' is set to $0$. Otherwise, if the function succeeds and signat
to $1$.
\begin{verbatim}
-#include <mycrypt.h>
+#include <tomcrypt.h>
int main(void)
{
int err, hash_idx, prng_idx, res;
@@ -2646,16 +3006,16 @@ Similar to the RSA related functions there are functions to encrypt or decrypt s
algorithms.
\index{dh\_encrypt\_key()} \index{dh\_decrypt\_key()}
\begin{verbatim}
-int dh_encrypt_key(const unsigned char *inkey, unsigned long keylen,
+int dh_encrypt_key(const unsigned char *in, unsigned long inlen,
unsigned char *out, unsigned long *len,
prng_state *prng, int wprng, int hash,
dh_key *key);
-int dh_decrypt_key(const unsigned char *in, unsigned long inlen,
- unsigned char *outkey, unsigned long *keylen,
+int dh_decrypt_key(const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen,
dh_key *key);
\end{verbatim}
-Where ``inkey'' is an input symmetric key of no more than 32 bytes. Essentially these routines created a random public key
+Where ``in'' is an input symmetric key of no more than 32 bytes. Essentially these routines created a random public key
and find the hash of the shared secret. The message digest is than XOR'ed against the symmetric key. All of the
required data is placed in ``out'' by ``dh\_encrypt\_key()''. The hash must produce a message digest at least as large
as the symmetric key you are trying to share.
@@ -2759,17 +3119,17 @@ algorithms.
\index{ecc\_encrypt\_key()} \index{ecc\_decrypt\_key()}
\begin{verbatim}
-int ecc_encrypt_key(const unsigned char *inkey, unsigned long keylen,
- unsigned char *out, unsigned long *len,
+int ecc_encrypt_key(const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen,
prng_state *prng, int wprng, int hash,
ecc_key *key);
-int ecc_decrypt_key(const unsigned char *in, unsigned long inlen,
- unsigned char *outkey, unsigned long *keylen,
+int ecc_decrypt_key(const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen,
ecc_key *key);
\end{verbatim}
-Where ``inkey'' is an input symmetric key of no more than 32 bytes. Essentially these routines created a random public key
+Where ``in'' is an input symmetric key of no more than 32 bytes. Essentially these routines created a random public key
and find the hash of the shared secret. The message digest is than XOR'ed against the symmetric key. All of the required
data is placed in ``out'' by ``ecc\_encrypt\_key()''. The hash chosen must produce a message digest at least as large
as the symmetric key you are trying to share.
@@ -2975,7 +3335,7 @@ These will handle multiple encodings/decodings at once. They work like their si
except they handle a \textbf{NULL} terminated list of operands.
\begin{verbatim}
-#include <mycrypt.h>
+#include <tomcrypt.h>
int main(void)
{
mp_int a, b, c, d;
@@ -3047,7 +3407,7 @@ on the password. The ``hash\_idx'' is the index of the hash you wish to use in
\begin{alltt}
/* demo to show how to make session state material from a password */
-#include <mycrypt.h>
+#include <tomcrypt.h>
int main(void)
\{
unsigned char password[100], salt[100],
@@ -3115,7 +3475,7 @@ for all uses and is distributed freely.
At the heart of all the functions is the data type ``mp\_int'' (defined in tommath.h). This data type is what
will hold all large integers. In order to use an mp\_int one must initialize it first, for example:
\begin{verbatim}
-#include <mycrypt.h> /* mycrypt.h includes mpi.h automatically */
+#include <tomcrypt.h> /* tomcrypt.h includes mpi.h automatically */
int main(void)
{
mp_int bignum;
@@ -3327,7 +3687,7 @@ make install_lib
Which will build the library and install it in /usr/lib (as well as the headers in /usr/include). The destination
directory of the library and headers can be changed by editing ``makefile''. The variable LIBNAME controls
where the library is to be installed and INCNAME controls where the headers are to be installed. A developer can
-then use the library by including ``mycrypt.h'' in their program and linking against ``libtomcrypt.a''.
+then use the library by including ``tomcrypt.h'' in their program and linking against ``libtomcrypt.a''.
A static library can also be built with the Intel C Compiler (ICC) by issuing the following
@@ -3368,18 +3728,8 @@ This will use libtool and gcc to build a shared library ``libtomcrypt.la'' as we
and install them into /usr/lib (and the headers into /usr/include). To link your application you should use the
libtool program in ``--mode=link''.
-You can also build LibTomCrypt as a shared library (DLL) in Windows with Cygwin. Issue the following
-
-\begin{alltt}
-make -f makefile.cygwin_dll
-\end{alltt}
-This will build ``libtomcrypt.dll.a'' which is an import library for ``libtomcrypt.dll''. You must copy
-``libtomcrypt.dll.a'' to your library directory, ``libtomcrypt.dll' to somewhere in your PATH and the header
-files to your include directory. So long as ``libtomcrypt.dll'' is in your system path you can run any LibTomCrypt
-program that uses it.
-
-\section{mycrypt\_cfg.h}
-The file ``mycrypt\_cfg.h'' is what lets you control various high level macros which control the behaviour
+\section{tomcrypt\_cfg.h}
+The file ``tomcrypt\_cfg.h'' is what lets you control various high level macros which control the behaviour
of the library.
\subsubsection{ARGTYPE}
@@ -3398,38 +3748,38 @@ which will work on all platforms.
Currently LibTomCrypt will detect x86-32 and x86-64 running GCC as well as x86-32 running MSVC.
\section{The Configure Script}
-There are also options you can specify from the configure script or ``mycrypt\_custom.h''.
+There are also options you can specify from the configure script or ``tomcrypt\_custom.h''.
-\subsubsection{X memory routines}
-At the top of mycrypt\_custom.h are four macros denoted as XMALLOC, XCALLOC, XREALLOC and XFREE which resolve to
+\subsection{X memory routines}
+At the top of tomcrypt\_custom.h are four macros denoted as XMALLOC, XCALLOC, XREALLOC and XFREE which resolve to
the name of the respective functions. This lets you substitute in your own memory routines. If you substitute in
your own functions they must behave like the standard C library functions in terms of what they expect as input and
output. By default the library uses the standard C routines.
-\subsubsection{X clock routines}
+\subsection{X clock routines}
The rng\_get\_bytes() function can call a function that requires the clock() function. These macros let you override
the default clock() used with a replacement. By default the standard C library clock() function is used.
-\subsubsection{NO\_FILE}
+\subsection{NO\_FILE}
During the build if NO\_FILE is defined then any function in the library that uses file I/O will not call the file I/O
functions and instead simply return CRYPT\_NOP. This should help resolve any linker errors stemming from a lack of
file I/O on embedded platforms.
-\subsubsection{CLEAN\_STACK}
+\subsection{CLEAN\_STACK}
When this functions is defined the functions that store key material on the stack will clean up afterwards.
Assumes that you have no memory paging with the stack.
-\subsubsection{LTC\_TEST}
+\subsection{LTC\_TEST}
When this has been defined the various self--test functions (for ciphers, hashes, prngs, etc) are included in the build.
When this has been undefined the tests are removed and if called will return CRYPT\_NOP.
-\subsubsection{Symmetric Ciphers, One-way Hashes, PRNGS and Public Key Functions}
+\subsection{Symmetric Ciphers, One-way Hashes, PRNGS and Public Key Functions}
There are a plethora of macros for the ciphers, hashes, PRNGs and public key functions which are fairly
self-explanatory. When they are defined the functionality is included otherwise it is not. There are some
dependency issues which are noted in the file. For instance, Yarrow requires CTR chaining mode, a block
cipher and a hash function.
-\subsubsection{TWOFISH\_SMALL and TWOFISH\_TABLES}
+\subsection{TWOFISH\_SMALL and TWOFISH\_TABLES}
Twofish is a 128-bit symmetric block cipher that is provided within the library. The cipher itself is flexible enough
to allow some tradeoffs in the implementation. When TWOFISH\_SMALL is defined the scheduled symmetric key for Twofish
requires only 200 bytes of memory. This is achieved by not pre-computing the substitution boxes. Having this
@@ -3441,23 +3791,462 @@ useful when TWOFISH\_SMALL is defined as the table values are computed on the fl
will increase by approximately 500 bytes. If this is defined but TWOFISH\_SMALL is not the cipher will still work but
it will not speed up the encryption or decryption functions.
-\subsubsection{SMALL\_CODE}
+\subsection{GCM\_TABLES}
+When defined GCM will use a 64KB table (per GCM state) which will greatly lower up the per--packet latency.
+It also increases the initialization time.
+
+\subsection{SMALL\_CODE}
When this is defined some of the code such as the Rijndael and SAFER+ ciphers are replaced with smaller code variants.
These variants are slower but can save quite a bit of code space.
+\subsection{LTC\_FAST}
+This mode (autodetected with x86\_32,x86\_64 platforms with GCC or MSVC) configures various routines such as ctr\_encrypt() or
+cbc\_encrypt() that it can safely XOR multiple octets in one step by using a larger data type. This has the benefit of
+cutting down the overhead of the respective functions.
+
+This mode does have one downside. It can cause unaligned reads from memory if you are not careful with the functions. This is why
+it has been enabled by default only for the x86 class of processors where unaligned accesses are allowed. Technically LTC\_FAST
+is not ``portable'' since unaligned accesses are not covered by the ISO C specifications.
+
+In practice however, you can use it on pretty much any platform (even MIPS) with care.
+
+By design the ``fast'' mode functions won't get unaligned on their own. For instance, if you call ctr\_encrypt() right after calling
+ctr\_start() and all the inputs you gave are aligned than ctr\_encrypt() will perform aligned memory operations only. However, if you
+call ctr\_encrypt() with an odd amount of plaintext then call it again the CTR pad (the IV) will be partially used. This will
+cause the ctr routine to first use up the remaining pad bytes. Then if there are enough plaintext bytes left it will use
+whole word XOR operations. These operations will be unaligned.
+
+The simplest precaution is to make sure you process all data in power of two blocks and handle ``remainder'' at the end. e.g. If you are
+CTR'ing a long stream process it in blocks of (say) four kilobytes and handle any remaining incomplete blocks at the end of the stream.
+
+If you do plan on using the ``LTC\_FAST'' mode you have to also define a ``LTC\_FAST\_TYPE'' macro which resolves to an optimal sized
+data type you can perform integer operations with. Ideally it should be four or eight bytes since it must properly divide the size
+of your block cipher (e.g. 16 bytes for AES). This means sadly if you're on a platform with 57--bit words (or something) you can't
+use this mode. So sad.
+
\section{MPI Tweaks}
\subsection{RSA Only Tweak}
If you plan on only using RSA with moduli in the range of 1024 to 2560 bits you can enable a series of tweaks
to reduce the library size. Follow these steps
\begin{enumerate}
- \item Undefine MDSA, MECC and MDH from mycrypt\_custom.h
+ \item Undefine MDSA, MECC and MDH from tomcrypt\_custom.h
\item Undefine LTM\_ALL from tommath\_superclass.h
\item Define SC\_RSA\_1 from tommath\_superclass.h
\item Rebuild the library.
\end{enumerate}
+\chapter{Optimizations}
+\section{Introduction}
+The entire API was designed with plug and play in mind at the low level. That is you can swap out any cipher, hash or PRNG and dependent API will not require
+updating. This has the nice benefit that I can add ciphers not have to re--write large portions of the API. For the most part LibTomCrypt has also been written
+to be highly portable and easy to build out of the box on pretty much any platform. As such there are no assembler inlines throughout the code, I make no assumptions
+about the platform, etc...
+
+That works well for most cases but there are times where time is of the essence. This API also allows optimized routines to be dropped in--place of the existing
+portable routines. For instance, hand optimized assembler versions of AES could be provided and any existing function that uses the cipher could automatically use
+the optimized code without re--writing. This also paves the way for hardware drivers that can access hardware accelerated cryptographic devices.
+
+At the heart of this flexibility is the ``descriptor'' system. A descriptor is essentially just a C ``struct'' which describes the algorithm and provides pointers
+to functions that do the work. For a given class of operation (e.g. cipher, hash, prng) the functions have identical prototypes which makes development simple. In most
+dependent routines all a developer has to do is register\_XXX() the descriptor and they're set.
+
+\section{Ciphers}
+The ciphers in LibTomCrypt are accessed through the ltc\_cipher\_descriptor structure.
+
+\begin{small}
+\begin{verbatim}
+struct ltc_cipher_descriptor {
+ /** name of cipher */
+ char *name;
+ /** internal ID */
+ unsigned char ID;
+ /** min keysize (octets) */
+ int min_key_length,
+ /** max keysize (octets) */
+ max_key_length,
+ /** block size (octets) */
+ block_length,
+ /** default number of rounds */
+ default_rounds;
+ /** Setup the cipher
+ @param key The input symmetric key
+ @param keylen The length of the input key (octets)
+ @param num_rounds The requested number of rounds (0==default)
+ @param skey [out] The destination of the scheduled key
+ @return CRYPT_OK if successful
+ */
+ int (*setup)(const unsigned char *key, int keylen,
+ int num_rounds, symmetric_key *skey);
+ /** Encrypt a block
+ @param pt The plaintext
+ @param ct [out] The ciphertext
+ @param skey The scheduled key
+ */
+ void (*ecb_encrypt)(const unsigned char *pt,
+ unsigned char *ct, symmetric_key *skey);
+ /** Decrypt a block
+ @param ct The ciphertext
+ @param pt [out] The plaintext
+ @param skey The scheduled key
+ */
+ void (*ecb_decrypt)(const unsigned char *ct,
+ unsigned char *pt, symmetric_key *skey);
+ /** Test the block cipher
+ @return CRYPT_OK if successful, CRYPT_NOP if self-testing has been disabled
+ */
+ int (*test)(void);
+ /** Determine a key size
+ @param keysize [in/out] The size of the key desired and the suggested size
+ @return CRYPT_OK if successful
+ */
+ int (*keysize)(int *keysize);
+
+/** Accelerators **/
+ /** Accelerated ECB encryption
+ @param pt Plaintext
+ @param ct Ciphertext
+ @param blocks The number of complete blocks to process
+ @param skey The scheduled key context
+ */
+ void (*accel_ecb_encrypt)(const unsigned char *pt,
+ unsigned char *ct, unsigned long blocks,
+ symmetric_key *skey);
+
+ /** Accelerated ECB decryption
+ @param pt Plaintext
+ @param ct Ciphertext
+ @param blocks The number of complete blocks to process
+ @param skey The scheduled key context
+ */
+ void (*accel_ecb_decrypt)(const unsigned char *ct,
+ unsigned char *pt, unsigned long blocks,
+ symmetric_key *skey);
+
+ /** Accelerated CBC encryption
+ @param pt Plaintext
+ @param ct Ciphertext
+ @param blocks The number of complete blocks to process
+ @param IV The initial value (input/output)
+ @param skey The scheduled key context
+ */
+ void (*accel_cbc_encrypt)(const unsigned char *pt,
+ unsigned char *ct, unsigned long blocks,
+ unsigned char *IV, symmetric_key *skey);
+
+ /** Accelerated CBC decryption
+ @param pt Plaintext
+ @param ct Ciphertext
+ @param blocks The number of complete blocks to process
+ @param IV The initial value (input/output)
+ @param skey The scheduled key context
+ */
+ void (*accel_cbc_decrypt)(const unsigned char *ct,
+ unsigned char *pt, unsigned long blocks,
+ unsigned char *IV, symmetric_key *skey);
+
+ /** Accelerated CTR encryption
+ @param pt Plaintext
+ @param ct Ciphertext
+ @param blocks The number of complete blocks to process
+ @param IV The initial value (input/output)
+ @param mode little or big endian counter (mode=0 or mode=1)
+ @param skey The scheduled key context
+ */
+ void (*accel_ctr_encrypt)(const unsigned char *pt,
+ unsigned char *ct, unsigned long blocks,
+ unsigned char *IV, int mode, symmetric_key *skey);
+
+ /** Accelerated CCM packet (one-shot)
+ @param key The secret key to use
+ @param keylen The length of the secret key (octets)
+ @param nonce The session nonce [use once]
+ @param noncelen The length of the nonce
+ @param header The header for the session
+ @param headerlen The length of the header (octets)
+ @param pt [out] The plaintext
+ @param ptlen The length of the plaintext (octets)
+ @param ct [out] The ciphertext
+ @param tag [out] The destination tag
+ @param taglen [in/out] The max size and resulting size of the authentication tag
+ @param direction Encrypt or Decrypt direction (0 or 1)
+ @return CRYPT_OK if successful
+ */
+ void (*accel_ccm_memory)(
+ const unsigned char *key, unsigned long keylen,
+ const unsigned char *nonce, unsigned long noncelen,
+ const unsigned char *header, unsigned long headerlen,
+ unsigned char *pt, unsigned long ptlen,
+ unsigned char *ct,
+ unsigned char *tag, unsigned long *taglen,
+ int direction);
+
+ /** Accelerated GCM packet (one shot)
+ @param key The secret key
+ @param keylen The length of the secret key
+ @param IV The initial vector
+ @param IVlen The length of the initial vector
+ @param adata The additional authentication data (header)
+ @param adatalen The length of the adata
+ @param pt The plaintext
+ @param ptlen The length of the plaintext (ciphertext length is the same)
+ @param ct The ciphertext
+ @param tag [out] The MAC tag
+ @param taglen [in/out] The MAC tag length
+ @param direction Encrypt or Decrypt mode (GCM_ENCRYPT or GCM_DECRYPT)
+ */
+ void (*accel_gcm_memory)(
+ const unsigned char *key, unsigned long keylen,
+ const unsigned char *IV, unsigned long IVlen,
+ const unsigned char *adata, unsigned long adatalen,
+ unsigned char *pt, unsigned long ptlen,
+ unsigned char *ct,
+ unsigned char *tag, unsigned long *taglen,
+ int direction);
+
+};
+\end{verbatim}
+\end{small}
+
+\subsection{Name}
+The ``name'' parameter specifies the name of the cipher. This is what a developer would pass to find\_cipher() to find the cipher in the descriptor
+tables.
+
+\subsection{Internal ID}
+This is a single byte Internal ID you can use to distingish ciphers from each other.
+
+\subsection{Key Lengths}
+The minimum key length is ``min\_key\_length'' and is measured in octets. Similarly the maximum key length is ``max\_key\_length''. They can be equal
+and both must valid key sizes for the cipher. Values in between are not assumed to be valid though they may be.
+
+\subsection{Block Length}
+The size of the ciphers plaintext or ciphertext is ``block\_length'' and is measured in octets.
+
+\subsection{Rounds}
+Some ciphers allow different number of rounds to be used. Usually you just use the default. The default round count is ``default\_rounds''.
+
+\subsection{Setup}
+To initialize a cipher (for ECB mode) the function setup() was provided. It accepts an array of key octets ``key'' of length ``keylen'' octets. The user
+can specify the number of rounds they want through ``num\_rounds'' where $num\_rounds = 0$ means use the default. The destination of a scheduled key is stored
+in ``skey''.
+
+This is where things get tricky. Currently there is no provision to allocate memory during initialization since there is no ``cipher done'' function. So you have
+to either use an existing member of the symmetric\_key union or alias your own structure over top of it provided symmetric\_key is not smaller.
+
+\subsection{Single block ECB}
+To process a single block in ECB mode the ecb\_encrypt() and ecb\_decrypt() functions were provided. The plaintext and ciphertext buffers are allowed to overlap so you
+must make sure you do not overwrite the output before you are finished with the input.
+
+\subsection{Testing}
+The test() function is used to self--test the ``device''. It takes no arguments and returns \textbf{CRYPT\_OK} if all is working properly.
+
+\subsection{Key Sizing}
+Occasionally a function will want to find a suitable key size to use since the input is oddly sized. The keysize() function is for this case. It accepts a
+pointer to an integer which represents the desired size. The function then has to match it to the exact or a lower key size that is valid for the cipher. For
+example, if the input is $25$ and $24$ is valid then it stores $24$ back in the pointed to integer. It must not round up and must return an error if the keysize
+ cannot be mapped to a valid key size for the cipher.
+
+\subsection{Acceleration}
+The next set of functions cover the accelerated functionality of the cipher descriptor. Any combination of these functions may be set to \textbf{NULL} to indicate
+it is not supported. In those cases the software fallbacks are used (using the single ECB block routines).
+
+\subsubsection{Accelerated ECB}
+These two functions are meant for cases where a user wants to encrypt (in ECB mode no less) an array of blocks. These functions are accessed
+through the accel\_ecb\_encrypt and accel\_ecb\_decrypt pointers. The ``blocks'' count is the number of complete blocks to process.
+
+\subsubsection{Accelerated CBC}
+These two functions are meant for accelerated CBC encryption. These functions are accessed through the accel\_cbc\_encrypt and accel\_cbc\_decrypt pointers.
+The ``blocks'' value is the number of complete blocks to process. The ``IV'' is the CBC initial vector. It is an input upon calling this function and must be
+updated by the function before returning.
+
+\subsubsection{Accelerated CTR}
+This function is meant for accelerated CTR encryption. It is accessible through the accel\_ctr\_encrypt pointer.
+The ``blocks'' value is the number of complete blocks to process. The ``IV'' is the CTR counter vector. It is an input upon calling this function and must be
+updated by the function before returning. The ``mode'' value indicates whether the counter is big ($mode = 1$) or little ($mode = 0$) endian.
+
+This function (and the way it's called) differs from the other two since ctr\_encrypt() allows any size input plaintext. The accelerator will only be
+called if the following conditions are met.
+
+\begin{enumerate}
+ \item The accelerator is present
+ \item The CTR pad is empty
+ \item The remaining length of the input to process is greater than or equal to the block size.
+\end{enumerate}
+
+The ``CTR pad'' is empty when a multiple (including zero) blocks of text have been processed. That is, if you pass in seven bytes to AES--CTR mode you would have to
+pass in a minimum of nine extra bytes before the accelerator could be called. The CTR accelerator must increment the counter (and store it back into the
+buffer provided) before encrypting it to create the pad.
+
+The accelerator will only be used to encrypt whole blocks. Partial blocks are always handled in software.
+
+\subsubsection{Accelerated CCM}
+This function is meant for accelerated CCM encryption or decryption. It processes the entire packet in one call. Note that the setup() function will not
+be called prior to this. This function must handle scheduling the key provided on its own.
+
+\subsubsection{Accelerated GCM}
+This function is meant for accelerated GCM encryption or decryption. It processes the entire packet in one call. Note that the setup() function will not
+be called prior to this. This function must handle scheduling the key provided on its own.
+
+\section{One--Way Hashes}
+The hash functions are accessed through the ltc\_hash\_descriptor structure.
+
+\begin{small}
+\begin{verbatim}
+struct ltc_hash_descriptor {
+ /** name of hash */
+ char *name;
+ /** internal ID */
+ unsigned char ID;
+ /** Size of digest in octets */
+ unsigned long hashsize;
+ /** Input block size in octets */
+ unsigned long blocksize;
+ /** ASN.1 DER identifier */
+ unsigned char DER[64];
+ /** Length of DER encoding */
+ unsigned long DERlen;
+ /** Init a hash state
+ @param hash The hash to initialize
+ @return CRYPT_OK if successful
+ */
+ int (*init)(hash_state *hash);
+ /** Process a block of data
+ @param hash The hash state
+ @param in The data to hash
+ @param inlen The length of the data (octets)
+ @return CRYPT_OK if successful
+ */
+ int (*process)(hash_state *hash, const unsigned char *in, unsigned long inlen);
+ /** Produce the digest and store it
+ @param hash The hash state
+ @param out [out] The destination of the digest
+ @return CRYPT_OK if successful
+ */
+ int (*done)(hash_state *hash, unsigned char *out);
+ /** Self-test
+ @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled
+ */
+ int (*test)(void);
+};
+\end{verbatim}
+\end{small}
+
+\subsection{Name}
+This is the name the hash is known by and what find\_hash() will look for.
+
+\subsection{Internal ID}
+This is the internal ID byte used to distinguish the hash from other hashes.
+
+\subsection{Digest Size}
+The ``hashsize'' variable indicates the length of the output in octets.
+
+\subsection{Block Size}
+The `blocksize'' variable indicates the length of input (in octets) that the hash processes in a given
+invokation.
+
+\subsection{DER Identifier}
+This is the DER identifier (including the SEQUENCE header). This is used solely for PKCS \#1 style signatures.
+
+\subsection{Initialization}
+The init function initializes the hash and prepares it to process message bytes.
+
+\subsection{Process}
+This processes message bytes. The algorithm must accept any length of input that the hash would allow. The input is not
+guaranteed to be a multiple of the block size in length.
+
+\subsection{Done}
+The done function terminates the hash and returns the message digest.
+
+\subsection{Acceleration}
+A compatible accelerator must allow processing data in any granularity which may require internal padding on the driver side.
+
+\section{Pseudo--Random Number Generators}
+The pseudo--random number generators are accessible through the ltc\_prng\_descriptor structure.
+
+\begin{small}
+\begin{verbatim}
+struct ltc_prng_descriptor {
+ /** Name of the PRNG */
+ char *name;
+ /** size in bytes of exported state */
+ int export_size;
+ /** Start a PRNG state
+ @param prng [out] The state to initialize
+ @return CRYPT_OK if successful
+ */
+ int (*start)(prng_state *prng);
+ /** Add entropy to the PRNG
+ @param in The entropy
+ @param inlen Length of the entropy (octets)\
+ @param prng The PRNG state
+ @return CRYPT_OK if successful
+ */
+ int (*add_entropy)(const unsigned char *in, unsigned long inlen, prng_state *prng);
+ /** Ready a PRNG state to read from
+ @param prng The PRNG state to ready
+ @return CRYPT_OK if successful
+ */
+ int (*ready)(prng_state *prng);
+ /** Read from the PRNG
+ @param out [out] Where to store the data
+ @param outlen Length of data desired (octets)
+ @param prng The PRNG state to read from
+ @return Number of octets read
+ */
+ unsigned long (*read)(unsigned char *out, unsigned long outlen, prng_state *prng);
+ /** Terminate a PRNG state
+ @param prng The PRNG state to terminate
+ @return CRYPT_OK if successful
+ */
+ int (*done)(prng_state *prng);
+ /** Export a PRNG state
+ @param out [out] The destination for the state
+ @param outlen [in/out] The max size and resulting size of the PRNG state
+ @param prng The PRNG to export
+ @return CRYPT_OK if successful
+ */
+ int (*pexport)(unsigned char *out, unsigned long *outlen, prng_state *prng);
+ /** Import a PRNG state
+ @param in The data to import
+ @param inlen The length of the data to import (octets)
+ @param prng The PRNG to initialize/import
+ @return CRYPT_OK if successful
+ */
+ int (*pimport)(const unsigned char *in, unsigned long inlen, prng_state *prng);
+ /** Self-test the PRNG
+ @return CRYPT_OK if successful, CRYPT_NOP if self-testing has been disabled
+ */
+ int (*test)(void);
+};
+\end{verbatim}
+\end{small}
+
+\subsection{Name}
+The name by which find\_prng() will find the PRNG.
+
+\subsection{Export Size}
+When an PRNG state is to be exported for future use you specify the space required in this variable.
+
+\subsection{Start}
+Initialize the PRNG and make it ready to accept entropy.
+
+\subsection{Entropy Addition}
+Add entropy to the PRNG state. The exact behaviour of this function depends on the particulars of the PRNG.
+
+\subsection{Ready}
+This function makes the PRNG ready to read from by processing the entropy added. The behaviour of this function depends
+on the specific PRNG used.
+
+\subsection{Read}
+Read from the PRNG and return the number of bytes read. This function does not have to fill the buffer but it is best
+if it does as many protocols do not retry reads and will fail on the first try.
+
+\subsection{Done}
+Terminate a PRNG state. The behaviour of this function depends on the particular PRNG used.
+\subsection{Exporting and Importing}
+An exported PRNG state is data that the PRNG can later import to resume activity. They're not meant to resume ``the same session''
+but should at least maintain the same level of state entropy.
\input{crypt.ind}
diff --git a/crypt_cipher_descriptor.c b/crypt_cipher_descriptor.c
deleted file mode 100644
index 4a8a9433..00000000
--- a/crypt_cipher_descriptor.c
+++ /dev/null
@@ -1,14 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-#include "mycrypt.h"
-
-struct _cipher_descriptor cipher_descriptor[TAB_SIZE];
-
diff --git a/crypt_hash_descriptor.c b/crypt_hash_descriptor.c
deleted file mode 100644
index 5c022552..00000000
--- a/crypt_hash_descriptor.c
+++ /dev/null
@@ -1,14 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-#include "mycrypt.h"
-
-struct _hash_descriptor hash_descriptor[TAB_SIZE];
-
diff --git a/crypt_prng_descriptor.c b/crypt_prng_descriptor.c
deleted file mode 100644
index 129118f6..00000000
--- a/crypt_prng_descriptor.c
+++ /dev/null
@@ -1,13 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-#include "mycrypt.h"
-
-struct _prng_descriptor prng_descriptor[TAB_SIZE];
diff --git a/crypt_register_hash.c b/crypt_register_hash.c
deleted file mode 100644
index c8023a98..00000000
--- a/crypt_register_hash.c
+++ /dev/null
@@ -1,36 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-#include "mycrypt.h"
-
-int register_hash(const struct _hash_descriptor *hash)
-{
- int x;
-
- _ARGCHK(hash != NULL);
-
- /* is it already registered? */
- for (x = 0; x < TAB_SIZE; x++) {
- if (memcmp(&hash_descriptor[x], hash, sizeof(struct _hash_descriptor)) == 0) {
- return x;
- }
- }
-
- /* find a blank spot */
- for (x = 0; x < TAB_SIZE; x++) {
- if (hash_descriptor[x].name == NULL) {
- XMEMCPY(&hash_descriptor[x], hash, sizeof(struct _hash_descriptor));
- return x;
- }
- }
-
- /* no spot */
- return -1;
-}
diff --git a/crypt_register_prng.c b/crypt_register_prng.c
deleted file mode 100644
index 81763383..00000000
--- a/crypt_register_prng.c
+++ /dev/null
@@ -1,36 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-#include "mycrypt.h"
-
-int register_prng(const struct _prng_descriptor *prng)
-{
- int x;
-
- _ARGCHK(prng != NULL);
-
- /* is it already registered? */
- for (x = 0; x < TAB_SIZE; x++) {
- if (memcmp(&prng_descriptor[x], prng, sizeof(struct _prng_descriptor)) == 0) {
- return x;
- }
- }
-
- /* find a blank spot */
- for (x = 0; x < TAB_SIZE; x++) {
- if (prng_descriptor[x].name == NULL) {
- XMEMCPY(&prng_descriptor[x], prng, sizeof(struct _prng_descriptor));
- return x;
- }
- }
-
- /* no spot */
- return -1;
-}
diff --git a/cscope.tmplst b/cscope.tmplst
deleted file mode 100644
index 7fabc867..00000000
--- a/cscope.tmplst
+++ /dev/null
@@ -1,219 +0,0 @@
-./aes.c
-./aes_tab.c
-./base64_decode.c
-./base64_encode.c
-./blowfish.c
-./burn_stack.c
-./cast5.c
-./cbc_decrypt.c
-./cbc_encrypt.c
-./cbc_getiv.c
-./cbc_setiv.c
-./cbc_start.c
-./cfb_decrypt.c
-./cfb_encrypt.c
-./cfb_getiv.c
-./cfb_setiv.c
-./cfb_start.c
-./chc.c
-./crypt.c
-./crypt_argchk.c
-./crypt_cipher_descriptor.c
-./crypt_cipher_is_valid.c
-./crypt_find_cipher.c
-./crypt_find_cipher_any.c
-./crypt_find_cipher_id.c
-./crypt_find_hash.c
-./crypt_find_hash_any.c
-./crypt_find_hash_id.c
-./crypt_find_prng.c
-./crypt_hash_descriptor.c
-./crypt_hash_is_valid.c
-./crypt_prng_descriptor.c
-./crypt_prng_is_valid.c
-./crypt_register_cipher.c
-./crypt_register_hash.c
-./crypt_register_prng.c
-./crypt_unregister_cipher.c
-./crypt_unregister_hash.c
-./crypt_unregister_prng.c
-./ctr_decrypt.c
-./ctr_encrypt.c
-./ctr_getiv.c
-./ctr_setiv.c
-./ctr_start.c
-./demos/encrypt.c
-./demos/hashsum.c
-./demos/small.c
-./demos/test/base64_test.c
-./demos/test/cipher_hash_test.c
-./demos/test/der_tests.c
-./demos/test/dh_tests.c
-./demos/test/dsa_test.c
-./demos/test/ecc_test.c
-./demos/test/mac_test.c
-./demos/test/makefile
-./demos/test/makefile.icc
-./demos/test/makefile.msvc
-./demos/test/makefile.shared
-./demos/test/modes_test.c
-./demos/test/pkcs_1_test.c
-./demos/test/rsa_test.c
-./demos/test/store_test.c
-./demos/test/test.c
-./demos/test/test.h
-./demos/tv_gen.c
-./demos/x86_prof.c
-./der_decode_integer.c
-./der_encode_integer.c
-./der_get_multi_integer.c
-./der_length_integer.c
-./der_put_multi_integer.c
-./des.c
-./dh.c
-./dh_sys.c
-./dsa_export.c
-./dsa_free.c
-./dsa_import.c
-./dsa_make_key.c
-./dsa_sign_hash.c
-./dsa_verify_hash.c
-./dsa_verify_key.c
-./eax_addheader.c
-./eax_decrypt.c
-./eax_decrypt_verify_memory.c
-./eax_done.c
-./eax_encrypt.c
-./eax_encrypt_authenticate_memory.c
-./eax_init.c
-./eax_test.c
-./ecb_decrypt.c
-./ecb_encrypt.c
-./ecb_start.c
-./ecc.c
-./ecc_sys.c
-./error_to_string.c
-./fortuna.c
-./hash_file.c
-./hash_filehandle.c
-./hash_memory.c
-./hmac_done.c
-./hmac_file.c
-./hmac_init.c
-./hmac_memory.c
-./hmac_process.c
-./hmac_test.c
-./is_prime.c
-./ltc_tommath.h
-./makefile
-./makefile.cygwin_dll
-./makefile.icc
-./makefile.msvc
-./makefile.shared
-./md2.c
-./md4.c
-./md5.c
-./mpi.c
-./mpi_to_ltc_error.c
-./mycrypt.h
-./mycrypt_argchk.h
-./mycrypt_cfg.h
-./mycrypt_cipher.h
-./mycrypt_custom.h
-./mycrypt_hash.h
-./mycrypt_macros.h
-./mycrypt_misc.h
-./mycrypt_pk.h
-./mycrypt_pkcs.h
-./mycrypt_prng.h
-./noekeon.c
-./notes/etc/whirlgen.c
-./notes/etc/whirltest.c
-./ocb_decrypt.c
-./ocb_decrypt_verify_memory.c
-./ocb_done_decrypt.c
-./ocb_done_encrypt.c
-./ocb_encrypt.c
-./ocb_encrypt_authenticate_memory.c
-./ocb_init.c
-./ocb_ntz.c
-./ocb_shift_xor.c
-./ocb_test.c
-./ofb_decrypt.c
-./ofb_encrypt.c
-./ofb_getiv.c
-./ofb_setiv.c
-./ofb_start.c
-./omac_done.c
-./omac_file.c
-./omac_init.c
-./omac_memory.c
-./omac_process.c
-./omac_test.c
-./packet_store_header.c
-./packet_valid_header.c
-./pkcs_1_i2osp.c
-./pkcs_1_mgf1.c
-./pkcs_1_oaep_decode.c
-./pkcs_1_oaep_encode.c
-./pkcs_1_os2ip.c
-./pkcs_1_pss_decode.c
-./pkcs_1_pss_encode.c
-./pkcs_1_v15_es_decode.c
-./pkcs_1_v15_es_encode.c
-./pkcs_1_v15_sa_decode.c
-./pkcs_1_v15_sa_encode.c
-./pkcs_5_1.c
-./pkcs_5_2.c
-./pmac_done.c
-./pmac_file.c
-./pmac_init.c
-./pmac_memory.c
-./pmac_ntz.c
-./pmac_process.c
-./pmac_shift_xor.c
-./pmac_test.c
-./rand_prime.c
-./rc2.c
-./rc4.c
-./rc5.c
-./rc6.c
-./rmd128.c
-./rmd160.c
-./rng_get_bytes.c
-./rng_make_prng.c
-./rsa_decrypt_key.c
-./rsa_encrypt_key.c
-./rsa_export.c
-./rsa_exptmod.c
-./rsa_free.c
-./rsa_import.c
-./rsa_make_key.c
-./rsa_sign_hash.c
-./rsa_v15_decrypt_key.c
-./rsa_v15_encrypt_key.c
-./rsa_v15_sign_hash.c
-./rsa_v15_verify_hash.c
-./rsa_verify_hash.c
-./s_ocb_done.c
-./safer.c
-./safer_tab.c
-./saferp.c
-./sha1.c
-./sha224.c
-./sha256.c
-./sha384.c
-./sha512.c
-./skipjack.c
-./sober128.c
-./sober128tab.c
-./sprng.c
-./tiger.c
-./tim_exptmod.c
-./twofish.c
-./twofish_tab.c
-./whirl.c
-./whirltab.c
-./xtea.c
-./yarrow.c
-./zeromem.c
diff --git a/demos/encrypt.c b/demos/encrypt.c
index 5320c215..67627f7b 100644
--- a/demos/encrypt.c
+++ b/demos/encrypt.c
@@ -7,7 +7,7 @@
/* ie: ./encrypt blowfish story.txt story.ct */
/* ./encrypt -d blowfish story.ct story.pt */
-#include <mycrypt.h>
+#include <tomcrypt.h>
int errno;
@@ -69,6 +69,12 @@ void register_algs(void)
#ifdef SKIPJACK
register_cipher (&skipjack_desc);
#endif
+#ifdef KHAZAD
+ register_cipher (&khazad_desc);
+#endif
+#ifdef ANUBIS
+ register_cipher (&anubis_desc);
+#endif
if (register_hash(&sha256_desc) == -1) {
printf("Error registering SHA256\n");
diff --git a/demos/hashsum.c b/demos/hashsum.c
index c633ca87..23946ccc 100644
--- a/demos/hashsum.c
+++ b/demos/hashsum.c
@@ -7,7 +7,7 @@
* more functions ;)
*/
-#include <mycrypt.h>
+#include <tomcrypt.h>
int errno;
diff --git a/demos/multi.c b/demos/multi.c
new file mode 100644
index 00000000..fdc8dc6b
--- /dev/null
+++ b/demos/multi.c
@@ -0,0 +1,106 @@
+/* test the multi helpers... */
+#include <tomcrypt.h>
+
+int main(void)
+{
+ unsigned char key[16], buf[2][MAXBLOCKSIZE];
+ unsigned long len, len2;
+
+
+/* register algos */
+ register_hash(&sha256_desc);
+ register_cipher(&aes_desc);
+
+/* HASH testing */
+ len = sizeof(buf[0]);
+ hash_memory(find_hash("sha256"), "hello", 5, buf[0], &len);
+ len2 = sizeof(buf[0]);
+ hash_memory_multi(find_hash("sha256"), buf[1], &len2, "hello", 5, NULL);
+ if (len != len2 || memcmp(buf[0], buf[1], len)) {
+ printf("Failed: %d %lu %lu\n", __LINE__, len, len2);
+ return EXIT_FAILURE;
+ }
+ len2 = sizeof(buf[0]);
+ hash_memory_multi(find_hash("sha256"), buf[1], &len2, "he", 2, "llo", 3, NULL);
+ if (len != len2 || memcmp(buf[0], buf[1], len)) {
+ printf("Failed: %d %lu %lu\n", __LINE__, len, len2);
+ return EXIT_FAILURE;
+ }
+ len2 = sizeof(buf[0]);
+ hash_memory_multi(find_hash("sha256"), buf[1], &len2, "h", 1, "e", 1, "l", 1, "l", 1, "o", 1, NULL);
+ if (len != len2 || memcmp(buf[0], buf[1], len)) {
+ printf("Failed: %d %lu %lu\n", __LINE__, len, len2);
+ return EXIT_FAILURE;
+ }
+
+/* HMAC */
+ len = sizeof(buf[0]);
+ hmac_memory(find_hash("sha256"), key, 16, "hello", 5, buf[0], &len);
+ len2 = sizeof(buf[0]);
+ hmac_memory_multi(find_hash("sha256"), key, 16, buf[1], &len2, "hello", 5, NULL);
+ if (len != len2 || memcmp(buf[0], buf[1], len)) {
+ printf("Failed: %d %lu %lu\n", __LINE__, len, len2);
+ return EXIT_FAILURE;
+ }
+ len2 = sizeof(buf[0]);
+ hmac_memory_multi(find_hash("sha256"), key, 16, buf[1], &len2, "he", 2, "llo", 3, NULL);
+ if (len != len2 || memcmp(buf[0], buf[1], len)) {
+ printf("Failed: %d %lu %lu\n", __LINE__, len, len2);
+ return EXIT_FAILURE;
+ }
+ len2 = sizeof(buf[0]);
+ hmac_memory_multi(find_hash("sha256"), key, 16, buf[1], &len2, "h", 1, "e", 1, "l", 1, "l", 1, "o", 1, NULL);
+ if (len != len2 || memcmp(buf[0], buf[1], len)) {
+ printf("Failed: %d %lu %lu\n", __LINE__, len, len2);
+ return EXIT_FAILURE;
+ }
+
+/* OMAC */
+ len = sizeof(buf[0]);
+ omac_memory(find_cipher("aes"), key, 16, "hello", 5, buf[0], &len);
+ len2 = sizeof(buf[0]);
+ omac_memory_multi(find_cipher("aes"), key, 16, buf[1], &len2, "hello", 5, NULL);
+ if (len != len2 || memcmp(buf[0], buf[1], len)) {
+ printf("Failed: %d %lu %lu\n", __LINE__, len, len2);
+ return EXIT_FAILURE;
+ }
+ len2 = sizeof(buf[0]);
+ omac_memory_multi(find_cipher("aes"), key, 16, buf[1], &len2, "he", 2, "llo", 3, NULL);
+ if (len != len2 || memcmp(buf[0], buf[1], len)) {
+ printf("Failed: %d %lu %lu\n", __LINE__, len, len2);
+ return EXIT_FAILURE;
+ }
+ len2 = sizeof(buf[0]);
+ omac_memory_multi(find_cipher("aes"), key, 16, buf[1], &len2, "h", 1, "e", 1, "l", 1, "l", 1, "o", 1, NULL);
+ if (len != len2 || memcmp(buf[0], buf[1], len)) {
+ printf("Failed: %d %lu %lu\n", __LINE__, len, len2);
+ return EXIT_FAILURE;
+ }
+
+/* PMAC */
+ len = sizeof(buf[0]);
+ pmac_memory(find_cipher("aes"), key, 16, "hello", 5, buf[0], &len);
+ len2 = sizeof(buf[0]);
+ pmac_memory_multi(find_cipher("aes"), key, 16, buf[1], &len2, "hello", 5, NULL);
+ if (len != len2 || memcmp(buf[0], buf[1], len)) {
+ printf("Failed: %d %lu %lu\n", __LINE__, len, len2);
+ return EXIT_FAILURE;
+ }
+ len2 = sizeof(buf[0]);
+ pmac_memory_multi(find_cipher("aes"), key, 16, buf[1], &len2, "he", 2, "llo", 3, NULL);
+ if (len != len2 || memcmp(buf[0], buf[1], len)) {
+ printf("Failed: %d %lu %lu\n", __LINE__, len, len2);
+ return EXIT_FAILURE;
+ }
+ len2 = sizeof(buf[0]);
+ pmac_memory_multi(find_cipher("aes"), key, 16, buf[1], &len2, "h", 1, "e", 1, "l", 1, "l", 1, "o", 1, NULL);
+ if (len != len2 || memcmp(buf[0], buf[1], len)) {
+ printf("Failed: %d %lu %lu\n", __LINE__, len, len2);
+ return EXIT_FAILURE;
+ }
+
+
+ printf("All passed\n");
+ return EXIT_SUCCESS;
+}
+
diff --git a/demos/small.c b/demos/small.c
index f5a0d433..bc9793bc 100644
--- a/demos/small.c
+++ b/demos/small.c
@@ -1,6 +1,5 @@
// small demo app that just includes a cipher/hash/prng
-
-#include <mycrypt.h>
+#include <tomcrypt.h>
int main(void)
{
diff --git a/demos/test.c b/demos/test.c
new file mode 100644
index 00000000..290861d9
--- /dev/null
+++ b/demos/test.c
@@ -0,0 +1,19 @@
+#include <tomcrypt_test.h>
+
+int main(void)
+{
+ reg_algs();
+ printf("build == \n%s\n", crypt_build_settings);
+ printf("\ncipher_test..."); fflush(stdout); printf(cipher_hash_test() ? "failed" : "passed");
+ printf("\nmodes_test..."); fflush(stdout); printf(modes_test() ? "failed" : "passed");
+ printf("\nmac_test..."); fflush(stdout); printf(mac_test() ? "failed" : "passed");
+ printf("\npkcs_1_test..."); fflush(stdout); printf(pkcs_1_test() ? "failed" : "passed");
+ printf("\nstore_test..."); fflush(stdout); printf(store_test() ? "failed" : "passed");
+ printf("\nrsa_test..."); fflush(stdout); printf(rsa_test() ? "failed" : "passed");
+ printf("\necc_test..."); fflush(stdout); printf(ecc_tests() ? "failed" : "passed");
+ printf("\ndsa_test..."); fflush(stdout); printf(dsa_test() ? "failed" : "passed");
+ printf("\ndh_test..."); fflush(stdout); printf(dh_tests() ? "failed" : "passed");
+ printf("\nder_test..."); fflush(stdout); printf(der_tests() ? "failed" : "passed");
+
+ return EXIT_SUCCESS;
+}
diff --git a/demos/test/.ccmalloc b/demos/test/.ccmalloc
deleted file mode 100644
index 1b0aba2e..00000000
--- a/demos/test/.ccmalloc
+++ /dev/null
@@ -1,356 +0,0 @@
- %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
- %%%% generic configuration file for %%%%
- %%%% the ccmalloc memory profiler %%%%
- %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-
- %-----------------------------------------------------------------%
- % COPY THIS FILE TO '.ccmalloc' in your project or home directory %
- %-----------------------------------------------------------------%
-
-##############################################################################
-## (C) 1997-2003 Armin Biere, 1998 Johannes Keukelaar
-## $Id: ccmalloc.cfg,v 1.6 2003/02/03 08:03:54 biere Exp $
-##############################################################################
-
-%%% '%' and '#' are comments !!!!!!!
-
-% This file must be called '.ccmalloc' and is searched for in the
-% current directory and in the home directory of the user. If it
-% does not exist then the default values mentioned below are used.
-
-% It is also the only available user manual yet ;-) So here is a reading
-% hint. First have a look at the short one line descriptions of each option
-% ...
-
-%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-% with 'file' the executable is specified [a.out]
-% ----------------------------------------------------------------------
-% This should not be necessary for Linux and Solaris because the proc
-% file system can be used to find argv[0].
-%
-% (the rest of this comment only applies to other OS)
-%
-% For other OS you should use this option unless the executable is
-% in the current directory or its name is 'a.out'.
-%
-% If you do not specify this then ccmalloc tries to find an executable
-% in the current directory that matches the running program starting
-% with 'a.out'. For this process it must call 'nm' on each executable
-% file in the directory which may be time consuming. With this option
-% you can speed up this process.
-%
-% You can also specify absolute or relative path names. This is
-% necessary if you do not start your program from the current directory.
-% But you can also simply link or name your program to 'a.out'.
-
-%file FILE
-
-%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-% 'log' specify the logfile [stderr]
-% ----------------------------------------------------------------------
-% The default is to use stderr. The argument to 'log' is the name of
-% the file you want to write to. It can also be 'stdout' or '-' which
-% sets stdout as logfile. If the logfile is stdout or stderr and is
-% connected to a terminal then the output is slightly different.
-%
-% For big programs the logfile can be really big. To reduce the size
-% you can use a small chain length (see 'chain-length' below). The other
-% possibility is to use compressed logfiles. This can be done by
-% specifying a logfile name with a '.gz' (or a '.Z') suffix. This means
-% that gnuzip (resp. compress) is used to compress the output.
-
-%log FILE
-
-%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-% 'logpid' specify the logfile
-% ----------------------------------------------------------------------
-% Can be used alternatively to the 'log' command if you want to use
-% ccmalloc for debugging parallel applications where several copies of
-% the program you are debugging must be run simoultaneously. In this
-% case you can not use 'log' because you do not want to write to the same
-% log file. Using 'logpid' uses a file name ending with the <pid> of
-% the process which means the name is unique even if several copies of
-% your program are run simoultaneously.
-%
-% If you use the compressing suffixes then the <pid> is inserted before
-% the suffix (e.g. 'logpid ccmalloc.log.gz' uses 'ccmalloc.log.<pid>.gz'
-% as the name for the log file).
-
-%logpid FILE
-
-%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-% 'dont-log-chain' skip info about certain chains []
-% ----------------------------------------------------------------------
-% This command may be repeated any number of times. The argument to this
-% command is a comma-separated list of function-or-file-and-line
-% specifications. Garbage allocated from a callchain that contains this
-% subchain anywhere will _not_ be logged.
-%
-% The ';'-separated list should not contain any spaces. E.g. not:
-%
-% main ; foo ; bar
-%
-% but:
-%
-% main;foo;bar
-%
-% A function-or-file-and-line specification is a string followed by an
-% optional colon and number, for example: main or main:14 or main.c or
-% main.c:15. Note that the string is compared with both the function and the
-% file name, if available. If main.c happens to be a function name, that
-% will cause a match (for that string at least). Not specifying a line
-% number will match any line number. If line number information is not
-% available, anything will match! Not specifying a name (e.g. ;;;) will
-% match an unknown function name. Not giving any parameters at all, will
-% match a chain containing at least one unknown function.
-%
-% Note that if you say 'dont-log-chain wrapper.c' nothing will be logged.
-
-%dont-log-chain
-
-%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-% 'only-log-chain' skip info about other chains []
-% ----------------------------------------------------------------------
-% The obvious counterpart to dont-log-chain. In this case, only matching
-% chains will be reported. Non-matching chains will not be reported.
-% Can be repeated any number of times; if the chain matches any of the
-% instances, it will be reported.
-
-%only-log-chain
-
-########################################################################
-# #
-# This is the 'flag' section #
-# #
-# 'set FLAG' is the same as 'set FLAG 1' #
-# #
-# The default values are those set below. If 'silent' is disabled #
-# then you will find the banner in the log file (or it is listed on #
-# stdout or stderr). The banner describes the current settings of all #
-# these flags. #
-# #
-########################################################################
-
-%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-% with 'only-count' ccmalloc only counts garbage - no call chains [0]
-% ----------------------------------------------------------------------
-% If only-count is set to one then only one additional pointer for
-% each allocated data is used and no call chain is generated. This is
-% the fasted and most space efficient mode ccmalloc can operate
-% in. In this mode you get at least the size of garbage produced.
-%
-% Note that 'check-free-space' does not work at all with 'only-count'
-% set and over writes ('check-overwrites') are only checked when
-% calling free.
-
-%set only-count 0
-
-%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-% 'load-dynlibs' load dynamic linked libraries into gdb [0]
-% ----------------------------------------------------------------------
-% If your program is linked with dynamic libraries, function and file
-% name information is not available for addresses in those libraries,
-% unless you set 'load-dynlibs' to 1.
-
-%set load-dynlibs 0
-
-%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-% 'keep-deallocated-data' does not recycle deallocated data [0]
-% ----------------------------------------------------------------------
-% If you enable keep-deallocated-data then all data deallocated with
-% 'free' (or 'delete' in C++) is not given back to the free store
-% but stays associated with the call chain of its allocation. This is
-% very useful if your program does multiple deallocation of the
-% same data.
-
-%set keep-deallocated-data 0
-
-%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-% 'check-overwrites' detect overwrites [0]
-% ----------------------------------------------------------------------
-% If you want to detect 'off by n bytes' errors you should set
-% 'checking-overwrites' to n/4 (on 32-Bit machines).
-%
-% ccmalloc inserts a boundary above allocated data. This boundary
-% consists of 'check-overwrites' words. If your program writes to
-% this area then ccmalloc can detect this (see also check-start
-% and check-interval). 'ccmalloc' also does checking for overwrites
-% at non word boundaries (e.g. strcpy(malloc(strlen("hello")),"hello");)
-
-set check-overwrites 1
-
-%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-% 'check-underwrites' detect underwrites [0]
-% ----------------------------------------------------------------------
-% same with writes below allocated data. You do not have to set this
-% option if you only want detect 'off (below) by one' errors because
-% ccmalloc keeps a magic value just before the user data.
-
-set check-underwrites 1
-
-
-%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-% 'check-free-space' can be used to find dangling pointers. [0]
-% ----------------------------------------------------------------------
-% A very serious type of bug is to write on data that has already been
-% freed. If this happens the free space management of malloc is in
-% trouble and you will perhaps encounter non deterministic behaviour of
-% your program. To test this first enable 'keep-deallocated-data' and
-% restart your program. If the problem goes away and ccmalloc does not
-% report anything then you should *also* enable 'check-free-space'. Now
-% ccmalloc checks already deallocated data for corruption.
-%
-% Note that to perform this check 'keep-deallocated-data' also must
-% be enabled and 'only-count' disabled.
-
-set check-free-space 1
-
-%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-% 'check-interval' can be used to speed up checks [0]
-% ----------------------------------------------------------------------
-% If check-overwrite, check-underwrites or check-free-space is set then
-% the default is to do 'write checks' when data is deallocated and
-% to do 'free space checks' when reporting together with
-% 'write checks' for garbage. When you want these checks to be
-% performed more often then you should set 'check-interval' to a
-% positive number. This number is the interval between the number of
-% calls to free or malloc without performing the checks.
-
-%set check-interval 0
-
-%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-% 'check-start' can be used to speed up checks [0]
-% ----------------------------------------------------------------------
-% The flag 'check-start' delays the start of checks until the given
-% number of calls to free and malloc have occured. Together with
-% 'check-interval' you can use a binary search to find an aproximation
-% when a corruption occured! If you simply set check-interval to 1 and
-% check-start to 0 then this will slow done your program too much.
-
-%set check-start 0
-
-%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-% 'silent' disables banner [0]
-% ----------------------------------------------------------------------
-% If you don't want to see the banner of ccmalloc then set
-% 'silent' to 1 (f.e. when logging to stderr)
-
-%set silent
-
-%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-% 'file-info' en/disables file and line number information [1]
-% ----------------------------------------------------------------------
-% If your program was compiled with debugging information (-g) then
-% ccmalloc can generate line number and file info for call chains opening
-% a pipe to gdb. For very big programs this method is slow. In this case
-% you can set 'file-info' to zero and you will only get the function
-% names. For SunOS 4.3.1 'nm' does not 'demangle' C++ identifiers
-% very well. So gdb is called instead but only if 'file-info' is
-% not set to 0.
-
-%set file-info 1
-
-%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-% 'continue' if ccmalloc aborts when something weired happened [0]
-% ----------------------------------------------------------------------
-% If the free function of ccmalloc is called with an argument that does
-% not make sense to ccmalloc or that has already been freed then you
-% probably want the program to stop at this point. This is also
-% the default behaviour. But you can force ccmalloc also to ignore
-% this if you set 'continue' to 1. This flag also controls the behaviour
-% of ccmalloc when free space is found to be corrupted or a write
-% boundary has been overwritten.
-
-%set continue 0
-
-%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-% 'chain-length' is the length of the maximal call chain [0 = infinite]
-% ----------------------------------------------------------------------
-% You can restrict the length of call chains by setting 'chain-length'
-% to a number greater than zero. If 'chain-length' is zero (the default)
-% then chains are as long as possible (on a non x86 system only call
-% chains with a finite maximal length can be generated). For big
-% programs especially if keep-deallocated-data is enabled this can
-% reduce the size of the log file from over 100MB to several MB!
-
-%set chain-length 0
-
-%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-% 'print-addresses' of data [0]
-% ----------------------------------------------------------------------
-% If you want to see the addresses of the allocated data (and
-% deallocated data if keep-deallocated-data is set to 1) set
-% 'print-addresses' to 1.
-
-%set print-addresses 0
-
-%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-% 'print-on-one-line' shortens log file [0]
-% ----------------------------------------------------------------------
-% The default is to print function names and file/line number info
-% on separate lines. With 'print-on-one-line' set 1 all are printed
-% on one line.
-
-%set print-on-one-line 0
-
-%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-% 'additional-line' enlarges readability [1]
-% ----------------------------------------------------------------------
-% When printing call chains an empty line is printed between to
-% call points. Set 'additional-line' to 0 to disable this feature.
-
-%set additional-line 1
-
-%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-% 'statistics' enables more accurate profiling [0]
-% ----------------------------------------------------------------------
-% Calculate number of allocations and deallocations and bytes also on
-% a per call chain basis. This uses 4 additional pointers for each
-% call chain.
-
-set statistics 1
-
-%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-% set order for sorting of call chains [1] [1]
-% ----------------------------------------------------------------------
-% When printing the report to the log file the call chains are sorted by
-% default with respect to the largest accumulated garbage produced by
-% that call chain. This can be changed with setting 'sort-by-wasted'
-% to 0. In this case they are sorted by the number of allocated bytes.
-% If you want the number of allocations (only possible if 'statistics'
-% is enabled) as sorting criteria instead then set 'sort-by-size' to 0.
-
-%set sort-by-wasted 1
-%set sort-by-size 1
-
-%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-% report library chains [0]
-% ----------------------------------------------------------------------
-% Some external libraries (like libg++) have memory leaks. On some
-% systems even a call to printf produces a leak. ccmalloc tries to
-% detect this (only heuristically!) and with this flag you can control
-% if leaks produced by such library calls are reported.
-%
-% Since version 0.2.1 some similar effect can be achieved by using
-% 'dont-log-chain' with no argument.
-
-%set library-chains 0
-
-%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-% print debugging information [X] (compile time dependend)
-% ----------------------------------------------------------------------
-
-%set debug X
-
-%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-% align memory on 8 byte boundary [0] (no effect on SunOS or Solaris)
-% ----------------------------------------------------------------------
-
-%set align-8-byte 0
-
-%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
-% only report allocations which ended up being wasted (i.e don't report
-% allocations which were completely freed properly. ) [1]
-% ----------------------------------------------------------------------
-
-%set only-wasting-alloc 1
diff --git a/demos/test/mac_test.c b/demos/test/mac_test.c
deleted file mode 100644
index 52e75d89..00000000
--- a/demos/test/mac_test.c
+++ /dev/null
@@ -1,12 +0,0 @@
-/* test pmac/omac/hmac */
-#include "test.h"
-
-int mac_test(void)
-{
- DO(hmac_test());
- DO(pmac_test());
- DO(omac_test());
- DO(eax_test());
- DO(ocb_test());
- return 0;
-}
diff --git a/demos/test/makefile b/demos/test/makefile
deleted file mode 100644
index e306d17e..00000000
--- a/demos/test/makefile
+++ /dev/null
@@ -1,25 +0,0 @@
-# make test harness, it is good.
-CFLAGS += -Wall -W -Os -I../../ -I./
-
-# add -g3 for ccmalloc debugging
-#CFLAGS += -g3
-
-# if you're not debugging
-CFLAGS += -fomit-frame-pointer
-
-default: test
-
-OBJECTS=test.o cipher_hash_test.o mac_test.o modes_test.o \
-pkcs_1_test.o store_test.o rsa_test.o ecc_test.o dsa_test.o dh_tests.o der_tests.o
-
-#uncomment this to get heap checking [e.g. memory leaks]. Note
-#that you *MUST* build libtomcrypt.a with -g3 enabled [and make install it]
-#
-#
-#CCMALLOC = -lccmalloc -ldl
-
-test: $(OBJECTS)
- $(CC) $(OBJECTS) /usr/lib/libtomcrypt.a $(CCMALLOC) -o test
-
-clean:
- rm -rf test *.o *.obj *.exe *~ .libs
diff --git a/demos/test/makefile.icc b/demos/test/makefile.icc
deleted file mode 100644
index b32c9ba6..00000000
--- a/demos/test/makefile.icc
+++ /dev/null
@@ -1,14 +0,0 @@
-# make test harness, it is good.
-CFLAGS += -O3 -xN -ip -I../../ -I./
-CC=icc
-
-default: test
-
-OBJECTS=test.o cipher_hash_test.o mac_test.o modes_test.o \
-pkcs_1_test.o store_test.o rsa_test.o ecc_test.o dsa_test.o dh_tests.o der_tests.o
-
-test: $(OBJECTS)
- $(CC) $(OBJECTS) -ltomcrypt -o test
-
-clean:
- rm -f test *.o *~
diff --git a/demos/test/makefile.msvc b/demos/test/makefile.msvc
deleted file mode 100644
index 8769ecf1..00000000
--- a/demos/test/makefile.msvc
+++ /dev/null
@@ -1,14 +0,0 @@
-# make test harness, it is good.
-CFLAGS = $(CFLAGS) /W3 /Ox -I../../ -I./
-
-default: test.exe
-
-OBJECTS = test.obj cipher_hash_test.obj mac_test.obj modes_test.obj \
-pkcs_1_test.obj store_test.obj rsa_test.obj ecc_test.obj dsa_test.c dh_tests.obj der_tests.obj
-
-
-test.exe: $(OBJECTS)
- cl $(OBJECTS) tomcrypt.lib advapi32.lib
-
-clean:
- rm -f test.exe *.obj *~
diff --git a/demos/test/makefile.shared b/demos/test/makefile.shared
deleted file mode 100644
index d90c1daa..00000000
--- a/demos/test/makefile.shared
+++ /dev/null
@@ -1,19 +0,0 @@
-# make test harness, it is good.
-CFLAGS += -Wall -W -Os -I../../ -I./
-
-# if you're not debugging
-CFLAGS += -fomit-frame-pointer
-
-default: test
-
-#if you don't have mpi.o
-#MPISHARED=-ltommath
-
-OBJECTS=test.o cipher_hash_test.o mac_test.o modes_test.o \
-pkcs_1_test.o store_test.o rsa_test.o ecc_test.o dsa_test.o dh_tests.o der_tests.o
-
-test: $(OBJECTS)
- libtool --mode=link gcc $(CFLAGS) $(OBJECTS) -o test -ltomcrypt $(MPISHARED)
-
-clean:
- rm -f test *.o *.obj *.exe *~
diff --git a/demos/test/test.c b/demos/test/test.c
deleted file mode 100644
index a56e5d61..00000000
--- a/demos/test/test.c
+++ /dev/null
@@ -1,262 +0,0 @@
-#include "test.h"
-
-test_entry tests[26];
-
-test_entry test_list[26] = {
-
-/* test name provides requires entry */
-{"store_test", "a", "", store_test },
-{"cipher_hash_test", "b", "a", cipher_hash_test },
-{"modes_test", "c", "b", modes_test },
-{"mac_test", "d", "c", mac_test },
-{"der_test", "e", "", der_tests },
-
-{"pkcs_1_test", "f", "e", pkcs_1_test },
-{"rsa_test", "g", "e", rsa_test },
-{"ecc_test", "h", "a", ecc_tests },
-{"dsa_test", "i", "a", dsa_test },
-{"dh_test", "j", "a", dh_tests },
-
-{NULL, NULL, NULL, NULL}
-};
-
-prng_state test_yarrow;
-static int current_test;
-
-void run_cmd(int res, int line, char *file, char *cmd)
-{
- if (res != CRYPT_OK) {
- fprintf(stderr, "[%s]: %s (%d)\n%s:%d:%s\n", tests[current_test].name, error_to_string(res), res, file, line, cmd);
- exit(EXIT_FAILURE);
- }
-}
-
-void register_algs(void)
-{
- int err;
-
-#ifdef RIJNDAEL
- register_cipher (&aes_desc);
-#endif
-#ifdef BLOWFISH
- register_cipher (&blowfish_desc);
-#endif
-#ifdef XTEA
- register_cipher (&xtea_desc);
-#endif
-#ifdef RC5
- register_cipher (&rc5_desc);
-#endif
-#ifdef RC6
- register_cipher (&rc6_desc);
-#endif
-#ifdef SAFERP
- register_cipher (&saferp_desc);
-#endif
-#ifdef TWOFISH
- register_cipher (&twofish_desc);
-#endif
-#ifdef SAFER
- register_cipher (&safer_k64_desc);
- register_cipher (&safer_sk64_desc);
- register_cipher (&safer_k128_desc);
- register_cipher (&safer_sk128_desc);
-#endif
-#ifdef RC2
- register_cipher (&rc2_desc);
-#endif
-#ifdef DES
- register_cipher (&des_desc);
- register_cipher (&des3_desc);
-#endif
-#ifdef CAST5
- register_cipher (&cast5_desc);
-#endif
-#ifdef NOEKEON
- register_cipher (&noekeon_desc);
-#endif
-#ifdef SKIPJACK
- register_cipher (&skipjack_desc);
-#endif
-#ifdef TIGER
- register_hash (&tiger_desc);
-#endif
-#ifdef MD2
- register_hash (&md2_desc);
-#endif
-#ifdef MD4
- register_hash (&md4_desc);
-#endif
-#ifdef MD5
- register_hash (&md5_desc);
-#endif
-#ifdef SHA1
- register_hash (&sha1_desc);
-#endif
-#ifdef SHA256
- register_hash (&sha256_desc);
-#endif
-#ifdef SHA224
- register_hash (&sha224_desc);
-#endif
-#ifdef SHA384
- register_hash (&sha384_desc);
-#endif
-#ifdef SHA512
- register_hash (&sha512_desc);
-#endif
-#ifdef RIPEMD128
- register_hash (&rmd128_desc);
-#endif
-#ifdef RIPEMD160
- register_hash (&rmd160_desc);
-#endif
-#ifdef WHIRLPOOL
- register_hash (&whirlpool_desc);
-#endif
-#ifdef CHC_HASH
- register_hash(&chc_desc);
- if ((err = chc_register(register_cipher(&aes_enc_desc))) != CRYPT_OK) {
- printf("chc_register error: %s\n", error_to_string(err));
- exit(EXIT_FAILURE);
- }
-#endif
-
-
-#ifdef YARROW
- register_prng(&yarrow_desc);
-#endif
-#ifdef FORTUNA
- register_prng(&fortuna_desc);
-#endif
-#ifdef RC4
- register_prng(&rc4_desc);
-#endif
-#ifdef SPRNG
- register_prng(&sprng_desc);
-#endif
-#ifdef SOBER128
- register_prng(&sober128_desc);
-#endif
-}
-
-/* sort tests based on their requirement/services. Helps make sure dependencies are tested first */
-void sort(void)
-{
- unsigned x, y, z, a, pidx[26];
-
- /* find out where things are provided */
- zeromem(pidx, sizeof(pidx));
- z = 0;
- do {
- y = 0;
- for (x = 0; test_list[x].name != NULL; x++) {
- if (test_list[x].entry == NULL) continue;
- if (strlen(test_list[x].prov) == 0) {
- y = 1;
- tests[z++] = test_list[x]; test_list[x].entry = NULL;
- pidx[test_list[x].prov[0]-'a'] = 1;
- break;
- } else {
- for (a = 0; a < strlen(test_list[x].req); a++) {
- if (pidx[test_list[x].req[a]-'a'] == 0) break;
- }
- if (a == strlen(test_list[x].req)) {
- y = 1;
- tests[z++] = test_list[x]; test_list[x].entry = NULL;
- pidx[test_list[x].prov[0]-'a'] = 1;
- break;
- }
- }
- }
- } while (y == 1);
-}
-
-#define STACKBLOCK 8
-#define STACK_EST_USAGE 32768
-
-unsigned char stack_mask[STACKBLOCK];
-unsigned long stack_cur=0;
-
-void stack_masker(void)
-{
-#ifdef STACK_TEST
- volatile unsigned char M[STACK_EST_USAGE];
- stack_cur = 0;
- for (stack_cur = 0; stack_cur < STACK_EST_USAGE/STACKBLOCK; stack_cur++) {
- memcpy(M+(stack_cur*STACKBLOCK), stack_mask, STACKBLOCK);
- }
-#endif
-}
-
-void stack_check(void)
-{
-#ifdef STACK_TEST
- unsigned char M[STACK_EST_USAGE];
- stack_cur = 0;
-#ifdef STACK_DOWN
- while (memcmp(M+(STACK_EST_USAGE-STACKBLOCK-stack_cur), stack_mask, STACKBLOCK) &&
-#else
- while (memcmp(M+stack_cur, stack_mask, STACKBLOCK) &&
-#endif
- stack_cur < (STACK_EST_USAGE - STACKBLOCK)) {
- ++stack_cur;
- }
-#endif
-}
-
-int main(void)
-{
- int x;
- unsigned char buf[16];
-
- /* setup stack checker */
- srand(time(NULL));
- for (x = 0; x < STACKBLOCK; x++) {
- stack_mask[x] = rand() & 255;
- }
- stack_masker();
-
- printf("Built with\n%s\n", crypt_build_settings);
-
- sort();
- register_algs();
-
- // start dummy yarrow for internal use
- DO(yarrow_start(&test_yarrow));
- sprng_read(buf, 16, NULL);
- DO(yarrow_add_entropy(buf, 16, &test_yarrow));
- DO(yarrow_ready(&test_yarrow));
-
- // output sizes
- printf("Sizes of objects (in bytes)\n");
- printf("\tsymmetric_key\t=\t%5lu\n", sizeof(symmetric_key));
- printf("\thash_state\t=\t%5lu\n", sizeof(hash_state));
- printf("\thmac_state\t=\t%5lu\n", sizeof(hmac_state));
- printf("\tomac_state\t=\t%5lu\n", sizeof(omac_state));
- printf("\tpmac_state\t=\t%5lu\n", sizeof(pmac_state));
- printf("\tocb_state\t=\t%5lu\n", sizeof(ocb_state));
- printf("\teax_state\t=\t%5lu\n", sizeof(eax_state));
- printf("\tmp_int\t\t=\t%5lu\n", sizeof(mp_int));
-#ifdef MRSA
- printf("\trsa_key\t\t=\t%5lu\n", sizeof(rsa_key));
-#endif
-#ifdef MDSA
- printf("\tdsa_key\t\t=\t%5lu\n", sizeof(dsa_key));
-#endif
-#ifdef MDH
- printf("\tdh_key\t\t=\t%5lu\n", sizeof(dh_key));
-#endif
-#ifdef MECC
- printf("\tecc_key\t\t=\t%5lu\n", sizeof(ecc_key));
-#endif
-
- printf("\n\n");
- // do tests
- for (current_test = 0; tests[current_test].name != NULL; current_test++) {
- printf("[%-20s]: ", tests[current_test].name); fflush(stdout);
- printf("\t%s\n", tests[current_test].entry()==0?"passed":"failed");
- }
-
- return 0;
-}
diff --git a/demos/test/test.h b/demos/test/test.h
deleted file mode 100644
index 1dee4bf1..00000000
--- a/demos/test/test.h
+++ /dev/null
@@ -1,40 +0,0 @@
-#ifndef __TEST_H_
-#define __TEST_H_
-
-#include "mycrypt.h"
-
-/* enable stack testing */
-// #define STACK_TEST
-
-/* stack testing, define this if stack usage goes downwards [e.g. x86] */
-#define STACK_DOWN
-
-typedef struct {
- char *name, *prov, *req;
- int (*entry)(void);
-} test_entry;
-
-extern prng_state test_yarrow;
-
-
-void stack_masker(void);
-void stack_check(void);
-extern unsigned long stack_cur;
-#define stack_chk(x) { stack_check(); if (stack_cur >= 1024) { fprintf(stderr, " Warning: Stack usage of %lu in %s, %s:%d\n", stack_cur, x, __FILE__, __LINE__); } }
-
-void run_cmd(int res, int line, char *file, char *cmd);
-#define DO(x) { stack_masker(); run_cmd((x), __LINE__, __FILE__, #x); stack_chk(#x); }
-
-/* TESTS */
-int cipher_hash_test(void);
-int modes_test(void);
-int mac_test(void);
-int pkcs_1_test(void);
-int store_test(void);
-int rsa_test(void);
-int ecc_tests(void);
-int dsa_test(void);
-int dh_tests(void);
-int der_tests(void);
-
-#endif
diff --git a/demos/timing.c b/demos/timing.c
new file mode 100644
index 00000000..54c0462d
--- /dev/null
+++ b/demos/timing.c
@@ -0,0 +1,23 @@
+#include <tomcrypt_test.h>
+
+int main(void)
+{
+init_timer();
+reg_algs();
+time_keysched();
+time_cipher();
+time_cipher2();
+time_cipher3();
+time_hash();
+time_macs();
+time_encmacs();
+time_prng();
+time_mult();
+time_sqr();
+time_rsa();
+time_ecc();
+time_dh();
+
+return EXIT_SUCCESS;
+
+}
diff --git a/demos/tv_gen.c b/demos/tv_gen.c
index 07633fc7..c37d1af6 100644
--- a/demos/tv_gen.c
+++ b/demos/tv_gen.c
@@ -1,4 +1,4 @@
-#include <mycrypt.h>
+#include <tomcrypt.h>
void reg_algs(void)
{
@@ -47,6 +47,12 @@ void reg_algs(void)
#ifdef SKIPJACK
register_cipher (&skipjack_desc);
#endif
+#ifdef ANUBIS
+ register_cipher (&anubis_desc);
+#endif
+#ifdef KHAZAD
+ register_cipher (&khazad_desc);
+#endif
#ifdef TIGER
register_hash (&tiger_desc);
@@ -495,6 +501,127 @@ void ocb_gen(void)
fclose(out);
}
+
+void ccm_gen(void)
+{
+ int err, kl, x, y1, z;
+ FILE *out;
+ unsigned char key[MAXBLOCKSIZE], nonce[MAXBLOCKSIZE*2],
+ plaintext[MAXBLOCKSIZE*2], tag[MAXBLOCKSIZE];
+ unsigned long len;
+
+ out = fopen("ccm_tv.txt", "w");
+ fprintf(out, "CCM Test Vectors. Uses the 00010203...NN-1 pattern for nonce/header/plaintext/key. The outputs\n"
+ "are of the form ciphertext,tag for a given NN. The key for step N>1 is the tag of the previous\n"
+ "step repeated sufficiently. The nonce is fixed throughout at 13 bytes 000102...\n\n");
+
+ for (x = 0; cipher_descriptor[x].name != NULL; x++) {
+ kl = cipher_descriptor[x].block_length;
+
+ /* skip ciphers which do not have 128 bit block sizes */
+ if (kl != 16) continue;
+
+ if (cipher_descriptor[x].keysize(&kl) != CRYPT_OK) {
+ kl = cipher_descriptor[x].max_key_length;
+ }
+ fprintf(out, "CCM-%s (%d byte key)\n", cipher_descriptor[x].name, kl);
+
+ /* the key */
+ for (z = 0; z < kl; z++) {
+ key[z] = (z & 255);
+ }
+
+ /* fixed nonce */
+ for (z = 0; z < cipher_descriptor[x].block_length; z++) {
+ nonce[z] = z;
+ }
+
+ for (y1 = 0; y1 <= (int)(cipher_descriptor[x].block_length*2); y1++){
+ for (z = 0; z < y1; z++) {
+ plaintext[z] = (unsigned char)(z & 255);
+ }
+ len = sizeof(tag);
+ if ((err = ccm_memory(x, key, kl, nonce, 13, plaintext, y1, plaintext, y1, plaintext, tag, &len, CCM_ENCRYPT)) != CRYPT_OK) {
+ printf("Error CCM'ing: %s\n", error_to_string(err));
+ exit(EXIT_FAILURE);
+ }
+ fprintf(out, "%3d: ", y1);
+ for (z = 0; z < y1; z++) {
+ fprintf(out, "%02X", plaintext[z]);
+ }
+ fprintf(out, ", ");
+ for (z = 0; z <(int)len; z++) {
+ fprintf(out, "%02X", tag[z]);
+ }
+ fprintf(out, "\n");
+
+ /* forward the key */
+ for (z = 0; z < kl; z++) {
+ key[z] = tag[z % len];
+ }
+ }
+ fprintf(out, "\n");
+ }
+ fclose(out);
+}
+
+void gcm_gen(void)
+{
+ int err, kl, x, y1, z;
+ FILE *out;
+ unsigned char key[MAXBLOCKSIZE], plaintext[MAXBLOCKSIZE*2], tag[MAXBLOCKSIZE];
+ unsigned long len;
+
+ out = fopen("gcm_tv.txt", "w");
+ fprintf(out, "GCM Test Vectors. Uses the 00010203...NN-1 pattern for nonce/header/plaintext/key. The outputs\n"
+ "are of the form ciphertext,tag for a given NN. The key for step N>1 is the tag of the previous\n"
+ "step repeated sufficiently. The nonce is fixed throughout at 13 bytes 000102...\n\n");
+
+ for (x = 0; cipher_descriptor[x].name != NULL; x++) {
+ kl = cipher_descriptor[x].block_length;
+
+ /* skip ciphers which do not have 128 bit block sizes */
+ if (kl != 16) continue;
+
+ if (cipher_descriptor[x].keysize(&kl) != CRYPT_OK) {
+ kl = cipher_descriptor[x].max_key_length;
+ }
+ fprintf(out, "GCM-%s (%d byte key)\n", cipher_descriptor[x].name, kl);
+
+ /* the key */
+ for (z = 0; z < kl; z++) {
+ key[z] = (z & 255);
+ }
+
+ for (y1 = 0; y1 <= (int)(cipher_descriptor[x].block_length*2); y1++){
+ for (z = 0; z < y1; z++) {
+ plaintext[z] = (unsigned char)(z & 255);
+ }
+ len = sizeof(tag);
+ if ((err = gcm_memory(x, key, kl, plaintext, y1, plaintext, y1, plaintext, y1, plaintext, tag, &len, GCM_ENCRYPT)) != CRYPT_OK) {
+ printf("Error GCM'ing: %s\n", error_to_string(err));
+ exit(EXIT_FAILURE);
+ }
+ fprintf(out, "%3d: ", y1);
+ for (z = 0; z < y1; z++) {
+ fprintf(out, "%02X", plaintext[z]);
+ }
+ fprintf(out, ", ");
+ for (z = 0; z <(int)len; z++) {
+ fprintf(out, "%02X", tag[z]);
+ }
+ fprintf(out, "\n");
+
+ /* forward the key */
+ for (z = 0; z < kl; z++) {
+ key[z] = tag[z % len];
+ }
+ }
+ fprintf(out, "\n");
+ }
+ fclose(out);
+}
+
void base64_gen(void)
{
FILE *out;
@@ -524,6 +651,8 @@ int main(void)
printf("Generating PMAC vectors..."); fflush(stdout); pmac_gen(); printf("done\n");
printf("Generating EAX vectors..."); fflush(stdout); eax_gen(); printf("done\n");
printf("Generating OCB vectors..."); fflush(stdout); ocb_gen(); printf("done\n");
+ printf("Generating CCM vectors..."); fflush(stdout); ccm_gen(); printf("done\n");
+ printf("Generating GCM vectors..."); fflush(stdout); gcm_gen(); printf("done\n");
printf("Generating BASE64 vectors..."); fflush(stdout); base64_gen(); printf("done\n");
return 0;
}
diff --git a/doc/crypt.pdf b/doc/crypt.pdf
index c0ad1e303abe38f74436110e325755fe871bffe1..9eb60c6cbab9ccb3269caec6440559309afe833b 100644
GIT binary patch
delta 383134
zcmZU)Q+S|Fuq_<hwryi#+n(4H+jwK!nrLE8Y}-yIwr%5l`+3g!FaCYix~i`3Rb8uB
zWiH|r+~X%m0SSC+11u;ZKA%za0|?zGia!L(Jl#10!Udf~S<pu!FT;TNqLmo9Sa+@M
z%MC~lv=iT>j?+bn>TN~>NjFfsWoJ%8{^c=wrMpoItTSe}PpMwpL;@JAMbI<FYJ+t<
zKecZf(}cokT8-<)itF64?faD2D1jf>1t$F`QSX_LKnMz~{Z}pVaI=v4CS24fG^+Kq
zHJw=inn;LC!MLOuHCQSqj%?%N%`e2#QPn^4QIR<2%Yw4>^*Dd@ON6eKF15#hh$u{p
z*b~~amUiQp>ML##w=4Jz9z`jv7vZ3{$g=oN`CAT{56qlc{n)PlH{zbnqOb+~G*G~S
z@=&FaC5JKVI3}1A{-m8&o~V;HjNvd59xyk^5?$3~_E;RoojOCjYwhH1Zg1w|>TGUo
z2lrpk!NeMln}mhre_A$P&i^;XmL5m~hMrst8VshK(!dE;2MXNKIzdHYUMo0my)@%{
z6RSzvE>(knZ($g|*9pvaDv*Nas}$O*aiEmS6XwNPjs6KYNg4EzQw_q?CT?WjTp<=5
z8Vpm5)5Hkvxh|=DC+HY14|KyXm?xp5=lEHu(}}Cj`ZAcqzymU9g5?rrG8{@g!hZ^u
z2SE+DzRq=6XKe62DZ9HC?|+;4yB1@IMmI5nutWD_qf{mErDR3z$G;D%9(tqYreL|m
zJ*V>&4VzUthV?f`SB+%i?3+(Wz!$LoUv{&x{$Inn+1Qi&Aw&T^IhS=Vl<sq_lMI3w
zu;^#neW|ruj=xk{jp2H~GMiUUFr%`TPxF{zQ1Yco>x(`4lZI~lh)^KXR^qp>{6Rje
z<55rd?@HeUavr)LyB{O%?t8+LzgF{~C!}QGdK1)>9-z4eJit$FVlmF)6Cy+bmeVet
zJOx9fuPfG23=5$D0ax$Y0HfTl2o7|Ak(+6pi@o;3rU(*76Un!bqF?^}D-z^B{8DB-
zE`+ptO7H4Oj*p}-0!>Iyut9+Ul%)*sZ~6e43szuS1gpM&g1vnqo{Jht5$1yu3<;RM
zy_qF5v(eu5mrDvpvj&+$am7#ecVP?u>7r|$7*(58@eqLa`@o^TGO&w~oHE6*X!U@<
zCmZ|kIDJkA^u9leI+qMZ6ISCYMG@A;mI2@POGekzDoov0bQKqBXpGztox38<uyk|5
zUau&uD&B!)t#}~obj=+_PlG8)A=*29dY-K%i-n_5{}cmos4_??^b7i;5)~C=lnO3@
zOvDQ|7!CkO`4b(LnL*(%er{%dH56D`Zxatw<GXLZN|8|5&-aqYPtV{QK&~i3LM%lP
zMwyy$*Y;Y#-v4Z^yoBsE2C)joDiV{iHBC3DOv$hQH+`R?<pfQd&0VOHe?me~mAn}~
zxPnS}D$DWDIl&7Re#t^8CDS;{uPP+(@*m_+n-KtFfiCoctbEp}`T6MQjws8&81EBm
z4H46@L)G^&cy8V_ezPm=RTG|E#<VubZrUiG(mfcg9`-%Z+xD=6olaP>Zlr-enoR#D
zOe*%!I@N>x^kR0CzcH=x4FA;eWECz8HNFP}76X@;1r!o3cC7Wl9qB@euU!R+Ee8fC
z*!qE@qKcz6U-xY4WErlmrs2$>f1SijLlH;GN8Dqxl$iCC-k%hP208w%A9wRl)KtWv
zLZGBqPHX+~<?W7YFM%01`|`@tnQWbm{3;=k<@YBf{3>w}Ucxf&gE!|f5#jLGccCau
z1g?ncm`Npu;1#HIyLN1omRtrYugzro-J1aJtt;su**_PeK)kkkiTXs<+kf?u>GfF;
zY%9*zr;B~7DBO_9$3VS_IwEPv!}Yi&{!jU7q`~a01082h_d2kIkc8$QnbH<}1ldF~
zV_@&IK7-j#afYQ|kGLGKCo<8x2X52VrYLT0ygC$nN`a{=BF{0a<e!G5$XRUB;1FO|
zA)~A%<m>yKO{ktyXGj>B{iMujZ4$anAS^vQL8^Ji52l(H?d?N((Ux=6HUwuR{;O=@
z`XV2yGsUR~rvZOm5+&khtA`k?e7%9Atwi;q?q%mDv6j+Cn?jrp?kC%etc3A9Cw-KX
zN3zV%gVk9waZ&_h@B>@^O8#lsXBS}Ae-cMVl;Gtjmle3^*hls8s&C2>JhZsZm5PsA
z8#|{eW5&7`Zv1dX=)KMrJjqb-g+Fq8rcM>!rW8~*IVV}+p{;iy1D%qvOA(D-0Za4T
zy^punTy7CVr>xjFnQ+;Z)aj$M-qKbK$=GNvleXnxoQfyrkJ&J!DzW3o*GwQ3iG7aM
zcC|AXX(E{}wYv{dxe>wYY4Os;W{?B}1lwvKDvCpGq}P#;Pb$jY)hSeUfj4jdb_%$n
zNEFw0Ay%B1Q0W>p+Q=WUDjU!noQ@#erQiyMeVS!S^!r;YKE(ru<O9h^?oT9VGdcLL
z;DF6~9Z5PtIZ(Hrjgz-@_ZOg>rBrXVg0yo~m>=I1_kI!J$7!Or*A@guVuuqU9WYLH
zPtsOR;I^J3tXG7t28-zx5CXwo6ms1BpxYg=w97=_G)Iy*n{oF|PNal=UarTX@6(c_
z4*o0l6GUrSL)w`zO6@r;xn5bh+boWjn%HvUv`I}70*oxzo%!OXpdK*yDg#reIGSqV
zC~SUL_!+}<^nCj)(T;Pp+L^)I6oStI=2IpAbwk*MEom#mP;unC0e8tkMb(*&87EC6
z5hLTC6TN|3N6veim6PQo$<b`Nxad=NivQnD%{6czwXOIfB~#I`dA&EndqPfVPZ@}=
zmE9fr@#)K;ykf6~BMlf4(ds%y4P_iN)Ul9Ig~NcJp4%BvVJ}<a1nzBmu*@t+gd5A?
zb~e^x%yG_0HQ3_Np;!GIHKFv2Wmhl{p{iX7+#-M4?;fGar#C9JW07!OnXu9{8{>I5
z$g?&(bP6f;dm8Xq=*Fvy^wg{s{THMyZuYs_g>K-_+`bT)W(qj%xIZG-{(x7RbvF`U
z>--=n6nSxdw_}?+nsEAja~aHi3HTE9F=LKdVS`$%RZeL#Mos<^&96{pYa!(DM-aKo
z@Rn<!T=8}bz)9frPDl0r=BA}|&=RLB0?qyHxQTnKrtLfrZJ2mNPEAtD(6=X-`6m9h
zdX5pemq3=o6b-065^I7i1!Ejqaw%?bKG8MZc3jKyszkuPHU?eo?i+RJbCh|^ExRHU
zEeIIoeVP9rO(?N$_%L6m0E2zLt|M59A}UAKb)GyE6tFU-FAVPdJMEDf{Uc!#$~H1$
z$H|C(?LY50@Sf(TtcB60$d2-urB3~Y{uJ^)ocYdi<0Vx4Um=>E<Nt<eR^DVL1aUxb
z!g-wwW7B5NVOE~|v>#?GzL=a(hT2rOY4P-DB93nCBMhbad=E1S*p66jF-0@D904;w
zc;F7DljBui7xu?|D2Q9ZtIPLD!*u#|I#a#f*S6=fANxgTw`6@~z+T3})s0$dD~KCv
zu<%X|34-t{;q;HcC&UAQn}=-WW*vY5!s;^TIPbO8(N2(Shy*P$^VUn9K_~3`51qla
z@=^%|e9)B&MmjW<xWvO4j}<!UTqJ5ZI@C%G17$4LCflqz7L=}ksFwq_H+25FniIB|
z=QYtl$ahx+udjv4%sS7YZg<Z8@2GZ@fpl;ftq{LR$t46m6ovUFdI)Ggs4n1&uX|0<
z43U3GgKQKHwrX;oQTO<k6@eFzDhg7neUAfG)Qg9xoVb-x>E(VGADTxsn?x#A5@|KA
z{&o7z&Il(>R#w_>@U`vS)jB3Mv3|OeHO|R4FncXksT*w!*{HC!)>0A)E)Vk{=5VzC
z=*nt{Nl{*&X8Qe$Om+?eHUP-1Vj_pT(4C#BAi2B#+cJ82)(atxr8%;`x5{G-CdH8d
z*2K!77NCQs4fvDKx-TR%7W<4;Y}VE7Fwk+rQKG~wszkJ?;4FiJYs1F(H`sDcmwJC5
zV7cKvA*gymG-QXMj)}>qp^z_%BB(*LqLH?r-f>MZ#+v#CCauqkkpaSgOEc|%J1`vT
za7hN3-gd6Y;SzkPP(84ki+~~t0T`(}vnXY^$eU0jhb97qx<b+q*9p5~*?*TK(nB{|
z)y=EuG%~wdsWh1Dm#ke)1Ld1q4hFYRTpPNl7?M#zNf132YKgt#{&;&xgc4U^bE(R{
zaPy79fznar8(%7`;s6Bb`Gw8#rmUcEUweyOXe2ZUbI?BcW!up`ZbF7t)e;$CU62o&
zao8TssGw9<gQkQ8zR4_Pubkp^^TLayI4XHsNI@9FltW!81h#2%9(7PH9;ng2c0SGl
z6sjYU;p(x{bWkEXu(Dk~e@`^97Aik`qa#edZMWfN3z+RiUIF-6X+Lxc`ghmOzr!i0
zzc;uQ2v{T{iAg&a(E87y86J_M*qJ312^rC7`iUlG;24rJa+V{o2Y!$DH;y7E{P1Y6
zwGiNT{IcWF-NF>bIqg=$c>;{@vqDgnhV9=$IiYHNlEBBWTH$05;=1YZYrg2#<*}&$
z{dqNGWfzjOU;}=W*3{O;{?uW^&A2rcDFkym2&V;8TVt4>c+ljUxl2U$CmRDD+Uj9%
zk%_r%`=xMm$8`d*NER_sX;TKv5y+tz^COw^`~9Ahd_7J*wyHk{C)`-1G8Vsk>Bsaf
zhnm2|f7gWUBq2{y1+7A3->aZw^<uDC?CJKk1Pu@DB?U4Yf7hjSX4dhKmfMb<5%KHP
z2O-LYnbypbj2DKTAiASOe|AO;uve25T)(;f7^A{UUPFj*FQwGYDT+q_d56^JmLuLD
zG_Wq(Ce}-G?}=l!uTXHpS%gE{-LOwn6^<1{*k@L1Ew0*!F)U}%UwCyY9h2D&@8UG_
za=g(f(*?L$%x5=G-zkx&yK(>CMdlqhJK|yF+^+y5XGLu2U^c~THWVmv65w&`4vj)7
zIB^i%!o-Xb9~gES3!hx(H-SSzh}^F~nEM!xtXum2)j>WDicrio8EQyYhXAI6nM;N>
z5kWS=s{m$%8=aZ5#Q%oMgSK~QRLM!EK&4T9T?1GuiM!6+^f7XgiG`{->>T_yA)R>U
zqtlG+)+meM$%~(AcLuTWrlk=ve2^FHK`l>btd&gzAA`y<iF>WU(Hx*ip~}sDCM4gV
zFR;F0ARr)3Ch|@`{TObx<{GwsMj&K$PTCe%PY9OTwA|A+vo$=(F-PKsam2OP5<yC&
zTLNU{`Xd$-2aH2qw3A)PsNejDBmI{6Aj7F*9EX|&1{Kj}{Z?qrQHp9z=}1tlqXo&N
zu8D{t_#!0XtNbELAp4Ypd!uw#jDocN)|7;IY`xj_<82RXwh}~fpOS-5r+gc?4l<GR
z#0ujID!9FvRV>^?t%b?)CWsI=Oe9Bp0s%sfzhq<_hqQ7_5k>vVo!%wc%Y^Wer}H?D
z?yXR2Z-8e_!C`)Qt$5Z~xkiN)nQBE`1P5%fM#TtdP$3dcg*v&!xnQ2LVuqJXO`7ov
z%Vx=1z3Rm%i>+G8jG6dZqK-j1|3G12YX*ovJ071PtxJBM!`+aD{W%v6M`_Gz0ia-7
zAz4%$*;0q0hZAeHm(;`a1ob*d&#^6d6I)}laU6jXpx6AkX4PI>|3jW;gCZp&BQ|j7
zLw9!wB7uL=kl|>E*8vexFZbI(37l!N4l48+{Jn3N>{UUr$y%Aq33aZ;Cs~X<(6)PG
zL7t?A{j1WFfO8Xc-C=ltTgh5n4QNtUkwR5aFi>c}b{Iy=5iy{ht~cbVz_$FY08A)u
zS$cRh?9Eos@@eA8-_hrRP|7i@NUK=gwSPfw#T^Y<iY6olcqR4{zoh9^Qy2`>)wx?4
zxPY0)(=D1o3?$+u@*8UkF-lc3sSZcgtTn_j&qo}n(8#qYNdLzF)AaK(8HfuB?SmI7
zk<v0pyxjhxSA@t`@{=Umkv2~3v|)y?dmzL+z}VaXkQv5BeaR+7KVBF8z`{UjTB)li
z0Z>WjSM3)WC{GzkS8+;$SbP^E+ML#(9oNchro4+Cc_p>`R061~SREgjP!BSn8s`vK
zd9U}z&wt}y--+WUcvQ^o3I2b~1;_u(;MrK%*^_V4|4ZR@T-JHewk(%EV3w}rj{0D(
z_MQA}hdK9SMl>%~Qn4j0%<L)V3d$zEfzKT(2{PG(NHz6A=Tr?yFeCVv_V;s1G2&sA
zd{z$N%cYsX562IOd>u>BV&eAH?BOnKz78zPRB<HPgPa>AHWe%>4$>H8{ML-u+v(~2
zd~E1^47iL>{yr0t=7L5g3!MGj@pR_)?vqbP4~n$o>l5{8M5f3;LLC+sDe}F(&y&Yb
z3Q$I~Xyy7J5QlwMSje<e12G*>aPV=+Y7BrdxyY^`pN0ZGX6ppapaN}G{<&67Re(V~
z^Y1*flsM#tPBh=1dCOK5f~7<>xmOW1;ul>n085H@iD1)cDqMS6eqjWck|fd`JwyhS
zIm4S5hVMtbG$_2zorPT)g7e>J`~yM$93Kg<$VguZ_o*Zw9K|mI8XYja15iZtlIH)R
z2SEr2#VMgcW&CggJ)=7=SK}K5)f8ELzOP@Yx{~LU@a8b}TNyGCwnEv9l$FStm^Bav
zSi)rwQek$O=w_nkt;3#Jl6FBJ0Un25SacCxu1cL$?8>I03V-sxJD6pEls)?V1lx7V
zd5PVj)y$TalmU{xJPW3`-`bDHm)>=O!6<xCS3zvm1@cQ=Dd+_Ju!ngKBW_>clekJS
zMZ#ss+wItLK#}N$m69DvM#*>zM>!i1<leYD&hL40@0+W&5b7ly0&3&wm_4JlV7*TR
zA|@<~bMW?VVvyqH*5itT9WYK4<JeymQER4vIM-)t)UO&U(W;k8Ro)aZcGFzJ@R1(I
zUopQqtcpb6Ohrz^b_*&HjABf3{j{c9okkQ1#f+-pUR8j1;)JMS*J6hc5i|>s>{Z&P
zrY;1?m-I~^_J+pmML-;hgSlk1Op?E{O@1zL;4;Oi{2Cws2-gWAU4l~e<plRKiWY*o
zrDRD##EHT}08gwo#wiaZua@nwd5kG~?AVAU$23t&ud>!V^T$dTFAtDk7CAb+>zgh#
zl>8;^q0*j_X9I@^d$3rnnFt0zND8#R7~(MTs#NcS)&5A~n_T+usIc?Mhiiv8glcn@
ztRmIf(<3%pd0AFd{s9?Jh-u&C*X}ij3Mul%chnv+ZAwocjZA>4s^$H%$*@g<shVcC
z|A;1u?)&N6g+)AMYai=Dx$Y^1<%u8~68L^dMj)$HYjULBfh%gI{6iZ+gD9eCvd1v*
z&RU1YfC((51O(bV4}~W<FfAxne!(k#sty&}#!p+5gFHt2W$#lpEBJpMRL$_sYLU9%
zj6orU?AYxe1fALuY?v){1b~;<4d|djXYiv!tNT1K_lo5Gdk=6mJa@8Oknva$YHNwM
z<@|dw#-|xTz8bxR6S4xZ-oX2TVKAaOB#3m3wyrT$d>9+M%wT|xI;}DDuM(lCwQ;Nj
zA5%>EZ`<8KNkk*K-j|n?Z$7?x@co_t{IybD=$e=vIih{y{X^f<W6OvnXh6$$>6QhG
zC(O7|in&3w?&_H3x%jW>1shzeJ61|_4x}RM(0N`LId#$y8>22j71?M^Iw$-wWdVtB
zg5s;Hde)2eDjm9#oW1Cn-1u9XEkI6rzFJL@?x9y3{PBDoQ&L4uLC&XLG#EwcK^L)V
zhbw-FmZ$@qHhH^iNz~1Iq**v%(M8jn;H&0QBSPO|I31MwKE#$@DMEk=&#S-ES6~7w
z`jn2I%O;!+)MOXPdN3y{hag!KZ0L)G$S0NFV6~g_Q+O@4>Cv8o+s3WW$Uvy$krbZO
ze$hLgq>Zcl@;agx4wz^~a{?;_cX-@1&c_zL04wYvD6~Ssc8>Phhj`B2-~*r#i;?i(
zPjN2VCoNuo<S?B_lEC%KVBMJAS3P{G?q>LXQ3AS(a&ka_q|*eM{P)q&(&J$^ao6ud
zdEa%>DThpI)43%W2HhVyW__ivbXB;^rv2j-QT5TzZBNl#Wn2tfI<yHEb94y)_rt%l
z^yP<pVg+L&J6c>t0|`uPszXyu`w^3h+IC&NdA+^7IBUigxV&Hgvf_1pjD7HR2`&()
zAMf|XFfjp_{HHd`>qqo@!TmYlgO@%aP0#tx$P{Iei2YhXQ-AiFK2aKr$|nos{potB
zP|h+)5Qhjzx8c$;X9>-<5uJ$Z-w9t{{e#qh;*`I7XaB5&7m^^+<hDLi#q^R`H`fF;
zarbe5`m*>9N_IS7X!&OKXUr!+g_7#Sx#(w^O*jLmw<Ik2Zf0NB$=l}9zNuav;+Gms
z-#;H^+=CCeV5wo<U9zWqiz~vo$Zs#cynowWF$j<@ZpguI-$|-v_RqVy2vtpEcWp6r
zk*m|KO}0$8!r7VjKf8X(XRC;qV$J>g!Yt-HUOK1f>FJzj8c@TwadhwmJ0>ajHO%yT
zu!#k5Beia;R<(rl*9N7|3w`dSmC(Y<CWVe_QgCeyNB3geqU#?zL^*WQE;st>aDohA
z>Pk7Sjbxjqgj)pfsIrgG>ENlye?q&h5SDx^rPE^ImyVQdQI{l{a$G;GwDxd;3w+p}
zgrfKy-QZ~_6o!V{Cz{l2K5=a{vdV{wt}XzfxFIL0DDSHb<_@c^AEc){96Av9t$G$3
zr%YAsgx3F1Cv?6X^CY&1*3*0A&7t4u2IE$`VZjG~x<*hT6D*&PKp}A?7T?}UqeBx2
zbMEXYZ={U`R#rRc1lxn&A9PQaa7|QzW0jlmZd^Y6?r4kQWC*c^JW+L}OO7{Zhav@X
zPl|m7obHxSmXWJSCaRnFKN?IP2Yk^zxkduSFj-EOU?&5EgzE%NlbQQ7K{$n6(17D2
z=Qc~-eN=q>Hse8sXOhRbZJpiq?lh!-a?qr2MUGQ>UBASdvWZqzaegHkv36au$YVqu
zkF+c;es7>IH$;2h7Z*sX_aH@)Z<YhyaCOmwKU!Bfx>fC3iwYwu&*kFDNKLOUCUIGH
z8Kl6h7O7^;#~NcpPVU3W{S5m52iw;dK7J=%E;1+-%{?^;JTJ_r8d#qNBuW!rTZ6tD
z`5>V&;k4K)aW80MPGpuha3Z5wj!H{Im3^5d2_ECthtZP!7@WVZqaJPWZ~;)RP*5U!
zmdnlZTD(xm5H{E)9oD4Qz<lYXl~N{N5=K)eSP1zGZVucvj}-Y}AX4@nI)uY}(z{Sh
zl;D42Kj9p&f~iM!eXc8lJr33_nq)G<Ukf))aJuQ$bTM#g@JReqDofepc`o`7C9JIQ
zdIK7V2DRzvb3le|cU7^pb?MOY@T+%0r4xA`{ETeeUKP>#Qovx=S9te+UxcD4)v>3!
zX7&hy;9^%?CC3xsgL825Bv%uN0GIl@4tTsco0g42CPW?cdoTW8@-TLDN6nz+GaQr6
zwr!0Njq6V{*OoIYEJn>%7(bP8B<PZES4Q^Pk2_vW-)ILS%vQcq^E?)oOP5PyTDiWR
zxTmI}s*`mK*@I(>k}QLJehxuWkb{v+un$4>|G<~mWj=5S?kV6q&fYB71R`L3=8P7-
z=i0jQT>nCS7FxRPa2-Oio~)I?{nQ8g6NM+AEFi3=TzRLLn(WSz>V-f#>35oW=W)%G
z$jaG6Qv={H`lr3Clef&9^{Vcc$FgG@6%E#bY5N~Hb9^)YR&GA_IoCP@=1?jX7yJ>*
zEg$J!(KTXl+?eb?$t0R(08;Z9vn8r>gqT;3E+l^6agtH{WZ%iq=5#OR|Ja~ZTv#zt
zoNcoZI~z4{-vga&ZKA(zQyy)bZ6~<~mw#FkuDq>6>f<;2P8bo$dW|!nRjy7piCdfc
z9-`iU^D<t6u%^6Z&%X{dt3=fz(96cMl?U<Qkn1y};+_X~LWbJt0;%^^m>pGJwF>!5
zEG5u9Cl{uyBX}xCbr#{~td`PNR>!vtM6U2e>|r?UXE4%_`y!*8CBaTl#%BgB>(@_I
z4Vi0+W^Hm;U&p5$hD^gAPxLpcJV!(lmLIo%-L2o7`bCK*yV>VDTVErQ1(Mn<JxK-l
z;4De`nR%bGEVo?-0P^+r@nIR*N0lSFz5QPU-e*`MLXlX*BS$W0cu0s9&lT><mSixO
zY}J?$i(S?)a*t$DdXgs|1FV@^Gf}T+bIuOkxZ?&N=r!8F8f4UD5Ebfg@tcb2%1tTb
zn_)yy$vl^B_s{x&K$p^aai8LOn{yVxQmqBC${6T{k{mh$ID2_JsR+_RnF6{Wf57^n
zkg{&NCQRVc$dP*(N-oi5xzi6X(nF*pcXz^n>$`T*pfoXN3F+9G@1%pFZfNRu$<=B7
zp6H4TCV_c^#u#6j8Q?`)8+LRj;+x{W{_$Xe+<7kZOSOUoNpdWF>^P03CbIH0jU_80
zerJgauNgKSh)v+KbClkKi-pK=$r!nBcJVVXqvYw|;23_-Y^%>Ez|@FCyO619&3ji-
z!6Svn(v6r;$sS35Dh{VrM_DJcZzva;es$T`K_f|eR)?==$3Fm3smKj^k5es*HM}@f
z_-o6q4J9-qVK$o=!ox`H@3@QDWXp}ZBPAP7Axyyx^jhbE$celE4q5M(%M9{LTU2rt
z$i}GSiExjoFXV8ugL4|tC|pm4i12niI!G%Yzr{A~jjB?R;rT$Lgl$YBrTT0oP#Q4|
zBc&Y(KsnDzW*wT<rM8iv)=ZRFxoIHF?8>y8XDOKV2b~z|)B{T+72y2Y)|dcJl0Z>G
zYIa5fBms1jYwhq&nyP^(NJ<k$m3GG%#^lyr?1&L-p7|Dbm!TU;YIy7~S_4*BKS@cj
z$?gz{P8F#^$pqT1D0GbQ`x=YzCBw3!D6k5(4}UItA4jh`?m=L<YB&Kk3w$0ITt<tW
ze)jKK5D^a-b|Orurr5?B?h>*!h16l#uNRxZou6?;pATkh-Qb8s4k11c?XMr%7^oo%
zGEks&ar3CG3=i+hlaxkas=Mj<s$>O&YId`z3-n-n)c*+Wa0RedieqcWRg11p+`F@4
z;XuhE;JkX1a<eY2(MVK_(^lC$>k9LH+ulyH`aIHES7bJJp~Ua>_W3l~RJ9j~XSNgo
zy(($M!t;ll^~jkX*g%1o&t)~X3kBO2m!q)#2-S_nz2&vTHIAr8I{ierEa^H~{~m~-
zwi<%r9cY9%)vZ$s;l)UMDBoMV$0+q4@jnA!FVV+2!jfuV8(eG}C}TfGMJv`YD^+;A
zIwq)JO-_(ALd56GOjnwzz}v(55ITv0SbC<8_d;hHSAmJ1b~*#7&O+ltzsIK~aWNGK
zLs`sZAx{rHsFDd`Ln7qdbXDDw1WqYIPH+|Sc00n?+M`iwH<Z)&N9U=Uvqa=*!q=Sm
zZIP9eHAX^kkel;p@lave=p(5VsTs;n8=Sl+0veXM-lp{!pS1Tph={jDN3mIeEL`Gv
zb6vHicGmxCi^fAUB>=a04Y`ZpJBwMCe4NE+r9OG3@jol0c}=9c$&N+3Ry}!%6vy{;
z-@6VXa8<8kWx>Sn3|^^p%rq>>q<Fdi3$YMd`0pZDckl12z7eYN^T}@xt`#KnvKjW?
zr$yt<qsB9@zDHe7w1X}1wMjtRDPlx0epk54D<Dt4#8<-V{I*bZfv?*(M3i1no%+Wb
z8%<O7iTnB0n&aD>FDLd$jk{euM1~mOpjwX{k|^uuEv_ZbNE#O1Kthe@OjvCw`1^}4
zPe*h*+AtCZOp*WViSIROSED{E-^xuX8^Lo*nBp%non!TAfWuE>A~_()<J-;LTbz_}
zz^3^KKE2gd(DP;0M4Eh#%E_zKq*<ianq|aP=H|;;TY2pDUw!!>IYRL}u+o1Y>t8Zl
z@rP3#)1_1xsQsN5jM(?04;RrD5gxYV{ZJOmnfD8Gzb-cK3PlB-fuxm||MoC~f32*-
zbI6}C5m_p)i+<QtXB8mdJpP{*TZ@VF_=6F~f6MM{OFmlxD`HJjY)1)F9N7=+u@GdD
z&s3N{eNZBY;Ic6mHDF_k_MRmQ%`rPajpJ{+*WNfAbHdW|A4>c|#`@)Qm%&+XkjK<M
zXV7A&)*bFQ&QUJ60Tcsv$^Z4q!^xIxPY4ac#=^>(>`5pB6zgoqueYN58*UIAHzJSi
znuPYyJ{7kfA$3Xo?Xs)yE$Hp0;qs^+ZYGe~GJF5$A&nGXU%lB;I5q&rA%SSw{d$x=
zcMMti5)}IV;?dOc=KJW?xBv62VU6+2+2`@8iwnMw&NM`4W6Q7@`lY|ELKB``qWEm+
z^6KodL%{_H@cX{J?D<PjX**@T;?dFVJvA`D{+z@d667{9z&g=sS-z9sdhJcj1*d=e
z^OvvtMMo_SqU|ym_P>#(758`7DpdFyy7C<dp5>cyTpMgTyI{ZDPs|Z^YZ1xMcB|pq
z3fCcPd#5JCemrg?QN{*XeB#Uc)a2#ey_w6Ab<eUYAcGxBt7Eg{>y+h-S7-P<6x=jK
zWsa>ze`wc4uCKxT6~ocN?yNzr(5;ZINxgKrPS!c~dM>26eV*WJcb=5tbljTyuBL`K
zJAU00xty-VwR__++;A3T>IColhI9GQuF^>Pd6qj|p#!c5PsfV3fxG!~r28~)@3yc$
z33HngU=F8;w>M}VndYYb*ija79|>o?Sjb8vBjM?t&LC)xPv?FbW0sfYeOy!>{{iAY
z)>r85OfndTn=P<u2Q5^{J73{D^Ul<teJ+b4N?mj7*O?LMh?C0vZoW_ut{-W(-~*90
z$8@dtUf{RV@*a-krK975Wp*l?uwWBjYW&av&~<BQOsi^3!4-@uA&d-wGS>aP3yJ~N
z!fk1MwrY{TLJJT+>NNx#;CO-sMVlYTV=ImQ2PC7%T0Xn_^n3()G3KBx;Dh4##?~w4
zvL)eWc3OqSj)-BlMpX$Se6?Ps`861Nba?uVHh%027KmWH5bYBoWh|vEyJX1B9g^Y#
z4WG#V*Y6e=H}-h;`VGF(1GoEJUShrPgcFG$Dbp57PCwpZcd7e$!#;RLlzb(7J2Lqm
zBN89_JO0Jn1@9)Mp*<Zr%sJ-wi6&hOn$fwCZNJ77{Hrou)x8$-C3c_!i55LV2VQ8e
zs^}-oNE4I1UI&S{yWV$8I~-8!B!2_}7yg7E9kTS6N=~+ByA{>M-1@{oLXE2IVb`Vr
z)Bwzn2OXF{4h6E1XUuJz9wT*|?*+0}a`rtEis2nFzqfhJSv6=C8L)0`=t|-1IKjPh
z=<g)P4SOW_pj;4EyF@|2EDtAaX(Tow^}$qe=MJ}kHV!QGD?8c57VhisTP-s{1HR-~
zN=v#z`51HPmbW=(<HT0x$)ZcK1$5->CyH0BCvK||SE<m|94QJ;;hFpK?T@CqBMe*-
zRTxnyEFF*>^_0Rd8@`y)a3efZy6}(pY#Ub@*fGN22z~78yIlT0y?;_EM_yvgOKFyl
zk-CJg{w(95>~odDld+mPDdU9#LoUA|&lVHTKI#{Hb-ivkoJPZ0L{>(xV4@G=V!$<F
z#dxIi@lhK4RWvz9>ee|;JFJ`6Bdid|7$Vs!VysYTS|MZ-nJ7pkI91$Y`UB9U;nM#>
z_jDQ7)VAYWGV=OrIGf5wa4NIyUu`sGFzr-ycBJS`J3IP{(H6;s+QBpf$!L#G>!|DK
z6V<9+yNYN(g!F4|#>?f8L;pkO@}QLjPaV?5vk%Qt%X~zaW#x;|{FV1lM|q}j>+wdW
zRpI(EEFutPesi*&kTs1KzDAl$`QmC#W}VBPw<Ra}jzBP;$Z6htl+XY(EnI)HER#d<
zBb`5CNAkbtN#?_xFsgQe1lP1fSrv7yOYTaleiATM8x-D2EMYXY$$E}o$^G+F?xV8N
za_>PnPXZve-1#HgcF``95z_AwTc}C?(rg$IkeH)l3*01OXnJX2?W8p}{rT7LA-la2
zZ(az~M{sNg2>vSb?6<rRU#R6%V_E2B^?B5Z^4Lb2Hc~geZ{(za`;1)ex1l_)h<0%n
zQ_O^Wryj3(S%&zUA@X_+q07OUDzbD|fJd2k2o8m|NO~Fe&CgP|GqgZq`qn)(90f|@
z;2Jr*!l0h4ML&D=Vn{;rnG;?v=tXw<fb#s2y-b0c1{9Z=R&<aT`Q%^u6m2Bx`Dj@U
z3}sX7I?6WvV>|DF6a!(B{QW?2tpp_aB_2C9<9wuGwnLm?Q!#I0IJ}LG_ZS{1T$c=^
z^WbMQUw&kA8ca5|=LW58=LWx1*$EqQyA@O7dj<$hl&<ooY=(#4d~%9-d&weB`=zPo
z&~grc&e}+(B(v2QWs1elmzu!^U)gsD1RrE$xmEMcgi{gFal)PopCqOtiNQFyDu=sF
zDVX`BY^c`QNDuq5&JLwRD`~9lK_Rz_>l?IAQ~z!+PR=;CA%?dcqOO@mQAX?>42wsq
z`?&j`OcUX<%v=OS!Z`E#b0Tmh?B(+4FLyapXo!~kd=8S>eE=f)K|Yf;4Jeju!P4Gg
z<&~kiEqE$$FygaaC3AYf;}?o8J`Pd<Z6(}*wjEzrLD>Qd6JR$TL03zre=E0L5`}Qg
zqM-0S6%UL^P|Egg{QXgN2114xQTzj;4<%_it1glzWLPmx1xx{|*Xu(<s#C-Xas{K<
zWzF@0|MK@~yy{j*LbHT(kBI9p&1m@1faJUB5%)`AZe0}>GdOOjI^l3oqOI_kd!i5*
z#j(|AXT}}LA&iJy-E&^NUA!OiVB9JEQ$mG&Zrr7NtZ~p*a^r0SB5{iKvA93~#E?Zc
z2%Hfp(m1nxQ;{mVYGpl|6GYxI8b7jQzA{*~0#6hhvDxq0yOxd(&;3;<?37FkY&7Sy
zJX~YIacqKJY_fysEsm}Jz#Qhe3M5Bss^|V^=1hM2A0jJTKYNWfGD1F&DeS?;q8^Yb
zn9mibb&5F}TzIv)HXRg19n4Zv`m{8LU(>@|t(bfIR)JBHW(6FCKIGa3fjq1j`EdQ&
zK^rB}>nz`6q;13M$#GW-i;xv#aO1sCtEfBxhR!dHewYm^`tQ_!@RxkDWkS{&g|U16
zU`aMPflYLa2k~k_A(&<K)+yn_^}l||{e0<28pp@iSN8W^HfNC?oA_X1^d^vj1q=!s
zvyv*p0X2~MItm;wuC#`u@ZO@0>a++CJjeUHYtCrDVdXN&W9BmalK5v2l`Qm7HSO^L
zE9K5LWjp)k0;oL{_C;o$fcG9)Hd8t5rAxoZaJaTICiZZ{<aLTN>L~L09)whzd9*+5
zUby&y1>o*GzHin0M0C<=WSS~HYgY}+m78)?-e=%J1_kBM1PSxTCV21(V95I0Z@Wr!
zej8wEdk8ozMl4#lerakI2FC-4DuxY!Sh2M%)+AQ5+2DguU-RpXS`FIIF4q|cB1bCF
zRR;pECO(Ux#>EPx&1o^1I`tnS^WzTC-`1mUDhntF@7d>YOPCxGuNmiBHdO<v==6_M
zJh;O+S)enaHb}NTf8n?Ei8MX4XK3u`=zR_x^_MC}{}gNzHjmks{j6~f^lF6xs^kxp
zsW_6_CcN@llD&-BHDUP~PDD`g#Xq8Gj(XYeK~IWhc}}yh4UkQ<lNh6n#`Cbk^Am#5
z3tohS9Q*ZYi54idssAcwdWDWQ$)ooF^Lio87gdo)@&jkHI-G+<n+$qZx}$y`-DM|#
z)XXQt=a;L$k1s2TDKGbNDy1I>c7J3}GNaFi#S3tdiX84#+(EkGyg#uj)sV)f2&y3~
z*T6IR04rRT{3-jQGaN!yF&?!ZV9vo&zh{cKWUv*`Lk*rcJy`KXY%-Fk@-GX9v+h{w
zuEOCG?{)4P76w2HCbfn&La|%aM{5ktkwubFB_5S{t3;e~5wYjXv7^X<Un%p={OP3*
z+j4xVIHl|sg9Waf3Q^q`$0@KYHWaITw7CTVlbAEg8q|NJWX&wb18_<SEV4Ggz9RNt
z$|kI|doGiLg?mD8zfPgg+Q_)mCqs)3a8BGzzZCt(D-BtW#iW#U)(Mch44V+6_@$ww
zEWZsJ+P~C7oh&2+#1Rcyg7%rY7`{C_UXC?hz72n@aH0S2Cp+)|ry1v9O<tlC0jhNs
z95$qrHXD{#wv|^VTIcMtUWep~>|#A6d*#<{Y-X|b%jjhH+AFlFbX0AQW*jKk*~oN?
z1ZQzLScsIX%-GoWhN7|ih%5QgD>uHwziT`!g{J+h20a<S8n&th4RX7_={71R$3?Nc
z-Mn0|{7E$X4>D8fE9KKVmJY8jfa>?tyYC(MYU-ABI<@}q6K9vFr;oqH-Fp6SXAT^6
z3z`@&(21`${k=^adri@X%p-ioV`k-)2A?0tK#rk-?-wV(ZF`Hy{CE}32HY329^v(O
zHSU!o<~dwwC4z^7kYL?p4AVY(%aogzTl^QYtVR3e{^gQ8-&S?K>H!`zP_te`q=ltp
zFwEx=_x?EB`0nJ!*q}PcXV9h39p2G?4&Z*LSxO$>I(TRRTH!)8h=B5(Nw__*ZurUZ
z1)6IbQ*0Q+H{RFY_~(7DR;R`p*8$(-S3^Ht@#*Hd5x+S#wK=;^>kHB2^^&)CV_guw
zOSR^8$Y>6}!&RkzZOAlG<OpfkMY!gKsMC8*XyDHugCCxrSS;fK%iR|}66<ir{XVSg
z{D5G`Zh7*+bbTh}YfvuF%SWM-B-3oygzEt5utfGlrHPmsE`2pev4?msu%gQ7k9|c!
zzbR8{EIo%02S7_;N3ybpBZAy+)uGS1bBamj@o=x;*K3(-PNW5t?cNb}Y48v-@-p2h
zma{Fa1??VsHg$=J{nSreXb2?_vXpQkY+l;oMq{vIQ%kWOLxHYE1l^6$@^Hf>&_2vW
z=VIE5K@N$a{T=m>X!UT9uVusue$8<4!Q}kv76n1YER=qan8?JF?gkp)@MXVwh!d`S
z-+*}QL54y~uGt6ZL<f;6g$A|ECKya-K0aZUjrQD|5@t2qi~ZF1*{~1l1C0-1D=&4h
z_D2q&RA7o+PslW%Dc|E9347VZ^b~GSIa-7vV~>lunQ6C~b8``~Ty6Td?)@*kfdK^f
z)Q;))qEC*ZZxAoP>@<8wV@H@Ro$Qeg{K`_E<0zaN`$Zfmz<qzi3Woduj>zgKQ<^S-
zzI9{B<c8l4{edw150efd*)NE#y!l5F%zaZWZcCS@W!j?Y9qw@ea-UEWWrhQ*xS7h}
z6v4Yu37J}(+h1p%-={$YOuP)E8cuv2H(_nghX<Gf4@YEK)Cw&9`#o8i`y4S;Tlaq3
zCb=AOcL%^l^><gvtLEn7=1d0q{f0!T9iIUS(;H`}v%R?pZIAGPsAtre(r!^-ZSkMv
zFHH~V2cs3WPTp2~*g#6FKVqZUicW$>m)c0<3=^|qAUYxQ0$V4Z+sG-viTK$i*MRg?
zYK#^-7wDLeA~HfSN<X_<gfG+#BneI*`z?&L${9dQWSl|YNA?2lh$H5&<K|?ilXko1
zrf^esDjim{W+D!bGkm|X_}OlQB*vdZAPkb58L+Jk`Vf-uvC}C&Msw1KO=0H}djl;$
zS>8H!zH_{s!e&rmx_q#K?2nVgmB1nsCrqUK!#PC%@%L6pJX2L!i0bWO1x{{Iq=wJB
z1|JY2p@zcAgTz>LVSyO_L(&{Hn?*wJWVULqxRLVj3z24e8mYsn1oTFTtE-?~oR(Ba
zW=<S~d0ayJ&aZ%{!B*G<RC0BeIkB|;`*4c1`@{3U0PORc{H#qV_`@kZ^}74W3E%Q8
zDAH8T^ekiu`43lIeGr^Znq&TcHLZ6B%M;*+pqOKhXKA-K)aAyQ<qJ&FAmwhbOYex{
zvPOsqi8TeG_{hGumj=#B6l=tGf0K3%4e?WO<>6DhN9rR`oOaa97wK0#cor*nRE|G_
z7D;~8ldIOHL-r@*7Cf}Tv9%~V&Vx~;TkOUJ1{cw6y9CB$Qyjc)zf5OxZoAwyG6=A-
z%ju6eh@Zg09pZZ_==p$Cdf<?45qtzngi`H;`k|T`l)H?q?-C!4XRg@K4Shlu5EW>B
zrv+*KwoXT-P-4%lk^v?<=ZGo1xK+3CJattYs~M_C1kCu395f8VU?LxWcx5ziKEoU~
zXQ1+qra(FcpYPB*%0dPoLAD!awgEX}nWLJSuyUi%DW}{B5>KwrXPhLbYBa$Vmeh=6
zq@^jvMtpsBooxc{g48i{uzIVreac>DythbhE%2*<Zp7mdaPNzD*-CJ|<;!GfJ^XCJ
zSfK?iAVrjXaPALq;KpAo1ZwVHaf0({VAT8fdv6l@x>OU2xT8jL3<1!QbpT}_>n1?k
zPuQIt?VsLHJ31B`xnbX5&8(Dsl$Oj0K8M(fIaNl~m4!p-^UpZV#j;z=HRdH~f9<R(
zR@e^pBQsF)5PBoD5l##pRr6&rRvb9K45w#kN#$Ez1{EB^klrQ!qdV_^-??=g$4C;V
z3nnR*SI%UK>(5Ep94Hr4umcbk!HVFcmNJeqbbET;>ZsI{BV#G~a|XFQ-jzpE$l7+a
zLIS}&SpEW1IZhpes<nI9iQ}M*0a1Kw*MTq;i=$~MR%+X(-OQjrBB5Hs2}PMh0@=_{
z9#^Jj`HbSw0{jMpS_Bwnxv%J4`!|x%1*gSMtm=QE|6Aqiuz*o6O976VZ~bbvmRIe<
zh7-fi>irNvCsy`!3<u#%lP6t*RjgbpmjC+qH&#lSq?T;Xkix`jfo3!lMfl5$z-;JG
zB*oqd%tMf%a0w-z?>q<Dgkiup6(hRj2G<k(a^3)^me5yL)zkA-0p$VFsabC2JiYrB
z*#Yxq$}7%$vZwT%69Tw;JCkmsK<c7l<xaVQtOw{#C(v&jtsbi_hn&BwrqhaRY58@8
zZ$h2HvQ9GG*R;i=reIv_B0#~a%Qz|gCwTcWW}uwU`rvl?SV#Qiw!Oaq!E%U8&0WR6
z{M}@K_W6dYmSIjaHmelyGAsw!)G#~2Y9$cNUrqmEDee<bS^~Ceevlw|Zc&eO9NyaR
zEJZ&58>ka&1b<+H#ha_8OI&(ux2dIQ1c`w#G{d^#4oa%A;hT?v6HT%gO>j|I-7B&2
zIN4_)fV5!M_<1EJ$wVSeo8K}OR8V>KgfoXQt219Ah5<RA#IZ)Y7h;0v<M%PsKA^?Y
zM#>mME0TC+MF%)8ZSuLA03cP4`fhST3g3biKyh(|uKc)inK9M9H>Je<P{4Hx{gJsJ
z1X1yRv%8&;ZSvsY3y5)p$lkGRlJEN&)fwiEJ@wF$bhE6z>I2R$S!sZ7(4)7~vkGm~
zA&1iVoT%TUUmpcNKW{ZmN}B85pu^}$M~Q$WHKb;O1)$C^kS~K2lOv2Ww-#ixEl$P2
zS=U%u`MB>bH`I<<L`sNNH9vG>xr7)?%_#E{FZQ{8L8Cq-tT{N3$+Etdv;a%nn3j4&
zLxc-sf)&5ESzr=`to(}?7R?>x!K$Xop;qx;w8ME0hg*AD2V~5vflei0q%_nWdlm~u
z#h4mH0B8@{NwDoA3VWIfwfMR7iWP(&K$qYLR=tn+3I0N!dJ3wk`u^ws4MTY3;Wa==
z;l-uv`{~j_8Y#A+G?gZRkbE{`{&Ger{`T#Q{)Pwn$M9%f3l)PfVe2d(cpLizGiU=l
z>)R>L=-d|&?>h7Y?q$kJ*Ufk{Iafb1+{N$M4^StcskVYdQ!$)oOn7%5XABpH>l7_2
zz4ZheZb`IiO}b~w`Zqz$@ap&pzx3`Ro}gZ@mz1&0DV74uABxsc$b(9eOO;+uP#4h>
z|H9T*(Acf5`MN(!mhx)~Q_{o>Z0NEd4t5Q*+>JE2bwNFsF67U&c$<~s_c`c(a7Qhs
zB~X=YT_;~L6j@((5mZmp>f?WMzF+c*U39N7x{k&FFR`p6kMy6D)ZY)iu2>cr{8@<L
zmdEa^3eeY(uz8sy1O<bA1QM_>x*{XTzjM9`?NxH>>5!lPIw4QBL^Lo}phLrYe6;tF
zY`+zWTrXK!6nUt|tcR8`>2JvMv-|T{1%Msc+s|Dj%u|)ah-@hi_QIl*ov#3k2<W(<
zBWuKL9F&n%72Eqap)wr3`*;ia%vADy61<D60$+tJA%rr16|GHe2^T+8VyGl`mC21E
zq|^>0MWL-S_(T_(#|p)8$jW;*In^;hl~)(H^M2{mGa>$&MUcZ{;6T=HQW|=68v>g6
zw-IDqe=Vcta0=HJn*M(9A~`Id#1%N@;nwep`<N7lNT$~BLeyraHYFJM7&`H+10kvl
zvrhY}3A!6G{B~`7+ioDH-|^T2dp-L-y#aUjQ`*bExRLhLcE;P|>2~kpb7))3@$GT-
zeOvRtf#K)3?}szex88@>Be7*36EK{bMjcVY7lSU228W553o|p;NF)`3L}+1b*Q$e)
zFs`JLfJ4M|sHw^aLhyQK7xB7q!JQ^B$l5Pppd%9kp9_Vi2d#i_(*4g~X;`R41BT~Z
zA#_cEB(F#mEQhSwF0}+~mlTe?jUu-(f=ua*EdxYOs#VWLDJ`E(T<%vh7%-JD37t}Q
zS@UX%GUDq&eyPeu2*n7ZwXsn*!jDvJV4xbq6bVFE$BKi3!z=`~S|_MM9B>F7rH;~m
zqmwl%GmJH|;{HMkd3zq8AnGC6NoRP9s}5GEg=4sOb(%+kC`HS;Xh)=!C9*QwU_jWl
zz*rfU5+&P7qE@k#BSP*S0m_TQ7vqnQ-`9RF5G>*aU{9L`pC4u2psL~}>J132zgxuW
zlN@3)j?ir%pY!H!z3)NQL5Rw-Ic$fgKS<^0o_p`uPQJJ^q;ZI35^#Qu$)~qC&KpJa
z>Ra0%YC-$fGieJC;SH4<z-5#@2K+r+XgvQDKyV4aCJWmA@(Ol947hdurvWX$R~H@%
zVfxUU+Z%Vj>Nj%8qtZ_O8gS%C{X%f5Y76)Od;%Rno7dhrd1is<&R&3UE**_jX$Yag
z43qpVXjD%ZU>v2^=7iP`Km?_@RG~{&7}j1jt54XG!7^!oBg`T=Sa5X3S-z=w%CEuy
zVoQWkXGaMq=gR~O0iw2$;TfKSsDyphgm!F%{R>%g8*{w+%}ER~tKf;kEtD{=a{1CW
z{0T^B9AHXm`d3dSz8L<==YxE77pc90V0wj@)TgEA4~H^Y#72+x3!j_dE3kM_FJj;C
z4p1T?NOFPj$o%n()D+k(&jFLUc=GHT&2=s46r+q4hbU1+0hSfApKE-}y$l<gCGl2T
zEdJSMSHNqZEl`KLG*sGWgOnP3WqMODHt`3e5sp7sj1{2$lznpy<-jS7a_g8%vThwg
zuPs(zFbzciuU@>~acO8y`&4%&rRS=aBtTrudLUeBo8ri>3=KxzK$2hfAINH>)J@l$
zAW!iVdVCx=9&n7#@$WDEf3;!EuQGUXpLWuks)t1u9MRyDg3Ith9m3F{7fH0zVf2-T
ze}4WHl6^v8)k8x~3tKx=2$NQ=k8(v7z)?(b1<mqPdBgmpVbxN#W@|zZ`BeQ--<igt
z$xBT0?9A?>0$C#KJ+Jzk!eA)XmF*GzjXD?P?D#m;N*!2+hB;iKR4DOEX1FXJe>`0o
zM|a3;bUvqWNP#UjSZSlPIu2)w%aElidqyM*$37~OPIzENBN4H3O^j5OV4f(%=4Ym&
z8dKxv6ip*0ZKBvB2WS3FN1!s_Swtj;{#l6mxBcz;2oHn>Nt9k!UY+8+CpjTHD>4N>
zYb^PmDh<HAblu}I<}yYm(nRdTj3>(az`RX_^N&1B?!2kb_&yj7Mdl@X(}(6{xCnFo
zuuuxN6FGH<PyUSSuneDmZWFV?Kw3)`mpvc#_6(?B+iKpy_UNFA=hdAwKTR?}-6!Jx
z;0aQEJn5e=ZEs(I<@0YxkWTkB5X1JbNl^4CFa(-LR=I@erR&xgH?A5M0z>L}<-EvF
zXd?pr_5Kf8=NKJG*lp=posMnWwr$%+$7XeG8y!38*tU(1ZFFo--<kPlX3hOyKWf!F
z>#cM4KKps4C}Eke8=ij!@5ck}C?PmO9pF>lgcTn+vdV{98KIxSK2DJo1qLj^ZevB#
z*{j$3C9AVFUwolNyYKs6lRH&}-DFIP2R^y!&TSw?VjRfh(RrllwYp!$aCPgrnNLv1
zEJ;@YwTM2b2PRrTRn0fq#k?>$>xn(^8HKnC53{Z{r6x)6^3SBA7a<y>@cn?r<;#A=
z9u}@a-P}LOBWqb_ZBzZ6l59-|wWw|n3>2(WA~qr<3f-A9k~Cni&!^J-bx7R}bk46V
z)Evux<bcY1jM^MmNhEO65t7(+k13#$bcYG>B*2&CQV%kYk^u<y<)N9;8aWsZpFvQ!
z85N~%sAHEM_B7cfV2R(<SQ&0q{7PNH?y-22u=N|EiYUi%omPa}H2nfV(jX!ChXlOg
z5l1>#nuFjA1Ej+bog^y_9dHRb&9W>FRsd@09zZ<5w!1Quf1HTtX&;&Lgw<a=#TTd)
zs+D9)BC0x!OikVlgc?Yti6rQW$c~_j91#2irzD%n4I&F=G_4f*I){o+sF1wRKc*j&
zeatXoI+}Fdc<XA#AKMETnPWyL$Qc}%tR`NrSd^q@w-$Ehx`6>GN;rb)DIB~I(n$My
zCHrO}%O*ONgl0#<=iP(hD+;Lp!T?Ai&&R(tpzNNCv$!zDP7V>?O|Gl{_+_Eu$I5$*
zL2^}P#L&T(d5h&jjY;6gkB8Wk2l;bZ{F^V&S2%Um;-Z{XkI=m?)lso#|9Q^)rSr`t
zXmO5HeVEEAic*cT(%q}>r2@53=zXb?kumo8U79MkjapbgB|Tr3g#4<R!kzxq2P!<P
z@7{Y=qUbXV23;~~DrLb<rgz{r2p>z2@pjrRy2>BdO1@UQ`|{)mXGQbGO?=BIgfN_u
z7Z?;@ObhoUZV(#xqjIV?+kS7Naxw#Eg0~fw`>zi{&`=HRq<4NCVs<7ruK(~MI9dL;
z{>R71C}(bO>1sv9$(mFLO7_pZmvz}_MV|Ju0R|Th_W0qWIm5H}H0#IL%4675x=xU6
zLg#0X;!On()cyT3J=vtbvm0oRt81V`fW=(a^nA8In9IZJF5DPCxA9hYS9Moq=tc>;
zk35|JJv)@7UQX4TYSMGK()a{#Zca6GwhJa<({+fe#EgcyU3grG{08*1tJYd~7<PFA
z4@aAVHQO;go-YaJ3rP^FVlwy~Iz8fd>`7u$&#<~2B4&fVkhu0cqAkdm*e!7KEC@ZY
z%gG%DmyyM`98SlftR}7NpA{9uzbBDO(%~)HJnUmoC4PUm{m6&GW&IUVyTUHo;c^~`
zoRjhVN1wG?n@MZjvlrL`7{kr^1e%`xG_$>*_$iZV2>x7U{;~TLY~wcev!kS9L!S;@
zbFTHhsp?7}f-FI&w)Rz2-PJw?g>>$Z=w)}Q7!wZuH4}p{ALQX2nTMA|D>8`=aPEO^
z?sf04yx516GGu4CUVrt$V<g6EakTAXTDTdvWv8c<`fpDac>_TC4rQN?s3&j_eMRnw
zk4m?N!8ZbX%tO%OaMsEAXzwC{)pDckm&B39D##k)FVN&)3MN(Nxm0Sh9JZ`8R*)9v
zZODborI&JgGSBxKSLgX=-THg{*E$@vS($`OoEP>7d321V8o?Ui^tp5Cfm16dof_f`
zQ^O3ukiY4)R}HKPkx=n`?Ff#jO1lfTXF>c#C%tpio4*bak~&1-i4M@5t&!K=N^>(%
zXRt?MXg(RXUW6R$#W%cHOIy|#CHo?(Ho*>yoT5D|AB-+p(}p+fDk&oT`sI!srQ
zHL|-BE!w%^i{f=KaOFRkF{FKVpz6rExN8>V_{phq5e8)CcD@yp@#WvRhf6WZIkUBX
zi^?XoYOjBc25sZc{~gsfn838Qr*_x@Vh-{><>abfFt~-udhfGP5+5DA;AD<bTh=T1
z;_cQQHypGTlJ)eN_{ma6CfNwX*mM2puc=g*9Qhya;9B7l8}uvQ!E6Oa+72OZnXwBx
zYzTZ<B647W;;;wm5()<DIaYg*xP}RdlM~?vc|nEf>s6LsSp(<Zd&|pEL^%Pjp{pER
z9h~fNQXtONI6Tocbrq#{W+hsXd@j^^LtW#=4&4@#m1NB=U*o3-WN5eG0fMPg2bW}f
zR1Mfl224o%DflNO6zkPnGeq+1u?+Z5Oe!Qwa3Vm(?BkM~cujWDw4eg!wxy1QFLO@@
z??DU=8iS)>J6iR0DC$eQR~P<S8Y&s(Tkf{IMa2O&sZdw@U>SrRS@AsOQR{wRs6IbP
zg%{b}I;1(P#Uu(wor+RMUqK=Q+nY~rkATKRE1Bk%OE*qvA^cZp3Q7?b^)QYvO|Zwr
z!U-_D6dKq!KXvkh^FF9-F>k5Nw6{uIQiVcT5UMZq2J7Q|;GuK8e=TAWg`y5Vn~Jhy
ziZw?~gpCIgh}`OYY?jWWpA2si*LTnHkwk=f36|~U#aK20)1o5ujyz$0qYRgr=~d@o
zRh{{nT`w~PUKx)FM`NY;_8Ojm4u%R=mkm%u*n>34gfs{yOGju2a}hP%!;=5xLy6kQ
zZEJg$$Q>g}*|kk0cwb%H>msJKsdo5=CJhG`-2;OJwJUQ2s_vAlSr^G1t<nupi6)A;
zp-8LQb>$(U3eOD&%LY=R1gpL}Z6`kHlX3N0L{mh%)6R&!T?oa^Ah@WHm<lc@FaT;2
zb=4X}pWQIb#%mU7vGz8GL`1UWbqa(;qWU7ZOzg5&;2eEYLf^zGxlaE5;famK0!bD>
ziLh2-!tPQ7N>hyux{KxEW{&y889?H?T?Zu{SZi6=-X-$SnMl045Rp>wguCy5BW#bO
zO<mr2(&d?PXD0VH<4`{|_eb~pPXNoh7LWwj+(jZBDb^jg5Jg)FNIpUGNJtrXFwo@X
zXsJhhG)z!%XJ7;$SweG>WQ(!#c@h~q`NiEfgvOP%i;5Mc1(-PD>-klWeLwmpQOn=d
zjAvvuGzk=ir-YD4JrhZHo>zQ@R0*G+>WYIUm_@4{LenEMb48)X`AV93k%1G<Q_nq-
zq&cJ6MyB#5USZ;Y>NZ)3&nlKx=8j%ivSUByxflM%xE4mPyUPOSi2mCN@1@83Lyv~x
zpZ+*5j$TvSlXAUw87UXA##-KL1H<1227X#kf0e2XKASBn(*)zbx;`JizqfjKd@h`A
zrtn&NnXoYCJDKzkaSbr-^8;e-31jvry&TTZbHb`I>;zFVi5wi<-7$DD;+rPf;Lx$^
ze#VaZ+!l^f!BVyo#IQ!wI+5JpVkY}|y;x&yTGPj_#kX1~-G8X)Uab}M%1AIa-ORZD
znb8mVURe;)s4OZQ(|_PYL9{a@J(bPjBC^LmbX8hU|7cLfQW;<lSpaZbQzRvyq0ru*
zsDC6Y{~GTaExUbR=Pq0;m-<xzx;44DkZ6=QH83l2m=G{NXPFNgA^v4#^}KRS{2Kvz
zX13u*_6gDL42C##uBH!Ug%{b{FY7AGbju&Xe2^?<72^qfQ5#9Go1iRV!CI!>IY2#D
z+`xxZxO7rURxl^17#mO;ASqGd4$xrL;c^`cTn%e{mYY^79wcndDF(Z>zD@=`$;T_D
zF<Q)h+fjrnFv(ea3v&@yYxFyfIRarCPAVHZP{F2HzWWzY7EDzn;U`V-LybaEf-06)
z7F-|=;1}AxBN#hP^oncbKX^EvCUi0u!Sl|pq?%RIphvGJMgvR)Y<{U_2|!yY&kxrO
z5T(EoE0qp07cG{hW4@U<M4Bfl-q2Um_Y=|Mw}n?Y$j1vmTJFum=W)N3Ls=o2D#>mS
z!omLzj-Oj2s<o`;JN#LSUsND#ST4DV^2AAR=63Q*MP+=@$wUNQ4uTA2B#y#`wnVLk
zz-_W1c89eK$p%E2?(Pw%n<jlyR~!W&Y81_hpY-KbN^AIz_!>JAsT}-HGZKoEA-%|2
zi}TC?wTxy(KmV++H_W;AhZp69h0`xi{Bt?r2J-j0xwuXZuL*=z=3Z6{^^_6)>aO#z
zd;YUb<T<n<{7+V@gh?*bVnw{qFYGtg#=<Z{xLi$K$Xy^!uJtZu#;(rsvr^G397eKT
z8>y!!{#qo9=CksR1MwbGXh6^)`?%e~m(zkzMe%#$H>fVCRUK$JRVdn>?Mh$ZzGp?s
zQ^#Uy(amPJ=sc{KoXF~d&ztpdPn^ZERYJ}XQyt4pI7?X7xs7kt>O`-IZ6WO><Zb(z
z7$$gHstPdp*6qithDfE7=z056A@uDOTV}Ff{cChU4>=pkjk5b9jYiPz)2na+ZQ^<H
z<i~DN%M`t{Zoym`e9R#ARF7YFz>1d4ccNTVWIE^}vMQy8Z-3`Qy!2lMRY6##DSBXi
z87m*SY@zDYxu6PgR@S7lyS_LW0>~rtHMFn<1^)m}9K@7FE9`!RF4EBpdt<6tx~&)L
zT@K&UKxS)3)lOQDxo@-}IZtomN<wD{`Z1@wKi{#QlXbJp^{(FU;AN8vgBZD!EZoaJ
zd8^w#?cSdR$43M}{+s{I$@(AvnS+J%|1_l>L`+EklVtY)bfpQz<ba>bg#9`bQs+6X
zrySy%^UG14JosW7+4mJhM?4;9TWx=;sjD;{rw}Mu8UhG-OAq%@9~2a&(bL7R5(kAT
zX(HqI_4_?r8v#KhB;*3s>F`FoBQP{8a!>NkW}+Y|KbMeO)mQcB;m%#j?>ZGKNjaI7
z=U0Z83sVDPjX2SgngAmb1-xBfQO(L32ePWR(wt*dhl60v!r7%eh7Ye^Wgx`wLaP+U
zlMU^e-~3!53CAbX9TQx59lj;n@M5l2wP$zcBD$7DD?bZ{3i3}FQX=I<#f7@ymwrnZ
zh8MD-zlr`5#(0t|ltC1*nHnavOl?tyv^WHJ`}Q-@x-@Mw-4?)t0@p}41J|N63~7F8
z(y%qf#v49U<5v3PxV#U&H{diQvc(&^oD4(5G<_PG5F2FGWJY!Ml<giJIrrvgU|3e3
zid1x5&VgzM@)c1y0bwGXMh(nRbm{*oYb~eYfq1CS>O0g%m>K->z^3f9Kq3O;+D4dD
z9sz!uI)oK=)&Pjj_;`-J@ZU6%mh|^8TGR=y)9pexUASuw&>}j}1!e6j#dsHTAKrBO
z_+sCoilg`DAH%d9=Tq|Q|4Ba_))y2^0Xyz|iwlX6Ms!IUjI-bYK&R3!g8q9|{D)-6
z#>w=bqTpg8LjGTPyZ>7hTxq?=U=)CsZQS}W`jq7d+>%g&o6(f>RyNLykprr0LeVM%
z1`HgG)-1}h327vYH2EsT$5q!|Yg*ADI}V)@_JG$$+fz2H<<SC*sc*(h&wWQZW-dl<
zDqrL7Oo>4^pryBM+kl46Dv^FTut0*aBYUh>ohkuWa(gJ+)!M#_KGOZeP!M>x+-0%2
zqYLv#TpvogmS6t2V;mCbKJmdud(oi6q<r#JOY5g-m)<}T<LAM5St&oKIn@W~7RS+o
z2JMw~G{3B1xas2yyb^5S43jGkI1EtbW6y*r*dgt!*1^jD78}kuuxU%YS${p--2D6M
z2EP(ct|>?J9P+ct9OLtj{{jfRSvF)SGH%P`9}dauIKo?hZHBG<C(o5Hw({FKvMxW(
zE-^z#s1uWGFoD}v89@}ev;8(|TjcsXa;wxlv<1Z1=HyL1G6NedzYbAQJw37lm7vxu
z815(D|2X|I6gktTU?o;jT@@&OX`QsQxu|$;MLd^U(X_C-p%AZ#?gP5rv^nh_d`^BF
zUE(Dv;Wg*CfU9v|_?^k5inxuNH2GV#3oI$g{)-8hGUc$6W_PS~Pg=hzmWqygtT3x-
zi&*4u=mpo<t>&)9o4|s2V3g9(rdP?=Htpj?WW!qCvsp{1w8}UAqNSh74+Lx3o>chW
zhH6r#3^Tz@tR8Cju>mYbQd5&tP?#Zs<n8*{{B!RYF|vlGm9Zxpi6$>21<?B}@U*!O
zPWh}xvzn7zzId&65|dC$zna#dxkOX5F#zYOtT!gL0i__+&$r7yPXD{wcg!-JS~A3f
zrrR%N5l<?H6o{f;Myc($^`VEqh!frXDN*OSslHAhh+i{r9RTig+sE5&)DUNjafz27
zAFb)UB;<q^?jK_%ubOy4e@<B+SpHuS<Pdz6%9UW<E*5SI#p1rWvs2%Eq2Z6^xPyq^
zmN)}+Y@~~++6QrXt%N<+evDW9@PxoojmD!`1ga9I<bO_qYFng;Et2tAOqyf5W(VtH
zhN)ToN+J^&=>oh@i4U#!*Bp(^xOPh-cIq=!R+{NM8ez&1Bv{irE8>FKLExADXe#{L
z%p*R>9m#IwS0BX(Z)N(cL2S#gQ2CWn*dnAv7Lno2ZW4KZ2Fc|r4_$dni4l(3(#<|)
z;~-cGNPeGPWM-$Z^}RuPU_nudE#Jelq$F>_ruK4Mc?DEk<(T$AC&j20p>tg`aMBoU
z+6-5W8FqeNjW5zQqF7=PST_<R87G5FD*K05STvFTrP()d=B1K-$!bAV?*SA}jz}7U
zOWPSt&5a1kPswOoU<-Y@Bos%)AdOuLMu;z&gUDI&J{GD6!9y$|dPoWsW9Rvd87|~d
zTw3H!k^ubT#=?RFZv-7juJ$xcSrY01idQ)@VgKG)kO!na(_3o!u}o6KOf~03_=Ajv
zO!(zcDMkqCVcCbQ9C$xnymr3?nF66{qrDksn7VJ2r({pH&G_?k4|erYH++=!4;_OQ
z5k)nvNpz?jT&%PzA_#Nop15qi&JDCCm(gK37Qk6${K81L7oNs6Ix2Rtsh@gr0d2xA
z0;1nu>cq%~PLDsYPpsqjkOO8J)TwRa^1=hLmD`p;JiP1{SBu2rKv$CuUM8D2G{)!P
zjYBL4n(}NTR|GEgr<RvwoODKT%9**(uf)y;HaC6Mv>clAYkr+Oba(8CLBcV}70^-j
zNr3QrLED5M;)O%|Yo!wf<+$||j&jUOHH##2hOGiDialF9>+xmft#Z^!(+(^Vl-2z*
zTVu<^v47YNCM@VhlbF!NHC*0Qdw_5-R|)#(a8r-Mu9f`mb0`0BI)U*G5>m3RjET8n
zF?w|2#UMy2m7XE9`)bmVO17KdFEy}x2mtbi(a_NT;D})G_-5qF1o-(oe(@_#3;%nl
zuiiH4bqSzj*yZiPO=izpG{p4#8Iq`U)rKQWRo8x7@6TS%rnjHx!%;{E)Ms@K12*2(
zw*_Aib=6FYHlM8Q5C{|5if6pnSVv8}H6AgzB6l;|VO`v@nc&*I)FUv9HA4t?df?U2
z)zhnWO$6RB2Q`oTerZ?DKp~@-<&+<KUDRdu@nyc~<0$(vYM0kBc35tpr}f8a9!;nL
zx(*xueBx;yZ|xsfXoUcUPC2)-*NPR*o(0_C>0Ji#*FPMT|H8JakfFKH56K%17KNo@
zn?^ZfIv16QcE~krC=9ROwdby~P=K!8*F__{LH6#m(!GKc-CBY)`T}e(oY2}q{MJm)
z>oA;8jvV=tW73ZalPsBRUg<yszG9zlFrnko-TUYLspPpJJn{V_d>MfaD#P?P`Y~!L
z$D>e!go^5@XY^0*W0tcyR;j_79?Ao@E0;!^{nCV^<an@{@MP66b*BC!OrRLMYs^&~
ze_+l?U{t|<<{=V3gW06Y-wn3CLAsme`2MWEJQn1N6P9<JThBw&wQn58L9fi+H9tt5
zIeq_hKtKUMGS`?((D1U|mjYD=;rIDM6Nob{7k>PD0i((xS__ta<Bu)VRy?0SX$+T*
zSG0{(89kvV(ucgMd<|&#bijk6k~CL&;Z)e(-5qp{;{+5g8(yu}$7C!-9wo^x)N!@~
z2%0FZNoU=lbx<kP0DHST=ZP&hAxhn9E=dwdMO%DYiv_>Z%L<2Iw45jCuvPAjLLzJ!
zHqA{WV!VJR$qugcu=j`G!!B_E5<DSub@xpeHLXF&EiH_wVs4Secc29bCmrCQNaG++
zrEUKioKJHQLO_2lrK}O{ense6esthSvlnHdr?|1hOaeL&Gf!=ih#(TLJimP2T^<x+
z)KTlOpDPs(`*vo@N4pq*qNT>#{=;3qw*8X>mIr1S<pf{g+HnG*M)~s!_-2qQ^#8Xj
zG;m!12VcX?#_^wqg`4TWNvqudK)mF@VfLm2E+<Ow)#~!dCusYYtallfKhP*1Kqik1
zE}bMBb1tfmXXb@}P9t00C}V>5)UzEgJFW6~sgt<e_Q(1sPM*d_#_nX?z~<aLM_%yv
zvM<apg=s{8-e<eseyvwlZbCi*9?$2@)c{fj7kX&PQs^bjm7mly@Pt_TFik-~;aw1P
zG~j<v*lI8yb55O~`R#dnZmchea)zLb$NP27u#9Ur^z<2&(mz@n>~4+A{r;ky@E{Ot
zR}Ihi{%q-PfHLkKS_NeQPgaw#`<+<N9+p*acusTIKn_V#9?$#b<6M%_0Ppj<>r0Hc
zAVqo){}ZI&?|3AHSYm>Wz}^yoamj8gl8%qD?yr*O#0_u_E1aQa)k?}Trb;Kq7{qY~
zFWkNDQ9MpseJz4%x5644>tVn=PC7gkm!9sv$wgQg5giV1+RZ%egg;X;K|gaB$eETz
z++rx9Ou-sQ5}$kR32QTw3mg_59@wd;TAuKl)kY=PRtfbF(R9I@ynF|?W%_9Si9bd}
zkt8)HoHWF4(A1?n8%%sv=mxs}!S6J`lC)dXsrS%icyX3Ap6RO4NhRj*f8G3Of-!U+
z<Vorz%5+7)G=|kYAuOD$;LBhzs%8xALr2cexEMHe{e%*9+sR%#H2ftWw@@m2`A$O9
zNF2_?&v-o%Xk|S|Es+GUyb>+3NxOI<4`b!y>34*C2To<9pT6zCNUN##+d0i^bKeXo
z#zB1rkD{xOA{Zk>ZBWU#;#=(&eSPcuc)s4*-Hj4%)5C;D1aNAD!e-vT2ztE10E8a=
z_rsl2<8(_*Fh|n}Gx$r>AW3jAqrT~pL+wTI!FY^9ulqc)G!Wn+(JrpkA@Gh_HrY-3
z^uY^@H5hJUAB(QnxwA8RixgizwqCDl;<QsMMu0NK(nbKp0}bW#b#`B(*Cz1Wx7`Hw
z-B8ImPPCxoA<usgW@h`OGvGNtTijlm7b74AkC7d;;y{cQyPQ<`k0Kv^MTwRUb(A$7
zMjCrgGVGOA%>i1F@Zc#;^3~3<1#qy_6iMt8knNe(8P~SiYEq5b@hEcB!BQ^6hoE!6
znoirt3KBPGUnwY&sDxb*)P~4Av=~VGW7MP{rR#Kt*g3(18k?cLM{XLU`BFqogrYSU
zOr#4k)iT-af+v(5uU(0qx%}$&$Qc6hthF`7u|dJ%Edb3wGT=gvzf*^P=wT2a^y-`W
z%~<L5z+0`Ynq)_Vz7c`YXZ%Lc`OR#ld1#VRji5>?3;~oKGG&6C?9y$qd&2e_!s@jT
z-4@kTpG?mET=0U3bopaEn0#2}2}6uQ0ksT?OR+w!ShDYBF0RE22_?nGt4~K9DGiS_
zUADpYMgc6aYN8FQ+@sW9reWuk?I(_As?^Tl=5kZzrx<qVQyumYQh-4RavRgY1TvxD
zscsQ??kwh53pGzAj|g4UN-+@)-L$^loE)B)1_~1Ldwz*;<WZ$ri!)TxbDj23vwG5l
z^E^^FSSMz@v3-9`lskLyg`E7Yr{^uVw)TtmsuQpQfpI1Gj4YN}w&jHQEmS&q^~Wbz
z{~I4@HbO(-P5o(gPGBZE#`}K#W_n^!a2F3qVdGdP(yLhSpLp#%zYRtrz6M62#}h7!
zd_Z>jhXUMbv<h_vW0o9Igel6vi{%<u9J!7Z+fiDIU%3-jgq`T}6;xUoS>to@=8nuj
zwIuMw>PZV@M0oKH0x9^zOyC#M^{F%z7`+2z;HQ~ARKU+<jN50qvn*i{Nyc%eYu;<3
z)hSO9!!N=8d`?u4oq&#w!KYLN3tXNH<0}mwCa#1hF=z^J9?Yh>zFa)0coJk){HUCs
z=<>q+=c=8#7VSNd@{D~7@mcrI6UC^<K~UhaRW8OSo9o_UvU(8IK3=<lv?wWVL!gM+
zpk?d2rVnn~Uv4kq2d-AvHrRI`tWNar$(6s7;xX8i2m;Sz=ZNq<-7#_M)l3N4?n}je
zXh7FBONJ%WWbQ5Y7>o`uJ_mODeWmm+j4wI#q(<BY8`$<mc+zhbobo@wWv#uudvSnV
zF1~>vD9UJ?NtBj+(KrzgJ}0HN#V1aulbQ5iig<eVQ?aa&-9l%P9caDlNaDUy1+(<i
zXm41ZDG<Yd{ROOv1Dy6m<9nHamWzae-%_)=v-oj%Y77q}sg(DYd()B#xH&h(FGin^
zzAFPezkO%jpG0N85jGZoUg;Ci5h(-7nce{%Isdiz4}&#Aw1R;3VLf*<DST+NvA>wl
zY3eTE;@HOC;uXEpbVym*JapAe97B}X!Y@|jW9JmUGP3jAN-6X)1Pb!}9(0z-&QpBr
zW^z}<>fgtWwM3xN+%KFU_hxm%WTKj|>-^5t?)+1blj)Jkla{Gy?PFse3?3+d{skrq
z&O}s*7ODn4JtFvtRuF+QUPo~`N1HdKVRoXpVZp*BLDVpH(1nuI`$6v<iU+DYxQAa8
zaFF_(xvW!8Sn16yfmSK|gF$37hB0%Gr|+~ik``K0g3L2xoVE|+^!L39wk&g>G4{}S
z@f>&`AefV?E*=;7TeP%RXA-dd<pVlAMKEj~gG>CzBgCG@YzqmMy2aKv>871aKCDN3
z4o*NthmM*b8V~!E;#EQanVbs4e`!cRt3iQ*vcY<VrS+y9=T9E}xD&Vjq~;AIh>I2j
zx4}?XmJ8nn=VCZ|gSLS$IXqWvx4k|n>eUxrvZ@)1oNH-QiJZ?Bk_J$Wd7fW|>&m1@
z9_Al$CD;2sW5&1R4ihOCyr=-*8^thvSVg-x-h@um2wWvpD}$pXQ#q^T=QEO<ov(~)
z^+p`BvA)WCYKxVEbgvCaRyXFaGl~Xj!(&>`NsN_?a}D}G{r(?rFtFc<176hP^<N0F
zc5FjyGT9!>Gevuco+ttLeQ0<PqXDb>(^BfDSxx_gylSk=GqzNvKBl+lM(K1%njvin
z+lC%6{-=jE4HT`oUI8hi)oF9Rjs%buXeuT?{wo`?KC(IxFueKJtemJLx)b>T3=EK8
zXzFcHgg+rsSLDY>C8EsdH0>|g{zyE9gnxGCgCk!nTTH<tuOkB_`tFFZbzv{Mu=$(x
zXRIzFLI~b1ZGk_*K{rBQP33Tj4M>TocG2|BafR+F0LgkG`RZOjDU4U$2LzPx?+yBt
zeVp5iWV1njQjVlBD@!o;U;)@0FoBhPZTK*cwf?j)$=yS?3wRI}&M_U}preT8fo!Ks
zUZgN*YJFeHk=uZpO-fQ8CuF+{WU8%WoNCCwx1&|xX=BG#K;=X-iCP%UO-Axb?@2*Y
zx#ZJiCEmIBs60l+DsTA(({<mBn&0)5UbeIqxUE3d*z%R~sxM%tI<3gqDrFuM6UIr8
zJcc09zdd3fbg;!{r8r%b)CTuN%zf^#$-6QkZr^-qx(0kmPdBzAcll`bphHe>?(wU}
zf*lS15*UH)$w!TLGX_y*r6xk|=l8}%xTo;<u{kn)qkz10GWe5A+SmZPD5mPqHsjDt
zG(gboKn~8%JF_GQ)$a3m!rlz#5PCx!@V4b|UXl(h3Z`zBO`Oew(w7#g?(-W(e${=9
z#S5@Y{|gjy=h_7X@=tDuf?Y0N3YJ=nfO^!|Bo<+y1=oAnyHyzd5bh(R)mPQHjHkLU
z711mpa>l=OsGcnpbUlQlX*n9XjeoKbyD<IG5Yy_uyZW1@>D++5obni;SH36(iNTTm
z%&Ft-r%7MEH2z0{uWt?O?{;$S{aA;!7e;9<+8faQLCXbB9&4P{bK}e-P^~jftq|Q`
z(0n}fF3%nY25>O=?H;ywYNg5BvK`=b%D{(aC#(pZO4reis9uzn-ZYoCopeiQi#+N5
z7R5#i61JO<gcinw$lJGunE;H+&m(^?h%b>$dSvx~dJetaybM*9!JNz}x-msdOe}HT
zl>nVS+3`zRV3&kRTe~lc&-CHAK<<5eiKn5P;GMaRR#$^oY9Vytj9?T~5=ItFcSd*2
za4jFb`w!dU7^D^7-!{>Q-yCZbmcW+(#VDrhepK+`YAzlGYqKr0Vfn$R2Kr$S;yqkp
zeozX7Tv4NSc$sxWR@I}t6;1^@6kAw8X#y`)Tr5@2e|9V9MOxbpH-_pxam$Z_#odlm
zqOgYRR%)u;rH;@NFFik&wazRf>SPXEK$Z1k8d}gPtTpB|=p^eJaEr`a`#N>SE1hE!
zyu3apqTF0<HF3W>=VK$QHn(Zq09FKDGJ|MMdB5p#teHHb5p&sJ=R!Dj##cu6c|cv?
z&5(6#Dk!&77RuY0FpP2rBlFtjuC11-eD=*-+%`@M;4fUEky91%9Z4|AxP4FG#n_mh
zC#fmC$;Y{X`!^_O)=)|<$#()x4Nh$G$Z^P@hFFl@PkK%w1rzJ-cH16H%S}ovW=07(
z2o~(22^5AUf2R-CD@C=w6=XXoo&g}9yWeo9<c(=YuGxU!ZPxEx4c<TO&(O`&3G{94
z$9-eGGC4RnLzv-`o@0MDo{7O#y*<^4FLBO$x|F;a)t)(JhO&Zks1$#{p{&cxeQQ_S
z=#5)0EgibGgd%z_&P02J1pl(*w0?{V`7!@wXdZ9T?-|$8tja3wVV}1QW&^DBqH(n<
zYo7IGTxs_QOO4bY{FVDo6vehE`0rdtP2Y4VMd0g;`nvbi{y7{#4R*v-rj?KmT~BI}
znzHT0bwm~Woopa2f(^wbu)zd{bj9XZ^&2~f2E0Cl(^bu=9jqz}t<`Z9OTo82G-N_y
znugiV^cYHU2qeoAgVRMBlnbCqnjEp|btD1n_YMqvdFbKlg9OHJP&A3<ABo4V`qiW&
zMU*D(?%I=)H#E(i4|-L&3JfH)<s2o#^9-ypwE1d(%Fg6B(%90TWhgF*<I@W16=+^z
zW|15mRia6a=o5^hj6D(2K+?^E<uJ1f87vya*?!fxUSFB8SV8>uNoA14Jm<7TPD$3E
zfCQDAw24T=tZXb=+fD4&4*JQuEs|=~`vQD{cf<9p{QrY49QS|bTvkpNjwJaXVt|gF
z!^SZ3rR9U7-uI#i)u^>6{pL~V^*U7I*nJwAATVgGMSSwQZr&W}oI~4$udUS<?OUl|
zDS6cJV!d05yu5dltTXU;{t_(zF77aV?$FBZ6!a1-w5R{nuCknAP@HB6PCwMHPDg2&
zI7j^g`E}@JF(~Jffy~;Wm+RZdk^t~`zc0h?W2>t5mrNXvVKM^VAMdyCVatMRxo9&G
zs66kkFMm~AaxJ252r&PmkZ1I#EHfJT+F^1}$xZM1<c9k3ShCS|wRwKT=<|2vSs2wp
zE$mT@4`3wDz+WhDtnim+M@~BO@S5XjZ2qxXXcLvQpnC2VG~}4tzBsei696FJ`j8)6
z8W=bI6O{XIYXv9jZ)Cd}w^I7l`$t>dTJQz8HdFUU82x>D416^&N22Vy7#z-dj|F~7
zi##(obn|`V+{Z@b{8pXbzFKjyc0)cMx8CmLzfU(2!tIS*`!e>7ZpXd*6z5Jo(<&#c
z{~-i4E%i`t=o<=N-*_+Ec>p&up}Q&7?#s*Otlc(_q!a4HSXsZoWL*CA1kaux8pd3i
zPyMbr-u<{6fpvg~=Pza>C2&|8{C;$e$aGe1%R=+eC;ZWn)$Dn`kB;av$K*8}9I5?!
z9H%(U;B~jT&MC<6<Mz4nL1A4|%ya`9e)fLzezRf>yxRP@x{Ct3+W_CU0T2HkrJq~`
z!mqhIl9^6JZ~hw`@mV|hl8i`pnPwvKR&1Vm_MbcmQ<i^yyS?ts-h+I0>@<7qcs-wD
z?()0DuK6{wp$kqjW|KFoSECJGWj;tnER)lPTm4~wSg!7+Oq9<cW;3JD`p0)Bp>;AZ
z&uw~$^9DR`nkYB_eE{sy_X@d&p_#g|Ee9ajt}2#nI&YevnG)o_W;(yU4D}63q)Y2T
zgeJqC#Y8&Z8qlR7SkZy&iKodqTSAj<#@?MY9Im`q`e{;_eHVUb4h%<zT$1sN)S%4p
z;udyGUGLBZIe(t)sOa!BiWU$yQ3K^vCWxlEr+SR&DJurw&jaEDUd-zmjxQ~xLhfSZ
zAty-Y@vv-3t@gSiX{%l#l=rF;X_JSG5g8t_cOgzV2e-%()I6uj`}4ING%um;>Gr=T
z&YJOYzR$XW+mdwl<tHn#2Xj(kr4ah@86^jNyJ1=1T&mD%J;W1|+>_mw-xw9eaGdnq
za6fj)kc|xys0F~4%KF5#mSbjQLB}Vk*y>jxf{Nmu7|G>=)rH0GH&a@|PWdhyuy+;`
z$LMC*#d1TIH4^fi6C?w>x9l+V)g1z##H$BCJjy&O&36>?ovRGOMXuGW-CUb{AR)ht
zN-H)k$&bRIGS-#xA6t`%`Fd(Y)!2+9A!V62QMIRAI|BR`1=)0Zf1OUEWHmbkQ|mra
z$Pa4<tXUn-cB+GOc^%3oR~=6cIHiN^+v&jwd@iM+Ng-1OJn?J<6RK^nlP;R`OW1JQ
zv@SAB^muYm$dV=pYjX_ujl=U`{3`{K--Dh-R}*ZM+Q-dt4W{9vdek<b5AC3}V(EUT
zsEr`#rvO>FiqY91&^Sf$=kcUE(JJoOfx_bB-y;y(XfOhDn|8F+_+qf+%OuEN*!$&U
zQ~&hcfnf!itW6#h5<=oh#po;Qn$A}qY!?jFF4TdS3B6$s*`OQ2Zzdm%It;mYIAc8_
zgF<2Q#kEB7fXK~-2YBE*L<Wm0yKjboz*dR1JOEgJ`}*hc4JC*hT~8?xQ2mSTY3^8y
z5Dc-7QmbNc6p<z)OHgRJ`cxc2*G`~-9q*_!D9JY)tQ9K{us7}+VOV1_iD&ch+C++W
z^4_)8A_yaBe2f9J{Yf|Yg_3)32(Eahd&vNJjE6`5-+!q?D1t;nS{}504)_?es;{NM
zU4V$WFz#h2&}0{}Z)EyhD%5JJEuY>vR+J1OHY~l{z6dBw3_Y#cA0G!F(Ql`H)b|Ul
z!x^L~pgLG8tJByyzjCvG0fOh5`d-eDchNc7ezsqC7gH|JE}st<h?I=en?5CB$j~VL
z4goGZY-I}lB=T)egYBM}Ohe)#eSYpTra<xhl|$*mWr@SFnRScGcCjFuD!Ec0`{A4Z
zVZfvpMG6kcFuc^OyzXV^4~T84*rkht6}odbBTbS7eZ#9i#0j@Wk|O;N#5=aQ2O$tk
zN#pOFhb2EEr!}>ej!-5pHu60_SJJ)-Y1u3=I7~Fdqi0L^Q3Q<tR*Cylh-85i^UwNo
zG7wT`Y9d0|;0jq4h#mr`)aIwaY(?W~&H>SHIXnYD6OEWMmjeTt2v0Xp)b2J2C>46*
z<-XuQJVY8rpt;Z2cc)x~46%#C96)KbuB^0CCr%sXOB@uyz^szhT7k)$E$Au?4GFNJ
zgNNpkSFTzxel>|Ik$L!iR$+qfS_ceZ^1IV{6Tpb)9hVAu;FHrr=Ztu-vA&^+2@hX@
zFiK<MifqeC-+#vA=ex@136beWF3E2SaW=UNCy^D-BIBDV&%@He6*I+B+d`IEp%0+e
zb6iD?y!fs^f0M68JJ!*1--EjqfA^<@49-v{g5nw>Fx9U38(Hm(R)pH;tO>Ajb~F)E
zuDp<lN-v4)(<vuT^;qq1>eZ^rMA$0gRtxf2&5$@8AgM))njlh?dNR?+wZ|%F(eCg_
z`)e*Uw}Rgt%eBWggtbk_;*s5c^1y+Cnbhb0ZKlK;D-_-nLmsb_-oUWK6@zZ%&f|q{
z`nU)@?;8>dK`Lro7VPq7F9t;Ou&_ehpYNUJ(WarG;J_`V1Be0|Px4N!D(#OKt$3+t
zs;GR-#WQ^0U%m{I{)))g|J8+9UMQh1m{8&0lKeY{mYUw%mI@Nz2xz$)YYCt@%Jnu?
zT`J}xch{^lEc%l?7?0pBWi7f!8WHKi!<MWGb<9JZ%&FaY(}QD<mH?14W@Q*~m>)y=
zW@lt1k4_cwxZGz2C#_L9wV(AT8?=9=0&Ld8_`@^xXo8<PQW#gE*$%$3F;d@nD4{uU
z7}rAwY8lhvpNL7^1%Is<cqM!7tiGu(KyS^okgr^b!?OuP<ws6YPLa2_46$cdW7OG7
zXK!6DpV!;I>q!bBvjb#XM_X;N;!Ha4gDtFjM_8+OK=4{27J?&5l+4eZ&h6|RS*24^
z@#sUsoas7f-DP6yVzE6~Qk0HRPZ&zptbFE4>s0eTNkKnLPjYtt%=Vg60ng@dM9M#~
zXc;@blgh>%o9Jt=Sw_(-lo6g(#F7k3HqoY>)tl{p;y8Zv?Er{2C>iM_y%PWKp(AQh
zuPWxQV9%yJYL-lqG~gBKL{SY_+_fVJ30}aV{=HT8Xq-Y;fun^-ue-#2F7<l3Bg}nK
zSI2H7_q0$^WpA(Sxew7C6{v24+*8p$TFxf_4b$K!LLHKM_J{xEHDsz@{j7@629!A{
z8+2MGz6l3rmm&b6;K~P!_bnoF{&8)29gk<IwVAN6ZfmIX;9!)EWRe%kG$F^VpLY13
z6mGy`!ozGv?Gera|L-Ap5>0`$NkR`CAJh+#AyF2UEVODK?jMfTl{@bA7Hh=&*nz7(
zWzD@cc4g|^ib;GIE6GbJH|_FW=N0m3Gb}Mzaoo9N$29=y@Vt@rvIOA?p7!@mICgsW
zvZSgWSXgVeiYzazRW7hWshC5pf50_Y#W6SY1G^Jzr@BYNw;x3?yuDL9p-*ZjQtx4g
z6nfr~*~Yb8-zXmVxJj_a2&9-2_df)mV`NZMfBcT5&6{E487}GBP7laLTS<q6@El!{
zz$=|{QA+{9b-Z>q&PGZZ4fWp1eLbKQsRykvB_#P+rG!!22Rx3e6Gqf%FjGq1kudvX
zzuxFtVc?=xiIGt3CuuSlj}{$!yfE!)oU1O^OSTHYh8(cW_apFG3~$*EVn@&Yc-N~V
z5!8Yl?1jT=0vX#nzN4zf_r>%4fa&ei_2<<}mMa8;IBqM2rqHvj?JVJMoS!sNzDuWg
zQ|L+uP6nmMl~~+;su(?l@z4eTY`ved@31WxXc|2Iv6-5{TO?tP4A)W|oI_A%;<XQ}
zTX|MNo$0qDMl3nB0zc@p`Yerq-xOWiC;ZN_MoaxR>)GBP=P=|Y;EAi7Ujm;SfL&Wp
zph*N=M-!NUMAqT?hddZY>?Qv7>eu%%JU%N!zBrLFQi=^#hldm)n^5bexEoS@+&x<)
z@-U3$ylhFqC-u4tI%Cep-@4O`r+@5CvYGvLQ;RW@TBUX&fUZw6GRLl6q5Y%?^;+8a
z7Gnv!?6o)W=GJw0@eLnY+;{)W%t+A4wBLuKRM<Czw|m52Qh($QcA5DhOV5&B&F0A;
zoR@p2l{oR^$*|0}%06k=9T$R?g_$GKLmcRe1!IN}e&Y*~wUWygq&y6KB$}_It4ww!
zf-9nb{J>4rQ_0rTdbP;T_(7B)lxqFf7AgNjDCOZnZ#R9=m>3Z>NOfAsJE{j9tR6)h
z)HZ5fRA(r5Qoyf%J00+kn5X{bFfV(dkY=o~uM(}1Z{jSkq=kh&dG$IxZ%(IVZKjU@
zBWQr{Yj{Bk!Ze;*$zx<)?Jq$@inVLCb`i6b{fWCl=sCN>aY5_PY3CZuQoYMk$Ene2
zSA%^lYAU!7$|hWHvKju1g!Q43ZWz<R4yrrIo(ToXBy3MJ;J;kO?iqXkU`NADv<Hiq
zX0j^*cI!yiYUq0%@H9lQ$e6}v*Hn$mOPcDpa|fwucn@-I1-JtwA}A{c?wT1s)_aGB
zdZY%H_krA~ze5g~JyT+Og@jRmFQy*;q4DL}lgyRX>ofJY^@<P&C*S%{wTsP&4=%iY
zZf^fpbQ5L*mrD--qp!A>CeMmTSEpxr|NMDwO1kv-bB$nA2J4w(>Tjoe!-fPc>lP<}
zqOJpG3#eYAIkWV&79F!(8q*&m3KDTNFZ(0aLOc|9=hq)TDo$U?M9D2hFl7d2h=S0n
z9gCr{^^_^F)rk8w)X^1g|2lZ+qiW)3SADPkL`vNOevWfR$iBHVS9#EHQEW_N5?qw*
z+bLkCpqsc;n;TcC3^Mxb0j;qjX^!!g*V&toc2AyyVkwX-+6jSAn+({c@hSP6gv%2Y
z2C$Dy!#aAGS#eG^G>t}C?D}01mDOdPl%#%AM<Kt5lTCgY=)=?`<E~@=D3+P`Oqi-v
zBM!+2ND2Q8(2SEs)z_2R{L}Shl8Y8PS{!EWG#bVPWl3~Bm1WkN_-_tbUKL0C;iT)U
zbmxb?5+T8!OAOe=pQrw%z{oEyQ2g7`2s8(ll{JlpSH>5l*WX&T(EsS_Y`BTeW1ykR
zB<hEf)oKjK7lz`)K?g|NGPe8gv@)6fb?0OQtkg~$W-EFALNXT<JrE2eMsyd<c=*5*
zXcfi1E!p>IOMJnON^$&%nkyteC_X;vOAgX1W?Omst}~eYr%tM|%$X*!(9M{IC;L%j
z#_%p-!flx@bc(dSBp8v#F(x}xDfvf#iM|qwFi%=FNlMy-k|g2;+`H}^q^6x9n;Q!x
zutE=gvXH74KUYd$UVJMFh4LC4Ami09#1b?!g{1}p^2-Rb@DG^Ypw7P$c+#O*mZw!(
z*fLtBu|}bf5j24-jk}A@%S63q-OXp>G_T7vD|d`F+>`ONL_f{1aC+5jnS-jGiW|X$
zv#b!JlgF}?GT$kp8j5-|p~QDaO7*%MV9VB5gs=+0rj(J*xZbn~Vj}9C&87W9lct@K
z(ka~oAHg}4t_!p0hnJ6v1&xMWmH4-0L)KW0P&gq(e|*9N9w?2bt2Q3L^U<!)<~dr{
zUjscq$D+1`E9M9uFpB&(yPxT#$2NvjJ&UeeXp8k#wZ{`O41vWM7tQ_h-jQ1kAW_Cx
z9FR-ejIBDa&lNPK-UCDi`HO=xjy0UImocyh-}XbebiE$4+GXt{+pVT^v)T=X4KStT
zC+W!QnG-Ul2>D-3$;gDHyAk+=u%z=JXD9*_gVn}P-Y39n7+t`saF9UuU(*vtMbZKi
zU=-iOOt@NqnR?=7f?{*Cy@6%`$}lvlM}dn~yn3P8l&bepXtpA}g(J7cXprvYwBmu=
z_(Aq}Qs#ZS$2lG`1je{xmw!uyv$$shP;5XGBy6SU)!2GlN(zcce4-;&yl+L4?m-EL
zOc;qSk)3?=e~9ZI-wD*OPoTk(XM@8E<^Rln+I+a!78+3B+fHkDL_&=R=<=$-a&)XP
z(_gbHqn0(lGQV$j|C3g7Gg>`A;;y%|a<}^9Dz7YoHct=q8E*OGQf47ngK(vkeg54{
zp%X>#of=3DDk_wNf%BzyOQ;bJUnr1dchWMVirooSW@x)0c1i0h=W;`FLNH3Kx$!v4
zLB-F&P7R7Mnu4%NrHy4^9V!ZH5gr8}Zn75Fag)`K3l(cW>dZaD6H00V%`aI{0{<A%
z2nwQk+0;rf3(MT%RSS%yl5A+rdqosHUJA_-mXTXn!LCP9Q+uC0ZNJ+PSRo69*V=)%
z<dh7MlP7p--p=0=xv^O$D+_)t|Bm~dJmSq(O}&{vLDvh}QDp}(ovTrOHF^hakOt%W
zb^HD}w;SjD{<{=27)KYWLeyIu%&&s(_?RkH65dA{+5m$d)L@DqxgAGn$wD(%9vbF4
z8{s&-W70K=x@PR)N}3zD*&SgNt?-XoyzdP!4)W`$jK#@&P@1ItP1uKKIX*}pZ85VX
zMN2Vu2)7e$9tStTGmLJmQa2y616{jY8Vm$5YrslA=F32paOsbM2q$}`@}t1c>G>G?
ziq$fEXI^uljK4cgqQN6lk4lF58f4*pr_J{B%(H3}qrj!krFJU`E;g3o0=zmt!zc2<
z={ePie(n89;~hrPf$skNczX&LpLc0UPUJyTwYxk1UVsX~;6#*)c^Yp7UmJe{sh~mU
zrSP7gXATinT)f1zP}$W3wG_d118XxnEAtlg{(rNK0YRV*gmwfUK`Qrnbi3u_wOO9H
z1U#7)f=(l%G5|~@wefXI|L)oDz7T}bvH4*A*Y3LUd5QJ@B~#m2*V@?Tru{a<TPyD3
zEl2_?#x}4Zbg|qq_(bQ(D|_@>61MbG*^^u3PBLCm&@{`tOq+=hBG{;!n`=Ta+`*KQ
z^z$eH-=FzNS=b89y`Mj1F~KYE?Wm@9+_U7!sMh$`+Mt@>Xer`(@@0Ovw?wt0!qM0x
z(KE>Vc+ie0Bkq*Zv}<7nmW3eR@(_i21diLv>^^|<qe3pqlK~_1oexts_YE0Km1P3t
zFiEc)LI=6Mz^SZJn#{UQbIn27(Nt?pHE=;nlDoP#yH3PqxI`)D5i~ZwW^Aas>b=h~
zUu^@2|MwJHhC)BDeFJ$A?ZJv&J*kmx#_4<ZE2t_+A-igm<ggcBrvGO}?+R0*aB?EV
zNhEMY_QEm@+5MdDgvrjs2Lsy$0s2=J)GA-+2o7R5u9+#8l1C2L>@x7niigB{tAZ6b
z7u!6h)^~Md@og&JsNo;K!7`iPdHRS%GGzpJN_1(x#BLZu1D5@J+YR5jdsv9~WYK7f
z*Lq^O5(mZN2ODu`GEZ{sN;xQLbWdlyv@;;=LG=*uJulNtDqn`sZl}L2!5IE$xovqH
zGDpkk+fc#jTNZzX6%lt8pIJ9Ll598mk-Dc2m3C&k?y?wv;0oVr0K+|kwE}f3XGk>y
zep#0VCvhH_3=Y)d%xOc(j}t89;f=VF80d|e2+MLpsPgHgpcOUcZ`G{el4dY2XgL5{
zRaoH8rj5=4F>rm9OL#jV0ea0OUwW-GRNlMqi%eh|JN$y`>~0Uke>-djLx0N!ESLNY
ztdwvuW>DVMr&koLO#)x``Q@{8w~%$fm@zV-=p!4Ty{fB+sO~AqWt8rOc2T0*I-qSH
zg=$b1(az(UMuX(f=7{}1geYAlgAGi$UntR?Jb0OW`gC<|vu%@1w<bpQy+XO<HD118
zf=NwoEHhfo?~YVw%$(NIT20j6Ul$ni|I1^2aS<l>5ADvT6<G8ZMfQ64^HO);vam<R
zgMMf0g^A<w7**(>6j4}_&deH2{WU`EwrwgF`97OPTs=PZ;Sw}pll_?+jsn1@mMRT%
z+uT}N3tV9w!3s*5CJ`FFr4^0V2STa6IwC3`SlsMV=T`;j+yO}Aq2oprBE^_3SOk!%
zjFmGU2N{K;tXWyZsQUF8!K-MGOuZ(OG{JzsqiCz{Q8UvFkf(M2e%<;8$BO;BypO#Y
zepi+GN{~MpQ?gaKtnZI!2#{amx|Oib5O>a09BuWCcYUF3PnT%MZSCYo@KO!g+&elk
zSaxdUssu@(kl4m3#z#BzFDm+XF74(A{c6;EifY#-!JQ90RJ@WA=#IQ5`Y>1Bz$iOE
z$w1({4R5#UGvkdSA&<JXzVMO+DvbQRr0yu}ufn_oDho>!cz-Y=0EX@i;)esKsIEsj
zJItLoqgW?Nk_5iB;9Ts1vX33frc$)@$;8_D)9Lx97<>!Q-PnL5A61!E=zxRJazvL9
z<3!74qMyj<!6m(5O%O9V^iynR4owYx7A42B*|YC;?w4t@Dm>$tTSR5fOCdP?^IUHD
z&mJ!ULmYyaT)dt>wyj0{p%LUQpFQeR;?-rsb&nsRL6^eE2^%Kh#jNtfjKm1}5Hk!Z
z<W~`Tzx#W>K*i4YOq0%oaUoc^Ik}SHLPUWfZ950tk$-*)yI`PO!Wwh`!rwQ0-Ij25
zbc`PZ)pA6zLPA^#ls6{b86J&QSRYrv{4&}|<J9okgpG;dVtqOqSZDa|CO5)_bLxaI
zzlwX3hQ`8@5Wz8Wc5}x}u6<pdy~i$k&HrmFurMp>84Q;x#WEBzT1nd;x^QR=wFKzF
z{(v|y{+C}7KOzhBkoX^Lol|gNQMYbmb!^*7$F|WO+qTV4c5K_W)v;}MY+D_6c=O-7
zr|R4~=W##Hr?qyiIp_GsLL!wpW4AXiPtX0g<k2ESo_AuF&nOxXsP!T9Yu{h*FTY$o
z9gl!{o`sP8zsI#(SzY(B!4nXvP%S+kuX}HQb(;n<Y6wKHY|OqB!MFLB8vYwmWq+`4
zo5r5eT{{RR@@=K1T2?=FYG~8v+^6yl2a<7SAhkF&A+7IZ{^}H)Pqf2&AL6KU<2LCo
zEnYUjmr5ZVv+$X+&~dys=GJ7|zsdu*42i81$THJKJ*>tKPdC~=JsL?<B^f$hjMwj^
zWDOfIzZyeI_w7GWx6D$^F@14GU>4Sqylu2Ti1;}Esq!^nc}9JTxL;EJI2Sl-08YB*
zs;VX&TBp+Ti(vGS)17`a-k&fC2{`{a@KAHe8%r{R*Y8|qppyNqwX~bTw;%QQv?gOF
zaAcQUD;Jp{Mmc?&{gOZjj9Brq5q<Jw?>13Zvvz=8<0xo|>}TDfF<hAoerl@ojRMOM
zOC%xVo@<lkRAuGiWv5J^<M1BhGH?e&=zt<(j%t_1Ohw*);j=MYpS54OC<~Uogg9e6
zE-wp@l?o0-)zRK0jmaSXA!`^#xG<1`yg}&XgeZuZh%oKN4&quyWY*!Vl<kB*0GXg5
z<o||*la;Y>*qgfUISCG9=Y86t*(O{?Evx~H4Ka?vJtA58-7_?X$1m3?9mpc#!5lJG
zqYiFXmrZGAl`B|a$hfajI@qAiL(KbL)aQC`k*yeGyjOeH{?$jspih)(+M>>YAcZOL
z9F<&j>as;;2tv!U3+jf}!1*hYh=~LV9%S*e?N`^kPn&d3b5@;-n4qXswnMvl=z)o(
zF8x{^>eWDVpJjl#3@zJrE-;6qMJ<}o6K4)B&y!J}_IDTS+hF-z?*47Nrwj5bA_vGP
zal=0n6FmK)&{hcJ3Eq0!OO+hrCo*uwYsp~|IqsiOaxvHzBozr4Xp*e*Cvl$hSJ*Vs
zUjp%>rGrVBaBLEgIAR75Y7qwqL6K}(H2x9=sZl^Uf8|?(%l*$qzAwj!UfbAepjz$n
zY5u6T%d)DnnOHn3Ggm}7{mVl?*YHUei<*uDmk_}d{mZxIp^|dSbx-<a(fH%^<OEbp
zrD}7UMB-0ZIm4ds6)Jy%Cruc<puvmqLHCSvC-Oq7I37siJp3#-3p5BN>aX%VloSvS
zbS^{(g=(79b*Jq^EC33>LB|TZuPt*uD|QeEuAM%O{cH%KQ)1d`nID)i-wgu#7P%TG
zdAWA)V3<b{yojd1HZ~OMalyl8x-jbrUzoQQSXR|oJpUcq5<z>q$;9mNiV|;_oLOKx
z!`u^uiu{7<iqrc(6j$b_QdH4JlX*$$DS4qIbO6G-7u)#LL=z}RX%_58Amk=O_<+2G
zHW&`MGCKK`Jec=bEpK%%df*?wi%eXITn;pA{4OuoLsXZzfb}6bvz^nI8wtSsx;y!z
zxbbX^UTB3zM~zn35;-95NQB58O-+ar-Ut7H?UZvxTb1Odd!#`%SW)uKq~AeWrJN|R
zpw##b5<LzSDFVKG{lR-Ye9vkKb&6QklM@zix>3#?<;+|p1r>TQ8J7!?`N>#zi&;_q
zyngP<PJ_%CVUFCKa#;}jtKEQ**qV1SCFQ&zMv0(7ikHW^Lr!NB0b_lUg*Pi~DVP2U
zP4N-!*7VOUaiyR8Y=HaXOj5A7XCdf?$e0}_VJ%)>-#XB)h?z)U>~db04w$%;&olGb
zN`Z+?-HDW(3nLr1#XnbtbvP~9BPyXdmB{XEvP+N7X^rU)R5{{@7cYouR9rSX#q9Mg
zd?lM`O)~GhRikE)?>RPw_hHVevII|iZDWEL48I;IQ$gk^s|%(A0;4H@9<^s89f!{Y
zHn6&x+kizB9eq$3tk|gX+dmECR8hwT6ckwNV^>{<M7E%dJe7((h|N-Dr_v2QBflF;
z9k(om6(J{G+d^X>EMik=92#+FUj+(h(c3ewlnR?xy|ol=@dV#=R5`A*h2i}t7|yAK
zX{cBw^mOY?37b1!+2KtVlpe!B=p2<U361UgX#j7kR*745U=v3Q`Kwo#CIVWqzj->6
zM2w-neMJF{vVbE6(Y@HX!k9a8O0h;m*57hv`t-K|qkox;;=}|nYarMpZ|_rQ1tD%o
z^a%n^FUz%&*%lYj;9@qM*x?%F=GdQHz7BrWG`E`E<=sC96JCYEG4fSjgxqjS+PP>b
z69K19^x15)a<}r0d{6!H+uVpDub8AkCr*%xMchAT3J!5FA>j<lZ}nPoN9&fYNkpq$
z6$^l^TI8&<Nn;OW;_Y$FSa@wewfG(aR$jZ}YcSTWx!~i(etqtMbvKbfXSQ3Du2GMD
z;#b_w52MELMByo7)+QJ&mMJCq+!8e6Hh}4BVo`T{ZT-x+;D>%~7;PlBV*Xk(pJXA0
zt*1{e%X;i-nEZl`-BTVfKGOxGxD0HpWI_39Mb+zsq<dv%Mb1O&HpT>a2bJFXZGSVv
zXO5Z(SuFbzTfI7>Z1d@`$+A$gvgi}NmsCbgs1e^=*un+LVTt`1_J=V1>ol<B4)~%m
zZl#P1Dyqut^HH;^k+6N-R1sA+{@kgr<Ye4`VG6<UNcS5d32i8gIt9ZR^<LeG%H`wP
zwlV6roDoz(vHwCZN;duQ2SLVyH(z~qV@D<=L3aZJt@5nYUqov&7F9R>2wM7dKl-_l
zq3w)x8C%F1J7w~HLaGp=f=jd2fsbt3+@9;oX&)5JSox^GtlAk7cJ}tdXYOXJ2ZIH%
zVTF1p#;&dlNUO^WWHGDBV#r)G^;czdJoZPr@+&!1UfZb!Uf#)YSH}APT-URf8W-IN
zHFHe;%@x~aeDFjp$yN~SFCu0?DZ@?VL^}`2sU1^>C0rlMX~;tTU*eStfu_!wSCRb?
z6tL!sL<n|~tCS*LNO?nnjcvcdvCfaRb9<GZ9_~UrkpN6r6<x`4@!2KCu?_kP(>X-W
zN0*vARs*y4?3t&=gbbnYH(Mj2^E>duI1zzrC&Jm*c+em|73(+P>X&u->G5!^URZzC
z6qtD5*~Mr|^VhI&*`=Kwfo1W9rZ=7MbhTS()Ja4M%2frwka*JloK|#H1oF1NyIw6U
zHbh+@t+*8sC={km^6bUJ=7DdG3qoZ_5rr}x_LJWOsX(_W#Dis2122(B{^$Td_9&@>
z&@Q;W2y7WO__;F-XjN+ZXGsJRj3oI(kSae)X?{3yUX2t@vs0`VpezVid}`)U^?7e9
zJt05A9w9Cw(w4PUgdrVTTUX9(i}XA+;-cle-OIfSnfm#0aN;cihQ*d2GA%s#N-INa
zb>8D_dNM(<EqV<HIoFcnWv>CO91kP;iYyKyu|av6-g_yNhd$3xhIo92xKt&o^eo?z
zx&ll4Ed(q+RxxP+oGuKT>|~~uM~);!WauO$nxAN(cKs)0YJ=#}56P6@M<VV$yeyu*
zJQST7igWEZ5x-{HF2e^HUu)z_L95A_`r|4Gl&T1FBuhO-SQ_rS^47?gjx$<{0?62U
z6I|Iq^{`+}jiry0GTTi-Kd%K{(mw|N`;t*&a4a%7Cl^~{TC6B=scHKkd(cOBE79&&
z{uE^xPIsbJ2G|sbcqCM6#~^f3S!6Wngf)Bffz;m@Oz}@|N%GJXwKc4rSzoJ1QRE1G
z0oFS{)`6*I910tWj@%pfX5Lq?N7vyE+>hi-vsx^3#;u>+Kcx!VQW}R|CW#Ch$w}0v
zqZER^FaUQq1{i=$9_y2DKfqxM-A1cwdYW;o3s|UzlMBkHtok@Dy=KG&JfGe}uNESo
zCLis0hEXNvKv;ca+28q{Ng$Z}CyzFIE7m=AG3cO$(1tBhr-8TUTPM}ze}6mMRxkfH
zGqm$_kj#(PQFOe`S2K&dppqPM+Q}viDs4Ph{Y%)U&jq@(MEK2>0{3x|H4_}J&00{Z
z;7mQ36c?wfh*hjnmeypiFcIq4_KcLP*ZqF1hMlc^w@jcGb~M)7x2z#X^}TgoI}pH5
zk;05N8}dzDj{X@&u0`|aK))ud*zPLPw1oZMGISiwD#~kP(Y2=ghtnHcUS#ce++1P-
z?0UKk@;&gPU}mf6c?S!jIpJ~XcHT=RMgy;?={W-0HjJmP+VaQLhr>Kd<6PIB5{DvS
z2!GQhMu(dcjI%mHDoBtQEedTqxRp2SpKA-${VW*c%=xkZw+JmUPYb8iAJbuR%$A|=
zzS_^Dk<%f#5L@4sL4<H#k~uYXFV@GY#1)OOzhHYe8mFN_@R;NjY;hE+Y=9p<2Rsi}
zN=e48ee=cUCI%ck6my@rXc!*D7KZ$%5$;k>1+udQx;e5t;gxlTX!c>Bq?JpMc8U5w
z26t&iWK7J<76zg?t~juM?dO$9y$ibQETbFf@CynPmHzJ~1J?yYA=q11(2nx)hHSgf
zL)?HFNTia7076z`P`MP|fd!hBEQV-LOeX0!a!A7+|L9U!W7y>`KgpvAkIj|xj+NPi
zOT+6xM7TYLJf@Qtaxr<-HA6NVQZjZQ9`-QWHMtg9j3ViDL*r56Z$V!cPnqF0P|xkq
z>Wd;wAy<OQ@t{cG2>3Y(F_i3IN3+~6MfQMtrsz78Ql0iG_N(`XM}VVv!U}meO{7_3
zZ5ZQZ9#5XuylPSnlQW$Z>7@;#<%4UXwdxv01}HSCx&V4FDYV27>XLX6`|&C|chH!S
z0{Oza&$MelHrwpIV@G`jxD)6XP+fPb4~39}x}bdJe={_C--R~f6=gLqo=A8iZdZWJ
zHDW49r3Xq|V{Riy<8)Q2O=YBj0yJWwjt+5UTDkdkwfv8Ji-RPPacMD=2`nH%G+u;F
zm$z?xz}Vk|0AA#Hx88)X$C8627hVe<vj~-6rXbRuL9Zj)fw#ETk<;HXd88dj^ypOy
z>`)b#jZ0M<Oe`-p+2R`8W5}S)Zwsj5wcUp=NLbZ*{<q&zFxd<Zv|apQ5UuR7uFNh(
zUVYmd!xNmzKM2vxr>;NOq?9N4qG0UmGzDCtZ=J7qdg{_FmvPI@SMzNmD(BrvTcfE^
zWSXVVg=j1>hK;sAHb3?~)BXs3Z_U}PM+`*%<#8(P${MKXqrhd|XK@Hkg8(=#!Lrn4
z7QSif0Mw|Sx;^+3AZdh9Jy<hL5D8=gBBLu(y(~KSlYR?HBMa-ay1@(rH$0oy=T`by
zmYMcc8*o(wAph=R?R@?Yt_DPm8jqxlJzoSnC%7BC&LfQ%`dsA2E@XN=esf)e`8(Ym
zgc6_01+RYY$n~hbW0?7QK?MkaqXAiY1ruGDxdNB#JGaDMPhRi{<o*>eLRy*d<8OwU
zv6j*N=et3ncxb&FQyxA?)gzn?yU?RpU_&bKe=3=%GK8gKtxv>KYvLI@&fgDU7E;3R
zMw0YnC4tEi&=F>@FGZ!owM&k48e8$1I(#H;3lDBiz>5XSYB<Pd6VUwxFWSbp?DWxQ
zfv11CLz0}eg}z?V2{&ztn=L9x-$Xz5B3%@F9~eV%d$#DYZi24<kB8r8y}qmm53ib1
zN>x47X^~jY&far~2Kpb;+JODr0&CQg*7~bXAkLT|Oo*Xf<?YhDVZn-A14?lVZt00Y
zIxHMT0)<bBCuhjyGq706?9Z_Ec^Nu%*wOQ->F+w?+STTtFO0o_gsyVjpvySZ^X@lr
zUndcmQu)%dzjuFb)<)msBQPD#>#(Yp%5>N_F|QhUxNxHlvizEaPh7UU*N%^u!3q>P
z53UJ|eGo`+e*64&?(}k?mg6KC7=y!^Ug>LljRHbP6qVLH3kdjWwEexfGi|ko74>J-
zhnh!){wLL{S8^qc<x9d;CgZk+5fJ{UwR}32UDt*O4Xri9CzR)pJok^r523S85v9uv
z%i)PT8bZ6+mPdjxm|f!%RK-l>HzNvpG*T%|+)Wi>sgwTkvbd|oTPNrm=a01x3K~K(
zY3%&P!0P6z7{K_OCT~brd2^*1{<^f$7TV2ur`^pE=g#bb*nAA=$X>ay>qeXTVfIz^
z-_Pv4e%+r3=K}%l(3^m&!mB=YncwSYfLB#s$#9#jS2XjfEZ<WQN2Y?P%_ILn;-8wc
zy$b4uOOGPLnD;=uQazq0%lUpG;}ua9t%C=|JP%4FMj$I_>y>})W=>0dC6CaR6jm-e
z0+o43HL3EmHb7ts?4YH-Ua-v-55aa5S>keM?r7~LbLe8E@#<J`Y7S-OzyH=v?2WA8
zm|5BX9}mmS&B6U&kSsGR*Z-honOXnCCM7=5k^q-l+F$#{7;^eA#P^c)FMB_~dtHfg
zNcpcgqLRq%(TXsZ!TBF4%@21>u#f#FdzyKgJj^0-r_pTKEC96vPhrNN&N_GRb}n0H
zO}WK!2KHyHTyI`>9->~^-xRCO<mC_viSB->nFOOqOnniw{oj5Kvrkl|X_m95%*d%h
zKLMT}I|t?~wSO#n;xzLiI-OYrTR-pD8TGUHc-`=RPbM8w3dE&r@8d4*wAMW?Z1;SA
ztd8BzDL;*-O=|eB=kk5tp1Rv<Vy2^y@7+o=cKf)!DaQ?j;i#vp+@KwBp^N7nwxtok
zeVZTp87w$plETcl-|;fe7_ibnt&lX-(GEmDrEi?I>eL+j#+y$v{kaXj9A~VMnE=Dm
zZ!ZRGT7cKD(XM5o?q#po$a?*aKWN5ML%_NI(D{ug+Q*T)w^ar!FA;?Gc~k!-JFnFY
zQ=WQLDaUb&d)!&E_Pkj~LbxrSPr#yOf@j<`u|Sa_2Ue8hlrc~)i%yBPY}&NMl>rE?
zI8FyO&dd1fv^GL2JKApE`_2U%oE+JzkFZnHcW>xctGRA7&^}4|mqVoACnHrwNmD8m
zywGAp{IYT81B1t{VsyI65=L>t95RxKyN~P^6|4sfG;t(MqK(ig;IDaPv~Ru@GM1jH
z(0SDmOcDtUCn4^uB2M>y-1j<_2L)Qz(0^_Da407fCQhHX%rWR#3Ou4rBw;_7#jO35
zKrF}1oM=bbrEloB`Za6Ii3ji(HJ5~0tO*>IsNf@AsU14u*ubP0%wOT@_PWGi@^$sl
zVkzqO#_7<x?0GH>Bd2iJJh(28OwOis-cW7^|8!mC6lPC75-Av&aAk`*H~_*c4aDMw
zaif*Qg>{?)N-D4JLA@r;mMm^GMt>K2BB%+q&X$bY!v$kvjItBz+Hp*Xt3E~!N0yRA
zej6{oYFK4Bp8JU$XYrD{>rkmIut<X2XNihXPpkiZ32Uxh9ImG!mSoI1&^y%?XOd2Z
zk~nj}VU|)tpape1^jFxliW0Dy<*o^DI^g{4^}uP)&=35@n8S6B8&bVYDG0pIGoG1Y
z^hkM4-4p^2dho}3W~W1Kbzw>H<Q&p6gs-~y9e67uOGUWw0M6<)PplAx6V04dX2bX8
zDWj{Yg1mW}fcL@=z0}@oN=YQuLy6eiQA0-tdz2vL;fR2np<ATwL295eK;*gM;<05|
zgp`DrYe;kjCWa;5Z%xpTRfN16HBFYnhzS!N+<(L^jECWwS^+hSM%ba*YP2{Y@h5Bx
z$#+yc`Muqw?ALC)Mi{cS`IlwG%J@2o8|<HCL1;M|pGq|x6EE>kZ0NGZ?%zT?Rd+#L
zmQ0E#oVK0pAN3#La6JIUc}PYruy(M*TcUUcp=tsqxZNrt$M+VR`P~g`XTFzjRon>{
zc%M{Wx@hGuq*>&D;K>^im-*R)8fu2%(^42nDfaF58xvP^{bOiT4s&b?X`f>o;NWBh
zzzGd?{XorqoLp|6PhK^*?al*7fb84Ak?nRMr_%#YFs3`h#|^l-7|msqwQ(;BAH=*G
zEAqF-FYq>^3%L0gwk$H%pzv-kM+v1f1^c-!oe8$*Y&K_5dP$y`h?)jNjMTrOT{iph
zr>j>Zic;YH4na?am-A{IN##!(-pm}ar?BvQ>6is}TTbu}CI^b_7c2mwSY4GKeK(83
zJ3i2T3QqRG9taq;>VSeiPWVA4fK-fdE#unq4k-;>3YoR#wO*~8q1F4dCfvgXn-4l+
zo_pjSq2CG)o`l$u8}5)xUQkABnY5|6xvbUL?}((JzauCm1Z+I49*hwRf5&i*J;hPT
zgHXj%wuAw5L}cJQP)NWQimZLVg$irxL%3>3zsi-(h5{T-vG*CwaV|SaD*X}Kpypv-
zbEm8jEU9;J5#QIDDo1v0Ky|*|<UznVXmRa+G94E5ld%3K=Pb_e62~3Sb{<y4s&NJV
z<pQH9WT32Y@dHUV7kYkRcUnrf?_#KI`MErtKC=`RtztoJls0pGku3lN*%DTMO9`cb
zgJUnfb`wZ4xWL^2r9ODxBPy-I6U~~9{{zNiRF@0Y3??pt<0PWq6V8iKYR4o^seHz(
z=lnwa7j6P(j}$UMErS~Q=3qc7GCvgx?8iI0OSylb_n+=QuF-o?ihS>Z#SWFXUUup6
z)Y~cHz)hR_K87#~|J`~z9K~Njti~|YV67tg^LD_VNbuS8Gc7dzjCxxyQL%M(Sv=#@
zH&`rgO`J1uwkTya%%RIFc=}gSkFPbNRMc9FI^EDBRF}vU=0Ohuc5#r;7}>M(eUq;F
z#K$C2Z(4O<?sooz_Bw~iCuAo19$%+)GafN<(Fs_N5|0iyuSU_B_*;?7Ega<NGT)zp
zbQZvO;>JH$dWqxr72yQbt!fGl2vis>#*n6JWz`CHuC&FLeuEZr*c}KSoUXl7P_MSI
z0;wTLm;Zcm^@doh&&Q-^cfRQr?X=P_W4U7fPEFZCGv}LS@&`0BDDgu<jMWtMpH(EI
zrlU!DnslHJ9`CRt9vNt@WEi$8kq6ECgI9n#5knaqzF8`wGqlDi3aAVo+G=VG0fDC0
zHKc0c)}UFqrQiS&_?t0RHtZ(#vWb!l9{gaTc87=>ch_^(&>H;`P0Q3Ol2RA+TnR~}
zq8Osfr->RPSqc=cmb?jKc!kA-al>w**`i;b9bZY6L8t|LE{n36;p2WaksK-fy^KIq
zyQhzyU8=@@Q&GyBvF`Vs6kT<BY~t26MOB?oN|`!Q78-EWuxy6ynV2Z)#zN*SYS|;2
za8QSzkVRHYJsm5}hEPR$e6Vs9=Guzw@rMlc-5B7){jCUa5Fk%>cg7&mV<Mv99r+hj
ztaaxhZU`57-nb>flxbT{qsZcW4E6x#9nVpeYQXqIr*GHyR}0sY4IvNg6<uB1b%hRo
zw7o)<Z2P!yw4G-xm6AK<j#0Ex9r`T=h}{X-es8D#2~*KWqgF?-9X&|Rs3J!0+q>!3
z>dY)xqjUv`&&@quq0cTPMIEf!Tacgb7U*ZJO?W8dP(%erb8d5S%5nS;Bo}~q9O7?>
z_saIlwIQg`ZSOnCC!Clz6)F7)IWXY_(E#)xaRif3(-T(pI`?yJ;|NmadnxPPn#n$I
zsNg4~55#3JL+x^ZVxT@%5};iwZPr<MR({ZKsgGJKJ1Bgw3ujg}L6vf!(g>)Emqt%3
zME-Ls29|Gw`$Grs#-9yrFzp=}16gLn!S0WlkO|7hYr>1glao(msMk)(Z+qx!Fo2v0
z$_#2Fe?jm1dta)%i;8u^zL7|?O-H5tu{F{JbtQbcka`|wHrtr*d2ZTO;b>v}Y+(j2
zt#h);m_vrRF;WX*-2BU$RW7E6isYbEn1%gi?*;P}R#IYN3)6@oQ&9~N;?=_jhdmi_
zhu_0NHjmSrO|hXHbS`tG-qgIg)odtV24SN7UH<vk5kdyi0Lm}mb!&6v#dK9-%#V0C
z9%=co;$x#H5DDtqW_feZh+rb^HA(m?P2lpR(jm#;2@K$i87ZGNiYC{^fb;3ns+!ST
zR5zdS@|n|rN#}G9)a?SuMk?M+-SvMxZv?tLL=bNBhPexr_IqHC|2e*yq$wY|IgxIY
zyB54S^X=gFaX7Q`JYl4F7G-F<)0MqLJ^;`w)9O-sO`?gYoaL4W)D(^tA%v!=+bP{^
zTPn-)0nrW`*jxFRy~~SZ#dX=$6VcrP#1wfVh}too4t;8Dtz$s8G41*s?5Mml)%>B|
zs+Qw@R4VvYN}A7NL@J_ZMk@1T?&B<5R#!ILiRvddlM#uXZMf(A*mvggf$Z<hmNQ6=
zgLagn$Qg>mtw@*CVAD#^Ja+BTB*#<jZr5L!0fETTuODAhi$$NPZgG(T?HG+VyuB1h
zky3=+lm2(i*dxGi0v|X%)|#8Bs7N(mJ`BQ2s8|Ypnf0&03;^H-j8$Yo?;p&+<5gG&
zHu7D#!6-=}lXWP2w6)Ez04+>^RoZ=u;w$AX4yJ0iMi(c}KI7j&MF`$0V1}Y!Hv>`L
z+am{pj0a0vzdZMJnvUPdwt496cHi`~2Sx?1oi(;UUKm&|fDyy)Ay?oNL8?Au`G0v-
z{FlFwm5GBr(W*%ln9|jD#%rseZcHHRTcf%rw2tCsqLSCsE_bC^y@+?E^;B3~O2gOG
zxhpsvib)s;<T>pENx0ERVQP{p)qW4)OomE4EpKAy-JXZ3xQKlX{dsfr-@LxQ)~t7D
zJOo}oj`kLRBNw(;U?>~8IJ@r><`uTrL}6Pp&>2Z^enD|qoqLNdoIN^Bdd%V!8!oJE
z9*%bd$z9a6qUR2`Qysa!t?k3-0jeSnz`x7ISI*^Y-}ZkK58iK=i|p*Dndv(ii)-65
z)&NquB$S=f#*S?27qt${(QblUv!-1diLmt(!N702_4s%~`gLA}6=Q)%M^AA2_|lA>
z;Pb8AXAsCuu4<}C|NPg%uG9Vg`1CwMq1=fY5yL=JzJvJoe&@t<D}pSs^ijT!wavco
z$ouNam-ESIe>{QF<oMdpK}t(eG-pY+e`wToJ6jet+Z_3Dzh98;(N>Q;xbKUz%}MvE
zCcdZL1761XK9yz0#;VOAa1|J;W_Gz(e9mm>2Lsg2M}(OVwQDd8+lu{!5k#xDEsagR
zL+$Uf&y?=)Y6CvY!*oSaSQhc~#?k+dtq^i3CeZ8gV=NC)_L0+ySnym?8RPQGq#DSV
zEFB4+ZI}FehL4Dza?v%ZVDXW?ZSqH2jOU<SQ03i{NsSZ&OIjG00{tZlzWsLo6ngUQ
zav0bG4;bwD@Y=4?>Wl|BoX@*%X^Ax3@-?nKA5RlXU-(_jq;;zmWM_M&J!3tOP52tI
z>_R~?w>!+3GFqYa*FwEIna;E~`Icbc%ofi?XdGqs{K<aHllf1`OXOn&C_Qb!zo^t+
z9EX05Un95>rX3=6k-JNW*+2`Wt4|dpH5_oR+*(#-U<hxw(M2so5-9kr%bTfzqwDnS
zzaOS>B+iqog|5z7_zBK9lI;zC#7;JjEyPMz4pE*YEcyK25vhLt!M9e`d^uFv6LT_D
zNpvH){do`d(do_mGBvcwyFP7b-^O~frL6>2V94GH&9>S;ArF1<z!ju~jM%O~NC9|g
z+%&-csEduw^e&C5Fd}ciG24B^@3RYL29f3jh)%$b)p8@B{QXIOPR%5-q3KH!r6DIn
z)e4eZ8u3W;rsTEn;lh;IGY~6bOhNwn#nVy<_Vfb-cV&8@dabT&w~!Q(2tEhs9(KPJ
zs4@NZOQ9$ge`V4EBif$-U9#hG$qFcgt962c)uAhfWqjGeHEl;E@Y-lP9}kU<x=ItQ
zrt32)^&-N*(}c<gU0mS_j9B7pm?_QAr~2JTlA4fA;6*F|DJS*A%ituxaC26)>_k#}
zLTXe`Mr(=QWh{}qSB)1DTtx5tea!&K`&kp^XmsI3p8V+4OER$z{(2r>02Huze<4R4
zv2Ogd6*;mH>K%$N!fb2QNOcBv!*7PaAwea?v}DO`Pea1Dyz4(aR#-!W(Dl|DrBF!7
zIFM<fLTXK$XWMQjys5UXi5DVa@%3_grbu+z<d^N66$#ubQrIiuta7C|zoJ-(4lT7F
z^BRZ{tu8#bT{^$q7~#JOi~?euoVRT{MUR6B4`b|@deyB_F$}wWJi>TJ2Nn;l8WGjo
zN=9%WyRmE|B*pLV!9}6rAYpY3zFiAwFhXLJ<00o6@VQKA&aG+3C-6m$huTVgvSH*0
z53%SJkvGjw+T@A(XNar34r>NL{f0I2(HVIb53#;9uO+7ivr>=Ed<DuQ`M8lmBW=A9
zLN|i0tUP9_IOR-X75eKHYIIfftk%Rt;Du5B`=m6S=C|0_SIzvuAr+TG$XOrlX%NvN
z;8CEY`k$@Mq#b^5Fi@V`XKBT?_bZT<K@PiZg^u!^IkG_(Jc$?~_<pZ2m^Z(XLuP>r
z*1f17&od<?*CBQ=djz6#-G{GvO!eUd!Si2h43)BkU<h7VvZp$gaHnHBH<_99V%nQ^
zThK;AqJ%QrM?!QvWu#StRe9}+^&HM<*bdxz*f2#cVT#KX=1`4@MLaiGCnwjVipX8A
z4T<jN&-p^<A`Tk-;Yq~e*<$+4aHi;nziqaj+3Ac-sGg)nu>nAf?#kOF2mCF4oLa9}
zi;icDfd=;PW*l!F0}5se_vT5ow-}<X0sk!}-s=H38Ckc#wgf{D!z>jr%HB2grS$}O
zMB`AzrUM|5Z?Gd{Ek>(C)yyV=PYPLQqGZ`k=eJfbb&dh(Uy?rp(ecF!SmQy>xPQi@
z=&;`kuP!k4r~&b$=T1$ZzxcyeIMC*(u9Q4Oj8B*S=ak`vX=YO(v?1M>wd-bP`cG#W
z=S_)e@u+ALPa~h73%MJ*K8iwij2aMx{RpsyM9|xzxF@Uyh=hdZGwRsQOW7FHTDh*^
zq6(PCF#}fhy4Am~`|Quktnnma#3s1f9905|Tm5HY*nrWv0^GqSzv+H&m#$i2HQWRc
z%^?rSAm*p{N;-_vFXrtET*Qxn1ulCZ)q;;1h13R@ikMh{J!RzBRuo+)(yv5k3r=?I
zI3B~p-=v>M3oi%;HA*&P2L*sgmV0T9tmK$<ucu~^5F1id=P|H<r6<10Hy|4kW`$8e
zwsD-501PnG0zL#vxYyG3yux6u*+%7KYRe9oo4l_VvIcbbvf^u*5#z%A{m+|z0{4bY
z<XDuxVr_PqM6rGB62CB7<75Iq<#+W)3{IHX`mB9xoZwOYlJ?qQK+qlwAa<ajjF`JC
z8+yHkO?%$#d~*BXg8TN!p+My3LOdZxeb2FXfy=yLv2AiYDJe5>ocxD76FhJOQ1a(p
z2s*EP_!L@tv6wBaG*(bEmaq~wTF`7s`KCZP!QTn@pwZ6ABwNq=sg#K(6-FoXSCOX0
zTnCLGnB^>^m31%>^?d*>m=}Z^c@3)p0%|HUmHCe7AjOWo;$D9wF{G&=VnE%8o98|n
zP<?Q&v~Du1W>^OQtJsil=;cWkX$4W#@q0Cl=dK4NRJLeD;?8(cSwC1Kda-w}6Lkd}
zZFu50dU4lD0Ww?k5L3&6djrQ5VLbC*+#-Z5MIXwwoyi~7*tRQ&uw;D>kWt@|H#bUT
z%zkX+$Lo_v_Y2|3{m654lTtT!3t}yL2Yksjc9G#j!ygSyog@rBHK&>Q4Y;!uag%#B
z5-;<4IIHqqzn@a`R^?x$!Gj57r1+DSsX%BNPT`b6{R>z8(0LoArWu!?wFXtnYo#=b
z%RQhluch{WAPFpm1DD7t2q_IyH~z;aKiAKU#a8Qzq(&)^k&=2?{sD7*qhhHt3MhAO
zi9YBLDHoe6RKlgYk+bAo<RMcJB9r>!%N7woGCY{NYQT}G8<GZM&LDrq$16EGRWXT0
zLIkVlV1{d7aS27jS;oiHYth4V%^QV!u&c>0kka6*LTOzXn9ds+dOC{GR(p~CVrzrz
z)WA(S9LnkZc=f2SgSUAL;Z~*s2P9b1&fqmfWrnPsotl_>Rc6s^Mi{slgY{K**&zh0
z^6R#GJ_Z&aKKW#&i{qIq{6t;hY&SQ4SB8=)9}aSv1RG2B(Y>Xm5>FTx&yzM*6?qq?
z5BwN1^jF0eey!7c!2p#Qf)td&Z}qToqE`5EiwMH*hxOwIFEmLdD*_ow5y0F5{|)ub
z-L}tt16@9HlBiAxuZR>SqId>s9^AFe4klUN-R+gz#~W<emQJ6(XSMc_n2)?s6WQOu
zs>!dBUZkv{C&d#|hOU8mniLXTROoKNPj{MhC4|5ogwll=2d=@pCe3JeV0P?c5Jua?
zv$~I%{)8i&jj84U|E-OM1h5vc+LUQStXLpxUyv%TA+DEG_#Js0FBG~Ci8rJOdstQ%
zm^{WE3_a(Bco}VkdHhu*%h-fysnJR96p{G2SKbmj=O8QX{m@|=hX5Pi_0Q>cOvv-k
z@P<3#4F-xsrQoFd;mZO8)$bicx0;nHKa5S8D)@rW9wAhi;2gbr0sFe%-`n6jPcRdR
z7^&?SzvAPPcX`Bfr8R<styozXz*EFEiVaB&#|SiLerN>q8c=x$jVD_d<$oQk`8dA!
zg;`_-X+5_F$rT!AozA1Xl@?7Lbwdq!&T_nzy$t-B)-1d5{&-SOjG?9;Xu41txQU5s
zf)mh*XG(SaWHyXlfKt4e6{diR_9wEdyqYG2BUF`e0CK6lFfJ*K@Pyo$LdQm!^G3(v
zl9^{nudW^66<ddo<HO^)z8Q<%W=5#2Wx;wkhoybbR9;#?!2o+SGD8VJxc1S=5}TG%
z=<5WOc56xf5^t*$S4mwj{YV{Q9exZ=G~6;<LQVinhA>MoU>Gbf2U|s-zzx1cJa)6t
z;|U)RPt`y_hOF~%45!iCURc9kucxQp+JWmpw1f<&(^oou%qXtEEPWd?x0jIfe5$@!
zl>N6f5gk7NYMxwaFAGgk-5`DN%~vJ3uS#DTHq~xr2kIMb@r@8)8P7KpTubuOVh$c6
zRG|aYy*$9E;r+e*jVQi^^&{VdWyn)LNvNXro*S9f%1W`RdSI`8(w~Hp>eWl9cww{P
z-HvQa+M%AhXU75VE9>zgz@rwIO`9Xb*?ST7K0QiZqslHNw4}Ge%=5=Ue_8nP034eN
zc1m=H3P;r_*VhGQg1>ih$&DR)lIT8{JHVA^)D5Iuyvi$gU_ybR4I5n!>HqqQQk<(<
z>Mw;Kr->q>2}MqKGa%r}qb=Usx}f5%8{ys<>v4Fak`X^c_oX~WPpQ<-lT|k0R#dZ8
zk>Y;#uMriGrSFeSQpQ%xVz@Fmv=QKiUP3;sds*#n7geUZUKfmZVk>E!%<Efy;QnTx
zE&;fUCkx2LCeguMDB;o;qH<okC}akIGY_Ji#}8?rAVY3MwkdEpp@6{j{F!%jD`g2A
z!l*(}lQmn+MXNJQ|D<?${beqiXO9=w8Z!0Mj87?tm)kgY6oT5b#ChgDL2*Zg`HPPN
zk6IK@#ru~efbDNO?L7jp#A#8`?i5M!;Q?&F6{efa8X6irBM?Q#xQ+^3lCHlBUHhH(
zD-!$WnbU%%jQIvbniWzXq=(Uwh0!98AK9K#9~IdaE5cTtP;2CrkqT#lTE!7J<;|d-
z(sB3y;A^d+_=+iR3N&2&?O_)BJ_=G>%);RD&#}#NIdtU?RVGr|o5w#H*~#KiFbbHn
zYkMZTL0wv8b4+o>p)>odK{;O=ZifD?9E!BZXKr%It$$e6AAu8aYUFAS7#XCk(bxGy
zY3r&BRBK-MoO-=X7|l1aa<0dSI|a*(@4m1k#M!t8Pm28h3IDi{)$?_79tvy7V;leR
zvR^_3rO?YI`LyN6_|X3B_}lno_XtSO*Qo7!a06+wBU8iOPpBJ46sFgc!KYqbwxWj9
z2T>UMt7)#z?Tx2qtj@)E^_Z<;s%D96t7%^{%wyU;ea|_ByGoRp5sh60XQ+dUWNoFn
z&m4=$Z|<hQj1Oh=(I+mUQrCPZs5cR6m;}#V_gB0$u5j|X=&O6FPZs8VG=Sg&lcKNj
z-GVf=|9Cs<L3hX@#dP65%ga4_O3fqZnfat~T~sOE!#7L`qx`G&btd0!jbco=h87Lu
zd&(Sw{L?(8${%hLo;JE{dDXT-;+Cs$o`bD6V|X5<j!g2p*Qbp&c@y-d&<$=|MJ`C_
zzj?(I3GvlUExY09qva}mwSYQF)zu|S0tM6f%JIjF-rytMVl8a$(m`SZh2LZX3+gO(
zW{r|F69tubC+8xfENJ|r^NSfRs*j7H3-!@EwAj8fjrbz5S$7(}99&}YOHbcSt@_j#
z$v4^%`9mSp$9!dt^^4kv18uyh%w2QBm*&D!zb(6JYo$v9yzk#zFMy%ehxo|BMAb0&
zcso0Y1Kez&3LAbizTT=G&9ay+Hon*CTolKHO9w9$Y#G-&V0gd`Q}S<g#tL5`u9V%+
zBRphZIJsN?<VwY3@?Wq0;@ok)iiDBw=59~jtGU`Qou6g3LNWU61G<?v@l3ECgc+`7
z*HeGC{(<-IW=}_@(gA!LW7g0XkhKf5R5=h34VcVwmo6bEWvu+(GVS%($Wf;SP34UQ
zLbw<okC-l#IA9R|*_y+5Gzq7n(}-3$uWY$;lvimma&b6&IP#2ZXT}(!+dRAyD1+ad
zOV`l#yrLFZaJSJg-|@-Z`d~h3>#)yge;V%Q@wh@)_ce6U9|B2%%x@Lh!cn%DSn5}F
zq_GwbXcbEf)3!1sa!9Tf+-W?KSq+vPAH8%6{G&|$bo=qtuIeVAJUBKwrkmMasIDln
z^*ld<vMC&Ke<Mm*Jv<}(tw_<xg;%GnPr2-(!3XLOdP7e^0t$uT;T4;|(*6~yan%-)
zbc{F%^JN~P@&fjp5^nu`vv2L$o9}4zvMm_kS0g(s=Gt4JUMO>R|Aq%Zk2w)opUb`f
zLc`zd<4iQtVTSI9@j~XXhVwrBePB7z=;1S^#V_CCM_?b=Eko7i!hK-V)NOYg0Sx-T
zSuHFmG9hoWB2RAZx4H~nyqX0q7|>$2U;XNlhT8XS%Lam<J9u?y@KXx>ybH+@r6xNd
z3wE=^Kcgg-cO04FV%trU1!-#+NS2sA<cIN>iG~~fc~18VHib|3=5oE~A>-ZWH*3~A
zE+;c9D)yy8HgQmN2KVhUpi|RBjVZ`0#Zt4#Lp_Bao3Pr2ei;=E*)7*s0moGHJ4)v{
z;#b&>g8(?eA<3N|m1dXo2MBh_e21R85%M2Fio6INY~4TSt0RYS9u|ZL>0&wOmn+bS
z(v$AjA$nA6vq5*7XICb1mCJzlDL-xW9hKnwKi3^z6eMkreK3@b(BDKgBE6_=dyF53
z-h=TnM9tlBpYM1&qaj!Se^U_oKdT08Ujmu`>yKe);z(>95C^n9WAR3k^)GV4ePAT|
z%qT={7JbOiK?pTNAb-}YXGEi=h0N~V!>{i#pHWuB2fSZ-x^`6@F^7`kLh-q|yDswj
zUNiV&$4A73y;6N-Gsp>K{lZrKq<>FmkSH~$lGj&eZAey?37=aXl79A!DI-rdBbzc6
zpFFW~{2LZOVh;55dXYe#<J49e+)S<h8!I&5_I(&wy<4`+KS-Wc8N%vxnkfr1uhaE-
zJi4yc;}`UP-%Ix{Rw-utIU%p_`+33pl(rthn!oVK===Qm@0`;gkxl~YL}7!AXILgO
z0)*s-=;jZj{`cc$yYFPlihQ>7>_i;4%g>vZ#YM7%wdTMFiE8rB;Be@a)0(b+_4?v`
z7urpX6w0=)O^Wi<@ExTEMU-@Im*&6f)^%EDS4H=a{IaGUbR=8v&p#?6<znL|s51{L
z8RJq3dfX+1UNu5#f6BgVoq3)MqBb<3kKGz!JLgGSvg0Z%fi7PSRUww1!=e9(BzuGH
zRZ3astz85nw98FU<r<^(e`e(Tj;!=-gkkh^8iJ9p;y89>_oGvEt3M-U!4}Q$v;#DA
zmZ$ixgsG+NN!uoOsmn>2;Q3$~7TU$%1<vMC5AtA%7RI&Os$F#BtL}#?p1i@Df9F|R
zZqs}Bq=k>0Seha}*JzDo^%6Fq|7+^XV9y?z#Ks2vFGv0eFZY<J9>glelfR@cwuhfF
zP40lY8my}Y<fl_;c~G!^PaIpG+4dN9P-2dVJU5+(=7jvqRRfhr`-dHd76%Q3bj%lx
z92K57e5O@0&y?;$R+1TIF+Z4{ViZD1y`t#%c`yIyC~hKQH_|!!bLpU*^QNQ{HFN8>
z8G$1J;%3o&gV3-5HJ1;*D7G!a9_<A=GYH*$ue^M(?x=4??uA@8p<fuT9dBWAv@BS7
z$>d1(%1^6BuC1jjHfdeBh?#_O<JaD*r~pzbCcjA`{v&c}iJ>qAMl!Iitn_>o0SiX5
zx6gBs8Y?UvLQ;`gHBEvvQH%V}YJp<Tv40+TswDJ;_OGzrN*38_%tQ<sVyjIn$s^2=
zIbU?;S<1V7%$%4gk-TQ;4PFpaVlv>u=~SJcVa(jY7P3~;cCo3XE-^CYfR~M*Kt%qn
z<*^R-ZP6pi6W69sI#%12410Dt@61l6UZJ%{_wl?$Al6^rNd*lqDG|Qps$EyltAGvQ
zLV)jk_1L_&@lmO*YLfCHC`9()rTsBM^PKu(_lEWB;hZ5JZv3$Ix!_xan{Og+H>98t
z;P$MmJd>ywEgpNrhTRbv_}9*4Oj{?(+YBT<tJstoS%b+`R|3pencR=78x7X)M+#Y=
ziPIy>`#1RvE&da8q(Y@)i5F+gJjgXb!pC<jB#Lw`#O!3Dr1CIuLROt>B7WN5=&|{4
z$clN^xvo;1kkT@W0Q_4#^&B|iuvYd-TgLJNzOQY9^a_ds<gGqD*ky+-ui$p{^10ib
z$12N8?v8+YBc+7<Wiw~XZ32EtMG-kS)=E$sXeKfpYUqjN6D6TI$Gt(0E>{SUKW5UU
zWx(<LW^>;YHvxV-TzY0~U<W}1@~pwC^ru*7nBuLJQ7)(3gI&u#^XT9-mdxw#z4lY>
z0?`**gQXw)v48OIThGErg+ZEbX@yX$O|GN69K|nHrmog1Go;EiMuqA|F6CxoMMR`_
z0jtQmAFKY&|1m{b?_?!pJ+=XcAWyN5?sh1W+rZu4R138DAbMj>k|M-M#C~`fjf31$
zyYmLKoP@oe&%<9+sq!6*F|=lZ=`~CEVuOS5T}?lMARP(^!_m_0`|n2!$5Vl(fmirF
zpDWYHVf4BOt8-qxh1irW3S2PCbIwc-TTsRj9x(^sFmU@^Fv8e_x48g&CSfp*6clV@
z=%Tgo--omm7UCM+XBoFHzgyQJ+^PIgt(zC{bIUh!55@-h0~=D~lzhM@HCDuWO*L5m
zFnI`B&nC+eUT#AF3QE=pd9&RXnEu53b9rz(fbH|0Vm-N7ok5J&zfEHEdb|!Xz0xm>
zc&yNViTMt!QM&3n@@@yHZ%@i{iqfUL9sb#`I^>Zu2V5N^pz^zfW))*g%;rDtyFW8g
zd6B4zSoz_<6`oeYkl(P6r*!YptEn@@6n)2(CD>?kCL*QEWZrA7pimbW8-(+hO+=>n
zNi>sjH^rxg4dE2LO$2}0i?PplT2UuPUFck+_(+sC^fAzRs*DYo;Z}E6Vx?j4Tb5UW
zqPZ8WCVt}aRc}u&GYban^pZQFz|F-mXpi!eGnz&XiXuwJKl{k~#hnOqL_(?w>Wdc{
z_Wfn9+M6$!H%7T2O~ur99QZBDHXPmUA4E2&`mGp3?I17>bRK6I9z3{({Ip3v97ji!
zh^~n8Ak8q@It&9Kb}zRn{x!<=&5462^1N~(wVWxGPu5uUB!n95yy{OYVqjR2cL0o^
zpGr{OPCd!p+A!0ucLA*HX3wUDk_)(<<5XND<qCcbC5h`=MGF+6vprcs7+H?^sV!kk
z`Sz5k53DP=vIR?9c!68xQr|~DKXhJ7+7brW2s%qyKX(ftcFCW$vqinXZmI#|6K37Z
zK>nv#YuI6kSe3Pqc~lyOG*Dp7{{;Fzb>aivg2a!=ae`(Lxo&Hh#zo)eCYflktKL=B
z@M6x0kF_noWky{LT_n2Kd4|-d(%C94n|KCx%4oTTx735(zO*d}RF^tvrJIy7nOw(i
zIU#VM#!VMEu=4HF`M&0L1&is|oFzHBa02n0X+4{J*+{tb@huZZs7%{Z!pEv3Y@=ep
zDeyGgX&^BJ;`!{HbM9{+Qy9bMr!8q^0Y7t~>$tklftaI!l&p?Y95Vr_5*zRLlbR!!
z>2o^=*qWA@j4)Z3u)i9!x_{nzf;hRLQK=irbiRf{^)0;ijOJsJ3G}~LsPB(bnpkT)
zCa^oWDqZYWidG<>OSs*1ArY&J*&JuZV!xqu?a8EYJ9T8a$r5DYnD{2dU5bo4gp)ze
zeh!%tdN!>cjFY~2?Is+M7s<o<PyUuCh7eidH(MR_R|!=cD~fCyXply}F)i!$381zj
zk?Lyzw1l(DjYXW(yWQuV<#R9SFlExn%0xN<1F5;;H)_x?&13aB4<$FURpdVrD`T3D
z(r8oXSA(TLy0|(TqV5?(N*8RA(6)8jBEKoID|l^O%HXUjyU^;xsHT6@qKK2wIZL6&
zF>Y~|qgs-kIsI(GaA)VY86uF1g_N_(>s2EI45Ko`U*0YxlL(>0v|o@Wqq+Rmj8B;@
zO&P>Poa%{}@RWpCQqa@q?_1&u&c~GNB7mP!S-4ko&L+%GNAwzqVf=B4L@D&@(|82>
z4GN`x3wUL3wCSB<oXCYSPhKneqpS>xBQv!bLlt*5VWQo=mRFwWeeiVK41~pOS6b-6
zDA!GU4xa!$jWlTU(E_>aY#%m_Kx!cKeCB99K~x9}2{rNtT}YGm<l|`5KSf->6TLx_
zzp*k|q5`3lzlpDE^Sumoj7RO-lZG+wa8ii`!cUPCDGiB!<X_7f{}gtzAvc5%CeDf5
zUW`0LjQfB<!4GP}e6kb64`@1iY4K|U5(LoNiHc%n@I-jf+|7lE(%FzKXn)Rk!#akZ
z>R27lhqQH@^k02QJ2Y<T@P|JHO&J#}3=iVRz{$isrRunYzEFi75zi*$4fqh|(G3IN
z@_ue_w0=uLK9Ve%9LTCqX!7>BB0~!mni<?&biTG`6bw)PMvhOjPb?}QBl{&&U7RK0
z|3?*eK-^2h_^Jbvded|941(oX;tlpTnncojEr;9xI$GrE0WJ$^8T#fSC1N6uAa^#}
zl@Lc&FA!QlU@o1z*#-o3A{ymtzj}`6gS)4axPj^EQqf@9)#OgrV>JJm+So{n)HT<x
zIolf9gW-~9-yU(}ADHb}kat7_xNYVSV71SJ<LD7e%8?uc%4gVg))*1onYGqL@Q-B$
zFV`wvv7KQKLlR**U6&W*k*01%ko2@ko3J@Ta7ubYszSQB{ov+27VG8om1R_va!+Cn
z<v?<}h<{D$^vHJzCpj(~i)yn)JIdym>o-l@wFnO<N-k)&>RnnH1b6iVj42NVu))X8
zzlM`me*BBH;BnOlq8iz1wb?o}X}!L4+&Ivi`739XUb%A04wp?XMI$bA3C&0T9B`th
zl4hl3+@Df(XNSuinOONaLdQ609gN{23~&ZX1h*Qd;S5{AYhuueOrnsh_|wv~Lg!H*
z6N(%|?iT0db~}&m7rT!R*skg<-EvfQcr%Xfbf@B}xAXp<drskkoqn-l6uHLge_Prx
znCw%eVQG!eyo?=StzZ1{#76dGK^$EWQ|SAbD45(W8Fql<cs&2p7_a?aq@526c5<(G
zSBwVHo!i2^%wofXq&i1(TP#8w*HZ>E3OfTwQ^Lcdz0k1dl;C0wfNjL4q-umh%DzTN
zFquRgUGXUxT_SFBDfRHoWghy8qK<;RmKSDRr=n9}A3@3b-1$%P(${{+mAtH@pw(4z
zv345Dam#IrP0sbrRbM56F;Ph}Gan&)SO+cP&#%`P<FoKU4xE?nb0L-!gdRQHf@-Ts
zh1{i|f8+^&Ouee!15}jyo*VbF_i=WeT-e0{RDZ6P8CKojyLIJ`Gnw$wdYgyL-am_8
z0~ar5^rBB646cH1N=fxEY*P~@durD1c0@)_UGqNyiQ8FFT8@eCuBh;pxU_@PbnE@S
z;Q6Pi2l*p&L03Z2`=vD`#klqluX>9mU0$D80i7mCYxJ!w;Pn5nb&kz>h2h$cZQE{a
z<4Kw(Y0}tijK=1Q(b%?aJB^LTwr#)NGaK{H-XGTb1#9MB=Y5^maco<BEC{hkjbzY=
zXK?907Wc;jf-XGxeNr#SxUtk%o==czB_p|R+)o^_{)ttszm(mDjXO~eXq-0kt`sJR
z^3l7k$UvOetrLHWJDm#JQ3FEGJ(9y&vOKczx71MXvENSY?x8e$$zDTTZ|8@?o3cBR
zb&U?y91Tv2!D*rZH2<5>DIFQ#$UT;B*%EZOwUmQu4#H0)tva7+EhVpcKSLIpXp)c3
z+4bG4Ye-A}uT4ZfzJ-6<_#z|D!GAq<PW~C$4aFNiD<$aR;C<4yj<k4!a$r35AykX`
z{A81}OYuBrd)(A+(BmE}LOh0Z6`5ink{T8Yt`T=Zj7?eu;6h~Odhj39zjojr94UKw
zHt<f1H?%WFFu6`SCA~Q^>X!UHVm}oIqVcCXtWIuE|9xBdu)Ij;6cj0lx)v@1zO<9m
zlx(s_cF*hs|L*a;(j9lRf1j}%tn2a)D8A%}TpqM*JmSf;jT}yZ35r}+Rn0O@^eP(=
z1-7)0+{X_Cxs!d|@-En-4}z}&w=wZUig}Qn?-yfaiX#lJitT8}^^3sg_SyO4W>9tD
z={dQizoyKIgSB27MB4ss6(YFjm@1D|M<j0!CDbPQ@(A5$3*zkO32prTpM-R5?!^|z
z%_?=<KT{w<2%^Iox5|x=)ShC3OX2j&vXiI__pK-VaOKAfG)4LKXue<(n!ALjo!R$W
z7JJz0@OarNLP}0nKKB1!NZ|S}BkliaM%lPHlYi>}Gk5)?bF2=dcTJtV!`=VpcCpjC
ze04}a@EtsC8l?W`dgdh}BU3P5F{Oz8Ek$jQ`X6`>!Z?a^s;{evb}(w~_5bJ`<ANMs
zB87o+rLVZ3RowB9@sG*}i?iADrZ2yQ`C1bkEW_q?#*W`SFi>hr8>!-zDY0^wow`zq
z;3-C~-+=Q##6B+N8VesTK9Bpca9p$7v0LTG_yq~Vs$F>&W*<S%{UmB?6*j_TmXDo<
z6mmPGIEU+-vzsX!{3=YXn-)Ql?x*%-JBN|FthnD8)^psGYgwrV_%r<JlP!LkAGj>>
zY<*Z}_P28Ti*)D-wBSC{=r(xYzpLAfU<@*L6$5&Dhmp--9U&tv9*1h|arnPk-j1xr
zDlk+E2p_CiVjU@3<;rdQIwdu;1_}j3jbz|3lhbn8GXC;cR(9yZ*Mkb;n_KmbYZ&53
zFM~(_DP|hF^E8!=lX+fskBLR42W40O*~IdZ_m4Zr?l%y(BH-v}EuD#(tPA8qaKmlC
ze*#DK&v&H0!srG(@l@#ukR-m}2raQj*kPy54&&o*apz2%r)X(K<d^sMY%hQ*y{x|M
zThii9*~!Vy40|k6FseKaJn+lf3lfMfXI?$*)m5)%UM(WvP=6?FUq@&w_S7;N*4OW`
z!E_G41JmhYL8J1fjd?Vk?zg5X3Q}cQ9AJJ_-ofnB+Wgy>7lLPqwCZucjJ_;RLTu$E
zaOswPg`0zcUiG}{Cet;5LPlyK1OalBLgm4E7IG_ol4Ttu&;a(jmszifnj+ug-DqY_
z^2lG|J$13tWuU3F1FsYwn<mU6$#!8RB0>XRZO<A^Ea`Y~cVi5vUn32z30|Ry0;tE(
zUnoch??E5s`MMq$BFY_0^PK@#F4UqN>*aM-Hxs0#IH1Vtb{9>4ZCn&yj-QXSGYyJU
zlz>ITGQs!>ZVGGJ@x$)+<a-}I%o&3T#fZghv4nFANRz9-f3zCW%tls7@!{0?VH>*_
zJqF`faIhB<7rzgCk|w!3ga?vu1`t4XEdS=ET|oiSAX%{vWA*z-NsIXsw==u<paiZB
zexNF1^EvBmSzd%saivK9msE&xqMZ!PxgD>)C~%U>uY%0tHilO&mfF>=f_Nlg7NZC*
zV6N(oXcu4I6M>sxwm`@6nr&?Fk|_GM_|(5`n(DSmry5ga-#CK(*xe!(-+?0vHn-N%
zS>nS*bffXIhy9t+Byzf&b>>j$>T)Ny0>&z}S6$-UC^dfK>c?`r`gkLo0Q`zZB5##%
z9B`#yt%76p1BRX2N)#Pa7e*~ho{ReCDkAT7v8P8`2gk}MShX1q)!^9K*z?2K;qIHd
zm@)0mSw30Eb=ijCw@^|+n*e;4jfHD4udKl?j#Y0RzQ2j`{KU?Z2o|eN4Byv#a&P*1
z)3bYiL+zZy6%4?E-h)q$HOEZj#_Sg(lSW=ef1IdNN$+Kd=;@I?U>b5rz-d_D9v)SD
z*9+E75VkbaQ<0n=2v3cMY3&CYN6FP?I=A3@5NcH1!P5*5AM?!k75G%yXOK6J!e6)z
z<VXP31!jR!;me}gDsMx4PBRkn!u<_^CBfh}%ZmM*pR2|(o)Z?VXcKZM7knt-jH<y)
zQMV%bh!@t<jYy>6(jkS>YyB>Q`aN&V9df7!>EjQNO_>x)A!uj~_v_&8YJ*j39fQm%
z8_rjB!Sa0%A-zs$GN8{mMk&a>#^Z9#=bc1tL1X51-cvQPR?T9ybmI@f+h^qweh)!f
zVe08x-IS^mWI?&yQl>wz6rn$yAN0)~yQ)QD{E&}3-{mYY^jZtPr9!Z%$&l-(@XkZv
z+vQRUzJ--W-@7h!L9hs>^TugP11D)TGd{qzaOF}dZBe}+4d|mB5p2hmLi+WbvKgsV
z5&1Aem?c9Hh&j6fuCISSw$DT!qK&tb&wxwP<5K3+m&3Cgc6M}gH+xGvz7tL|J<0po
zSy}Uo6*H+_wAtL3EHx8d(LY%65Oz=WR~YA(0&srezTYOY<)eJm6Uy&D7({&bv{*-2
zt3OIhxy#qrfhO{1k*DvoQ<>ilDg0Ej*}~3@H50<~QC01+e?Kz5pZ!KczI$23n~??7
zh^8B8z1g~q#SR?1vjl&{Q8mNGG!a7-whr(VwoSL^C{yx{xFz)q3d1jgI2GrBhx@D9
zftvT{KUHqpdQ7*CW7gY&UxeIjS);23=?;$Pa*y!C0Rd0TPl8B@dC7-{)r+2}#qj*g
zNsQik1@M&_#aRxQD+JNu*i=2qMBMP3_7okzsa6_&*Y`#GHKFtg4c?uXC?quj%l9t_
zNIXRz7sQW8TbZR+mqHx$oKB{9(cn$Y-eqPs9<CyE-18w`CH6B&kCG#4=z|5vU7l;V
zh_JK&x*e(P()Y!FMBs>hi$plf_6eee;s{`LVH?dhC$UiP+}lvI)=GPK7<H?s;n{sY
z`c{EQxzKM&SnpqEAY80Mgos~hr=E~@iK?!fHWyJuHosXx3R@G7&tEtzcfxRkfjYO>
zAhR0`xH~x?_C>`>sdM;P1;4>Zqj2V43!*Xe0}daor-LJ4!|9u#^oQXYxOj5(sxiY;
zcd9Goff$*<W%|&CBdW9OlGx4>l?5yQ(+T!zbF%h?F%{wF_7l_QJ2_$}ZJh5+F%LAt
z+9tB35+1~lV=fL_iKp$xv_DYuMJ^U`VCyVIR7ff9Mc|7dB$1>7Ka#%PKqvM=>;^g&
z1APiwX!xn5Ye`OS&dtkvzL4@`zBTkwoR43zBU3GwQyT{GtX}h_J~ǑE#YsL^7c
zZH{RoV>v}>;f3uvYICYDTgWGS7k<-vhuI<&k`~b3ifC8m{Svp&d%rMMKmTKF(j%VB
zY?g+fonfdg$exW_vE;1C3)Z=cQ_hNM55!9cpq93C$K$hl81L9FSg7Qvtl|d#C=%c#
z#gBPhk(d<F{YrpPl7zV-(pxMV70(?rUY&<ZZ%a7Hx!8z9Y5%JV6^r742s{$H{(R5q
zsXu{x-H8;I&4?83W^=E+=m{;ml*1Sge1&7X7@}zv>9DX^^dpo!&M<Rr&$+V$9^ipA
z*@qE9tVnJrJewwSSUt8sE7vV3nWUoAN@?zVQ+J<r-o(mP!TlUJYOKM+6hp$~2_U!|
z?o5Y7lZsIN@~iEny4Oau=%2M)Pj8Tdihs8%C;ljcYBRC{#x*SIgrwQ|UiPkQk0=<6
z4lE?Dwj1?49n51kz1^Q>ovfUg3b0um^A-9;hP93XEG4nQgPB*}-W(D_AOn#Gtq3Y1
zhLW1h!aq23A{(|dJA*&YvIOK_?QQnbwX@D<U<|#}8NvvUw&tpD>MS8h{ePK0ZU0^L
z<`>iGXQcyGvoKMycwga1w875@+$L9p?tA#7G`F8l5Q!l0`IeReO4Y7@;5N%)kPY_w
z9?uzaGlcC#T<H<EN1QJzip(;;Ju%gC$S>z-u+SiKTZuSZY}{ay*`3TWoU*HW$~=-y
z&~FA->d3SiWO2?PW;jDs{Bj7gT89>ClZ-AW&Ox`|<|YeBCl@sZcx`ES2t153LJzZj
zdkX4M&n^wJSi*34G5q6Z04xm->_pT^8nx?qf5K!36&|RsPb%;keL46S*W?BG(l6M%
zoHl<OE~V1kSr8D#b{@PjAHYk`eg!mp;$SlqXUhEX))K35GI7U!jtzc&wEgSVzW)D@
z&;Db2#>M%c(=&D+F3$h{FXrYTi|1YCN%mTVfCG%SFQTW7{MD2<SfF2OxHD*$ilpmd
zaG>AVlLi<5w(-sm+q|55@=~Gl<<C@3GQS!4?!;s`K6hObO)jF-ABDDbUjcP3PafCK
z605aOwsm;A8#-^#h+LG~8UqP<>udT?ut%XXO6J_NIyn6iHaNJpc%GiOwka$UX2QEc
z*Z@*iYpPyHtH<Z=VfrbHP2OJ6v`P@E+xB2dAe+Wy^!r<NG-<VMmsg8}2)!!Z#LnGV
zH_-Mng6ybmN8_aP@#pYyQQzm`aEo7LC`D5l?~kNW(a(lVA8+U5qCVfEpFz>(4@7Nb
zI^nF`m2dvK;t@e~4ZhMwmIxcVXg=gm1VFiSJJpv0MZpN&sdDLhJ*LyJSGgmQ7XIc>
z>>@;Jx~whcly7t9qb_NTDMc1XwVBiieI-X-F?218O}C%~fpE#W`E-{EEdOw~8&frC
zD=EXB8J_zc3q9*J18+(D<*)POYP~rbgq+!g5IoXjcH64#(t<rM%8hJ28ogmr3&7L#
zg}8+nbv|s=i-Jf9HS%P6l8yN|A4>rYkKz^ZD&G41{fbU8Qv=(YHM%#alD3b^O#@ra
zk#e2tytwCJK?}&ry;6X#h?{yjy-F&G!4Ti~n2O5Kq-jqVMzLl<SY5w+nAoc7VAUDa
zc@b<W^-sas3B=u>tY^)wKi9rQ0+gl3ue68lPXIheFlYo=y!Ppv!LC&IX8+f)J|~?D
zP=SA}Igdx`81y_mJgzZl$j<8l9>n{TO|0y``9aezihJgWg{cEe%>l!xgMn0h3lhN`
z>21GYodBg8`lZ5VXCZE&gz4~BRZ4^TA3P*I#bvY~Q|MXzgpscddr#dLKo?hKF{9g~
zI2b>mHuk4(F?_~y$xZ6V>PSajnh{5p4bVXrk4~=%!C@EHW?qGYiQyPOfgIA?tX>Gm
z!8V^6EGN}hm%pv^CJsd#eq?=P+AFeG@S|7fmg9quXA(DtKZG!rIxM^FT&L&q!mTNh
z@>ONd<6|0nCxy-1)m|C^5H^q*YglJOxqMaT(8?H4=kI&CCn|J;Q+~<}QdW}1{T55g
zgNY#+7c{NAGH`ZY-iaBbF5QJVoKAppK<6(mZ7E=Y`?>+o2~AEBQ&e?QtT`VA8LVZK
z56#ThK`&-Q`kVHWLJr>lX1<~#`Tiz16NxtgVqdf>9CWQ$B_2};?8VL6QZW@?D^4k&
zFXJ!iWrERXS{Kb1`Dl2^BM!s;m@c-5?q$WyUYK{3!o2cH_R9c|F-u2#w23iX<2ik4
zWj?G_|CKwd-IB2a^#eP`dPehc24-}SiZ8(&B{Uw@PzKT*-4i3}D3IE$;K&l6q#27e
zyMesXB0u{SG(s{51e7%h6@{2j8hDG$HK&AptbV&OVgUR2xysf7w(D0LW!Fh|1@Wzw
z#O!?EqgQ^%V`1HiWf60B{V~yLDnx(5396G3OExFd8xU!!yd|8m-+aeuia;gQjP+tb
z6Bbq0xp4JC!CY@P&?&*|bXxkQgxNC_wcMfO7b7#|>=1Mh>?24Zsb5`Wx?y|K>Je|{
z32O*KPvkPeTwAV_u_$N=!@{P(ZKu*z{sJ|zNn%#2*eeD|z_zSNpn+G=QcRL4f#L@t
zg{KqI;BZ_aJ1&C3yhJ63RMweKt5@MF!M=FwfFogXix0k9>TXPElliaBVL19A%U5)m
zf-(DtV4Oe$qTCFVm4YX{&r~x}94hF6S2{Z^WfMhSS7w}O*yaV6e42o#B}A0~Rn3!{
z@|1Jsb;42V3s)LMLp<mof&3|v9?Muu@{LEo&msYoA{70^h2A0l_EY-l>uzbSa3lV8
zbrYN5wk|79r+0=Icb+;MDt3xO=*4u?pGRhE@djg{!8<0aeqYbD%LN8Q83Er6=XQ!>
zyDCZeMyoLxfs}KNrXW%JIHZcZjFh#JmP1<f$mrLaZF2k*B5PaSQ#h@8sB8&Xgq&cs
z09vqsn+&7>I0PvA;8{C|U%@WeTu`1BO?tqyhBC1fcN!Y9@CP)c$v8X>H*siajhS2C
zv8gVQNIu3J+K2UFf`!n7<MsJ`xc@?4g!lbsyGk#qD>Q&1fCij54E(z&hW!enhI;VN
z9vD)vGVvVaF6j}mI1hfbsLGWki)>@(KDI*tjn&1dX)v8Y_go5osuh#L^`!pKv8WnK
zaQW=j<|UwF_`F&e{|Y9)W7YJ@NF^k!sWciW==kD7m<hKsI&6Mt(PNVN)&ql$5EyWv
z5)J0v@Li7QHaQm)M78hO;j)yNO^`R~EG+R4c-U8>d%}6YjO$;_Yu%03Ae%u2MJ=EW
zO>${Rtlnw%edB$b-h<@@K^1<!6JIH@AM2Rvhw6=(>hUguTMmH_DP2X)3n`Ka9Njc9
z)D-<q2DQP_xybnBQw@CY>uj=yzE;4!2|fo+;lhYFb#@77x!9>mkL1A<o4;p0JlPMW
z>f;AFRY5Gc32r4njGwmYDU1l;rWKadLnjcnxM_B*y5DM2*SnY?gqEGENO^|w%rBou
zAHRr#6arYHB}`LJ=tGmVu}<k`naNjy_<6qRvs_b^Z=f${2UOysLOv>DuE!nanXPO8
z9wAME`oA|4=WFCEvI6<D&p3%clu!?yF>9y9CM>*B3gs^xS(CI1PBkLoEoU^xUdz`0
zx;kziW3GT(K^2g3=>$A-md1v4eho9?Wl_NwL^LM7AJoK};n6{Boy68dGw}x4cR+l?
zK=VB`^Dz5wp{}Jf7`uVD(Ruwi&UOl0Wx1x)7!vF4v^OjPkF`6Fk!4Q${rW3O0oz&g
z8~7%6a;{Rc3RjOLi$$yng-3>ngV|~ZUZI-%UyauU(WQL_fBj1CLl1jM6x&Ka<^tik
zG*ugDZ{8mGZ?BnD7R!&Q{fB`&9eME(El@%}e4I4j@*F2wfHMS*aUgXM4=+I@u@~Xd
z{IjH3&vIrQ&*X&6hU+y*?dSvfAWXe3$5ys@&l|Ve*rHFJ(Y^lauJhsuz2uhcET3t^
zU7L=X3*^MriKyrAX4te_Xw!bbg?$!FkheBp4{PsVEKqxcPC3cS=mlJ#Bo<i}l#i8D
zED?v2S3R$C86(r{%<*D^hE{9uYRE|T>wj1bWfcSqq?1^N&&ESvU(doP3y5btFfukq
zAJhhXY?j6C3EZz(Rrf4cJ41JgtOXiWw?iHp*k_FawfY~QM)UniAu(`jny^a<zYS_5
z5Z2S6uE0TC=EsI+dcbC-(NtioXT`cpvJ6)H3b%aL^Upf2;rK`Rt1Z~kw!Vq`D~zqq
zzjLNIcwZ43mE(;!tyT1!{k%lc?W$hs61~al4y~{l^?8?>^c!k~9uQ|U_WwGY;>YWo
z9drt~rU!Mlryp^NQrfgXEqAs@=mnI0D=a%SAXRzj_ByHx#RdK<5aM^_khC=+{T3$D
zF9IEyG$D|Zi|U%!!e?t+4*gjA=_yOfzm?eB9K8A7Q)#Wt(xGQV4fB_T4r6mD#vo#s
zeqG^mF4C;KM2bti@k9BwB=8&ZY8Xwrjlzw}cGY<(;ry*T97my|!n*aRZyW|IrIxW4
zw+U-^jroVrW*`t)ZkK$cx#@6Zw>8hT(}R+!T{~3D3BS}aH^o|H$3E;ZELS$YC%?~c
zDL(8T-?h(o>xtp}&3|C_`}(-rsvEzNveA-2)GQYA+$gT6_2lk-e7BUtUL>9-RPpIw
zzfTh!rxxdA7I+EP<q}?|<q|=+kn2AlnA`X=){GA2rmsLCwM3kowDO4GQe53)S9VBW
z5?CH#s*&1-agI@)GOzPRc^iX%x^g;da7t#E(0968n5U}6d8etwB&+rKH<{D9_RF{4
zeOi@Ax1YbovNCU#DY%A(BQvhPoOpD-+G{bV0YbV{8dawO&ItpP(=ntWc22@9hD6j%
z{#<^u5%)m+PDFWhJ{LG85>z8`8N3UY)dsDIHvMJm2d|z$#{Du4vuj1E+|)uvNZLwu
zy<~H#9EYla!cPrXLc7t*!N+&EhYEzM?&BZOL$4GcuPS!c%ta-y1sJBTrv#!1mr<wb
zGa@W&o1b7|DStQrcR=7q`mcn*!OFoGk9{Hz4E%=(l>483rt2g0>p${A#Z{)^rSi^!
z-Jouoj^&+Jk0^Qdeg*UEj?@a(MRhkhACb%#cS2Zt6lem`h2MYN-LuSsy}Avc^;thj
zKibza{%JtFx3)E3%vv=CyLsJTBuj(7WS~njG28suL4E3L%~L`A;@mqrFmSM^ty!`I
zTn_;9fsBFM1bS^P!p{%I`ubg7_SXk*<DVlbeHuTn<XQCJuXboZHER7WF0QW2yI;-L
zaB2)+M#~pjHUw{@fAU!*^bFx1R{J37yS)S_Q&Mt$iTGX(f4s?;sDv|^5U%`ld*Uh?
z;JWNHEHiMgT@hhGtSW4HD$$=eR-wNJwwE`vL*C0k$rP21%R#s%xm>$XXKjOKHP89_
zYv-@4-lPxoh?5#GM?(i~`az8{OMcQ>mQCB3d0QP$nE46Mg83Dc`Dx68MnQ39f~Mx`
z)_uykhy!C-(`DkGP8NG>Q?##qi5+)<Muvl4f{9a~+!J^Rqr=74mm<4}h!!ni>X#Kh
zM%mVn(S`t5wyaq;F<Y+Y@;0XFxtbr+BgyNJe3QG&?xgAW{DMq~a;55(?N5#+IA(KG
z)ek_Wc0{qUmb}-1sUrlDz;KvqeLo9fKDMy#KqtYmg!>w^6UpEB9gA{Owzs(A`O7y<
zI{OhfX&6N=d%6{6=DceGq%JgornO*$d9{7jyn`MpzhbHJ*+g2n^KgH)>^$8vl6fm`
z{QV3{%DuEMUzq#dGQ<ZOu(BAAa1K(OmOaTOC8MXx&tsst0{bOe#a|f&o23kH6Wj<n
zJPgN9g7@`F2v!08INq#Ww;l;x{mOM>4u<v9nViaGa4bQhsbQB$P(m1hgH2#DIHSk&
zhw13}gZyuLw2G%*?wIx0x_LD(-DEpZX25lIfyWuKHeyhVRhIe>99s%?e@pLCA4)%G
zW9ulG$2E*t;PFlF{sNb|LWyb;jx9(^7fwpcE2w9WIA@Mu_Z?gW0WQfKjTkHoXOdcA
zQxRR^>Qq3sR7v4LXW|KP(gx;SH$(i<f8Y|y?EW>%MF0+<eFhv>dZJ62nc^)PZ5pjS
zov@89N4NLa9dunoDQnjEs`955eq3z`eAjdZOwZb?TD4%!zUygxnWK&Mb<5=dpOEDL
zW2x1)qL&{Q*Lueqk81{q>gl3qS{i(t4gSTFuRIW;tlvCR-ewF~G@{lPMVe4pm$Yex
z^nj3C<ET&Byj#?%`hD*mHV5AVbQC4X94}2Dly=6J5TOu7jH?@($YoN#_n5xo@KAmK
zz1meC@Ce;w0h93lK+tU|6c8_;2R`V)e8J<`czP0p48glH%WS)-DvQzUXHNI+MBbYU
z9VW(nKIWsmt2zmILZp>C?Fhe4LSr#mW8H9|*}xUE#!>o?VAv^P3FRS!{qK<aZqO%S
z489E&JA-0B!JkB=csQK|uhrD<<6mk0?z7py21cf8DT#<I18Gsc49!Ci+bB_G>zA8m
z{f1!|NXbtTNi`NGN#N~G<^-y&IpQbe)1GL#&{Tr)`Cb6biwt&t(TGveLFDRKCDXS`
z|5cte)^^G&P)OcH<JXg#TDIjk@pve^2Fv5KNpavC`2H$#8e(fgCRI<&fBId8g^yiL
z*_aMYQUQ#l<XdG?-+9_5`jFqwUXOrkv=1HhbFC$2n&{aC6)G_seZfy-4m#<52bTDq
zoN-wqvMvX}0Naq0<(cZ9Q$SXT&g`m;DDf6DGmn-P*QhF&7;Fk@<d%Y&AWi}^K&Qh!
z4o-2>$#S|R7Agt}YIqo%O@V?TW?+{9X*(7rZJoW-GrRyI(Lzei%e)F*n~66?;+C!R
zTy<N;Ha=6)_7B4rp);O%vFQLe-3pQbfCa&U1daxbik>PPX30p&;l^l1IL;}<Ss%4Y
zM@C-%kbbtGlgzl<q?@NYgo!kXa1RMBt}`M@`DQbH_AG~m2at#MlK~fTrD?LzcPrL5
zi*mSo7zLS18Ay_ii2n3eI8?en*Xe>4I095qkV%zl{i{NhyA+PWG+ufKbDXNmyC@WD
z0^5LC-6}TH!r^lx83eLRW8Ed$^~IJNrGnWn1>(|?LuTzQJ&P)XU5Iy)&8o3^Ewra*
z|C)~*jzSZ!y*NX1Mci{Vj;v95JgKHR4oy-|?CQ(95fOosG6<ty{$GdL@2~Wnemgos
zM$2_BH!3D41Tk3K9N42#iLS&)m2T4`V+8^nm=#(0g%Nbk`i;&6N1_3-Y61+Mt&n39
z58wNY4%#cQGH}h@B_%sD8oMWlJs;kXkPTLjcVW=fWA)i_P_+bS$&nb=gn1|C{`RnY
zM?4(1a-a^kP)m}qGK^8qGDOpw7VL<|7_YOWlA<c5=B7OCXhfS@Xzb0}m)&$NlMw)*
zT2=v3ar0YOMQu8`K64fK5I)#Sc1<~UC_7<myGWA9dRXfC^<?Y!Fajy)>xn!Y>{I5R
zVBxZO*MyxSgE!P7$917U_&tsz<J)#L5g|i=Qg5wy&3;T=s?GxOV&7l<l5@)hW2o8+
zFf@47t%DjF!KF(mTh&FJTI59E1<!#iUXm{Iw~DkDYrr$T?8kRdLK7|Qtj@dWFq|Za
z2KiS6spJj^-1t2|8_pw>ZW$uoU#i-zU5gRFD~5FiHz6^PTaJ&PmNbRb;esNPI=-lc
zuAyWYmQnkyqwI415k*9j`_QYwMckAYi>kJ4lw`Gj#qkqUZ8qJ~o+>rpUVMOyB@^au
z%6R&c2pyJ3NBpD4aTBpOv3kKH#Y3r*=<4U6TiZ*L!-7rE`^oxo{S)u`EUBE798m_H
zV$!fk8g)opa5#)#{Htsq$4Cx|#DtCQQPzHd7Nzqt#>Ose>Pug_qjL0g7(cvke8_kI
zIrcP~(fWd@VivyS&Snb<iHHF19v=?i<@2=ipY>b+UfZ9KZ}<3bjvs$^SpIoz|F|BY
zmY_`f?0i8aC%4X3C`g26EfmRvpcMi=sf->hQ#EQ*G;7uy-J10Ki*iU{d0VQJ4+IJS
zDwX_(Gl64iEuNCs%l;!jKesMG4Iyp8fnS#t?!!CT0Ha^Qy#*h<bPR~jH}<2Z;+qhH
z$<xrn7$~<)OC~MS)T3=05rWQH#)))dj)r(!g05^>D3o_`?(QB)i2HqF0i{FMh6KL2
z-+W(e66x>*x6p88Cy>CvAPbq4m`UIVCPcqD9U7PeAE<JDK7uxFz3b0>1vTHsf@<@s
zOLBB~^c}bw>M`W+=tN)zSzyI<)rbTft566u`LS@Xx~gB)EiTL<umB~GR`mUcaIngG
zo)K9kle5sP^<u~RAeHhUu9U;FgDSPpzCY3P`tuZeZ!35M-L3o7;>$<-%LTj-jPdUr
zkaQItSL?s3*P=G(w*W7DQ@r%$&0mk{n`C}Xi@Hyl;OiCi(@=nFH@R1o&MUEChu2$k
z4UsR-Rhl}=H;^hz^+$E?3rHP7WD8vBO{S`UmarW|C!i|hhz{JGKqnn>+v|H!S=i04
z%2IZom0_nURiA_1T5AOb<4Z48CE$*q`3aXfbu-*8t*l!`Yql{h8wT#8znG1&O-~Rj
zarW4t*%rX9>H*Zc55wx=Ptm>L=OxU7TSNY|+=72NM5h+56oK(|R!J$f_4n6nny@DI
zQvk=dSJG5nErL|~LjS>g7vo+M)){AORTKacIp5+A7^$g`{Vin2c!fr9;;n>UKY=Xn
zr;eDXpakFA$%GvHw!i;86)k0;NIjX!Sov7WqagVsN**v{(K*Vs<30P<KuR&qcSc0W
z!saFVJ&%#r=&3jA5GBe`4e<+Yu_T(%{;j<)E@#q}D^QVo)<2mg1!hw2b-%NSCsE^9
z{zn5<GCSR(^<2QxmAw`SxIuRECJCF;a{6%eVDq%#zFw))3n>UDk<~iEzU4Jy#fdna
zM$<e`p8^8RPm#D1FU8Pyw^5al8eWOp66D%#mdc#!IV7xa3K)>dd;Hwtz*|0X@}Y-I
zN06NyEQ)E>2K6&u`V<*SvmGT+e63#`LGXl#i;X!R3EE&yA&+-Nic1h$iFYvmh_}qy
zdKd(F0{mYR_sz({i9myA(zMJ%yaa31!&mV%1OQZaF_A*tOVQtU`f{myaogx%?Qef!
zguJpMr7(`X%i_i(0zQJwMnwMY>wW`;VRUgOU=NY|MseT9W_NSO*RgLt)o_aP4lWw@
zEWTRb`ef4(s>S~5?IQl#y^l3xltFg3xEFXF(<=IIpm8Hr1fBd%xcOi2d2v@vvgMiF
zy$To`8*?>>;|O%VU(cs~q8?QB@R%xB_!F%JUH<0_wkT5J7!p_g@%sVE2szoDm;5Ao
z=bOT*{OLridev-od{wlh3I3|%5ht%eprCFG{9Yt1Cu9d^ymr{f_>wWd+!b4A3;PSz
z1GMAGcpvS2_9cVG`@RZ~lj>1COLwOiQ3e3b`b*is_F>fo1I|7WOq(WFwQ>;}0V0WO
z_>Av_#|@Ja$u!KIzFHh#G|Pf-n|o;Jn{3yLMGmKHYl*aBwx%Jb4uoMY?4fO#%hKHz
zfw^f6Y<_Lx-J#_%;ZV;XpVXW?Evl)5g9x4Tg~hPZAc3ug;T2HiYV{ws*tvpu;a9+8
zea1dyd^f6fjH-Q=eq`Rd22LJ$i=;?rJAX#u3R)y^@^NHs`{{nL2104()kw}C3B3fP
zVjEmeS9x2Z3IM#l*%)Q?Bk_AxG+&CstPZChyFi*zm6T9(efo}%r@qYBs?R6cj%Cy+
z2gidCa^oqpNe&)9{U}qt=sS@)Pk<t+Z=9lMK>_Lc3XTfUHD!D>eF~4AmD}++w>_8Q
z-?bd$-gH}gj6owRhr&EEo&mWp`ci6H^umyMPZyx|OIk&&@_WW!fYi_5lR<XeVdw|5
zpt?i6fE-k+!juQ>TkIIz2RM9FCi60}i1%Fl$HzZL${8y3i-@N~!dL45woRKreeF2a
z6q&RItZLC2?`(e6d44xloj+hr`8R8&>9>c*o%H=tP>~J7@kp;d!jf6O>_!S*KsjSd
z*N0dMIPsB5Onjda#QiOz%AOrJUMZ^H0C6>IPPTp;&SO0Xi(%j{`!__lDsAH<lzkXv
zsvI{zuu37lr&PE&b}VdrG%dGDuXP%ND<ag}zwZt=f!v$Lk5xyhoV`6IzWL=ntob{v
zk8}5U*vaQB>6kF;;QtY+{|kf5!OO)PPj&Z?W2I$fyDEvZKDF@yN1h#*mu0u{=e&5u
z9zCCsDjm)m5{?e*cT;OD-PgRcqSwR6$<s-N0xaBgh;T4xHj>F*;Yq&7C=odX5N*&q
zu8&%Iy}VgA&ELoY(s@e<HX+ZCq%>)1nSq29S=-4sSSOH)7-zaUv-D4zx%p*fnk>0b
z0QolPXu>Qb!M~ShZeV$CELo%@Rj;!VlbRN!jP27KMx2i^Xuv1(aPeNQu0GeinEaqF
zgI=ha;d4E;m@KmVQx9V@FltP{+ui;CAyXtI4pT;&p1S^!*Q}6yux5mB&aSPdl<Z>K
zKhB>6U#-=${QOXEu|oS*KsUy}^r_t)Xs-#7jf<OQN9roMMMYt9`O!*ISQPJQ3HK-<
zzn%z}+_CjDwvm`U&_X7^@j$gXn<Y7W{VP{SSI#z1qe$Ls5JiPT%jm*#Ec&3`FGbSS
zwe@+MCK{C#UblKZ=5@_8i+|U?xfZtT6MQrNLyo@|U#l!mGqnj(SY(|ByiOO@0Erv+
zHtYKPFNhF0kpYhrd3tYuv{8hom|*Ke4X8CxBvaGZ8!jj+$Ru&>>-B;6`(}f<<vGjs
zi?s|TU-hpkb+)b(*4hG>@K+(AOI24#GtMG7ldnYYE_2>IM8s8wKdP0URVOujd(pUI
zmh8xp=>vx}s{(Sd=@E3yHJd4ifMsvJ$`hMamF`a9a|8MdZ9@d}D-Mj=RM+F{ca12k
zrECyUW|MJfa<%EmNx6o@?dQ)CF&Ek~!-x+D_1B}r1ao5C)QO%J`L!CVv^2cW$T5;9
z4FuxodK)WQF%snZE_mr#SPg^`l|j@$SXw1sC<dIxoFoNR!d|2|dbjKzK-Y`HfTE4L
z>{VH~FX){5JtrM@8a|9Tx6FZX&i@KDD0<zFmq(48=L(xrj2sQ~#OlH%#=B3$3<#LM
zd{h$of%Ov@f-{HTo^r2&m5`-jC~!f<GVd&xJx@~N=d{z=T`nVm4y57mtG;g9+F|#8
z)!`v8GYl<hKR^{h&`~7=cA>wE2EyHK937HA0M*_gJS7}<_L;L|FI;prgYouunHKE9
z3!i;cvDx8<g6u+*k)4s#Ju^yqB70(<9IW$&`E{EIMxt6NqUp*%X|pA~No<RJ&4ZZq
ziHpZbA$$8BUqq`*%)3jQv3rsksStdRwX@d@dNHbBUxpBQ=%f$;u&LcGj4j+Z{&C0w
zLk*`-%g6`u7u_dba1pjb`w_N5ZChMtiF*IvEj?8*e^1gpLtw^lXxQ5!NvHWUlJUTF
z!5{|}r5jI~4_GCQ_ir)m5FJl#@KDdc*?QHWLy}7FqDEsimr27xhK+D{rn~kQP_yhV
z55=6-i-`6jHXL~Xq>N=_jE^gB--3M?)%gVJ)0WRd!pCscMcOJ7(1!iL{#)?mt=OR{
zoNuZUH~d}|V-5!G)g|7)?Uy_;6tk$5L&#AbdWIygQ)8b}#(A)Rb`wMz^3=qxxM#qb
z9;Dn3X98On2`NhDe6T=Mm%u>q)H^nKqrjb{CX@f`Y+dvK-~ofKQ2zA~n?nhrVZgRV
zQ>~g{8jo6L%;*5)vidPm!PY7x_}6DQxCfk?eN%jHJtz>;SK+9VKpfo2jz@n!wvmrn
zfr~I_rRrmS7t-9T1j862AsOA5tmMg_aN)5x6v0~Awj1%VFbp0f2t$oTldrPBZ5MWy
z75J51p_g45=z@a{2#hM~zqIB}gt5jdDWhtNgRg7fI8W9E(-A{IN|SPCg#OF}e<@jw
zSxCL+C!HfOw>O{C<)jP9k%xIFCz1p|CjS5&0jjmL9s0ExIWnc-z+_djV)SG}p&Dc~
zBhz%7ZsZ`m%S6nD8iL!m8*4k(J$1pISDq@?_Ou_s2lPHGZvTaf?Bw~U9Wxhr9&DYn
zNUmvDi?FB9yXCC)<NfljKF!_P^Y_>6aGvC=-IswqTQl`Vo5Jh9HlR&I1M)&#N4g#L
zXIGui`&`Oft-A(|{Sr)mB9@qQb9I@=VK|4v6(~n$txBEz8VeIrpEan97onG=b`l(w
zT+0*iI5lr|uebf8O*OQX=h7)5x_Au}lq4=>GMie(OqrRShlk;j>U(sv!+yf|J2!Pq
zkb2N0D^IHI3u*?mF_xNW`*3FtiBVvb1;Z!(RGb0HPu|}9C77|QWkw_T+ynwT_IybP
zsp8cq*{G^y!LS>X(JH@RqTU!({!GWYMI#x2RU;#OE~EpEO$Y(ulI2l5V^-d`44Yx0
z9ZB*XMZ*jX6wQciyXZOy$_?`%2ys&mBUk82Oe0ecQpMnJ4n}OE*=#X{og+BA1T(JC
zt^D2hdLbp!4&Dz9Fhv#OgJLszbuYNmSTX#uN2K@M-1Z0wKH%c#+i`=W7I={?&tPf5
z6bE&`aV(a42~kO<=AKbiMann<s7tCwN<tAu_0$B+jG2|@UvBb-9Ov=Gkr6_cA<PjV
z*m09b9#3?mf~9?W^W`U>=29}N<DX`P8**#6_wQpnQzAkAIn14E(57h(ibsW8d1&{y
zmqau1tly~WQ=zFfN!^K0S8;{Fw1EI}@Pj`1neD6zz$Y@nIF~w6o++qYewl8iGbH>)
z%TA&lCE_GW9d*66W6m192+59;LS*D@?E&2uU6i3ofO0=C--O2MjA<QTUk<lu;Vcug
zp(UOCGWhf_C>>`0k_+s+;>q%=vVfK=ZZK#R@p+|+N8DtD0++_m-_fS%1ULb!Sj_1;
zF@ZZ2TmdQ}RCgyxJ>Py6Bo14ZfqjVp%{bMPYZTH>BD}lP$`^)Gmv;}!HI>!sWSbzp
zZsDi0hODsiuC(R})9wsX>(O$5^H7(?1l$8E--LcDF#Oiu^$z3`WD1c^X9KxnIR~-x
z<$>NzK4ZHvxe#=?7nKx9_z58N=P<J)Ac2PEHaOALWxMd235yNxp>*R`Run`5bU_hB
z6DwC;x8)}Xuz2+vWwY@*99rg3LO?+z(!fRhwCY(2`RR$m3jRDlhpX@7t$?IY`XLdt
z2520Andz+$a5$HKRgu_Lo|!RywqECYtX~Rp(O$L`)UrVDRA!CHxduKS?x&(p;-Wd5
zZ&eLl3F*>`cLbc9w}(-LD@O+}xRC~3Ay8%vH8A$SU3T6+4$?vxQ4*l<%Xg!DC9VRc
zjh{hdsI2~9dhmUz31Pwgl@@C`+3Q1yBTVwEZ**qhitR4*)drWcKRsu7KM2OaFjaaD
zNbLgbz8b;F%CqL+L;!ff-5iXtk@CvlVOEhdisJZlaDGw9Ka|CC=jw=0_dOJPC%VZJ
z$20LR%#Nc;gEW#T>&_Gs=)H%lsy<WWm#V^7V9aT_XwsP(V8SXc8x6aU;4u1y2TT4Q
zw0=BGYhWngpcCffA}EZ&l%;D`2%ZIlvtXNJ!`-d2;`h*SwE>IA*ro;x8xXznc5_s=
z8Q?fSXDF~|#PD$qB#asL8RJ>;%l7dY$VD<-#1a8PkzcE``><w!g%8}Y`>=scxkWY!
zN;im1lzx>mmk}N#m}UnFLBe2D;F<^5C{|#y5ENy9{8Nk^Y>3Upl{mqG+`)I7HOFQ9
zw!(AGfKI`23D~yJoc}v)VUzB1!93pRZNT<UR{O%&_$%a%V1qyNC0|@RKDD5d6y!Sw
zmF0swoshFZp2$Yb6U!IWQ)D>rrOYCQRzq+v0bxSNR6E{F1g=>G!{<<d%%=t++8A+v
z;?;c12N7#5v+)h;Rf&e}8_8-a?*{K^dF>3PDNA@z9uPn?lWenOi-D~qtk(X`(b$?I
zzLRQzBz7M>o_66VeO>y2@fRu<&Y^zszDI@-{gHwcg6k|C>Tp&QX87Q7JuReM#93+<
zm>(^seq;EQ21!CFEst;yJr^8Wv=^hNxl64`exxMU@2{-W6(lde6e?M#_Xzwv8-o8}
z`QESt4FG(C4+<I-d|I4~_UECIlxJ*K#OajWi#XC~h_h=`KI+KzZ?wO7ST_eX6e{4+
z^}nxlVdG4&jq{B)B4x$tb7VbAma4$sqmshNHamzu3=@~CS=(x=Xc2uC{75pJ#iOfu
zz$@!(`6u)F!283&bu8724wb#&M?MUwG+U(Hx&b&qdxvDbCgHc3kRF;?sSFYkBWB;w
zrw80ZcJ7f&(g<SSNwb}DF9P2&IatNOtX6R#Un2r(9rKszBG-@m<#Jj^SjzZ-lD*w7
zbTw!aQ@`@I=jkIg;hY&Wk~V7uL|LokzBD+g?SS*0dh%v^5f!rma^`#oSYr{d{Tdrd
zKfvW}0I>m|6uACfByzt)jVQ|Ft8ba|`mEmR<~K#2X+UU~$$!1&JV^~^by;bFB=M(w
zal(fWh0^|^m(>4+JVNJPSl>FS%j$yB`12h%ii5H0f2STE_Wx`ea<Fs#j}nCEKSUw%
z@-JM#xrVjvDmU84h5mM<MmiQeWtWWBBDi)kcyC(a_eij>x=>|uLt57KiAM#RwVz$_
zQlohz9l6KC$j@k7PJ5j~k83m8!RUQ|N}f4BX~%ktdyC0!Odd9k`QA)8mjq0IrR1rg
z^#<oJi<0*I;rt3uIGB)6haZ&`!1Nn$h2)(JAj3lU<D-i#3aI3<MMZu5HU!I(E)OC@
z$NVWwO!D6LS%h8>_m!wv((6u}@(&wC_(M|u;_HwIk0I+fXi7;ze%_b-&Yzcfv{CVb
zAc{uIK*CHqVwxN(^I5ucC7D>X5xeAmGHX@R!vW*kw9y47f4pGNduov~2fos(N$j*w
z;IG$uW45b(V2?_EJZ{;&kQjV$#c{wGBg>#Ru8A<QZ8Plo;YKgZIa_cI7`-IARbhGF
z<P-uQ*JMnCqbd6oL%dazU3zQu%?UBirK{I_K>P)yH3p&Pp>TyMhi2z)N(WGtX+*@n
z_*mJc#avi+GjcpOW3T-+YRB1uwrrLbsC;Vj^4h5FWj7Q`PHYXtNVrJ>N!KuqY;fpz
z$C<fT8t;EAV;<Agn|hZrb60KNh=KY^qJ3R2M9l4{&FY+y{p>Q7xj!fEBb+?%b{bae
z#-DgEksYc4Dejn8$+t!@ur#XIab>$PAUQWOj|+)sUb^Hr=nmbQ8QDy7uCA&HJge5)
z91LjQ#v=BI<}?{so|+3XlSDRWyI$|A-0fBuXsLcpm-5Gms}P$1mLh5q$E)yMJW*Y>
zR^H?w&(l{iR+y2ToO{EFBb+y;3MLBXsGowZtnX%Lh(R1X38`(@<Br5Q561L!5u#E}
z6I*oRWKErGy>{lU@Bo8{aaTMI$VpM$sJ6m$+AR|EV$s4Y3>~oYoQ^E6oZ78ifFdFz
z8hWRgxG`MGeT)@j0TXMc4%TvQcE&&6NBuE2HHeGh+LgeekIhd}&FS4bu&{vKpp*n<
z`KNUEu6HCVdo9M(lG%HpV^}qd$?F^Qo<t%KF9>WG{Q?)Rr+F9mZZhjH-~i#hPl#l=
z;(_j0IV=r}<0?A@!ZEYFSp5RY>*#gL<u%>R_O$g~M2BAU^67w88e+7yjO!ShJ{2uR
zq90xWAtFlQZ|o)>`DEs(W|I~jBqGVzBr?+1Lvi@>QB}6e_rT>g_}~@;?>j-ikH6%n
zVy?=^%(-6+HqFcKRIR}50nzy$;ZN;<wo9l5C+b-)LDeD%+*DsW6@LdasUrg=v})yh
zU9x$W=*=#YOp^Di`}7&|l6wi%R$frV(2v%3^2J)M{8UjjBOBPvUk970!aH5n>DNuW
zxWz(tWil-_sZmUgQO)gq!|7<HRrqpq)oFpKtYG&(2kC0J6|5^1z)6G2j7^Dfj^loE
ze;!s6;z`r8I1>5pZxV6(uNFkKKV<z(I5~Z%aBGCWJZnC;Xv!;2LSMkzu^@WjX<`yl
zifPuxQo@*r#{1ANPODNID5tZ}aU6syfNWR~uI#I`$URa`8E(;M?g7Bt<pky0rT{J+
zi^!4SQH|zgF((ceaBnTcRrd+@Co<yLs*reKT0F#CJ9}XsQlK-F?dBSK3U@+nz^UWy
zeKbtn2wByDA(?s-YdS|8Vyut$D|A$aeTYT7SU~nuc+GRo#=%im5&imP&C&>R%(S{!
zf*I5;A`NHG4=P$$vB~L7*YjJ@kh*U`VZ6#UZZMK8d)v_hs>rbh#qYL^mkH)o;E^TR
zw7XYrS8hFUE}I{MH@@o1c{FF4;DVC{;SHxwZ~y)38-GWleP%u5EOv)=yMj7?RvM+(
zUi`AJnefs|<W>1|<L$5W1pncN<00Nw2g@3nRJDaivR+y?zYPnTpv3L+d}BL982s;b
zrk+_F(hA~p;Niv-c4Z%KE?rGv)$w!Pa;WRK(}XQd^~%Mj@#ZUccW!<4M#4qiP|x=`
zG_z>;Et85=1VY>SPo6^CPI~77uNpZEfb-39`t2QYvbiJW|2P2t3)IBM$;12KRdb&I
zgt{ji!-KN}mH(<GtCIh!C6YkkWRGqpSzha9yX#R%zcYHibh@MS5jGkcD~9zoMHq@S
zmp$s^rtO1uQiA#N05<fAFNN#jeX5!1;~dr0FjezsP<QymNO8P8=1$gtNchCw{Mp`H
z+ELg@L_wUqDG%)jBs)396jml3O`VRsX?i>dL-qvlfqdyG?3P_OZilcro<wVgTdm)f
zuB*3-3q96C!T#36{u%-21~c|-Ch~ssaK3-`a?<xfWkQ1;S>5e%yF2jsz{Y`}uQRY;
zz0uj#@i8(c=D;yS7HYhLz+T8ORZxWa1S{x#xyd!()SjB1$=r7EUZ=zP=$iSybj4_v
z7N`o06_uuUx2~HPm2z)C>#sa}dA?A*8Ss8=3A=61U#_BXw`8uu-kRN-0nODv!dO#b
z28yYskeo?5O`5HmLJ;M`J_E<b&D~aB_qrcoWin`Ne@sqhi@d%B`Yt65Mz_~3tE}dI
zIZxN|OUDZrsazA!<FM$_{UC?a#z_|^&&mcoYvCsnj=~kzTfV}iPflet{ou`1EZjNS
z<ZU;VMO&N3@7zebt?%v=sq{M&kTFh}!D9tJ4(y`CPxUt@Ha?#^0ia|V=%_&OpB$B`
z%ZPR(;C9v)%Q%pYY;7(6oSqQ+6xlIlCR-aO-9BKuWL_{~Gdx&d&+Ytu&hDm7y9<a=
zeZO<5>a8ea8MQT0wjG^#J2P^>tRU}glN|VEUA{T`GWebrfu@hIJ;=XaP03D;ysk|f
zD4{{y!H$gHT`fBG#eFmBr6=idG44l?aKs;dU+6)OnlL%?B={Qk_|(x`Jj`V6ekf@U
zW@N&Z1V114=)CSVF+;vssEHCBiXuR}G1Ow1d{<VYwz<)fY^-6=e%oXjhHU_<ZxK#R
z$OGQc&qYSe37<^axSt83o0Wj4-Rqf!79UcGiug=Iwy1%kMY(4Lyh|SZ6$*R74vj_F
zeM5!R^v5g_)x6@1ha<Z6AF=g}f$27@6SP2;-%k(Ks?$hVtg>Gro7>ylYZ?Fy#@}i@
zHkuT@ZB+aZMK+*FGIy1x8hIy4s2pXthU@eIX9-~y?5zFYgPFJk9=gopFzD2eXRbbS
z&rpU^Y)lopWLFIXGD+^IV{E(h!%rieT}rJAV6^N3Gx$(NWwds+>q$SjN(!|~65!G;
z&mD;<G6*rxSNV{OkwEJ9>3M(?*ogvNVbu2Bau9PM`k1CZ)YD%y4D}9I^A!BJIrF+v
zTu{l7{|#k$qu93r6R(5&g{DB7)UoqfZ9*q<BIUu;o$lzY=Ph=)o!)6UW|ArnNxX2M
zmBwCAP9r`T=cgow@xQNhvMY|`3TT=0Oi#Ja5>V3thg2UAy7LXhMGOEwo|2~c!A$2l
zLm)G>78R9zI7`||Rk>v}iu+*fKXGYqI)%~J>(Rtic^=|%9HDq{FFY!JuY@4RH5w27
zPWeK60(;dsy0&;;qL_A(l$Y0jraYXf%=5mDuA3R;in;&UuYKszUj1h>7g?BBy!uPe
zqM667`7Od9wGAq|!32PVqXEL;G?ozq43E9!urd-11_M&U79<#Llu9GL$a&dd0KN)h
z$#q9Jrkj$Pi|d$h4j5lW>4lmJCOwogjin1)JBo}{fK0!KHQ2js!v0V*3mXyV&ANe^
z|BMfjJh(pHaxrv(HOYXD99sK#eIjuMM@ZHPbdfeUzx&uUSwq0M^#)IEIYbwZ(MD6H
zUxf>%U7;`4uLiU?(Lver<()0Rs?C7uh;mr3121-`a79g5wZbo$7u$Ex!r$$&^+XNa
zdF%fHdO(H06WMqC5Y-#7K)neul28k%WW8OKr|t)+J47D@8v%_m*cQb$a5s=48th?!
z1lVKo({@!fWn?LWrSiP{f3U6=Yln*rKGB$?0n7oQb9tnIl<W0jImK@&mFyrNL_Ztm
z^Ho_a%jPst2hLcu{pVG+2yr8&h;psGlL#^N&@Sq6yI6w2kmrB(B@_+_8;OlZ3Rv08
z24^Z~C;&5&%Y9{qewv|x#U1-L#E%jW#1B9WRv73~%P!CsC1s4{fA)T}DWMN>(oU(-
z&=+fr{g2)<wg|=z%1{_ViYS^(8^{@`al-M6jCuk%^A!_7MdU(ZC=cBTAQXjM7F`jt
zL?%MxlMNCuS3LS>Q+h{2tpU*x5qvZgV88gNPVx0PQRwFZn5CFTiJ)5)hNYlw>kvjX
zm9IqwY<(GEiuUMFf69F+_j8{CokCyqJ84A|2?{Ab1-5R%65Ug^+poK@w8>2(($%k_
z8k!tCx6n!u1rUwp3!2aDHVe#yn%)w17rP8eXbiYTy$%Z#&9N+&ZCl)y?fjWr2zr>D
zB0L531SBDdo+$|pe?k(99(ya6OEj_3H0c(+tf`D&hfM}-f8xHYHf2Zx!H_5{ceW7^
zhNqGZmjEP!g}LryQDhMk9E}CI=RXD&#OxI{NCQdDkX6BoG)47Y(Ij_bN_(c~GCy%3
zoW$_NMW0Y70k|bk4Q3I1@9J}WI*Szryv$50c`rhRXNJdD9cpl!!k9LzVtX4%4v@PP
zl%cBu&4k|5e*)qf<n6)Ek<?4EL+S4<Y|FAM7a>EL0oic+^C0^dz0Rhmt3K2fa{EA6
zl0hi#dko--qsQu9cem@}0yMQ6!7)<`sYXGnQBc(qLG@_&D*N4QG@sC@21bnqQv|3)
z=@dsww}4y^yHkPP6Y_Z=A&jR%;+M!wz%=^Uvdi6~f1iNS44(hSbs!KFK_KXr!}$9D
zQ%V>0W*TCV+8&~x?BJr<*w6z2*FExP^A{*!L~xeq*huV@i(m)B<7*$=-6jjn%cSs(
z9w&B!fi-B+?ZQ^j777fV-?3Fla>d!`a6=m@9@cd}hahz|oZ9h4eo(EU=ZXT<TTdIE
zX_Id@e^nRKams8r;>N_WjSV3wEp<3ZA(3MWh3exB0nCQr4`YISwXND!x%9m{u?ZB*
zR75Augg)2~u<7`aqNz5)5&#&9nb*5pSNR#Y${k%78rUW{S>VG_w)$9JGKG0LS^`5!
z0|0eXW^eDJ`A~ID(cDMNFwB-Vb~N@xM(29Of9{Z&N$3yj5iA;s%8${IheI8ixLR9o
zN5(Z{Z;p;<ni4RiD&w$0D2AJPun;}2I5w0@5ah`Xu`D!hIa~Q41K~&-kZy{P!E4Y-
zVz9Tt?!cxE>7&bNVTk;~j)R^uuwh_Y47{?9(|p2_<A5O`x$gsD$RuvNs}gNxiBqMy
ze<{Twv1d2|s<{N`8F5s&7F9z*0-dqr8>BP!T?kZVFi^|Jv6fH=UBCBeZ*kN@EK&8R
z_3ws__3u3nKkB-hdcCd>1K@M88e|awZWQijw_Tu?=hr}+`!jW#L(>Cg0BArEG0v5=
zz_W(3`10P$K6n3WJ5S!U9l@e0y|${ye`cP;%P&Hy0g{L4J+?z{3^fHHfsQs!j~DgU
z&p3zc?6z(!x(sn*(l~yx3g=J2E-4N`pU1<Yr!KRugE<Gwz$)u<>m{YR?Jx8nE~y*D
zyofkSu*UyhS=~BGS^~)@2R+6gC9rR|UmU(aSjirTJ|eMS2t*FYYX@gQR6$L%e<Msg
zM)V`KpCNL}NbE#RhWQ-A?=<iXs`h#!;4_RLR?A+|Pw>b|ul<4+H;X`~@-#d10qh43
zz%wLb+><w~w#)KMDDgDSLJ`X(J!s7a-`it?I921o=*6(U1P)~Tb(XsOhdU<6-}{TZ
zV*(G@;7OB)CtdMj?Tup3Yn4t@f0&O!^<3g0y1aKbf>0!>$YG<(%z=#tV)O=wb}Jkl
z_C`;DL5WxNCr=!Hk?64p$4<8U)Y#BrW2|ztK1AoOhiYd}s^xHmII1;#bn0yc#V#Ev
z?G0Ul86E^GBO`Icl1=u;aZ$m+fRLnfNq-|C<b~K*bP#4qQCrT9W<#M-e<dMo7dtw9
zn=$}%se0oiUnlyfAc<A6d`v5Q^oWUe)}suVBRDs;-4puLzj=Pm1{KfFiP8-Dhkw3#
zGlnyOhn!+1^Vd0~J#iF6qzc%{6Glf)W5Z~_tFT8$qg@3ga_TCAD}Z(I5m)%R3*R#~
z`r>jn`G>tP#q4F3iM<dtf909BccLu%+P{{W*=tp=u1?Oc-cGt^SDu{zJRv9NukHU{
zy}N)vSKm(lbaHv+*BZZj1s(<dqHNRAzkDT$#bv^QE>d^-Djr8eWCCocoDhF7Vy{ft
zc?#%gHTkJ5(QXp2A!H%_Xd05gf`%JV;6;c_mWKN8Vor0s)#ckTf8c5w54NuB+ae;1
zL~i-nf2$S4Kz480+d33!ujjVFatuO`FM7Z#HO}3>&4L3>Iz#!{KC<W7c*UZyXS(id
zckcib*Bz#5H_VK$UiitH>&LLU`PFYsOp>Jxog)!cU>^h2&o}Xq9o)zmQRzkq)SKL>
z;f;{x^m1^7rT`eye-X#qH1Y1;*~p@!2Z1qVw%_E?cS}I#Joh-Do)#28)Lo?DJY5Hi
z!)nKVvCy^^U{ZKl@%>|IV$WiuGvcto6&D;o4o*+)oeJbb@r2Vh0yqk~@V2%QgENe9
zQX_5Z#%1F{DzOLSx*teG=heG_z*=DlZi?_MPgC7+BZ5H;PsT0c(X_jDf%o0!Wx66{
zd%_%lvihHfUc=;ArTRp{&Hg4+p!j-^066<VuVe^@Vr*S(Ro61PDbz4)4!zeuSrkT<
zLhLx~vj6=L!3qd*m+=$<8w4{oF))`96#+wk&01}b+r|;@=WBk1kbbd)9KG)^NKwEq
z7sNp9q^^QAh>C)icqb+jc@`;Ooc{UFzRi*nr8^f6&=`o}<#M?*`^+=X%<A2Y6m&-1
zpZNE3d-3k#-HiIN^w)Abdp5s#@<xc6Ev#Zn%;wh@;RQOgwlHF*xh#m8&9@hicp-~_
z$Mat<7%!Nj5+==87mu!9KY!y#bzwQ9arCF}=YCKWhT1gs>FXDMP!?KCn+DyGE~sTx
z#GxPN-(0<(zkKc=DN-0~(h~D4H%4{AjZV{FefQ$(A8z=`8)`<D2vu;+;xwk+oJ&qk
zp}3u0x(zG;<i~Z@_>Gx@8m{B~eqDEe{$r-l#HP{feY5QA*3aiKpR2TuWxKuIRDI=N
z5)v%3$;QQ^Du4StdWq<?)?K~XM02c7+kERrz(dk96NjqcBBD80aj0(UzAiWQ@6{@P
zj#$Fu!*0Ly%kn}gofcV#MJza4p@n7dHw7+MG>v`;8z7vpw5N9O*JFj11kEjf8$1f0
zKGL*)j1-*W#Jk{j4rd|c?2^*Lm|#}jud7}3iqtBd@wz--<o)rcyjN6VIOpljRoVM@
z83ioj!LO?2?!#@5o)SErOY6T5JK{zq=T*(A*>w~5WvNMHS5N;Lan7ho9^AIk{ZbN&
zoA9wi6}-*Tw_dk>l_E-_VbjNdQeV3<Q*di|#?`tiSJiG)H6C4;%(8+2A}=WmFLiOt
zf{S!UzgN39Itg5N@1YAfn2upvM$3ps%RYpC85l|Xx-C2ZVdi#2^uccZRt1COMMKIi
z#4iNjFn(Df^TE9S;oEPgq8tc{3M8JsjZhVUeLT2Ty)1*PA!Z3hrf~p&tdNsbauK?X
zQ*i)oQP3O%F$(<x7Iq=hVFg1Y--tp(+zx>6U>eZi;(-<Mu;u~KTyl)$Hu#olO4%5n
z-WHh5&_5B(upGg$2>s*97%8k!5+fxdoB}~2!pq|=bp5U>w{>$9L&Ro^pN4)M;}of9
z-&K)4s6dK>)4)NKc6!}^ZZ>V?VJ^@!ckuZlz`=|_bIA-qOF4ok1)Nl{D+QF*2uGmg
ze@AC7{6D;*5Xc1Stm{+wFp?~cID)m9#I?SF_rLUBrp{BzQOmXoOTaL<IJ|GV`lg8t
z1B9S3aF**b5TXK5kTm+mZSNPqq(%eZQ4H^oUT7H>8jqe{Wz&X#Gak<ewz=uoi^pFD
z%8?4(4EP2Ti}*h2?g+>KcXuy8mAh|0xw{X^Z{U7J`#gpbOe6AyZV?uBix($u_-a1;
zJ7`26#Nj1Kw;9z&6+nwpLr?-0f{c9j^5V(MSF?V%uP&baIHMO&zH$G1_Wg7C>*b5t
zpDwOm`gNwY=7B<gi&~Q!II-}Zf(5l1Lo*}`0(wX%NT6&2R^n5%C<~P-Fp&z_p^#Lf
z$YR=J0*t~9+(@~|1Rn{JWI|jl;;w)@sn&_*+Up2jr3Sh$9G;)fK~EE+9<l=_aR+6y
z3TXs1l3)t4*!6A9T%u5xhy!auP!Y6tS>HmQ>#N_qdjvdxL%v1>jUE`d>_0Ce5FzT)
zII0x^!r@r0z#0tIieCez7=~iB2B0a0)kh8mT|v>IXS9Zv<UY9!X?`FKC*9JO+m!nq
z&g1B=x`|-|sT<^_9%<I-FQ<gjU)yTi?)=WUC<MWDR-jz8Y4LfiDZo-|(9&US0@PWK
z%>;FaN{LQ?+;mC6vFxs{3cejLoeYPFSEuk`AX#Te?b`j#I<kbxhd){<?c}>xPa_}*
zd@~L{&w3veSi)<vv54Z&az)W8iQ>6A#aC88h_4uf!-S)fTpGt)e-vN2&v2-Y;X8%!
zbQM!upetHXigXp9bn$d)E}e%#BK1U&@LYHLcn{cr0opSX%L0Ffuth1^QBbP`)=EJQ
z>~9Vb2?PVDXy_2^2sAQ`%QERPaDl*pzw4qrW*HtsrW~luY@c8Q5}5P_%6SmAY3k_;
z8OW5Y1Hg{NB!;{I08WHFb3G4h&iL_cuwODbdbg{D`k#WNmxJa8mQ_p-Yw4y9xeMsd
z;07jtEN%OBj6;gKWLy#`gQ0>Y!Jv#9mjr{!cXe3Wu`tueZd7cFIhi$?^Rdg}%G7jR
z%ivm91__jUj(m!^gv#0O>tL|rQXko%b54I-Uq+Gvtg7tpRlTb`YlNB%n9Wj+tk-V0
z@r&B9wEVttrC}mp4&iCiqti7pAN4n~91$9SwOmsLg$K~rM)EP7DY#-#ou*b!R0)tT
z({w-L(lwIhT|ksQED~L32mXsgxh)}cW;=Nh9g=uD$w#-l>blxRFFXB1v-Bw6Za$>c
zJ}k&0e3<JxrEjk4KSPBbSR8^l$6OyaO|-;LU?`fqh)iOTqb3QlX`5x$Egpx!qrL-w
zV{wlItpdbzq*YvBf*we*=_un^(?@~l&dv_9Vkl&RRKZ2*^_0B22r9|(V<*@%N`-+M
zJPAHfUjx0D_z@x;Q$<z+OdTl!V9Csf*aiUL^TRd(oL6pim8tnPKz>wX))MS!-R#OH
zqJ}xq&W8D9zbSViU%~fOuJI;R-M&wM{+EIsS-`TEX?L;F;<c(s)?x>TTI}G|+gm@V
zz|A_h0Q+E?cLCZF$O*PCDF*M4>v~hgEJ4MfPdu@$(-MVKtz3;G6yyr>$4M0De*r8i
z6!<!56vs4+M~lbNT~tVM0NBVtBrDK+vOUOYb}wQ<k<tUi0(C>(q6Vb0ny3tahW$0b
z8JXy>0jn^H`x>;hbS}*>NO)%5$x{oBt+*@*frn&*foZ8F?ldwI><JMyW$wpWwc77u
z3l6fN${&oDK>*r9(cHaAIRWgDNW&wGHM2)zV8rI1ra?ymOBPc8rK90{I!559;1$<1
z@-#8(7=<p<xMS1>XTe9HF2>`3t|DNq!Q;X%(xr6yKxJ2bszy@S`j^M^KWz^Pq(I@6
z$H1Y3LKDOsiiadsAjGp&nZ#l~YHskTNBs<_Wt4bGKLcpaqQbl0wcEHcEpkbB@@C+C
z><+5=oBDm6Y49>22#;~+d8AUA)}ufuQ1EbH_Xjw92TB9Asygmg4;W;BTXkJ|lWrP>
z#s^ag>9eNp)&T?{cr=m6U7W$vi$!1Fq)S9#_hjVa(K6&u!gA%Xu9gw-6iM^fZoduW
z&xsRD3D##CEsB3+qs3i<?t26_kyH9mn?pv4WTl5{;S8@JfcRkxWtwq>iwhnYhn**!
zRohgdKOK2wOgQ)Q2&KY*{_hQAIN{XSeh}|WvxQp*0`+9eSV$--^a;A4;vTx_tKGJ4
zVqYGXf_nd0p$!5v=bb^V2+l=;4m3S+Q4R$zHiL2jpwze{5|=PJ3GZ(MWq>J?$Wid5
zYf@k?!m$E;D089ySIkc3TB&olYe)m`avz-myGR;TqXxx31Gj^JevOOvB1WsWHaBci
zw+!^#iEf$Bze?!SZySI?iB?13rEU@t*iBlWy1$1Zf|c|Zb&fRlpcr6-Yv8jzZmy3#
zOPD?EH-e+gg!fEV@DmkrywnAeN!+#WkX7!W0_kHx3b?T}xv-5ThpUe;sg;RE2Nm<L
z!B9yF=9zGS#@`Zu993q6&K06C<Qe1c6?DF>pKOFq%C@uDtibHK_u|GZ<Q5_9xp{b^
zjPWzwr>Q<$)kVIC7=Rk`oc&eP?ZeRk!4ZizrY5H0xrw<g`(+G54qS+NtwRNR{@&Q_
zE0PAw(KGcsk|hK~iUq9>&1VNSIe^ODJ7tnzLWz`xxa9nQ5W){t%O9K7EPxyIh`;)y
z>U>&r-dH?(-`1;>Ss}hNx=6&Vpt6YERqyt7WDn;GG59qFwpT>H3d(M<Ig+1-Uu^ly
z3Yk2<NX<To=FB2*>R*~wS#5%J5yD;WV<T`g5eObOAbbF%qnNdz$MUk_5+v~}!M9KA
z95v86u4N2=xZhz?2LBu>9hZUh!4*_cI&9Qu&s&+gf(1r(R~b%(xW2(3b_EM=05uPv
z0SCt`jc&QCA)W4`jgn%Es4w4cawi?b^Rr#opD6kWBu+=gD8c?xH_OdFu#wR2?jaq`
zU;B3Jo7BbnZ{BC=G5)M+3g+9gZW6@(TZriF>Hm0Gw7}`I!?iT<;UHvoyYTCVG@NEf
zVHmWFdq{J!QT~?Sq2m+&SRr`Z|E$EnLg5IDPz<K!sRzCt`ZHDGnRI0vHnV=MKH!tF
zry(7=Cto4<+@JpfXEYYxm+=$<6AUyUFd%PYY6>$kGdPzG905ar#aL~R(>M_R-e1wH
zbkIdz6WfWM+-W~7s3%r{;Fg{QQl%=iZX32uN|Lg>ce?+6<M<_M?Oosip?;|3jK}lx
z%rj$u><0+<1Nqbc^KI{A?_(b~Yvymh?LV3H9$(_PpP+;h7WOC0p4x!>I0_IaeNH13
z#Qn*(Hze`N<O9fmhv9)dp(qIn?3pZj!>7;AUr)xDQZS+@<e2FX6v;Il!5XMjYj57Y
zd^w(6UObhb7(<K`BmU&YtEbQ9GEERAAvfwTUOyXOzEO6>ylclPi7CR2^iK(g)kb`u
zSJ^5T3n?EmSjCA}v?=nHTqO))5}4IGU2R1EyZms<Dfmr)Vo*m>95<h{rS>6;gHUgo
z4ok7hs#=t@dA3`NaypbkaRQDSnFnR2H?kx!u6)RwwE%@Ai1gYbb=SmZ=5AgHSFoB-
zPa2m3L?SDBcIMiAimhbAt>izA+a!oloFx5IjE&p7GRy1bbT}B7Wl>5ghz(At-e>&J
zR74p;EV6ljyv#o2i&Sg|(-Rd|40wt|2KtHKUGK{#6qKPT#Ky+)+l$HUkMoNce_f8%
z&WIo^znh)^HZG{-yyy)dKRS7M<R?PNb#t3u2{-fmog1by%@@U1o5q+mEidwUqk>{Y
zI5yA+X?<GUhW|?3x+b)CbtE4>ZsQ;EF6_WF$F?kg&+07QWPdk?L>xr{F$tL$c`a`0
z2K10bY->;-fpG{aZUgCu^>ir8QhP}g>*bjN9u3TrNN;A+9))}yB&ZF_1Nb;H*^MyP
z%hn|x*dyz;a6@(I3rmiDA>a!JLg~PDndJ*xi-R&#g?3Po{yH1Dbv8X2X`66p4fPqX
z&U0aZd@Wqr>ol)D+*7!c`%2si6wGBk*d#Wf9O*dm0N-b9u`k_7S9Mx<P>nrc@4&zq
zK_WzPWUat#q&*9;)$B6?)OxBgt6WLU+_m?&wW!<*G)6Iw2noBG7)(S}pYL{qk)bGN
z%f)A&xJkFWjc`k7Ez*T3N9_mWWVR4_oh>teWfv4AjqM5bS~+&;?5-?UWxBnyOi2jM
zl3*KKZb>_4_hJ!R*s5N;SS*&VY+H04gefOo;?ssvps0|xNmq6qa>6fX?paSS-@Ts9
zUOiXxK<9)K12ffppo6oJ@ULh-hI@X~DlxVyf2{^1H|j#FnbpOts%6IlmUGylEVV~}
zM^vEN5Q!kD3I1LU%-6T_;@YiGk<ZK9oreh*X`PPT3a!#xH?vvprX_W=w<(I98#)#K
zBQ9G5YkX2*Ih?RMD5l8)L4S{aqobjREohkmF;k^&IZ%WlwTirDp5A<Y%aNRiqu8c#
zS1UT;pX0pUCe5sB*|J-#PKOnc@?0o?;CTZnSq;Z+)y=>3Sk;=k=eDE56eh{4&hoU*
zid-Eo=Uz^al1LIr9_uEtg3+UZx`Z4w+n{u#@Lo=>^ssUSstzed-as`xab!;dBR*v=
z14WU`Kpm8Qo`HCbC~Fvqd@22CC^ifPIqD$s8yLu)Po^g=&$g?YlemOB>E`Eu2hb7>
zR$1lgD_c=j>B`eA+ljbSUMo?%yp-;t5kdc)H$ZH{42cM-?V#!E?unU(Z~;xM{pu3u
zn(1K@17g@>=v~&HytRI3zFNS%qsU4QAKaqOl9jBV<Oh(I>{dbC4bI4fw}qtdxN9H{
z&*0}9Q+In$O7Bfs0GFE%<Q}wtIZF~mS}(qNyzv=P?b3TjS~=a&<NyFam0l!re#Uh3
zBbmfI;Ml8DM{u2f^7IVvP4RzGh;JSmfaE~KqjM4Rl37+iG?RT096cks^Yb0o7XMq6
zhGQ5&P$|R|E;Kf#&YN8*lO>-Fn38(eFb!mqwB@mHT&0L7?P!oH|6{m+FHzIA(oLmm
z9PaU)8~2-e5aI+XV+*!rQEs(AoRi2#$~{RJw|p63mLW1lFmOB$?D6CCw@omB)M;#Z
zz+O&anbLN6Fefp7IL?B`2-^U^-xOL73fMR_Z#YvHn?3qUZH;hX%S@9B24E-V)UDVS
zWiwn;S<XB@1QP}YadK#X4P@IIT|r^0tK}($7za^XFw1>DH|Pc331@AlHXAop*O?+h
zA}_Su1WT6(hIuiJ4g8nIMn^$bML?|vjXlT~49iAX+fgBfwxgF;Ou=mVMhMw3Z%DbP
z1$3sPSyP@48L3@|BMnrr%TKlE!E?5C*B~|SW|gd?ajLET?lA^Br7Z%~_&ieGG={k|
zICva|23*x{Gr9ZadA?3dPqkl(+mR9e5;cC(04=~gjiT|S|7TDB{sU~Lv%#0~6af>L
zyea_*1Ti-;F_*|H0Y!h?ZX3xF&9f5Z8wkI|yAa#c_vz%xvK6e7wY~8&NCFTrM$|~0
zHOZklL)+S~PxYm$hZouMMqcbgV8FDSJw4TRId!Uv??wgVqr(45pR?u3yOVb#9@g+<
zwj7;JPM*A0YUG$R!l=>Y`XoNUN6xWQjjYtHC`Xg!$z#bh`(}Ug(}|Ew7_MQ{<m%+{
z`O9ao!>VOY3Z7Q~^TQ-8DpqobTc5ss9u_sTRy$nuOO|mbxJpa^oP2lwa&qx3d}Rt&
zx)P6=oclFynJg`CfAQ-1`Hz12$!lKj+(a2Btw`I1i+f5t+%uM3FeBY)>@Q%#&RM(a
zdcRq6CM?GTwyS@xxmnd${u^aMD;)1In^&7~GsCzjaP`|&yPDOfVY^|@a&zn;_{Pvd
zi*|K$cu+WJQLn;LV*yIlq8yDmXJz@I0?+H}s@|L)%JroZ$Afl7hDXLA+C$2_?oV-V
zQT$R_*FDL}9k{mKQSBGYG>bBgEgV$@Gl^ezP+#4UCER~;9o^%0{usF5^qap#ODN5>
zv*7I#Z`iDYDMSG-TG;ehU449WRnIoJ>;BFAdeitFrGguQcH)lf+YpHbQ=-7=e6y^>
zqGra?QOovl<L1c2Q;_8F=^&e9mKTIAvt~U{UOML5Krq+`_pG<|?E@$uPT7qCRX(_+
z{|A|`3^ISShX9$`!-CBEw*@j0V+Pl=IU*Chcu8|qf4ix>1WEfz8`M%T!#O|{*iD7)
zXKg=E%)?|lQFmP(5JL!7XoGa1Z>q)OHn9(#iN;Uc=nlMOx-1dKX0SO?ib4>$0sQ&J
z^U3HRz?x*FOJg82BOwiE5XM>-&VK^2I=eV|a`As+)Ni)+$&-JL_{o#+{9k83JcEym
z=cC`9oL_`<j<c^l&XU-dkd75VOW-~JHJ*PptEQhmo_>SGN@%?Db-P%!>26XLGA(}y
z{E0a@1DB#r!SkFGXpBq0q`_zocil!#rgb4cs}Lz%V2EE^AyNwFZ9h;*y$T5mb)p2b
z&LV&QO&_<x;kjZihr!+VP=(e$9>4ZIR8cZs?ie;DTD-?t7T$~*$skzP$+|pSa@IHR
zQ{q-m(DLFop2D5y&3Nx>b(I#4arU#yfFOos56S>Zzos&{GfaSS;60>_c2#>#gi=Eq
zrpU`D^E%zvDvftoSDR{C_w}X=Ud)*-OMHJ|UL}?xd4X&1qq7&X5aio|+`y8Q2rYel
zRj4ycRBcy9dIR-~a3%WLvaVK51VshamKBI0Rgeg(3uO#NWD|jGEFpjkV}?nfpSN9&
z*eVsC|3$`+aciuU`1tj91$!YC27QjTWq=QYTr2BT7}9CGO85!dEa;tA&F||Cgj|1k
zK!JNGjbAlgWND>T_VbY@gpnRGl+%FpUlBru1C>F<ImOH{(C(7UKnYm>3UV1>xW*3T
zI_8v{CNk_}f;s>Q^D77nsa!iX5Oi5D+s!Qjt_dkBxd+mG>nPajE@c~tA`Gon+o#ad
z1v+WHZ2FYQwIT$sFfKVqM+2h4s91loc;v-u9D@p&UI8(T&fWFE5K}}IoFeM>P}}V`
z$OQDllJM)Q>rxcxvcRZrdUSOy^sb;lGKoQfpvWpXg#;l2F9;Eu)q2|}88w&qe8y`)
zV7vEjr}MjK?Ghj`Dq4a3lGJxp(wnM5R_p;@Voj9+59p-))Fti`V%tY<0oi{GjHAR5
z+CI#iMZ_5kcgLqvG$!x_R|eCoJ$XQ@S)L^@zUrn99sqT0VM(Zq>*Q!)etB>NFNRm@
zh%(Z-RX<CXmeQe0=BPeLkPb(#5)ZX%PtoA{j?<A{-zK8~2uY)Nd>U4Cb`>6%1h_f*
zMDi2u@PgAR9QP<PZ0VDw%@}_U<hb5^XgUODsrA0M4vjSs4bCaFx!a2i78$zHBTpIO
zkigI#T(z`iXqnk4gYONB@P5vCe%GsKXTjGbsL`Suzi5+d+tPCKg`>3q0FSj+!c`+b
zfSunrmy-kmrJ*d`E}tQ?g9Oe<isDV1SfI#Oc;8$l4fqOy1naizH8Ot;O`*|lqJ1^M
z0P)CcBA38Lh6=Rc1)MCIdLPnL>D{Y>b)hCjfqWGb!^fu}Zua!|<TVsRzPgtHqo5b?
zULgN!1a2sbB3ht4ra;TUO@_Nz#6BZo%kDcutJdykbOnA+gl3g4GoVw6f&;+_t|=Vw
zi{01<1N1EwZ$wpQ?IM3^6%NZNRP`wkg`iGG*DO)jnkuyIqOVqUyX_)X(ZZu=d0(Rg
z2S%e;TZ(ER$DBgFnN|K;42hl5DCGslJH!Lu(-)*m(pR@=Zsz3bii+hZadaIt^mPTv
zYLgtGC>`aIHUV4d8AG~yjCA0T@V+vqJJ8+=ow_6>I)D1_lwN;?&ZPBjzw}KM^2^JZ
zo8SUkE3tD|?z<`q@4BdCvJ3@=#CHQ|eQYil39&h-mxAT{y8ly`*t9LlpEmXTrVe#0
zlzXP2^XJGe2EO+piILye<F%9^ZTYIXsTR%8brQl-WG9D)0x?sT6b+zUDD&N3|BLKK
zp4QhN`vj7Ea|M6g=i3<4BvFoZTHD#>n^@WVe|3F?;hk1%kCt&+QQyMukPddcTSs59
z(=aW3g0Ocr_T+t<K%eQE-nZX&kDe*;Tz5y$^nZ~w^g8eCKS7P8xf=GLCiCd?G4G@M
zd}vbZ2*TTmyWCCMeU7z5NTyTr>`X^zmyd}3kr&+Qe@K5)b2M(dM5+ScqL_<*5cCJh
zQw$=%n{AqPA9ETQNjsXFO{ejxM=WXA5Dr8f1lFxR9Uvo-T1s#<GEu}VZhYlK2_+^>
zGhiIk>D#1^!q7ahzI~K<s08(6++3%Pwj`DWj&qYbg+Sc&K*>i>h3${hW@l_hg{vff
zDTsQb?Yw{dbnFJUwjnop6;L@cod*AUgs2B5#CN`IV=RLsLD^0qk7>{IDoT5JOd{33
zYnfX@%ShG$Bb*`?V__v7nKt$Itj;7hwL2hP${pqc&Ng5!gS!EVaCu0x-d--6Su6l$
z=_kRI@A?h8or8+O?5Pfz(a~Ot$!RIu4+5N9+D(6jlT&7&-dj%taq)6-B(Vi<uNZfd
z!sab<ZfbBwFAwj5%1GxjVtC}ify7+ircm(wd8f7CB_!Y;$+B%9*X#y|>0FWxxj~AR
z!Qe=HwogO`oL{Qk1l}Y@C5V4NJ^wLv(#9nuN--FZ5T*&pmiAtRwUk5*=E)?!iYJD(
zqV#_&DNjwOPrI%~Q!ABoQk4ous6v46;Qr@TUtv&6Ln&<0U<7NG2LKU2<iL}W?RbiJ
zAGWh|sr$Atpq!l%*`fC2JjRtAbk==uuuFI=atS?XKoFX3lLJX8Yj<f!wMs1$_)f#E
z?!jB@q*qmxS(LuIsv^69+L>qmUr`<gRZ4%c->L)$)rH*;=A9e{fnQh4*syh;y{7e0
zry0lsdH&F1;1STI3L+s*kpn!rv-EvZK~|&9PzDz}qhGuoI5d=WcswQ^NQ9Z0XYAmL
zZgJNT1u*S6!?T(x4%BWy6z*hrG^+6bIb?VpmK1||IGPb$N9V!WaoYD##3;=bcUON8
zPboir%B;tq8%XPeN$n2<5A{PMkl(g`W)GsDb$=K4lv+o99pRokI6WX)KuFz@SkkP_
zu|&f#SQWH=5KX(=uLq;E{gH_A6BgXKsCp<{6B&STG=^9d5)=ybKYUDh?@2Uew?WDW
zcIN10qIa$!dN+u0#Yq*{o5)jqCRKkq?X3I6ocyH4nOr4fMQw782qZV|2DKO2J*JP}
zH?t#r?P$Bct5QlR9r5sEU81Z<tq%0a68|uYT6mLreVfuJ&%^Ah>$Z_WK~?}_bI?KA
zqmoG*pgC?o&2+Oae2|hZstt-=Xt$pYcJ6}IE|kz#^W2U{D&)%=`u!krJD`7ohulsV
zzl__#m28otIgq>9Z;%k7L>IpBOq&Pd{xV45tRgiL!B<S_LxRtJ_<ep30Wa6YKn4T=
z2yi9<^veZb8IYt$2!HzVL?GY?W5H;tLb8&}A?>({^F>dPL{8O7SvFIg3bmbUIA44&
zkb(?Y{3lCYQ0@@!0o+;QHjsZQ&|H6wmorjReVQT+a(<qvTsGsYW>bd?RzXLG`+A4C
zXS-ackg_E)&+RI;{DS$x1cJ)8PgzQ4t~h82NYch<hR`&Nk9y=<(hMjfRhs{S^g!%K
zGy`<5^aFaXitww22N(f@#5zpX%AE;4;5YDV<`dL1cbOr4t+xz(3!8tHALovR_c{P;
zFZ+*m?pYahx*zb`ih2kPmvRyRy1l8;uMKhi4{>8@WwGOWfPN5Xc4#Q@PhXm)rPKHz
zhw2&K>jgvCmgEy>^<n`ScbYO$nZ4<6EOJ(<OJeY6i)u!2NPPG0Y1|1!lU_ezDc$hg
zEdKijQ78W*>OF!^mb`!Ne?Fz8orCDrv$H=Zy6$pw>1lj5SdsAMEP<O3VM<A}s3Bz)
zy*hxK^>qii-ZSbH!CSN?67T{~%qmZX)Xvx^CU38Zf_{kbYMu6JPQCYfgM(XN+5qiw
zIOU;01jsbb?vGu3Cx9~K`5$LZs)XPcxepUC6POp69##4@7fl+wTSL`^<)|ts!=2N7
zBeruwH2OdP1*|MPwU-Gs0UHD}G&MPwC^Z2?f8AQ&kK4Er?z4M;gt0G8f-EEcCef$c
zG({G@^wPw@p@4yf*4FN-u_ecrlkWZX9g5^ovgBRovUw>2Bmhm3!{ImId^61FX-4QY
zbAQ6Wi}mF5<nxraWAUHGdU`RNy!t@R)Do+h64Tku#D74iRAxl8spgVoW;$C>p7HGY
zf9yXnUx?m(#)%aSzL_m2&tAX%`Tgw82RBi2A~aRu2Tt4=l`sa&`LU1xe)sOp?8D`2
z_mfgYX%?qn{POGTf4E_831>pb<uBjAee>a?x1(?OIkScs!=~p<!)QCbtjea$SLN?T
zSW0RdR%+T2BCS+$=xb{Rv65#z4ApK(e-kMwjVGMX+d-NUp0PN%xISwKHQ|QG<L#Qf
zDRyogERqWMnLqnlHh1l~B--$}$g=!%u`R0BFh(dhs%xtvTuN!fP*qopVmE(I!oieL
z@u#0xyVgQRiLwSaoo|}6Fl@Pwd*;=$HQW$stj4*EFc%=e@#O2goytk3v$*WNe|M0!
z8IAjI+RG<eS{6M~m(}po_EhKG-3sT^b4ua%{14v2;DSs=lbX9CIG73(Z)caU+fgRq
zNa(Fq`?(<*&vYDH<V{((HZV(!%;J%PUEnEhqW$Y)U2ofSaY00;;~|Jg9oIe7!8H-e
zD4<RfZ~jMj?YI>a;qzHUSH|N|f3aPc6<Rg`G*`rA;KOsc9pTsh?XHNYfOT~D5~MpY
z0<zw>2NQ(pEN+)?(TChd&-_%CySt(V0oNo`5{;`C+xtyZR=4fyz$8?O!EGppx3MmE
zyZqKinjxCv4=0+p$XBa?MZ++NdRxWMZ|ar5WthtaM(fvLEZ~7L9&vWFf3FtN$LD|v
z2s!&0+!pnEv-h_sG9oB_2!>658?a&e*iaCcN&z$gUjc4S2rIx~+^b$(UoGpZxC$Ph
zKWp)8fhh$}36vvPCd1hE)h;lqvba{04=4I#fUm7VU%!A&U$zdB3@%2Qu0s}ewe$2y
z3AY&j`)XI-Rvsz>fUGd$e;0T8wmp}EP{`uwi%s)#IC^}QRUK}xH-FQtiprZxH6sof
z=U~zwGHBrqI@iEMhJD9EaN{q7gP0z75X6#s<Y;agINbdCU&q5ggTzX83!f1Fv%Avg
z6At*pRQ9zDfdi=$jcEe8cnnL&B#H9_ARxsbM0<NE<+4fqVb^Sne|+7JJFnR|ek=`=
zU?1ecIQ8--&ZP1bPUx6*m*b~6_GS2K5gDIzMEy1|SAh>e!f;LF*4O@frY#y1(=;WS
z6&Q3kAwj{{DuHFQ%6-;=*<4t3_kUw(E1(9Xi@XU_g+eKW_vKhJ9-*om<T=b*z(T7c
zTp^@wg*qtr2c{iee{vld5j2g&9NY2+c+_$v)KC6XNi#+ty$lYTtV7UMFq>w$+$P^e
z-{~ytu=Y9#9AMnI=pD!#5{7}G;$%cM1G*fd+Ia~hDG%c2oI@;WA-lZQ#V`O~D4wio
zR{~%wWNjyiAo|Y2^enUTaex32H39_11JfuTlFWj9qVX_Ee`Z;MGHch=J|jB?o!s2<
z9VDcIQt535IxRYsStORr2BU_JxD%M;(4EwYFtqlFVf#%JeGk&!DeVvv^SNiTvmi#b
zWhePk^Mhc6<ADyd2iJC(Y*EB$+jEX1fJ9JZX}vYndkk>n0Mtu-|E!yMY+*4JFo+>*
zry%aZM-Z(Le?IG>Eqk9&VaJaCy&mf1!mDW)uBc`UA75}_EqFq-k3~S46iBM|HmX^M
z*e^cs^HqQd=xp8hPCNBbV=D+w^!GQ>3KU))TG@rV3n0fBI<Ah{0B~$h+(aGUWKnK_
zRy-`hasv`9!g9pQyLwktB&2R7^`K?~e{!sus)z>{f6ED2iPWXRW0mc(tP?1>+e5qx
z71JL{a*!T$@<(0`S1T(}u0d=lj>TnPopWi108xa=Lx6zd8UjQUmUt9`;MP~O9Asx&
z_koB80s&>5B?9@5+|>b@Ng!)toz$ij^=<cYG^GvMXqkJ(?e>wqJeLrHjf0ru`@k7<
zbRAhUf2H?DOBZiu(|=7qPq}a4oC_#9IWUSNFkuYDnQ^V2i_6KY%XiaeyDuiMew)(C
ztGDj2i}$bLpUb~Z|1^1X*{<^~{U8qN+rYtLAJ9W>LkJ6&`Sbbnpn6S$TwSg1k-D%*
z^X$vqYEpICHx$VHu>InwG!<Y6vKDka%G$x?e`V1X1Xdv_c0?_M!(eE~G;JaC+HNff
zrSlSZq(j2A*&sndcG1W$4<S#=VF?TzXZUa%ZB8kH$BR)8`HMlmJ+&GQ&ilWqMnm!E
zN;WfIjh;}lExOgH1|s^7A~KZ6=Ro>IGM>`b6CL<zid3)cI!DfWw=;^N7hBhw9ItAj
ze{Lm=(hdwimg{nrZ#`ECAX3W*8cwK@BqUSNZMMaivfl540JRL2Qn&l#ddVCs+lNX}
z7#vnT(u`F-RwTUlYfdKVc=nanoKTErpuG=j4X-NunF9(`zz^?LLQSZsfXJXK&<Cz)
z`9TOMW#UTT&{ybp#*7_y#yTy*B-Ry0e=bB}VAP1zKiW_P=VR%Xsv+ZQKuir4@aKI<
zMU+6*i1jiOJNToM(L+;^fy`j66M-$`2gpc;J>0VKB2U`X*UfM9G6pOFNAN?Bw6vY7
z&VH#R(?X|~o#?-eS=(LqEJUvnsG&C7Iv|=U8E^Ybxh$3>DmF!<1266ag>!+qe`i_T
z<olIB9VdXL^qv4g?st@gDtwsmK!O?&fE34eMeOyvOA({ZSDmV~--~Tc!dWzDaTwc3
z5}X#D9}o&)PWr9qV*n{XsT`#sUWY#JV6@|7fT>A36$zr#wmw$eL9*`DGh-@$TmBT<
z@$Pamb^ulgQI-^K=N24mAKU`?e@ba=Mul5&MX18}I`qHksLv{@bocI%>Z$p&d>_pK
zFhJdjOjIsFk}bmzsk0LzI6PAg-cH<;pK3dt@$KZjo2QB38G<K|YJ;X5{^b3pxQ-Va
z&c@w)TD0o#UQj|VKzS4xa5tKo1emTR@4mMj)1<Bpqn(GbPeUbE_)l%8f9PJ7H$@0B
zX(@JCOV{Pw1_I$3?Ob`duueVx*wY6DX?ptjrbo{1iEg@%f}9K)8*9#OJcCWINXL05
zU=s>9iznEIxeDX5^X3M{g3=F!QN8zE4)BEVq`jBJUteF0ieIlae(`eUFC&UKR5DjB
zzz2f2iv6^Xjs?Vz2;O2ifAMNP9D~yiKlbPEPsB{u-zHM*VH+gKG^1Ub`w=4gQ*r+?
zPCjLsaZL%Upr&Myd!;Z>u72AG@+7d`W&XG)E+?e3CwbzspuoPTsCe=xuJ60)N1nJC
z<Tz=MJ#m?l$AGrE90noU!;V~Qq}|RV08|=g@Mi6rk)smRsodV{f52I=L#O{P5p)4_
zFF$zl)BuB1P$N1^pwa^l7uX>VYShU(Gx8eX8nxMh*}i4QM2eF(;N!ECE2{A6YwSNY
z^qvX?#S5DG<-ru0Nj*GKucdeJWWrO=J82;HxCV0nU1ZS1>~%lyy;SP<`SR^`3H8-B
zR*8aR^6=)4cRiTmM?^V#NeDaM_V68#t1qCzZU#x<{%T0iYyVQyXXlXKdK2$`8|5H{
zpdl<7(j#&S0!ip6=f)q&;!jSoiOAdLr~C6i>Eu!_mkBlj8v`;oG?yke0Y!gWS#KLh
z63#P!1)(Q9YmNFou*icCArayuYctplKwvQ*j;vXe9GV>3QS#@v`l_BGN3`rX8(<T(
znmt|DS6@~2hbbxOl(>K5zpK^c!{o!1`nB}0YBhZ_n_RpWVrmPkm=e?3^(6d&POUAB
zm})KyVy3gz<N+^a@o@IP3FChSQ&hsH*<$kG^5xUlepMHiGa6Ta`(@@AMPaB-TOYrC
z<`-q5wX|u`E$M<<Mnzoub@tQc%h}aa|0hKXV@*0@cInorF1XQY`-@l4F5kH2i`Uc)
zBoV6Mn#FCLhCN32_ndRe3dQa8+zFuk&Z=GSI=7kAf@zu#*spiZyLErPaDNdRv_g{%
z)lIqelBt3+l2*U3x<_d*!PUVj3O<RaEZg<F<5Q|`S+D&$=hTAcxtX3*S{U<nciMFE
zEFucYIGn}4smxvZ?okrWjvsRmq2ZLF)NCMiv-Vfj@CQqD`t-Km%^&`A%n{(Hq)?QC
zk>Mxdj5p1yS(e-7t-pU01Lx(*p}L!9=iLmBAU2)<saY=Ls^CemS5KdyOKTn%7j?D0
z-2`o_!Vs1IP_7rp=T_}%Q*LX24N?fg@-^z{>{^&~M6-5lrXbu{+*ohd<uXXZH3%qZ
z@9cetdKZ-NtYNQR&TOG1Lq90rl}+*l0k`4w=r%OpCZ6IJxlVt^+iY9EC;%p;ii;nc
zMZNIw!AT(v!pD3LW;=^Ilq_uz1^_)tf#>dOe=Q38vV`RZKDXI6Wmg9UNKls{$v#DJ
z2PLQAJywFC&K($I03gmCKzI?*0l<xWHPM1fmag~o>5FJa*#n$5T2UKK(dMI$XEg|=
zLAxe_OFWT*2^D{A?u$#^r$t&Tg9f;y7)CFz-pt~UIiXqI8^1_E-y$ii-Id;387;uo
z(%$RV$1DY0BnaSZ@2&rMyay9|@6xiM8ga90Do}3xtX9ULLzLbgpi8BwIw46Fjs=GR
zM9w}N+!6vGevLwJ+kFTU0A}t~gr2$IH4!Q#gpa_a60m<CZlR4#$IKr@L1C*vtSQ4a
zNWlU9;@WKpCo0ipsQUA5)F&j56s5O81)w>}ZQ5Ejo11z&f9PF=7ee9%%A^Ksa`dN9
zWrKp_u9~j-7{d(`UHVI1!~-NvzyEc;Y~IHNEYbXR$e)69juw6VA56YRq3{WNs6p(>
z@I@rT*D8OwH+)16ockO;0c#d5(sWUuf=fQMKg4*pf4dH$>7tGx0<G#`50Hj9e2;z+
z#F0`WL%2p;YLa1NQ&uSobz1e>0a-X4nAFpqMY~yoI_pVDh5-y~DjWS1ST}gSEtnJ-
z5eS8fArwNsde_}VfV12r2WzjRA+@mf)B(*JpgMm>gteGq#uWN~-69fV{`<6!f<ks0
zW(zQ!1Z-ga6k0Am#v>TRBg%CZ{0<_WSq#cI4XnqTNi+dkUpiR5`?AsP0V=cGN81Td
z3OA>Whf!qjV>%!l$=$E_>#A#7FF&`1)G8Sy0Wfe#K}TFvFm%zI7{&m%0y9~=uH&L%
zc=><3KbK$<GA(2n;J7JzHbGus!sz_<7JPl>zX=vILhB=k=_OwP{;rJ?q$t|FYL~?*
z(=`x&N-Ix-B<m9?fI6$u3#w}M-&MV8x3_a-T22ETzu;jnurv3Uo>1S4M!v6azX6Se
zQ;<e7fJ5h$-}<KO7J>ussxc9M>0SLf!`pujN$<D1@J(GVqV<ON`qCSRg9bdE+MFG}
zwlw)`<<jP$Tr&DEl}oXNJ9ni9Vdm?F`!;pa_k+R+$^|QRPRHw%J}AdvUNqa<Bh%fb
zk*i%oX+#4>oyGbGR*XXK_!+zcB^=|Gag|$wjrkm)*Joo6<d-0Y5A+q1hPFt{>TQ3C
za0)cWNKB`RO4_`6^lOW<D^tBeaxR;Ny+Dhlks5CnAkAM63ILLeFrOs_kb=BaLbdUB
z87Yw?wU8RJ4Hlj*d!0a4$%sn%^3zR|7>iOUk7o=}QEH2<BitokUFKRQBy-AK58#+d
z^lHRKy{op(rVG3Y+>_-lNSChe$}N9xvAS#H*@mffkNvJr{T{-QV_l`33^W+|R7mmt
znsgtq3NFSpChD8=n1FvAN&DeAra4FUdQ2it@^qj)q@W}R?AzrCaj1fE0Vswn#My&j
zDDIj+YBU@cuDO)TCI<gbE+_KN>~g>&bpJaCV&BFaYQqo8DHj_^sOIzcaS?yYBMg|^
zvls))irlgYjMNbXrU$x&GQj=sn7l%AvFJ&WyfRQFlGi&v4@aEE1EAu?*bZW{p53ah
z?siE{jH2bDnt&%kb;@ZUwta4lyi`zBceDV|8i7R?l)YV41XO-UYNUNN`ePFyK~U+T
z)F4QfdO+``?txlL-2NcxAo+h@!h<MOvqM-Sj$o&Igaqrq2|+JUO0%lF@=u3(fj+pt
zgU;Q(+hcEQ_x=#zq!MHClUsr`Bss|~tK*RELNH32>)kFzmr{ryyE>GdKxJ6=2=qz6
zitPY|aA{1g5O=%sT^%{K&TjcO6iO~2HCAQoHZA6&_e%iBMMSQl>(GA{sTYr;Sxxqj
zCPUz1<>Tsgw8;(-IOKL86j*f+s<OVH&*#D9XEA$7K<GoC?3IxNpM+9hpid$-3r^|2
zqu9N?(iVh{c%@O}Ua2U0Wffh;nGoUh?FeZ&M)yDJ&@u#w6xd0)>z>JZD7Ge%D=`O2
zX)_cr*OBoMHEj8Fz*v8ki<X{5E~d~aeFM$6+%bKIPS(+&ffsn0AEL)Wnn@CqBypA`
zwc3313_o~xnDRb3%9>`m0^O9mUDTl_#2mOn@+hLwqe5+a@tO~+L`N?eqUp<DpFbZH
z82ni<O#kzTML-=#Lx@M6f{BCN#~6ChW?6<1@F@|gO#OS8sF{Bj2c6MD0_?>VDU>;g
zEBLt3CTFWn=m0?u<Qh>ZcEfzn)E-yaMwwx;n=U7S<scOr|6bLdg;0WHC^Gj^MI5Hx
zVb90|gru3^j|5X2ehyc*xzo2ztx98UTC9KHM7$S@rAt9&fK6D6(1%<Q(rUWt-EmBM
zjmP@KK6af|AuNB_LuCUpOOcH=lEj=3BVZbf1DU93Sj&ozt(igccgA+0SHzTI8MbPX
zwvs%g9J@lfT&CU{&-`I5F(w{OfgEMs#ct0C=m6nnHmBrG+INH`1o7a9(W9Kq8C<H-
zbHE?qR_U%qlv8l@hdb&ZEEhxKV6H)#zI3`20!%f;W{ZCf>mUidAnEd^?oxeY3!Y6B
zQ*JE#AmvJnU9@>FWc`T>@+qT3HSvSNE<}%}gYrMN{w`<Je@#A2U12$Ov+i^EACUEk
zn+-C+lLFkKT1}o@O)jopOuOyAo?QHUN+%aTx&M3e%TxH*)wAh$lglfA()d{Y09eD8
zDWomn4cdQw$B!acd4vx6ROZ1(9HAdt7E&M2R3ywET>D?56_FMTr4B}tNqxYk<ej>e
zfT@^&Ms-VF2MRs#lvcUmUi*KyR=JyQ64Te}vrE(}%k}nGYZbu)N`6cjJ*4~`;{ksJ
zZpG~9`@eBc3W5ltSwEXT-XY7zX-%`*EbCQZ6T*MdLzYKui<k#!=F~XbhDu8HX3!x!
z3>xycK?yRC#v%y?9pu6&wbR{D4%_L#P$C@<%r~vyKq`oE0kDa~t}=Xy_bSpJCj-pR
zwNG?z>KH9H!cX!ES0&_WgyV|g+;i@RLNvDs0K3yb3LGXK&Vsvu1zdZV8|mD|&C4LV
zreJ>wzlq0PX84i@APo3@+VtHh;6oXmLx~<U#gjA`Xdxfa;6TK*V;Ny|nq23%kilf{
znGI4)OHWfvfbpbBLD80@Gl>)4hz&hIOk+p$F>a203K&eDkz?UFpv<GUxNcJxcXJC&
z*`Lw?*|kGZZE18fJ~UwlZpM6fG`<wLb7p_y)HHwav27N2^;)I-2_Qx984C7V0VexJ
za(rt7gc?iCZQbp+>oGib&lo7alL)ZqM&A;XZiKy2j0QqV-5W1pLHzH;Xy&^&Z0h>*
zCSdfdpGU!%I97=jz;y@;3T5RXQy)OvC=zYkeb=lLL+No<&oy_^9|^JPlvA@+*L8o!
zIU7a=NG0unB>55!uK=mF-R{O;qHr2|0K<nUB8F_819K+Owr!JiY}>YN+qP{x`C{94
zCmq|i)v=v)Z0qG!o%8Bd-TNo@TDA6^V<=n`O~l_4LGRWho<bYkA%fXkZL+j}ARmo7
zuYsSq9O=^ARJiw!>{IrBm$&|Lc8VA3aFl&l#c7n~R>R#pIlH@KUY2KfS(@!~3{-g?
zgGt{^qq{YWMnDB+oK?h_X9IX^VS4>(%>?BiQse&i@(kJ=GI<Hq4_e{MFR{S9Vw)ag
ziP5J^$v1+`Lh;F}UD!06xS1N}^QQe=w<VyV`Bns93QbK-Yj1!SNb9!kI&X1nkGg?U
zjh6OZ)Jn~6fc9|Hqa1*khCQgtwg)T_hjK4DR|$Z>{c^)ouQk$#(gvK29PVj(BOF9w
zy4(<oZ)_T1H;bZ--hD;l6Ub___&AZc#9TI1oXI7j)}g%<+&kA><_v<ygL0~ILh~H?
zS`C2BWKrnWMEaly2PAG<&d_ZOD*Sf#vwWyL$1I?4-qp%KZ9;5ib7{mYg?yg<26hMX
zlKuZNIw+<NKgw2SM#lew)L5Ar(}x6pz8k8wbsTU;(fl#qNI-js;3vj68U7{jx5dtJ
z%9*JNDxw3+RsW9lN^F-Iwf^#*y~yEel%c0ur}`i?;mqM$x%NGQ707WRpYi$#2b@ec
zB3Ka2h_$ADPo<yi=;!;nkbQU=_DfgJ*6!r~W{7Yx;&i#&q#A4!=+)2r$%GC+)&lAb
z&inn#HRq6fT>O578%NI=0(!k2Q8=;2>rl}Il;|rVfoz=g)!nbJkLMaI8tDuN63fiz
zrrTea2;ZKs&uvv8D$1R{A4dv1y&c}khnN$5iTy0sN3WvXnwKrTmxqQkpqbZI6>1a_
z7Sbn^`0VHQax7(X`Z*eMDqHT#!9V;yIBbEoAK+9Qv^UK)Xbt@WQWVzU{kmPK4gFYE
zzwNv$519q`T<c2Zut_U*W}5EanM1CgCSz3Ea`yA7bAK1&>)g)S6TVo|vKibqy|`)C
zDA}~AB6aqmpDwg4B)yf!r=x*gM|O(2HfA#*dCql#mOk(?cNaK4>rExP1&~LHDCFtE
zk3`sf?IYfipx|$t+)V3YSTn0uc)uWOjZP{WkiZ2(-%%S}jduFfnqJEThkHO|3YX=s
zGM$#&({O!pc-Dt&nO)soWlqxsoQ|q#=bVNzGN+7;pVGn(@S-I>Ncx48%B&z^>fvIz
z9`0+}Jz!IEzxHwYS$Z~;3P|V~c`H_0FWCF#LAqcY$5ZX}I`@8Pjuw=J+BR+j?@H>x
zx)g5b+#OO7pwg)LXqyNEf{G~p{OgBVaAPIS0Zb$q{@J|EnrqkJt`98+eH@+p6h*6a
z!m|s0L^UWtUg-h`KZ!lF@d!?5S~AO1HcOB+DmSNfU9kZn1h&my0x(%vJYRYcqo_A&
z&~@jrvEagqO%9d}Qfwl;Iqfrf#k>(rvv_8EKEK>YC(%Hsz=dvtGKGVwnM|^G>#XS4
z^9*PehA-A&9;NcGj34J*r<NJ<5|xlV*qY;(f|@NMfB(|-BX)>Fa?n1F@9_Mb8|WV&
zRm34}U6X0t*y!*r1rQZ>70$Leu0kISKugbg^G6#95jfjT#UT)>vMmZMAuPo}^;=5E
zmZ7k(Ce-FucZdNKO;AODg9eom7jPyA5!Pu6q0;cunp2$@!c#^qpxaI=+o{?s;)JG6
zfvn2y+SYbXr&DR1eJ6pr(@>{S!hgR46JHN&0NGU-gd?L$0w^f;&wLFjYQd+__A}tY
z!kdY3^C*<Kd6X$zxy%W@K*<nNi4~`>(u#Tv<=A#q=?0KYz0=M<At`x{ry%5j`5}4<
z%@P{MSWEwQK7zogmtg27msIk|>dsLceA{<swQ@=IwBL!uOCbb8C$c7@??S=lRPVwW
zoo)HP$~1j60p1N3W;*z8%r5U9)##0W_W<Cszhg8jg=a%aI7sQ|F7qI3h+uJzAlhgG
z?{9K0E6T6csUFxC(P*3_X09!uT<K7f#s*fdD@Rp^1FNH<9iJHvND=?C8846)b>Iz<
z6Kd_*kZE@!u>CW;^q-O9L9SIqf^o<o+Xi{I7J-&40~qdF{6XrADh663gi~L~jV|eY
zBM~p6C?j$KTc?Vkpg1v&xb4cgYI#e+EubZ&+hP~)QXbJ9hQcUYaJ^~-4aAjC2+Y}*
z;iU_YgqYHSlztc5cdCdVy_@lz=sbPkQ<sI;QozYS5+?dXquDD0GGsP}AAs2|V+?Y5
zD;UP-2%xqFgk`7FHu2(A28?%AuZJlSD%y3+>xXEf4R8Ir*5n#6bkpxJ;Lt4iNw4MB
z>X4r}9+eZ?s*C^|s07J(<rk{gr8Q%d@Qncpo7No8Ax)t^J-7aecV6s5jkBLVad~i!
zKJ8Zw9tPP(9_Ui6i`rr`RvZG*>vw1Na4PN)1C&Cujs09240gE7&c*^8yEv#6t6fx~
zB4DoeBEjjg)iOj!jb(0Ys+pZ!?Kz@JqDu|Wi+>@6z&|&F2d_F3!$^29wJ|u*w586W
z8O|uF<?&Pa0{a}Fv#Y5zNB$Wxu6%}E7Ccs?|AAs_{Il2LGvpP7+PIACqTZU<T==yJ
z3xGnHWAj)vj^r$51S@+pd|Ql0ZDR6^^fhW^CWJGg3|9ZQt8uM~YBa&O#mcy89Zkld
zBP(F3ClS$ZC@vs16?iP%aySW5rRya<6`tteFt;z5JZ+H;+FSX@txElV`amR_Zj7Ia
z30F}&UsSg5x_6O)g>8+5ywR48uKhHd7$A<C%DhjFLP8WBgKtIvq;D|APw&uiUugEP
z8lT^+UYwhQ^XTpvlkPST>HuL5`5%esc*^DhlwQQAW(DlQ^7=xS9^A7Ei~FCRLQr+o
zh7K(TC$x3zir?uRvrl`m6ZLZkN19RnNUA<UeC6)z3cyt(S4mfacnRsix`I6aU;uKb
z!48T%i!pnl+6$KFCvBiia9BCNbsU%?RSPP(^N)aw7`6m!C4gAz_lu&vOv#6U6Q4bh
zK?59QUgrp5g5r2&noG`O%A_Mw=t7jGH@q`5Xa&1c%r-fl4@=+bsyQU#g@9!At~DnC
zb&Yc3;iQhv0rSPa>}n0GA(A>HLV#@DPoLPOBRG*|sOfI^PowR48|OdD4GE7SBy-R_
z@}xzQg&&Zit!57p(B$2n5$RsnzTK8}mRMq@?V2Lm4I`u27M2NHyA}<8<h-Fs3T29D
z?3cb9?nt#FRTo^$qglU*;_n#=BEt2ySy8E?$Orob5+4Gog0MZUQzNr!_5h!C<%*+_
z)M3(o51cLa(3)5~nKp1`M5q$Vd5kX?>D?QT6~ykBQhSpgugD~F0#IR$;ji3^mZlML
zRBVKkc1fW;CUI8vpo@CPND{Uhq=^Y6p=%Qi3{$_$b%FA#kK@NI<)rR9KA{_#p11?9
zut13D>jecZWkBxvo0Jh!4FH6M+!HWEE#q24WYb~!QBsoW`m)Tl&H(~z;NgkxyX`?u
zMTTd!?Vo{*^Zd2TeOeV}sZ6O5QAzBby)Vu7ETfeDO@CZ;EL|A~Us%PJunpy5RPYUs
z&o7~;iR|i~)RHo@x{~&a5c7hQ-5n`Ps%Wl0ewEb3;5KiX?EWh8_X7BZDvrP*g#rX@
z9SM<$7skS82)=`}c;=WXboH!>=A#xGdbQa$;E-mw@Mp6)J+7WTF@h6o>;1mGgh+Pm
z8+1~xrhN-L??dDK!&!Ftp2$-oH{TRdD8;h`=@e-E>Ukff4dOzC=bdXYsb;OZiPO6$
z*!4TCDCwSp`<d0+mH;!dTOj>!Rhb=;hlU=d+ueG|2h&>k*_$W?3^5lP^%Mk3eR-kW
zpEjZ8@ClkDXx*{`>v=`tuCf`qkt`ajM+&nG4&I;iO?S)S-l;ky_>VwH1ZT!_1>OzX
zt)@M+NXWbuOFx7pm$F8MPM4rCja$672mM3SRd_23k6c=kJiyV?>3wwc^-VQx$KWMN
zQOc2(UC-8{m%Sw%k)1{X>jEE2gKkSO-K?n>vIVEy{;v0wI)OA1W+A-<z6UV*;Pycc
zD5XH)0jLtbM=RHNM>x#c2eS%9i_iih<!<k+)J@gHr)_h^4H+Bw8X=xH{LK*rc=&iy
zT(p6B+Txc^D<DRo(sKfrNh^vgZV!^3idw$<PuJW7m!n6@ReoMLtV%A%?j;+Jats?z
zcjS>bTW#F>CSLt(M(UL{ZeZX}^_iSCQD9=opjwzds*7hZxN&~(lkT0Uj_a=3ASZDl
z1vqj6H!%w287Wjp`T8aK5;(lvs{iO*@?$~+=s;L<D`2G9KigylY<+DRrVIM7zeV5Q
zPsaWy#To}tHFL;^wAo1=e-1M|g3RIkIZ;Y(H&gcPt^KL0$+WMrs%e+6?J?NM*0^f{
zF9Qe5<BS-$dI+TN+V(YC?e5OukrOkcQFsu?Cxw`q4wpFDS=EvxX1Uoai3EaoI#CC2
z^pEWaTiF|)pl$;g&96}a9plIFsOvganz;`DR}b}d8I;zI2?{e(c`J5aQn)ENvG|11
zx}eil(%v}L)W78SK+Nmuaeck~@B5#u6M^AOHf}nsG%)TjE-tQg8tI?a{z&UTt&gO5
z!VhF0qvm&ip*&xt29Ra_QFC`BK|w~DxRP;YTyM@4l8f20H+4P{csuU;<nX=#vsUkl
z%1U{)+=?&8;*jY--^u>;S2O%Mei`+3X#m<QbB1G!*=;E<mm#Z~BU^tzbOA$_lZaFn
z64XL>_Ff(z+6ZC=!0|WdL6GA#s%;j-EWSaP*DHM$_CBbE)uV&MiIEcWr0(|H$8=@g
zp9rRjBe7mnNSB=PriYc+XAFnqbcVrNR<h+aT4Vpcl?<YRtgg?;_*(ky_alqz47@E-
zYhqZ1jgSbR5UeXM3}HmN&5KO~!SGxM4YkIZto08+gYQNKfJc$MdFZyg-P{<mS*Cn+
zw0Ec7GKUIxu8j<-ZEo%$1##Z<M@MZZp*BjL2mf`8yhrnTlx_7%?O*ZJxscW+_EW;<
z3GR>mbV0yTo1BbW_lTd@2KgyNWTN#SK=;FW5c2Qb&lG8#CUg?v4nLdzq6DqJr2}@|
zlzuT_%-1$^fQydDD-4vs;u_?nH_FqXn5MgEw?6p+G<?+I5j!RD*P)>u%#+#BI$v|9
zXmh%p2E$vao&g_J88tE4Yy-Ml3+l;$|3DE^*9eqTkdPE;2;Q#*B?(O3D_q%Ov(@dY
z;!8@Wuq@I8bEjty#49nq(C-&Ib!2&^LA#e2C1S2=0D9FM_xL`vnIFWC0NgQ11P{D7
z{8Y1!Lw2^?gMetl!mv`S+6dJFYps9lX+HU=QdA`g)lK&Pl^RYrgfjR$$7hAUL~aI3
zh}AFdTYy5LnCibxNX~Q}RMiXXXgYAgmj%-yW=IedO-Ds!)?Pc|F(>&Z_KU`v_-wjO
z=#^_jKz9dJ57G^cdVtoWS`r=B#1|xzG6j|PIP79&rQA2=r8?P)*d<{gj1?m>6Evj&
zn<v#gY;dbK1Oj6~r5iY!CMlS2L8Bj74!0^0ucT5S=KBegD^?07`#{l32q}V2sFnx5
z*lWZdbtTA4`>8{)P`?s*yk+fReGKP$13gMTU~|MlVy*tHVLHUgtNyF5QeBF|A_OZN
z!gho-%VMJy&s<q=3O#m)6KSF&kYNu#e!!26<Zs8trv??Aa77~Xj*S4q@iY?>2sB!;
zv+cV}Kb|U27?KkP5{$bBE1<V3*<Rg|FOa1I-jO_(^<7L@#IgV(>(PAWq#zu%8-hv(
zK${<sG7Er6c)QTLtWgLL)T1oJq-lSlG^lJ`y3Q8MHH7QWy!Iiu6#^U1QuNq3JA;y9
zl8o;5?}>FoQzyeXLeJ2|AC^5wMba%e{T0)qk^@>`Tt4mbaX-1@zcB3kgkk6if~iJm
zdGbXd8>qNi&Z>)+0Lywke6-d$xzgAJ*jTcd_0OwswAgv?)$j6y5}-Gj_V;ji!XlM(
z>8~fxgkgpgLvz)*S@_on&T<_bj5gdS+vOk-{<dgQwRWE+aevAhlrD=}2;?SDrF(v6
z{mPoiUQG*r?mf?E>rIOv>Y3(x{Li%uJ_BKdhV-o47u^K<M-5cXC;qEd0{LSSaP{nl
zp$J;zs(R~(Dzv;Tp;Xd0ja_&v1u10C111b&32a)Lshj|I*czMw1nbxbPnu;&7BE){
z6M`6?^`r$!#RN=bA+zhiPK6V(KkvTru%<8&-3MfA65}$+I7*A&X)i<m9?~_>Qu^=k
z+3#4rZuX`MFo#baTtv*Uw58VwsOdtXfC>xP;+;dag-Sv!1RdT0>ygNyK6{dK%*CWl
zz?-Ua;y{au6#}w@x6qty@q{2uioqWNU$Pvpx#}$KnJteqc9Nvk6sBq3>58%bOt=d;
z!2K#(e+2u?GIDo7w`8qDa@3}^Sdv3VAVV8BY}O{C9MX@3RH|qazBXtDRI1r;g^1Ds
zWXaI#j7!E^I=8DuVC7jnq0GQDmJ<l^&2A>$^(5YUVp$!gc8ggG+<Bs#I}_Z-JauDO
zrZHSh7`GO>)`*gNQmTEJ`qbi-%mwKRM__%hOQyE#ByEuT_dF(cW+V7ufsbLrn4^FL
zR4BtJ-I@@o>o$u;A*<B@;j(h8PRBdsuy+GH6wPBV!9X-GgV?|yC4Yc)2+U>(6In>*
zC;ZAqWJmyD<goSE;&JdvynL|Fz$Pqt!FJS%k8S|cM4`L@a}fZ4Vs~Y$o51OImqSLK
zJxg>_Xd(h}(s<A<`>oR$VelNLIwf}jr{WY}bKvpFtJESuKmQ33CMxMf%e03{Y(}Xt
z-EmrrKYANLVCp0*K!DSg-Vf5lWlME-)p2=+oLx6;6pcP$r{%H4P-)2an-{qr<?3t)
z{SwbnbIN}teu}YO|JB}+?@0IRTJVumoqVzfHOybHQ9j*|%1^*F%srPfVb<V-k#B$}
z96Zfa&<I9g9*h=nE+BXo6&Ey6gqBo2{#Dc-*Q^w+Ook8t>fiZpk}gw>C`swCUP>xD
zGR*(S4fydk5D5o1Ce5vR!Y>CXr65~?oeAe9O$NtSsu=VDQ~l|u-c$i>ZJt~TD*}uN
zrnN+D$4Z6^$hCBPvs;I_yQ7jLpkqi8CRFe;X>jwFJjw#_lsHDaZ`9%|cLXDr6}zTi
zK-q<h`fRJ8N*A%VsFaC4M+L@~l^8iU)I}{@-a$@t#$3?5?ffOd;)CLH!FmkeO-r(9
zC(Rz;v%JI1z7Ou*AF0qPEg{B5k17`u%9lB{TvV(DmV&BXw{qJQysQz~cTqeMZ``6!
z4<JOT%{T=pQj0leiDK9#+Rg7O`Lm+_WnK3O3?Ed{CpUXeppKuCCt8oa9nI<M8qi~Y
z<Tlk`8oFqTlWzdAfXs`=%S8!`UrOX6YBWn*A-rqbg(yW&xOw@hQ%5F2kdDm`kxM4r
z985zYg9fTt->VK}@!C?ZKxzwW78XuUj^1+9v!Vi+{xP%%$JqDk;XS*_1-$O!zIbVl
zr9LZ#omcc+EyT)sDO&H3A-x&dIU+NS@(&15r}7)O$~kcCKKvCsMCO2e*|LsQbPR6a
z<gPwTI)Es*y7_Y4Y)Rk=ZKZ1c$X-tq!QcN%v0bxn=PgBUrEh!JsXQ$2#yVTv^f3^S
z<F5zg<QWPKt^vff4p8cO=Y!(F_TQ&dg9Me_t5ln5*<HWj&?vAzjXNrL6^Sr$+|dMT
z&UdzV#I1{fwvlE2Zb%xH6s+=)8H0dL8(Ap~iN0G-mMM_y*I8qh<T46ip_COPu(zjD
zT{A?wp9;kv<$IC<ARy+Mr#W-Ye)Dwp7q0=B%}^9mjMe076G`^(5z(Au_IJNa+Z9av
z_qB6hgQ<^vq|+fTB!>A(Fx7%*<K;B5vNxA2<<?>71mdDQRJ}5WJU)?%fyTkF^YV;m
zKR*<ezNEwx`E(<8u3j1|0r$Iaq-TyAJIz~zO9y?}Ro90N9}kg%Ht7oc4;=BfB^H3u
zKP?WQ`x~IYvN-qvTxK!%HlH_WBb<a_26}#=?@n)yF`ua^-5;kkyod&0tm<lOwf2h>
zz1>AxFvh*AON15=IhXk^UkrJx->vs!u3S=qjoF3$3f`{>VyoY;7#StKH~;^M`9Bxt
z{|XA3*+Ezt(^*u0_RwZ6JBLMa#4r3?l9~!t5NY)5cYCT-;Vkqan?a>=>xwZx9uInt
zC#NSckTbybMdjrxsIu~vNXet8yLq0)_SA+{&<!b*z_&-sx>x7Dd(frU3yY2%zP!g3
zo(bE$Bn<JYsdvkPejmyd3hB70avU;SW{tZ$RVT|Q&LP(MH~=MzmE>lIbz_as*Y(EP
z+tn77OH9^yk3i9MhB2H)@nlB-^Xp=5{^8}e(2EolISKSOT)_aBpJ`N;L^=cZ>?a)L
z>iRLUHs9)#PZ^dJBKs5>qC&&3huWM-hDk+SuW?tSNng!`OcmKIKsQlD_1El{=y`=1
zU*8h_2^K~a1t9jh#}GbSWgVEY+<(y_g+l`)RLDGkJ7PY+P6TdUA7y<q+|EZzh;=n9
z0}!=@ox{N~PMHe{Sv|oxmL(#yOjvhO7PW><;_?2-Rs-KfL>v11qbP!ADio<gfcI};
zXDOjV$kRN)Buo{R`Fph74r^+X(mbP8`3%fQxW^B^0!a01*j9aF4kJAf8mFCQAs{Mr
zQ{5-sQzJ5k9kF$(x2KiFr6LzTtdOI@ooVQzsoH?ByD-CfSJPiP-P}XK{d+5v-0RR4
zt;)<6k!8+g?WSVqOwcMyVe6Q0Pvu%Eo4#$eJ8@Dic`_ERN(iRa6dzgU1r$J`E571@
zC9Z)E1{guyBL?l{zE31ZJeL8N24dP?72@GcvX6SGHM3ucf*t~c(blWj10}PI5N}>S
z{dt+Jxile?k|UIjis7YZxc0hjrm&LxUs&S#82KiC^N$yD?*YT|`KVi+Ivr9gJDe8)
z_i-u+6X)4YW<ptAIub@@*NNle=f6Tij*BSk17Po)*1f;(m+M?nU`cq@lNC&*^)QY$
zM+kgvCfEPqV9;w~Qq*TvEod!D|57wLDk=8^MeZM%++d!xtAeWIM;dISW*W*Q>0h#d
z!5|#gs?xRFtm`1Qe=J(3Z@hCq(31Zh1-aZli~i>*%T-44;2k84g0$3La3u_VGkLz7
z0dQ=7O6@4D13DuCc|&d*)h9G%hMF;kGF)qX?wt(CQLB7J*N){-7v|b!?Ly0j6H;Uo
z;dP1U2BS6Jrp;+jvOx~w4ek=E=~Z64uEiaQrh3q@)U4^n?^e(_|IL;J?2-wotsf4}
z{_n4l{SGV65{<#CsRL-SHa*R(#RM{TF2H3md>uGdppH2Wzno{uYb>p+83VgZTC^mJ
zV<iTjwY0M~8FY_yd0gzMwy1jD1D|`!q`c-MJ8O94=oQk^nk+cgC`u7>GUGXwrc>F(
z7c5#AUt3vxq)PisY$r_)$v5nnS~Q{C9B;MkhFghQz0)c0_Y4T73@7Cu48^SmLjX`b
zi7?zWmqXV(W6Um%EoK~hUJ1~&=-NyTZ7&cS>F-PsU<8YQtzuj{_AC-Akm+$~N8zQ~
zYrw#C{!RR0qsMk)z^>^_u@prERct*!Q!B*b?%31=oUVVO4{~B-y_fFXSf6|49b=Y|
z)L+(=8eYR=Wm?}bIHD|nxuMFJ86c=kq2#|sd;j+=5Vw(}hR&}~-N%J-Nq2zky|xtn
zgu~F<X`4k&qz_oo(wf8CI?LQ=MTy0p#?mVG2)m)t=G?c1J9e-)pq;g_5PdV$g2H3d
z2c!k-A0Zwu{~PX5QRR%v4CQ{J^Q*bbP6gCxE=JE-w!ETY8mL1NH`I5I8X)jtC6<};
z<5#o*gB7dQ;YXLp3J<gt-uBv|TlTlIK0f)|D>_Fdew4@c8cZrUSc$~LzOCmT)CXbI
zAPqsAzPy)Dq0l0>XM+u}E26Z0T3y2K4lm}mljq0#<mqWNg*^T`-qd>_GyxtA>6Bep
zG=56|<;XN%sTrjomJ_&7FhH4a<nzF%RLd=Y{bjqybX+J6?tl|pw-*HjM$30YVp*^}
z^CIycoH*Nj&C1DMq?042l7Zfj#I7Eav(J1enG;PEm;1?J02qXleoxR61PAdt>DVTK
zQS@7z@MC66fOn0qlKk7>5-o+4fzCB0Z<wv1c)!*cv*4sQpC9ko2>{wkaw?tQYmn&q
z9h_K4LBCzBOPmv=#F1MPCT(aGF2m?RuG%tk4Y%b=561oovzguy`M74<67T=(9q<>s
zMY!?T8!e(~-R4t*0fUMq`PaLc01PiRCb_b?%}K098%J}fIL-ZUlB?Ef$*k4`nS9&g
z0Y?6Oe7@FQP+GZuWPrC~VXYb#C7aFPY1J?$NC5prkv?py-3rOLMjYuYF9DX6#4W(x
zk&`%cCOkY49#`C9p610~6LTC8&YPUeuID>e*@$vKF`oNwR9af9y2IGpP%))r{HPSZ
zA>sVRb0Q)8rf>7*P@R)ed+-D^_brk_YcQC%=ds-btj5La3Frc`ttib>n=~r4DPKY|
zP`&Q46}*x0m<{mKKgPjaY$)u;__~i>!g*eLFqXU$^TzKf^f<mQ#n!h-t3yB8O?ziH
ziM4yag(g}IDtgN)%L1<TNx)p9=yWqf=N)Af)Ew>Z&Q;_NYdx1Gcq1(VxfrUmHQ~W{
z|1QGJj()e-6Na+q0fA+~GN+dP-4>>y@i@`Fw~F?`oh9$T#ncM`mRc5r`=5iH>A%h`
zCN5UybYX-4`&F#|U(HtG<DhXX)F4MBX%PIFt_e(5sa_H4Mv<VR-LSgJWE?34ec0D?
zB5Jv2DQ`*N1p<5A=)soDEZ<=;1n^zKTh`8P(es?oO+w3B{_Vg!+XbG1@);B%2(BVS
z*ZC4o0tM*qqR9|Mg3n&j3Pm48@Qn=uO2Dr}fJ~X=-}89-u=MpG3IitAxk0|LT}c3m
zk)8s>wpB3#=6xs|HOenZL($k%?hij#q&&DsWguXT%`ixbi7-sU9Ia;rf}Pl!l-C#J
zTXiy4pb(=2ao>Yqp`*W51lydsi6wz1LOe>SA)C%`ZTz6YB8;;wGLKPI_>SbBmS~r1
z0J_UkcESg?Y%<Z*TdLO65`=^)+084X6Ye2|5D88SU%((75Tc*XTs;bvB6?gPij193
zYB(Dd)fHY@Haz`;iuMaZ^SdSd5Jr8!NTWr*Rh-nA-C|3rkAGb>?m|=~&BOD+%a_XO
z!GdBcm(j-rGCM4(l`M6P>CuLzC&k>30-hhmsmsBS*43kS+(6uN?)3#GEBpK9{h~=H
zi@y$-vqgj7d>gyajtO9FD!)!Wk<!(atw?_nI7&u9QKz5fRC(EKa5FSo<(-u(YE=lL
z*Wc1o=?+~jIB-z5@wtA^^6wD(ZUi1xbiBH9`wBoGR5tcXw1R7#1q&9Ebc!}-1A+!i
zt~fkP#OCK)<nV%F1Sx%uxbDsP-AJtTId&OenR3G{1;W##U0ZyeVY(-e@8yT$X8CbC
z95?5Vs4C4zcmiTQ5)YG)1|I!okI$Q2r7T8u83lh;C7*~!bdO`4veHyGIRbN6H``rz
zDM8(;ciI-Tp%?!7c1cRRC8ZlR2e_(|tD@)~JJltNr&%n)xb3#?L9DDY;<*I)wj|RB
zF;{hQwye3G7$c3>l4jr>S2I)9`|~Ttrb}xtQ+->@Gec5_R$2M;Th)1z)qA4BHDwn7
zA;;yd%?VkeiUxb{Zan30cWCKkmVX{ila!ogv(drb6(zPh%_ZfPX{D9b0}j=@v}<Ve
z+>0GMrGKp5cw5=yg7=GLryUo0X>si`De~!8uxs$tYpLlU>e?QY14lxO0$iscHQ>T)
zAasau2oHU|e-5G#`D4#{56W2mrSGU~(wzKet13E_As12l4vm4$WP3;@`J!E~NoywI
z8&-sg@QCbjli^iIC*ABz0d27cixR7F??*aI^Pnh0h~;G9EpRzN!a;UG&rL=L$Civ_
zUyTI96j#Tw=g%?_*L#sR8@PCv*FEaMKWf-k=q@jk>ze7yC&5H@QnQ7#H{4U1MDpiL
zU~9s+?aj@_Oq$ezE6&ddc&axnb@8Wi@+B?)-iv#e9ThsC3(plIz@|}G8^3^nYhz$I
zy{9y6wQF<p?(e@#;#p&Gn-&bIHS!TSE}cXp=UrZXco#sdZ}+nNN;Tnw^Gi#B-aYZc
zX9)$rZ?GnIINJZ^wfTR7Cq^!&{|cU%nf@bqg68FAkTpx^X9osPXS4w(2dKq#!UqW=
zioJhEQPpETciU2#qC_A&WsYE*7zy`(b6i299;0(`J=X_`f+aP-cSWdG75HD&c?E_I
zaaCdyi`RC8c}Lq72y#UVi7>*O!8JupyrB3=@2vOsuwz!!<9J6_T+);Lo)WW|13!B1
zBV;*(rt!eZ&Kpdie5RAw#xF*A`@_-d<6~w^jBPjQv=gs4fdUb^OQdOV3B^2+u3-OD
zePH@2^xD}2ivqO%BWPd$fFve}DybW}_rLI$$tnWYcE!PzgocE~jBII3lngD|@96cv
z=DkX2up9;JfJ6i?p3i;feBNX^U;rblD)=&Z)4j$pKsSI!|G_SGGwAEl(eF^{IZ8Jj
zceHir4-wQ2a2cBwf>HcM*LWX}UfH-~RNb1a{07kDl8q?Cyw|WtWBg^%>p`j7MP7!x
zH&1J`pz2p#eYR1d+j;L+M?Pm&5McO3J{W?o{QEc8U_Xe{Moim#YYQ*zsgwp`!~3#V
zpLr%?uSnCGlQ8c_WzFH!BMgZg^y^{NF@QLSD>*H0+WXH&X?$KVjVv<J-hz)k8xr&d
z^)CQF7lsMx)HPa`X5KHrmb;o}^KQB7!U1i)widq+Zeu73VsF|lr&N;>?7kuYf&cgH
z<H>F#X^Kq~P8_qSuwfgk?I7_&!dXtao8PLs9;XasQ4I3I)jtM}5Ug0G6g=#`nbW2=
zxy-{HPHMa?dEj5VvhvrDtlZ;!qG9S2<|qJJ9$~i`KdgHZFcU7m$CWySh7lG>!Z7D_
z-#Yp-4;6Sb?bNA)NTLv#6cz0BEBJo$VBC&T=had>bsJZwjjNyonSMVf)%u5>jpQ60
z;*p#a*FYGPj<-Tw;~vt)sAJl+PCc{>7Z|2PkXm)i<7u^9oTkbMzm5=hDxj_bk0QXL
zBQqf)_uJCO@X>}rR3VRg^yD*`j_%jtx6fn#%FXRl_&z~2heL4gYl}cAQ43#q7jxk!
zSIFet3sKAoDX_Fom{rG}OraJfc~R`JTFlYevK-&yQOy@iiLi1Js1K_h0l%*#C0JTQ
zMh-?Rq(K2GO)lStU5q%#8IU;m!wG=YUN$s1i@Pr}EbFdrJLTQ_kr}g8v9vzEK=wNd
z&t_U`biaoTNJo^!V1rv-6=md<G%23{LoMRLgdoudFA@A83Mf$CBW-{E`F;BAsMlgV
z2spkRXw3IviCr8f6y`9yPU9M(v#%J$^6y>Dxb;631?oM<<pUxwqMW6&R}erO6BmT5
z<9O~9B1O&#e%9w}X$O6LCy|g;#r&33C1fIsCkpJZ-e0uyjs?(QA3|JrHcM=1r37~o
zaF0}1hvcJP;Ws5Ye8(1mh!bpbmRr^Hx3vykaabn7DtC&m0MvikdM8-(`V`)K>+KF^
z><^e62_wE|gM1@KmWNm!LPda7UX;ras%GX7|7uLXF7@|{>q#73N8LjPW$jpJ+~TUU
zV{%-u;B;s%D5_<!sA;1^-^Rw>g@rTJZ8w&Z!~<Bda6c2g4tF^E8fJ2%1ZV2G-|>>b
zNfv@YV@c?9^cxj*izMU)zzj2;UT|Re$`VkcBYWE`98dt{n=-Ah{uaQ+%(Slo2g?XS
zOM{Jyy~5MVbd5E>F;rmzue|)iOX+nb`D{_5e?TUQTwezY^z@+hSPEg#ycHjkqRBl)
z&d@D_?%<uJm|0<;vpTxLxjpB8AxPJ;>Pbc(u$KDmPZyNYpAczeQWz4N@lOmBm~25^
z=Cl}mwF<41gnSN!89iVHbvf)G(sHYmrtnOYI+wXE`{;FOGpawlVkX3R*@1wOu$?f9
z3}VcHVN^{EWp<95#U)fXQ_D$*Z3F6rX5KmHgAAnXPGJbP!{3lY>Q<vI!%>#(^No_L
zjFe}3c93jVVFVSQ;C~63i^6$?!W0eB8!R<^?D_9i2e&Z|63u|w`??u75QIxftF{G2
zKBc<IvZ*l@yVml$Y1ZVIcgZeA(xc|#uAqZA{&G2sVMHc4wMOX)pNz1^6dzaBrve&h
zlWEzd@jV3P%hIqB>?BoCq?rEL5{yzY^0p^V+&B?smUS91+84WAZtM%lFF0Kx|E-8h
zt#m(EQl2yiZUKOJv~~>Yf_ph4GAhLEmhz`kkZ?IYvR&V&RgO5DbjmpEhK5;At&m@)
zQ(D^K2d&eTfwH{nx_|LV{jDCcmkku8M9lYV%lhSdiU6GFz+<$inf0O-_w99(5Kzh)
z)mWbMqTLU}YQFBFh+n10Tk#7xt9o%EW4mksWRfd292<a}i<+AV4b#q5Q@NNZTXA3d
zM(&v(reboah2p}$Ftl(lD0oo;YI&JQIM7dADElRMl$#b5`0EvVay7VFF;8ha5*3i7
z>9c%zEAd$jTC<}nQiM)+T737wuwoSIUL+`z<Aoe)3an+px-dqfRc5HsK>^hyx1sua
z>_R`6gbv_AvXqL}ntOUKS^aB~P0fB;-&@tCJsXSQh8}E0kKd+AmFYnJvYD9VAlg$T
zPpRHszv@P8-4{BUp5eP^d}hlkNa}huAl8mM%5mn0d1~26aN`Aj#~b&k)u^{r=7Xu~
z?|dq!-4CPd^WEWWY}g!R$}jPYgmtop#z`C|t`M*#)=yYi^N%i4rJtot)r<NAp9k_T
zU8j++RFx~;WPP*-gpo^^TRf(}efjXJJnJii04{)c6bWS>BgOXWQA#$Cb)@8hic0oq
zB_z@k80M9Dy=gRCk%7?Kr~$brP6Sbz^7V6+=ZDy(Zx4t}xoV;=2o(o=K7!1J=Ol&t
z6a+YD{B%CU|2*#HK`&@!SuKRfV8JV24*3}!>|iw1aght1=4+q6tcEF=%O2B^CTU<M
zwB5R>{-V%$?Bu^}oXYY!1>QVfsr$0;tqr5McE*f%?pjeW;3T3Tj&H!nJ9x9*>}#4s
zc__6g&P-=7OuZR5Uhl>G`qp0$37ZJ!HvwRuAsVa`o7Cv@OMqIXBC-0J=?(Z2jl^lh
zYq@#o5GYqnL(YvJZkY~LslUUyKbtc8#`;ykIVz3F>G`i4#bf2+ILqtm$HR)@4Ib5C
z$LS^KA(jv(x1Ju%T}>A19}KAmI?X?h5#e%zdXiEcSgCkQ2LG*;O*255ypO$C&<9YM
z^a-(g!5;2q)`2|>wrRw?IKyB3>KfVsXK+NTSskI|8BPZTnk85kaKzJfF|ep%3Y7m`
zSYsdPX$$SMgjc+u0anQYh70YC4d7EuZSeK`DQvr#nLD8#kN7pWF9X$XH2`9Gfjc_w
z-G3`mh<%{)+-kCX3(oAIj1bVzq&8s+Zr+Cv%G8ar#8_?j%E2}t!isK2zuO8H^&H9R
z1CSYVp!K=hZZ%z;MIKmeKUCs-iIcRr_CRw6J_+1>FF*B-n8`nSzkvf^!!!Tq=E%(Y
zpGY$^3p-o7k{7T@I)orFJAhC^AC<^x(Ottsjqh=BVYm}&@+IU|;MAp_%iH6@eqa#W
zpO!uOy|MV9j5oh+3d?BG)ZGh};|6Mlw$a%5_lzcgrd^!<<j2f~#Y?yH=Z;J^6%pt~
zCSAOJeqJtbCZFdS;E!1;EypQL>ML7~5!}>p^JqN2EZ}ZZ*-RTV7m%j#ku=_fqWk+d
zh7pS{<nm34BV>9e6E=d^t?APXgMva{PHz4igA2IEiRb#-cw?g@=4?nY-Ol&r{OQHV
zZL!6C>*kYRc9gC;GOcWA=u%zbX3JMukXgGqyO!72$Lo2E<$CnSb)~bH)5(UV9p+m3
zOin1B$`v!!K+jr*Eg*<3QObP28R5tqFK5yZR8PA)+Fiq;*odpGGytG;9u^ol*mMdp
zQp=wq_XW)v;CVtct@4eKh?AD-Yka5sq5w4cd0%{RPe5VUO%oRf$hs*$VEJD8q$s;_
z`r10=kU*FT{_P|RR~sII+&-BSY+{QJ{P+@H&nRU2J2|8I4!~^6+{m4ddFieOiUD`X
zpKj&E=AcfM5=R9)V!lm3@S`+!#oSe!PXNv)&}`<?dX$nYcl^5twhiHHA<HbRQEyq<
z(Vh-85-ZB8Vc44Y_E>({qmBv`U?yLp$|2TaK+mbJv_{^=QaMccDMyV_OvcTEkg+>q
z0CE2N&v^yBJD{-PW;uGIwrz@8>{biCp5D&9M6gVug$hwy1q_|wB>UX0t<p8qFrvy_
zN8cbk*|fC1uQBQ$@GLFfQq8g5NyX`JI`dxx=G8;@$4r-5E=AFD^Q`xko<AU_loAB9
z&M07TkIdkgJ6K_)Ct5cUFcx^b(JYufHOr3*SgE4{0|0#PDtXji9Ig+FibG&7<>NUu
z*ST}(>01Js?VukJ&j?TvAB5%~8Suy_(gKp=kCsjP<xVq4StvpZkR^f*>&8D0H5;}+
zn=qmOmWbj$36SMXD)DN%&S6m<Qty@BN63b%fFVCYZMOS%*tsQqTLGqBTHs1)+d50j
z2K&)c3qTY9txj|LJOm-t26S-C*~jx-K+IQqi*8FB?Hp4d%B|XY^SiKOWm2bp6R0yN
z!QgT|eX}bH;|P3rmTZng;*Gy2dWjem+oqt2IP6|lvl6mycn>eqJnRZL{N9;T7X0@-
z3@p%%TRUAL%ZGh%EYa4nQQP$OGd+s|J%R#WH$b`<ADpRgLoinx=ziO-=G+>XXE0P4
zh%SMF#F?)389v^6-CGZ+2uRH%2}K2>WXk2MHpoXUX7`>(SckaVNsQeuNh{6ilR9wG
z8pO&uk0yXM;U@2X(ptwg4~Nq9K-2=wZ;-*e$L&(XJC2aFp@zI5@M-p)j5z=arL9}_
z25@?m^iVNzqHhM0#89}!_!r573e?eyUJB7qgEhLN>j}<WRYTMA&)>I=sDdTK$-z6i
z-$5548NmsANgXKU1Lj#s`Rr6?*dMBrVM}JjTqL+}J(RVD?M4d5+LON;nZLaogYy!2
z)__TGTMk1WYtWLx@tj<^VhANSaJ|9w*#VDYGq6&1)G}LrR%Zf@YECFOR?H(%`S;jn
zB3HO>Vw_Y-M67;ebx$D-Z=O%6(wJE$#r1Kx*(;B{!*kMsVGhPRsA-Axx>GCXo@r$a
z5^FteeL=!YquyBxIFNSyO0YnbUpQF~A816ZDV(}cGr&ryss`!NI_2Jlp5y0srT_uO
zsGvi23}ZT~p~?O1MF$}7Bq>-4>$w5$p{;3xk!HRw+Ypcj@cweJznk_*g3wCyQA4xm
zb7-B>;iN#HSV`si#HWm4&&w$`XMW@dK}wCQGaO>3a32F4ySxGyCE!;wk@^}Nl_EA@
z)^e}$mUBQCY^Uj>qw6fN9SyX#Nq`c(4#-1~ZXB)WQUnA!LVQhsmxa<IxB;X}rrUZ`
zt}#ma!dGpMovO;=jlle<hqH|Q$iT4KCPUI&=q~Uf3_sjvK|br71w9nLok^G3`>y-V
z%7#G#15YVXW}-1RIB4l)(VkTlGjM&YEX=){Z{&CNf8M|WAr!u~16E0!0e}TX@J*q6
z;6+7`+%KUHwIHQlN@X1<FA9#2FQ0lCZAvP;4v;@BP_{S!T2OChDZW|Il10b$7vI&Z
z0B7-n5%u_%-C<IR$T!e%3_kQdn5Bf6U)?2}JXNK&?p<Y4pssYqTeahMm|`*d9UOTX
z+;idJQIH}xlm8Y$oG;DbQUF4}guFByN8b9i4vJ?kXR{a>d29A$t-l55hMv=c^C~a&
z-GIwF<vm|6$B8l*lA}pMH0*y81A4e|K%`ZFJMW!a^_tAke&e{3*!{zcsMd6`9;TR;
zpG}5KCrJ!LvpndsscHRzd>y1F6K#r}76vlbvG_*#<c8sgg8bH>!T|`XrGW-%kbE|c
z%v@?w4JmUm%v=y=7@?OwNnjNG>I{Tzz<y9RX~PFs30TL1GI#J<p#;U;ttd;XSCUk0
zmW2(b`WXCx>BcO`{Ed2ojl!g}hbRh(t+5yi7*4BCN~J)LHt<uaN|$UK$l%LmOieQD
z(%4wJ#s1{*Q7bw$CItMB*ev1&tqSfUrqd}zRW%2IfUV0a4Ix_ghb1Xisd}=$Ble&r
zgp?y^TKDX<hPD5RCVv6CCfhEAg!jp>sl;U)1VJlGaeeFZ!YRfVR~d0Libq26XOzGq
z56QIWO&VdEahiGFgmVWjN{b>9hyA-d+M$P?WvqX|D4&fRuLBTU$l@`A59;f@`LY(`
zb%5Lt6Bi{>%YgP|+{TKqviC9eMrEwu%v^fFeIbWlMH;6AD?u0_5(Iyh{x*=Z7XS@L
zeP8&HaY6CA-G3tX8g9C1GRY;j29+BM=Iw5Cp#c)_r%_WHo6!*lkDS`mRd&jfk>_fl
znJh=q9gzoGq5?c8@ulWjWc))hil6J3YK@=WezDhSK7_*VsdC?VnStQ1i*c397~9`P
z!%fj9K(<2gG<ld$0rl(4EJ?!m*^0%+<0lt{v9zxzUVqKzv<j8wmPT(DG7`_gkyQ~A
zS~Rvnf)Bu0B8*pw!KjCS`)*afM20y^)3i*~FQGTt!U0&U?9PQX2A8)RT$COk0)<Tf
zUFBn<N>LnLJ95`r7BrJm_$N!1MNC^a3S#KYRY06TpOg_{2x9mtyA#fxSbCsoY_cR*
z1f?EFQxxn-MF=VND_U)7sGTt-DGl|(lF2y_KPK=DPrj~-oMPQs#gG8BK0v)EUXew4
zK^YXXE)#$_WN!6iK5Kp_F^AiOZn*kpH7eD*D?8-i_#XfBGJSQ|@W;S;M1QytZ`C72
zApbpGAdk2A`{wo(VRq*G3rM0@-%yk9D%|N%qW!~@A=e5s_w`nX*y;Nuzh(3x^?%s|
z|6lNcjhzMBEIlI(SSa0I8W;-DA^>tLi$lev@jhgn{3c>sX(D$-nz|&Vvv3e7sVFQP
z#0s>o%=3BO{oVltCE2o}&2kLu==97#!{_6^Ly=M!vfg{cW1z6DuuU<=7cFq_cK6`y
z>`Y{493kaJojiFo1n5IHkt9c<LoL*DZqLJ&8W_JlszsrPRLBG=o*V`o{u@T9)n6?O
zLb6YRSIE!r@pgB5x<69DsJ)m>hDm!|*<D90Z8W5ntt%uS@1sP^WXpm!kN8WS=?tfk
zdn&iR*=4uhMR!3Fg;Z_o+NkgAKp=mxKxM)H>;3Ey=RHhnfRv-Zi@s*El+OBH+!-=Y
zOu{{}$Vtj6>6X@CXx9KhDJZSx`!*e^lgd=L1oeS@hC!D;C}z=iq0>2W@neh)_3ot1
zdc9cHa*@|WuY5U_x)J2^&S)^qOpFma`B(tFVxqD}uM<)-ZFa9Nn=R2>NW{yZdmlK<
zq0LiuZPf~E>2*exir%S)q%-8xFlVd9n~(N1&~yJ2odxJMb#?%-m#rs0D45B}gUh-*
zJ~o!-o{u*lkI!fAr%StU<GsW){yJBgh(GbLSE<=%NJc77^ph6Yz>;rxH*U8Kf~NOm
zz1LLw>Vbxg!6GGTL>F2uEFZC(4zQUkqY-GB9pymEDa#`iFM~i+kLu`#W?i<fqFZ35
zz&&>Ez4=_4XHf!(-fZY<qgyiZ^e)pTi~M<YE2+M<Y}4iq-7jRDh;<!VtuV|&Wh4W@
z%=|oG6bwZC)Ww#(oY6{xB4WfM)+E9tx6o3%vEZkY3$Z?XL;@D`iJ>LER(o!X(w2(a
z@CH~O=#%?!Sho%$hA-!yC5L2ga4|{HhfWMT)61)Nik$%4P&AjL(Vz<~ei4See053>
zxoQM=YVDA45Zt)^2J!54Up;5V)25=0wg}Mq3iO!rq!>K&2ZzoECoP@stL=JAX_b2^
zy481QKb<!DtDbYtc4Tt1{G2U&^KpVd1zU@?g%S>uTB+4r7`g}{&9MOnyNe;Cd>RA}
z6KYJ%Gb8|%N~*-9v!57`5kU`j;A}jAPvE&l#hlYM=RFSE<Z2d6(p{ewu9S|9i8$6u
z0KW2{eX2h9JFAx@4kv|fVoIihI-tHh%BMmAIV@YUgjo~#aGK&NdDy-i&$wg@mX4^d
z2vg`gK#toTe<RskqE%!k&^Uyfbl9(Pqi~HN{1CvZE%`oYOyl|34E4j3WG4(!k^jR~
z?0e@kv2{lkFj}DQ`{0TBTkq`g5{DGI;5+6@iph1IB&Y6>>+jSG#6Hmlvht4%R`OVJ
zA&5AyfwtvqR1T*+fF_4jk-`2HRa75cZMkN=wwumYB1^o>E{#Z964mO*D;VC($M=1@
zmJcw<{XBR`MBxx0tctR9ItKccStdN3m7A_{Y0g)B-4&;lrAU_;&UZ)XvIIB3<*gUM
zpUDGUN;gxq*{kj4Ba||r*o`MC5-9RM^JqoA`$E`EmsguZB8ONWWGolextmb>;?~C$
zeu*_~8Q&@vw#P7WUKBZ$i-pylCie%w1RHQ(H*s#G8lO~w+L@%`S*Jwl?~~f%z%mBv
zCcl=7bqmtvvbEio2bm#9`+XFP06x?><64EKs4vJ|g+=nJNZ%C$)?%zJ5jP`3M`TU$
zDOh6~*tMdg@b36gWQCo((H||_r}f~^LHlKn5mgK44!EiW-hrkvMwUYqQVdaT2nXQ4
zEo&){G~MCtGB_Y9#JH`u)!g3%qT`a-34aH+m}uI8QWuwBaj%5I8JK09j5;?*t--``
zIxy8)Vy5arA1+SkLNv0+4F490DQKzjK!ZY-?HgAh9%0yvKyEc&jpQ=Nwh&M&4aRr$
zwQMt`$`g!UVmAd6&EC%fb_F`+j0a5Wu{li29YKRzkde&sUPncUJj^puPjwXBD%ETI
zoxH-%<nr+c7lTJ+$2@DnX)c1n$o^3h;(Rl}IG6L|h(=dLwhB4Z;)M@Ez?Qt@4?98h
z#UY$xi#}Rclk?I;iw45Vs)x*cmD7jlFwNPo(Nx!mFA@Fy;yMd+m|K*-Gy=%?eC|#`
zldVTUQ-(k^U0r5?w`{awA|74^U?sYlpvf&V2|kCdu|!9Jb@fuo%!RBXb8;%v!SjHK
zVSq>bD==J1Ia;y#Qlhhow)1(EX!>aRS7_!#1<lf=6)|QSDAKM%qPLjB5A;o;zA_;8
zY{fb;*mk2%1fYvgtjioISO8ASo=M!TPh@Sr095+5ncp~n;g6<M$^<vXdAK3Vj${}t
zaNqZrc5KZnZzyep9p@r$ZSS#fkZawTldPTUbXYiL_w4bSk#j6Kt;uTnnPrB#?>2c`
zK`}Xm#1Nh=?c-CAiOO<a;W!sygYEAt)le-`GJiRZ7;&&7yv0?RQ3HU2quk`42zlCf
zeM(?B(c0|L53>yYLOC_TJBXaZof8M?;VU?of5z@6v?eW^_zaKMD-S@(%{%kM?2f;F
zRqg`sMm32RI1)ZMfsAmEZ4ALD`QyRX+4+gt>RgYB>y^wXIT_=rw@g4FIKS~^+=0Bz
zVrJpR?cRUnwgYPf8t~MySYwjjh%xikGf03I#xWK^fJfovE~_|Pkzo}sFYfaXmeB(!
zwAnB_9_@YC<4aX!qRlED2?)fMg2S1h9<>UozH<a2dm)kXL9x{o*KINbmcAtdUlqcQ
zAECPxHuRK7H8{v4=ADr^R8&;>ZLi`N^WT)G+AB#@ut?fF4?ry@DsBjwH{`^UYmpP)
z3G*QGW!9fIR}WQ7?<5#E)3vbMGLS~w11^z=qwTQ}v1*tUd7f$>^*D&biluQ*k7u=i
z*3TP`zKrTy`-x+nONzufe4LROMi*RCxl#W>6?(Ko&)qTEs)vm_S#cd1`A|Jc6Ou15
zztV940zkKnRMOsR&YA0}Xwbv2Blu_^g^SzeDv=z5ov&S%X`M?Ge&j@4g~M~1$p5OW
zME(z3@7Nqz7-b7b9ox3;bZoO@+qRPvn;qM>ZFOur>8Rt5eS7A<GgEKP{Q>98KJ`?s
zy_fv^5v-ts7(sL0lP}}M8Fj2>NuGFqe;@n&fO_qAl26-B1jR>WWoQ3yhLnvXtso2(
zEzQv2A1j*m;j-C^GxpR}2ZS7NZ;)e=4D-%0bh)6`J#s{{jdjG`XGW-L2%BtJd
zt6zRd`qJ9Q_s+)~U9Ye|`>|&4yaJ$*Zx)G#JrmM_kKNn%)3TyG$hFi^!NZrmk>&X&
z*=k5!D`5yc-EI61q#KYs2x-=Y<RUSI+GELhP2lhIAHf>|lj)}lu^42qU0wM&!X7?e
zFAq0wEB)W-ERmr=e*(=A{zN{HhWqWK>vJ$oDZCSDJCgv5IGB?>^PRZhM!Ya`a%ie8
zSvo0+r{(W44-Kqcz1(hIUcid55~BEU?%$>CjcpTKLTpU&^Yy8Xscwd8r`N;JX46;-
z9S}#K2on>j_{h&RZ#4o%p!;K!VKHguZ9^2mPacm%`C`{vEyw+1jvmhaH6hN90bW`n
zcrd;c8h23o!mPKx&M2f~p`co%;QVLkARQCj5|!@jVAis+?$L;`6(LIycKoN*<XmjX
zxss;P$wZg06%k7m`u(t=wz^s7u7aH+JD|L$^_AaAGr_APmyoPF`bwov0eS{QWtSo<
z13@Z=7&gaNa#1vInaODPQKk{x2U@-KgU3_~p&osyo0>fhQgZKQ<Ym6;jw`rQ*GzKO
zAA7IJ!s1wvX{RSd@T3m1kC%tP?cw5E&r$>k-W($7l=9ayeO77oI6ZHx#Jm*q3~;@^
z`l?65AP&N*$EX1k3J9gcVwRU$9bFEJ-H%!(GsT@B+&J6Qf#hV5@145t=P<dUYJ<lL
zbh1-{@|SJU5>rQ_X!}Mrp!dyUt`D~=pqOXxSi~Rx+6nhfOwG$dD&Wplx*>65QSvm(
zrUH$V4&yV!l{7j@(Fi!V?47h=19U2p<F=86K(s`}7ODm(!A{04mxb8KSRNZkhBc%u
zFFs-&bf9ZitH(^yGe+ah3PstX2c@APr5*J$7@8*V;vE}nBbv&~?ITzG8$b7$EiF-l
zYBY~g=$Hj#v$y2gbYz6+V9@<rex)r=g>EKT2DKk>Ho|XGo^E-{aLbEi0V^S}KVn&~
zQWH~<H(lyP&ejZ1vmmsMcNdV(b=S=eBZAFE=4Wd&LRQ4g?bi;oN9W1B32n7~J{jw*
z2~F$AeFyzW3@3WYZ%fmsVXxID3R$lHj?_5FA>&@KFzQ~6hlqnFO_3=$-G8-fPV3$T
zR3)8$A>mD(z0z=$>>n<(0$IN27P(?bhR`TrrQmE20fGI;ds5h_?@M>#zAU*l+0fY2
zk#R1Yc~!;&jDkSr+&vR!@Qo)l;{0&9%h6jcGn{*7*^BZ0=?Q6G4B;lykjaqZ!Sl=V
ztg6ud=%0|d<)b8nTu7C{Zd7jCFLc%UVMLsU%w^+@-PirH?J_MCV0%!t+9s7jR}U-(
z?u$LteU&4(^vGLpr1Et&D+%cK^t=80_H^>a_wm$|Iq)}XklAR*?{QcMv>jnLZQZW7
zy3x6(C%|BG1)&^|G?%X_*1DeTxP3k6-MnY~hwc4_Dwp>?#~#2xo@#O;XgfqK^!)DS
zND$2d-vBg~Txy&EzB4GTi_Z76WvKXmY~HTE+Nq(J6)f>{zjG0M;hosPqLH;6^qtso
z8R8`4bIfXZwg=0nD%Cn}nv%^cQ_m6uD@28@h8X)^B9#ZedRuc}j&oD&n-Iz!?xlOv
zP5Ykj;azZ`YO~yi{MO5EI@+&Qrt-6xA2csP$)OV;+P$uTQQTjZ#`6eLcLD;CM3Q)&
zsmVo2ZjIau+aViab^s#@iE^a96Ss@Y+zKK6-Iw{dd~l;y%3hW@+hSi+$k+r<S+6>b
ziOoNCC+pqRg7F8>Wb(N97D<Oz$55Y~CLZG4S@?nvTD*z}F#)%WZfwF_xwTnmHua;Y
z4R96imwk0WFw@f8UsQGKRjl2vRfLV81$7AJ!2}BP6A<=~rva!OWO9Yxq-L2uJ+6JC
zG)mGu@1CggQEI*9RW&Ds3ISD1enanLQ4Qu{+fxZdccksLj9uS2!_OzT>isMqnV-i`
z)(rQnKRwJ-Aw{uuP?vSh5+HoF>q1)<KI>735Q<)bi|yYA?4=J*%jAF57RwrMaw#8_
z?@xSxhBgZ|erG9`<&qitLlyVazdq2+Dkn)@CGBm<8&M*EE}S*X?2NTZKemb-yGh!l
zguI#kIG;J|qDz@|cQcAvT24H{bR(+%WpneVtj?3L2)ybh#_FbPE{FG;vN$mg+x8zF
zjQx6hAe6m^<Qzk;(d@IrS@;(^`6EgolXNM2;uq3*f*L7>qsm_&?7&qrBQysGTs&+;
z!*Nma?x=qP$dH-{I`y=DYt7n*bT^>3u>^0E6DLR-@w|2jem;^r_#w^{dMcw4<FT!&
zKhcUp*j{Hpyy>3_?wXNN-+`jX!YE|ZO;&UR*k)(4aObvk?@5QIMz@z1HSG~$GOsBp
ze?*#x<^3YJHu$>u<_G2!g?AuN+s%RM!$}irDzGoF7G#GI1<vjU`3>XMXw)CJN#Kly
zI(Zxl3Y|5180XK&`gnp#BL}rNrUXQ_s*$D*wT{AKYdz-`^E4h4YRgk~R~n;TYn-JD
zu&U7iWXlNUJE_Zy3<Q)b9KamDDbQp^QqiBebi)pdI#a5W=T<7%h#&Z1Vn)`bfZo~}
z;YE%W?uyYP8=P-MKIcwjMAn(Hw4^+Pi@Bl3!|ZtUuF3I@etZ@mL@JhRtwA1;oUh6F
z&JL2^wy+ZSGT4&c!d!BZzzwf<x|8+-7B1okHd@UtxpBip#Ff#Wg~9{5cOw!91*9A2
zQ7b5luEtzf;J2pd*t>1@LcXFIB)PVDhmoTn<~q60VYPY@*PFV5&tde9ZZU#ls#Lc!
zjZj)!sNdj%1hCqo(!1lOG|#no^>P3YZ|-4l8`9l2R#Fg*THJ-o_mvOhCKykEqNF8l
z>4Q>7iJz-qQjPa^r>TbY`iI(60)~^IkP6k+KM#*qE9$sd-K09S(;*VcAPEXv|6xt_
z6a8epf|0fTY0y4_N7IZS)2n<_fZK$t%CbWJlPx`*k1U3C>!5!?slwW~M5IRJ(5S~9
z&~1l9<xH1=kWFySQKht#YlU5)8`pT=s$R->b|V6$uYYL^S!0IE&ge2^^j!`K;6CS?
zUl@G<Tw7{EyW`KAWS!MiSwWopHz+jk+&L(%X4KNBoqawC?=Tc9hSM&#erUhh4buCT
z@8Ev2YZ9k8S6s`mbN}WX)cbGDr#4#cF4rU?|M8bkD`W`Gw`GoYfUNAd5)S(o$!4uy
zT+tq{k+y}MChDZ6^gJ58%J;y&Y3|tV81k?YeXMGj!D6$@9Hr}Zbx1dtn0gW$s3j!i
z<;cz#mRn)W>f@&;0jz35H~NIX#SXhUXId)c{85>TJRas?r<#vhhTrCjN^`znuPZ0s
zm0LqiA<ZpCa+ls40hpEP7d<6j(8n;MF<vum4&(Rqw9fif|Goq?5%Q_3cZ+EQ^rJT-
z?{n=ir0dKs171N3d44FOZrjX|d`ETvN(dv9z4JXrv=L1h4;ht(+TVau?Df4g$p$hz
z2?Ww1Nwg3x)F?0SbnvaP`9#IfpgcH&nZ@c6sq_W9(3qxyN!XEzR_I%%Lupwbaj-@?
z?Oj354mOoX359NiMLs5lj1Ef5-lYV;*&U9^GFYzN2x*Hp@eGZ{mj!~xWpj(bk!bF$
zTGB0avr`9UBAqW~0B@CN)apBk-1($Um6_k62<ObeY@)|EwL&MY=^ljq%2(yBk8|rz
zr`r)i-)|-W=T&_&kzcUtXjkw$(^-3_-y<d^>rQj}5z)uG%8aY;W-f+=$O;#0rPY23
zObAUh*CA)_JUl<8F}R<obt%<&R@xRms2Q&PQ@==df+vjiT?!gHbN=nb+%b6V_KNJ}
z)Gq6fMz=l`wy1LMWjLXhYd4|oD5}4N9iKw4YZV&6akmHGrQVBZy*7oLRtIj^Q1CIK
zYBz*wRfj!Pv9eT@)FRrZ(svH~Q4V~sopQ&P_Bto|0yG2&=ASn^YMUq<?{9)Pq1Q71
z`?ksUU+PF!Zf=hM!T$e0b)>yTnh+-_1SosjZ4($Jpl#={HHva&@ex%OUFxj#<E?kH
zlxB|_mVPNxMN3%w9yahe$2I0U&f=$qB*N=1?;EEqp_j}Sdmt#BCZmT%Zid%!=##qy
zD-YSD!LyFN!cJ~?&W|?CujH(C3ofdYRgtN`^cr%J>(kqjK;X<@J~rdhj;V-@ZCeEe
z@zJI-fNM90IhRG8!nRW@J6m7Z@8kXNMlD<_%)rp!JBzy9O>qUbR9OP9zV|=N@>^5T
z<3q1pSX>%ReU0ZQ|ALi^$Hgg|VcsAfe9*IgAWQZethtPG&nC}USjY`!`CE)`KhUzp
z46ia(Zd<Rfxs9{cdg%iC&2&`g)6^Q}T0M4MfVqLYT2Bt@WlWHBwn}@dd1i-4Zby!)
z8BZB$whBF_8ecGYx$44Aan-hcs&o;l*tYc<rdw%xq-E<{rOV`$_4MJ}L(ZlQThU+W
zBid6i^#zgP<*tvFvw0p4FG^~){U1jw)Z-9X$1EhrcOgVv0qB`b2V<tC#Vcsf{0;H5
zK)MkQC>D1SVNIv>>yy2g|9)%m35+Od6ka^WY%%$duaO0Aat@p{dP2t*gm7HOBmv<`
zzD3H_ctV_&WOFBjhRvF)M$aDi*^rrj$%FB_RkZMAdjkoVIL60O#*8UT5i;u%(Z%r*
zqo!17(6ui3XW79bL7s@anA_|Tm1uW(V6SOX<F0H5m$+Pri9Xt{Uj~<u!{^eNWRaEN
z%rzu}Rm+}SyK<9j^N19}RY7y<pFyeznyUlbo8v-OfBQ~mFwT==QZ-J0y(Vg=N2mt%
zHoX(>6Dk)HYjm2a8<$Um7S`Pb1?0B`LC174cElctA2$1X@59vybhWkDsXl!Nuv%-`
zS-DjQN0kL4bf-($zJmkh0}XC#bhzw!R}=gsRb`5P+`~mH*2zMTyD>DyUgA_?OX#k*
zEzrE}Y?4O{mf$GB4i+)K6tATd+?_pkjy2iZi8PAY51UL4QM|FkE0)}1ymXTznCduK
zXghgKa+5zU-+gZXLMSW&JB&>Z;0~SWbwgUFAn$;8O!LJ{8H-C?!*e!-=ga>wN6{5G
zi;6-yvJPqwC<r#(t2cpN0;54Lhw(zROOi8OOknxjfQC8gG0@pz#DbW5?w$6oNE{)o
zDswaSwCqg~A$LRFUkMFAL$h#{{G%J`$2iL;3PMtMG2IRXJDQ3@x3-uFP?Qc?7|1Xp
z)&20+)K9%98$=;t6_rklpiBzVamN|99Y$(xpenx^`fh=JL>3bJr=)@vnWEj2{cWN~
zZ)fTgQVsd(Xci}%!(@1c+q^X06(~@8z4-I{{m&#$aqZFgOB<WF^XJy*)A}mb&B>p;
zbq58;x-IU-<t5<{)Jht2KySv<M-g&u%^Mc1#uqgLm(Zn|Qn}=ZREoQcif}&{2^32$
z*>DyM)HT0u0KBY|8~rDV-{V1_){cf@I3;rcSQXjcbrs_TBqEz9nI_J!pFDJA<8C|g
zRP|7d!D|o~Bz$&>FS168fd&}#G+8U5Lpwoyf;ocIA_c<KsAFu3KqR|GIxlbEa7A_{
zHN?>O^;neJDlrAiNXDIcLFQN1oCCa6JRW!CRD1~KwO02N=NtC5PvK%D^wX*7?6kOF
zjcH<~4hHCYiQih6bw{##_0)PTjk!(Xf5%nACFk2Fh9xtrMMB>9XXQKM2~$L7K;xy*
z#(;9c1@gTzmyUT80TDQuMf;nKw{~@o@5qDSWXkYuzKf}ri?vTWjtS*SQzQvW#l4hO
z^Y2=bdb<Xy(F}DOtEC8Im6#^;s-~d76I2zb9tTGS)k}uNi=&DOV5>ZVe^G|~nk$?8
zC03Le-B`_~WYR`=9Xe6+<T=tsYYv+WW=X3}IdOH^&1Ad646wnB*pB)O?_dq4wy;_C
z3r#pFl50*1Dj4HQzZl71DDn3}N<lG{1=3I1qGVX`iA}dgt5s5>G&!s7l==)}dTP*x
zjOuuO-lGBY!VYkDZO0<*(V7S1^^A*}A4D$6YNxXKhGxnH-imeW{JDwg0-1^AVoRzL
zg<xz8ra7E~07ENWG4w@il$#C|NXN?1=qRRvYmkSx-YpA!7|dG?n(+&3iePJwEg8o~
zvR6J*FsCdLsUv+N?tV_j$t#w8@n|daV`j_?A8s}@ANOzN`Z(#7hgeDY{BQm9T!Q3s
zDKBd5!K1Lc6xUUpD5Xk<1Ys3ye45M}U<}x&_&k=?K#+mPX1ak(RF5f26_X5=XcQ`|
z+(-gzphB{Y{e7TbRGr73Oz6?@<mD@gZJB1XZJO{mc|>Tk2ugHs?@ao8&adWQxoc|I
z;K~Vy%>T~A)Nd@yWs=7Jz04O7!NSeO-<?k@5zN15I^84+M}ez5OXBgy_uFqXiHw2)
zQJteKfMEk71|JFQ!~*^9Rh4;%77zKiwQ%dD9)w}Il5edGM$VKB0|Ke2J`YHqxvWJz
z#Tx4!$MS)T&KDi$$MUD`1-GP~dG3~&`$g31upZLN?M0g)iy6N;<6Rl%Fp9NbhN2j_
z?SH(9CL!UkN@q&w**#oiqkG}5Y;jGJA~)fQ090vuFZGUYtdw{Z{+@dK*um?qV~|Y^
zMec9eAKK-FIQ%3_=>#TEg)U-!8&{8d)Q=crEW=qaMSKu$&I8Lu{+a!up91zHFYfW4
zR0dxe=CLXiLO)M>exCe&1DjA5eE3GftgKY4zr8{f_aktqK}?DqMVV<_)a;#_d6v=O
z8^A<*0TA#!EkF3P>FKh9#gUl_P5>HqlMntVP`l)@)}LF;cw9kK>VVVD$k^Jn{BlWF
z;l_;O?(*^=)pFBwyJV#xMBmcIZBwfJ-S`bWFYB#EHh_;ra@zVqDg!cG5iH#uZIpk(
z&KCc0u%|smX=oAFR2M&+LyeAT?p0R;^x#dhNJ`r;j!2l&o6WwQNs4>^IFdHHh{uWi
zbnC*evzy$!os5o*wZrK}7qX*uIw{KwYcqR&b(V0lK#C#)dvDDp{5_%vj@gx!C(u#;
zWD{P{dKZ7XWTeExcQH1_mgkTcVt+J+5F<q!oLTZA#KO6Ev|DFy-{<N6aFBHl$bOZY
zJ|3D?4t=4KuETx~uAd`~O&^s>5XD}qy@I(%JYO2eJSW2hqijiGJBX9rlb_)X`~oLa
zLWqKi_5J`D_R#Z&iR3@o<dH?5LgBVW(VF$<pXXEU1Q)T8<6o6vey<37O5hR@W0|aw
z?j~9An4hFNjI#RTUciWLp;fH{KD%m&zSOu2=$2jS&~uHrU89V}Ap;WMUAyn3S&nQK
zM;$g5?7Elh*5AXe-`#^C8Ee08AEqxS`(7_s67bn%iNQ}-sVz(dyKQj|ni1dU9>qx<
zf@B|hf63!kSB<3xLcEnV^Z>is9v_Em1ZnCqo3*`mya^XOqTKMuh9`LdSeA$7>8r5C
zPCVqvqDpOd&2IdI_f6ASFp5Gs5ftxGS>=AATYGv+m^6<Z3nV9fE7IYl{_}OokjoqY
zRRYqdR&$CXwW#ZLrZ*es=#~7sxz=M{gD(kKN8>Ke;!}6U1p*X)^xpinaJ7lZykKzZ
zw4bfk+HP<JvHkTEvB5H+r^fh!0(Do{KL6QDwsfqa_X|V2ah_e}<omR)+7sQbGPs&h
zJQn!BdWr`~?QU^wXJ<nK?$@2^{yt{dxVVbhx|e)+@JozqZY{2oWW1qM-%}YSCl%J)
zWi~F&VE>m6XpZXfTO03FA(HeI89cMKat{0E+_ObOP0`=aUTlv*J*>j_Q=<WU?o+mM
z>c?ruHG|1}@N~|pxeFwxIgkRrHX?-vJ_FS!wG$l&dr5xU<*%nrFy%Bs=q<K1=kmf!
zeWej&B-Yn{2oxtnFn`s(@6gyv`y`8tFPtAgVatT)PFikFBBh2xK>c;e{GEQ~8=-{5
zca^#m9c)ogf4(s>mK$89|8F4A{$KgKtlX^M{~O4&v!&gZf}(-4CpCbQ1Ac1qikm{n
zJtrE^(8@jA86N_r)D*e_K~=CcSgS1LYN){kShv@_`q#Bd>Xpv*_wL8jt6AeZqd2C%
z&!G-2c|FrRtT&qPs&5yvEN|~1oGw#VORRLc7DeEu`QO>naSE{8v>NjCq`K+-6MK@&
z9tW8tBYvw?TVQESzW6nG0@&~=h6@3RNIwy<sRtwMhp+6hUgAM9f6^?`_TPan$Z<p9
z<WpVC!JuH0y$}<puh2qzbuwMm5*<HHW>xLaJIfFlHy^z_ody3>;_CML_w~@)U)d9l
zZOr&27GcOCrxuYc@xJfWo<A7IWNPKC<z;cAQ=8HkTR+xyy=oHu0c!6ENUW_2CB1Ig
z_sW48h@18bK|XF)7*15Tu}gcbm=w8DHLsiel62CA&-=vmf=BUkLSkBwkcb#RtSBM#
z>cB5_VH~e1<^*+!n-&Ly9^P27$kQEHH>@8dCilndZ{TPv;ukF!ogNM{K>^7=i?7Ab
zfpLYxsYz)qpH?dFK-T5{2vS0`k*f3U#jk+#bUl~yyI*k%5_YNJ<kF%Eu17xdmo9u~
zmDQF0*E!N_GLr4PDPyG%M=%2kS-(0v%h#i^xL_d%bEF@2N6a=k3(_PERrlWhEOea+
zd8g<qFP{=cHQX)9kEmsPiQZX?+O3RBu{K-S3XJQ}p@_Qs0VylwG!AU)H6!GSjc|5i
za(3C2vn=wTPTaHmDw^8o{n>k;0??-T%3K=5%7lyba>eU}m3n=MI67ey12BnT_ax-<
zbZ!ow*vrB?`O_8OLsE=TlBG)&-^{9cWmV3WOUhQ+Ux4Zsg_V)%hXWF*6F8NhxHd_0
z8%y|(POxP@z@O*lvgv}Ns`)rND(Ov?4n4gGvXnhJxo|^m@st@MoL>~8Lnav~RnM!G
z3zSwH@JZ|sEc#H4o;>UFMCiu4q<%yr=gE7Kjk_b!18&MM1y)bVsbwib05<KyLMRNv
zptRRfIUhTSXW>>ozpLA}YOg_*c%okxLZ2WcaoV97wY{l}tFxJr-Typ~|5A8!{fDr}
z{{QBTuyg(An@LMl1E=_xVJ#bfIEvDX^p`B8XV~V#@$ExOVTMu&ku!lFa@-6gn9NCH
zN~SoqxSR0HTcfX1I<k;mqCWhg_1BfR@5Az{IG~ppR2%Vz_N9M)-Mizb_oFZMQ~O#2
z@M(X0)~duH3ssh@A<VrVgmX2sGa8n0Qg_tc-SvC2(jg41^!WmA`gmnw?IHqC2su4=
zrQ7ar*~;iB4fRyorv1E+_4_40JMt=fnG9&3*h_BcFr0#k;)YtS4@OntFjvF9^$^|8
zfewoh^wG6t{@{<nusrQ2xNy-H1s}Ugf%KxasHh;g=go|y+|IO(m!nI@a=-v1tbpz7
z{S2zl5>DPz`yKdgryg2D%J5NT0|j&whY~A~9=UbFjj1#>hK8oY0(?jKaVduUp=w{J
zL#?*Go+ce39HL39{yG!cmpru}J$`?qAu+YQnLTB!jFP2KzQ!0TM6|=^8M5S;FRK!`
zjrw7tCGA8xT?dl)ot!iT-OQf;Aee*}l7GxW3`q^pNCR0ww5)Pz*&p*B-cfqTdW}P?
zk6TB_DiBTvFKxRn5{Wc4>%#+=^O}-IWZI5ahPN6Z2Wu<h{<q4y1|AZ!f}JqB!FE>!
zM8E~xK{gGlA3gtp#Eo)wf`ragArzUA(4O!-1reRy+;ckJD0&_#^wd(&986ID1iPS1
zV)Sq0J|NT*{nHLEQKLd26Psj!r7F7Yw{7z*3fb1$Z|SpCV*J#F`-2goWxuVTmLdK)
zg9u2l6(n0zb^cCOjl|jYs(s5g&_zmo9jMOVK*2-)M2|Zr^!|)#k1drWNuMMcocz7k
zGCiXM>NbWg!VOA9E1q9hkPQbyFY%&-HbEJ(E(Zkv`R;<Nittjx-T|EcF+g<+xI7ym
zA&^I>tOd5Os|u=CcOb@;$c+w+b@@dN4f~e6^opUS=+q@WwM3hfZZXVfStHl!^4u}P
zBB^vv%1_g9d^%rWI0zYA6eh)?Blm=Yoz6&xw_ETi7vsWBxW?f8qR@!{RhK!<{Bmxy
zX#hHr;Z97|!X^%cqNJ>3nUMpIRIsO(Q;R!VYX^k%f&yuhJ3t|~8gersz!&HO1c%e%
zkn|#;Jt<ASeO+`lP<BIdB*m?q(RLl9IN0y3V_^2NPQ#ShDrNgXO+pQMv^waZ=tU<I
zAyN}gIrDjPGz6j0VmSGF^pFD8;nU<4_F#@yh9mqtYqg=$Se!x80QGAmmc@;OT023A
z&%P5S=ZUjS%}5u9653$B7#L}+?rSbRJa78ndDf<D$o%oDs<32(%zT$~&7!u>+Qp{^
z2gshI&JcvC&@|QDRR01mNRg$oeo7H*<tjNXbT&wm!Y!Titk1Zlnh2odyKA?|<)|~@
zC3=KdqBNJ0-jEI917^4;uvWGWBIWXrOjX26L12k@3=!OP+?=(oa6jimwH96P1=P|T
zX#S45U1ZJ?FPdzk$7GM|eNZG8);nkF4{)bZRXF0CHxgewmO!DD>m+Kq6)!;#Ir|B4
z+N|#Pe1M_aC8k#ytS%2g1uO<ZXMiGW^Ps~Zb1$0+OztJD1BIOx;hkH{eFdor3a9z~
ze>M)4xYVkVDdziXU%jil%C!q(qpidh_csX1l9Z)q5*X1(-;^HxY%A4~`M+gNxV8^p
z_Qz@(%OfkUoW(Wk@ZZm4r{Z{Ma4-#VDq(Ip-w-A_Red|)%!?ZdDFeSLt-<1fyTL9d
zP8rn6hmujU0M<QlylYV<r+&8cVx1`Wo34n-R^W--)K0~9$sdq~#u*6++aNoa3c4P*
z<NOnx8|k>wP(^KICztE&Hzw7YyM2*xlmB2B3v+>mw1J>N;Y(}1C^)%TKu|yp<69NG
z?wH>0IG-4P$(9#6!6%kt4g3xY()g>h0fB^&?Zmqr44^D{mpA{udK2_&ab+BHwJQJH
z<QuY#4g?Hjapc@~s-8hHGfT4onKr7}Jv|(<f8e+DqmHky5eENv+xy>-GrlB)M+6~d
z5t7ASVauB9n|>Xi>ja<JpNo<M{V-lXnUh&`_Q0KOFq(`JULSfk`^f^jcwrmo-#hx-
zKDF{C695ldgNYTPwnz;UNgDC7(mI381O(7u8f(rg$QD2VEj5|d!yD7`d3Za5E?%8O
zlTB9Iot+_;Vd>ZtfFLY@lgK=zn@1$cZH|Slh&Oe0SQI_or749wvRQB;qcrO@Q=sdS
zvjTlumRLJUAkTb3^nvWgZK(0XnI{ez(ahrd4%h-1Z9u4Kxf!Q-t>Bg-V=OF4I<Adr
z;F2gVYZ#ZOOJ6yTgX*hgvgEd0(x7se75-V)9J(rA-86^_qeAKEO0?Pvup!LrrL4-k
z<<#|?eB$qeXKr5(Z3(R$Sle-fMnOqa-2Ww?{fhT%Rb*oQ6xYf`{?>pwO8>$?pPemr
z0(@xx<r654lSXG1d3Z%U(>X<RP1kabA>Sf_aHGH4<k{Yjkmw(61oMOSNJx^VD8~zS
z`W2UWv1S}k!nTnO>r;XyruS|2*4O!>XleW92W}dPxxI5#KsrkM7`Qc0QL1l8Ie)&+
zv5#k>Qo02ZRwGml_5_~ypw=fl#%qY95CEqmI3RU|GpxTgsFc*|FIS_+gI%o0$Z;|D
zbV5AhO3kTKPqyAuJSKtqSAyoF6&6$1*d`rqzaxl(yUx&RM`@rlfR-ETl^XdF7Be4*
zTzyy6F)Ci%+*F54a@uxNL;h!O5XrW|yq4}ATPnqc>vyZO_hF5<0qECne^1Tu0KhOc
z`z~CWi@p1-<f(<I((l4JY7hB<m2^*JoMqW1Erw7KPl@k2f=$%!o@V*gM>e;&3}!zB
zyLVZ*O(@Z6b$;|B>#D8^6@?vc%bds`9`<t9W$<RM#Rj@_HSA>2@#C(8`JzZW<UDAa
zy{#N``-FiJod8b&GmxvI4UY654=Rvd*Q*A;GW`>x`D#cgAwYGyoWDvz(oI)?UQqVu
z)CBi_8Fxo5HwfV&uPO$bSx1gs)@&&kilNZ*a5-Ohe4ASY##V;Qm?w`w5y)tv7gnWK
zeDCfSer%}1g@FF=3JU+jIj?qp(t_VF=^@l7DrS2r#m(;UqbNO2KbJ40Vu4&a)p9)X
z+@DuO`}ymj?Nz@>duz%kJYtqog$HFAm!z{xFxcK%8!My>1`p%kBJeW$YNun>7t2$R
z;ycsfhz~P#b*-RXoP1^J{bO8kK?%fjVxZ3~!T46FqJD>QD&Ns6f-`CF5m9_gf{ydl
zQ#42x&O2qXXM%?PxjDu&0R@0x62f2wo`xlRs$c!#<BFEYiNI#IxqvYzXyia-oVcnW
z>}-S^!Xhb%EHLx?(8&e@X1#pb%N%A07JVZtSnNsD-@hEt>7TX~FQ}^f(DD2g^zxl(
zlvndIJ9i;XwyBUPeq=6-PEgz|bttH}-PA5pzFVtF;78!!;4uZj83V$+8Ic}0sDc48
zpZ`3T2DRniq^M0a9i*v3hLMpqij0N!$N$>im&hnf97|36zqQ{MeZ9LH`8S*G5hb5F
zP4@6@ZZyk3d}Z5lw+t3%>pJh!%LWiE*#23FfMd3;Jw<Js4q|1&$L(;QfcUe}N8Ijn
zLxfZX>~;wDfwLs86!ZT-_P+lXr*m?1{Wpf?VEO;7i~kvKVQ=ATNzD4s!l(jD0WAL)
zf3qxjum={3uZjNT*JcH~7NreWVX~^6SlU6Hf9;8S=#wa&i@|aFFE!8E!`-WRCXM~u
z0(L|!zq5z_KMKb@^_t2{g0kb|@GG|_ZilER54jEVGqZ+rwk}R#7nz?WBT@D5`0_!y
zPoP}HFE(+is7U(Nq^jk4faOH7wm1BQTQQHzQ9^;H+l51rN5JRy;$is(?=9aDM?>tD
zNX&dSB7kG9R>#N7-|J<Hku4V`2e0ov&E=_lA_jA~u47D90-j=v>Eq+i$V-|Amc<oS
zh6OI+lc1hn_v=EfauSR95S&GwfMDN+>S>klpmUD&2o)7NV#?J%aCUF5HbuyLW=iRF
zUg<O#xDW=#zmc^dJJoFNe>);eg>9B`;H7jp)mJU&S#1@)(j)IhiN3M7qs2U_#eQji
zu7B*#Qm(qRJ<h5!0im+X9c(I5&zId;v8#4&Qzn;-Lwh@4+2a%kIzpqiUw-D=WJmPo
zCi<f+IECp?=S@`<@FRn^giY8vWW;=*kSybu{G8w7nF5Be!R$t(n?)Y83>!ng+D+U_
z4l0+K1*D^g!uOAF-K;LG>2gQePz}f1?(}G29M<-nn@3ygDW)<_hRJO?urdL+@5<{m
zd2FK)ul_1&cT<u9zbVV#+)jiO^9g#8oN!jujbvjT?6X$DfkEV@IvO1!-+Ux#zi#@~
znQ6Z8!@GR7^JXgcL*+`p728U{t;*0-T5PtADxXS>2vl)?2Qgr|eW=@Z!&<L-+5A#Y
zqER<vZ=h{+H?_qjE$p3mnDCI1lMrlAQ)2LMwI(C@m9zvpTX}4FBgPg40oLZjl*|F&
zAgF~Hq>WxPKu8udSHEHhN=%{~%Fx<IIIDVQIKwUWyak13!oz26GF!6{b0l-I)?q>6
zxajtD0~2h3eZ9XshTN`%%eEG_2;T2t+xq<d5fmi~^2OmiHoW)%%x!z7yEZ^}eCRK_
zd;0?<mTu^gGk^RQ3U&tpCh>xEsAgYRg}FaCjksnHa7G$HuGCJGX{b)~BQP;rlRe$r
zRI}?L{JZ$jL6;FD<H;hG-cCsMfZF#X<N1s@R^eb#A1BBZ$gMJLNb!DTG^aGPb#@Xj
z=h3;M5!?q<+dYecaH9&6itAEsWX<?~axcGcCs?ajP^GNn#`Wr}W@!etLbUg*_wAaq
z;f;1_fL#mN1(V*+iIUOxP5GHCLvLh(ig_Ot9zRyqZ*f|0ji7F5q|RJ8pe1|Z7*I}9
z0nAxMK?A`K@&}u(Vfbi&L7_N@QB(-y(S0#*zyJJWjie);nEd{7@b5~%vSByDYQk*C
z)s|l5>Dih6&o04u)QJ{&g7aHz@sPD^rW>QYALv}byzUOdT{K&FVy(d597$rcQM&lC
z9SE6C%qFt1)S?sO87F>fX9%j9e7)ItYXs$#Y~^~4feMoE#1bp!JPh-bj0$GSk&L-5
z{<cI(OWM<NQ+={>NPyhKI*5g=Y@ic)Lh5ibf*m`U#X>of`%aYOi5smx%jEX2S~>`V
z1mIEIjmN$Og1+(w3Nld-&mmB!3=%If8xP)nODb$M_O8yJ!qfxHT=~k1WB8uR=yU4O
zE!$7!HB0lPPctY6BE^!G(pEG3-2XkyRDRT(Bh~YoAD-K6z+d1+$V>?(dl{E{fEE=l
z*C`C9*fTnYDITI~B%20GIntM%-x`|!9We5Kx72zq1ThmR=R+OJqOEWoK(f;kd_c8~
zl50$#wJ|`-e*}*-;z1zpLqTULM1XDISbEaqfp}(_c<xuG=OU^(B&6jgP|X@@GOsqs
z|Ar2ML}O*F$Wl09PH>K;4c6|S<t675B~QLr4Kq-;By|H9Hqd7`G2(tkbc~K;1{|Gp
zf?7OgrXc#lk{kpokc>Esy<)d%lIe*BwCJUSEe}}=71|xrbpP3c{1vl38*YSeTj}-7
z4nB6Ltm`1K89zrWt)#8Y5OsRXT@FDAUg6+Pi1n^NMAD`3*PLU6TTPa8hvN>fA2|GX
zyWYqKPY@Z1$YrkG<<5sU>qMxbHNgL!H~#V_#5{w1O;PL5iOA`2uQVu}bnz51N%-&(
zJWQe8s=Qmz;{$d!wKVg_MQOPxSkYQK@VB-b_|q1M=;n&&*f?sJigynk%Z9l2Z6X(I
z#obN%_`QU@W<@a^>PuC)ieo~WeTj8hR!~rj@>iqar1y}WQ1w}oBCptG4B%1@DqMg`
z8PWL{fvCD1zrb6AAx(g}d64aiO3YekKIeP5I?IgdV}oWn=&zoqM=f>*`TRKX8Rq=i
z-}wd6jginWu<l^laR_=r8jh!6Jang(Z!o-Vn$Ql4Wol#l#5d$41UJN(WxNe(C6tE^
zh-(b=Xz=fduY79)Mri5DVnFrn-Crn!AJ~!yOE7DB(T1fM-loNgj)=BIfoBuLOw-l1
z_M0;pm}ijTW_JI2O8-(LPaBr<58;@Ff8Xy2mlQ{jcnBPxSGbNi<BiyG#w0MsIFEs=
z7C%nE{xBUX#f5-g8fUgcOUPP`_;QHYDBP*;wu?QcUgt&nscSq!cMT9h<xV~u8V=^i
z?86tF#*~ObTm>G8k#E=s<%@k!T5`($8;}gGNy$2mqE%!m51nwC8!oCg<4Hg0&Uz{y
ze4qc+zTyMn`|U-1gtgHFvPw+hsl1B|4+IkCJQjrrs>W1KLW)DaIJ0Qa>leZy^W%px
zS0T8g^>5uGiLbc^nhL<V8<IM8b0G~31qM-D*op1?v>n)>)rCUR=_n~?r|u>cjq8x;
zt(}T9E9@u=L&^8T5k#e1;f0?W$tK`Ly}aSy3^RO9_wHQ6>O0=^;EmkOpGid5Cau*N
zqC2ywgd_J_IpmX6s8d#=gq2Rmam9>z%xffnU7!9kkKtqDoIC<3i_6!dc0*e?F@aWI
z<maL9U!m>GgK?#XDgGf}jFo1Q7aHrIEDXAV+7#6+6iG0L-T}D`D<hTnwn((~QjYKE
zN3(Hh6JJpJut6eiYz>z%b0fu!T}4_FE~Xfo7|tBd%c;aHKZ#**-kDLw&Y)pr9_6Hv
zw?%^jOpv6JXW;=hUO6;mwrp-9M`K%xA4~w!=)(N8qD_A!im~Hj3j3arKOfY$Xxh@(
zJDGntlK6M_nI16C0#F<w{!QE-^uq5SfLKov7uO=R?HVG6aMtjABom8*BUh%bLMCgZ
z^<U$tRp$;H@<$B3O>~B4ToagXlTU_HVTt?YhM)L!8V|(WTM)raQEYmEZkv#cP%unL
zN)bb4lYdGv&btZx_9;p`RV6g{Gl%@x5=}c5g@k(NeRS~{zsGkTIeqZbyg;~h#rM0~
z35KE}Bo!3;nSZ*t6F}L4K(&(4@N_<yg>Z70U@3*4_j)z4#t1*ensIR{U(`3ejl|MS
zWb8+J+W=g%7N?Hyy{w8TmLIGvhR>s&hn(Gp%X0wrkgsV!FMI!LbZy7lCHxu1!;PUu
z@w;rjs#R0it<O!L1Lo6}W_CPrEg>@R&sPy8Pc)MH2zv6?lycUPauhBEFT}CxqhUBE
z2Ao=Xy#1YAy>FctRyO~h-dDkJ^Y|HkJ-t8RyaR5xFaI(gPO$9DZXGIL7eXB>%bSVn
zl)g)DI8<Fos@3&kvn3IzptQmngMUoa+h<Are#&3;{~i?9&49bRznMxmhSwT9vaPpV
zqJLVOuUZJd4-Spdhc5L#zusryTW}er($HATyR+B3XB0y*>@0UmAE3R*|9(_Tmvxm1
zPX^Sy7iexX4!Ok$14Q1kyen+O=WH3mhwZ#>Z`_eZ9S$1{Zn2M#hQECpLr(NGi0WrT
z2_`*FLMr3UR?WIOhE@GfpsrhydC@={JGp7vu!iE|U&-IQtoe29d3lBJ#1T;I1Y5I~
zt9$$Gnz97B1;g?bZNt}P;U6KR9p7at%7GOUD$m}X4_lYMvH?NJn2FoV;(^P`7bL}=
z0kb$R8jw20U{(5At<Km<x#t`L*EUu}?F)zPXe0i_O35#u(SF7tGu`N7nwPL&4ta=q
zd0dxVOnD!NF9rrVeokJuvv&?%Y|^z|KR_p5ZxYv>?&CsY1N~jQqyxa-)8cv*1%cbJ
zZ>Xls)^&9K#{7H-e@B|o4l+R0JO|#!D>n6Acza9vp%}t86>kHs=_~RGzj`}petEQd
z-56M|NqoDTu*mzi>aukZ@=WFP{k4HDBOrm3GUcEZGM~P5EPhrrt|2uc?27urM0?Gl
zFhL+_#*{}-@bLlm=g-S|Q`lg}=}@(~Bc7-;5-K~ytH^r?dXC50e=ediZH)iD*>L<<
zOeovGa>@VMY&iZOn+@lG(p&!#2EO_0pE9jLP=v$LLmIj6@#84!ZSPr`{MR>WJB*P6
zT6nEOhFpqylnNJL@h=~XjxJH<;+)@%p@C~!j2<UP85tH~M5D>|EDwUWPsVJo%&*Mm
z58AISYcU3Ll1XedV{zZ7TksX@B=)~?y2oj9bBdr?k1bB0Mv`Xp<p7_o2miN|hEY;+
zr-#1+i=tpAv)%Jg8a9P;M7#56{L}Sr&Wo9JWD9AJz=LcOoB1ZGBTyk-Cxh{%#MN3a
z4R_8(0CybWd}v~C*s#OxrM^oCle9I`R@YRi-#pB!#7=*_Y4+HFxrtgTr_EUVdY#wD
zWAwwuDrE@#l~)6}b6(!<n3@=2?5l~&0ZOswMK+$RGYx8+s3EziN1GxIc#q}K?3bUh
z;m<tV-Cr8&rjY!{QLHjc=#*{-C)s?QRcntgEFbUd_T|pwn+@3?)90@m16z#y^dIe7
zGj>h=YM$CYz@t8DnS8za)=ifg4VLESh|xukDZ7aN>hb~U&V0|%?w{wolAnRhVlJ7S
zb&cBrw&UG0$cJKfupqCZrPNg~wSTJgY8rbT>vnRp1w8Xo#8fH=a$@Ej4Fm$(aNbS3
z^u9(xx#~FYM#OuktJaeoK6Yn6Fu?=G#G}N7rtW&B4C@2cN-Y#E6yMH)mjb5av-R2Q
zGOX*JkPkp_?1O4eg9qApHSGG5aaUa<U_7l$F9ND2V*ZAGgQu#}*Js<~H*$9O;O^7(
zy*zi8UA*-r1Xb#0v*4YFzUqiLjN_*Ms`}$=Sij*Y>Il!mRiky^<|7i1`94Nnb4%^z
z+}Fxq2)+;1!?P~%3I~r7Qo70BsJlJ=0_`8!+YbPXI(=m|ZIP<N26!?HWFzjTG_D4N
zoEy_e0bmtdL2ZVojwqs_nJQwRQnM<~-1IwyH`O^4HsaJe7TQ|;5;O=tIfF2W93`#=
z;hhFTe1I&1coR2t{qYMleK#D-mtudU?7*lSKDACy{c2V1s}$!HDV|eF{m)Vbd!jB?
zkvbs0%kt(-9DAg;t7FzMu0BFQLjGLk<0@03i?WSSXr@*3Zx^iv|3!DV+X&_hS4U0;
z-V9N4P<1k8)-X*tlR?}s<o?cC{!`hM>*ym9eY}@kT*Pd4Qf=7dX^OK~$M(SEPzRZ=
zS4Jd;>V0X!9`@+23mn<&1u9*Az3qbQ+z%jXNqbULe<Z1A6lyUIu&<OsjD^(^4uQHp
zTskEo8%Dn2WS$bRY*mMzv*ZxPCXj+lVw)awY)iPoduHs$uY|pEtk0Qq<dv@!!(_w<
zU0Ea9Cq^1V_w4Pfp`+=h=a3I$0vq5q-5-k)J!Rf8mqKd#7{^I7sp|%rfOWtd<OUAC
z>80u^@H$0A!uRk`bKRHq!TRaeetMqJCWsooY16@*^qCg$ea{^RDQ(pYn~;ihr>!vv
z{SF2yUpAXKY<*$ex_+D0&qWbj3uYkT=Y)#^8BD<jNfuyL(b{SgQtOWl9c5I9mVW_l
zN|rQ}2PFWPfQ5jeX@J$$t!-!RL=NDOO{L+2!x|0OCeo4^cNl~qSNKqg`W^2hyxll~
zzmw3wxVif4r9puPLT2y?d|wBDk@qa6ALy9Cx}#-kg)va3=ur%&4lrO?B$=fDBabk_
z7aevq*CG?hY>xt)h51x5EIQ((TACGQN9_xuX@;^3KA~3|?b)ZyK925<JP2eXk5_T+
ztJ&l7W4$okV>~bzivBB~zrwnes)@byhD@hWES#ORM36u^q+<G4p9Xh|NYkTG0K)Kf
z;Xp#(tVC(Ii;)ElMuBln8VTNwEKPN7AQ`NjTm2(^+%B1@(harcSKBEnyL1jVyOA7?
zt+vUDN|7MJtE2u6hkpK+&mQokW!xusxYFequTq$jVt>HDWt43n#2*;RbAf<KQ`ydG
z*95-EAum*Ym!%n<?0VKtuWOUuPfVbCt){Bz8QwJe<62Yc+C31ZmEIbO4SXCS-m{0H
z%2wZFSp;RJIN%gckfGoEM~yK<NcEK7f(;82IwG;+Ht0cz74mLi%`yPJ=}AdEY?uL}
zj?LqD)i9-0DxoPAF0UVLf+o@KUP}i$=aIVebQclej5u(ii}!nR4|@I)FbFTjg0e64
zWD4(ue97ZZ4MMA;w?_}6JOlTEOa}#5IJh{Z7~Q9ce(@$)=;hd+p!ooSLl2>~EV`}4
zj+~hzSDe4Ue#mQ~s|Lukqs+yUO^?w@GE3QJ3aMwKhRsNxXvcAh5w`H^Z}{d24M>}X
zvl(F>UHlO5S{46Xx0(6(Ak>#zStKE8+=0+Zq2V(;)5l`(VS@~m#ozMP0PxuhO3j4A
z`>Ah*bFFu-DTM>h^ao8DZ3?)^PX8Q800NEy-bBOm)nE1$G$4RF&WjQ<sx69dDil*D
z>(T@^B1Tw^6v1eRKYSb#Ox$0B@!>Ye<cBGYn;Z?OxoF+2`M`)|;vDmgpeRDQfD+1v
z(fX7$$2`6tMxzQB!q^omkA0+7`*=xQp|?D#H#fnT-@Ot2Ap0x!^IE#FqnC#B5l!NQ
z%Q;q^WYVg`7_e-g7fbnt-!%U_<?CeRP38IFb?i1zg2`a@1Rkjk30i9n><M}>5X(v2
zMvp5zSQ~`uUJ0gkI$s^tOn1UE{h8XMwydcEoQG(^^y;Z2jPi~oKT9<8UDMwhWxR_|
zp*YanY3lHlrfOa#;Z}MAZG}4IM`ea8S!?54k>;=BBtRZkUjjmSxn`5-a}5T0Q8KZ-
zs<eN~W84+@`74k=Hr^E<;pt)aYVx_!?eSJbokCy&Z<JY5S*M9K242xR_yi%s8VS6Q
zY}r|VS~L(GTNI6C9zIWNr_t``ie~akUZ$%hwP6cbt5Z)DjXa%qL|>fgcAN;xfYuNZ
zVWklyHXyy7=3V+2Ng4(&`fSh_!NB+`ULBKykX|#?1WBipqbS;-JlZy7Td(P-p5m3S
zd9-=*vCLGX_VU=EeDt08AYV097d}o6b=xlu3J{W4vIoJbscF*kJNjX2s!BrE1%Eq$
zz$$_tCuFmg$vmb|_*qP)Ge$T<N=uF>k!=bd0Tgu$Zxv1e;`$q<n*tdeu5UkbN4Jm_
z52u%#v_AHzITe?<S{n8GXa20q;^>m{fP|N-^Mo9pX^9o7@Ra1{?J91XO{|ucDg|17
zP{7Zf6TFVWscG=gtF9<!uy28T&bbwMKbb=t8CqCD7~j&eQ>kmt&uW#9!)v@<f_1r{
z0#pctAg}A<sSL8HE@7>Fpmii#F`Oo;P>O??qFl))I>jBFV>8%F`o}1oV2w@9-3Zwx
zpku5BEU)2zpABETc1AD<Ui49Ic5vJEt*Km-GOkq2?Y;f!?}a=G<(oCZh&iOf`CRhD
z<8A9P1$uJ)vK{PKNmj*|SU|1Px!PT30APTCO?)8RAe1PO1@vK*dUJrF*-p+|S<8e`
z;kw<~<S<E)uV&0+36Oa_<YA6pHB?h;+f}5D-u|!?$Mll^JNd%syK$iOS%2FzF0E?7
zrJl+3i>V?^hg_>Isjv^jdZxIK12gYx<(rn;M@^RIJ>rs}`HBYr9IPi!S+a)|fTI#`
zBWNd%jkv8H+xB-DQZO4z!7y~d-O!+vi79|B+iX}}8!k%pa;=T|B*Zp6A}?PG;xAvZ
z&Oj#eA}g3yOPF~Vc5Wq(EUUeVKr=jp7mgr&Bu{YJh+Ci}r)VTk2nmTa{Uw($c8Tty
z?@1rYxhd+&%863~WTfKW1#$N!ke;Gx#9U>G{&xS{w{oE@4ib!M1x7@~7_#%trNf(0
z7M7lh_w)JhyBB>+P=Oqk69#ncE&}}U%VV+otKQPCR`v;oCntM3reuaz3o-WQ=LrC{
zZ=m-70OtSg8TtO5^}m5RXWH2!C^s;zZRLPBjxudAA{e9;Fsx5M=10^4qC+<<vPZ@l
zEDi!Tkd7;jc9+0ij6neiENi$SaTotK?fJ!6ug(5eUVFG)_2-3;6oUZe$>E(>C)-!x
zg|E<`{v(4yf{BW1c2|Y1F-1)-a{l)pa{7ESTIrH?DHkmiwoH13T-XQOzeqqjlNk5z
zAWjI2CR+!em-pkJk*@I<AFdyNWh^TXkQ$v$R0pwbu}1atfajY*1eYH_L~Zdu7yqef
z=xoSiP5d)!%gt1W3;GoFbNVuLvtRPiE8ykg1?3rcdYy`<)ODMh_bx7xPKX9EVi@a~
zkB3!dqUX~G3MLfw8UC#AI;;X!T8nOrWqtZvU7-@HF*oG?ZMV)pWte{|)N;vpmo<uw
z4P0+0)Ucn@Y@ghhX3T1oePWH%Qd)NQWDC6I;1Q@G9LmIxCaaIW(~FFhDE~B_?OOKs
z#~DUPPc7nCLw8yA8&&-i73@C-KaA;r6~9l-SfOBC+j=MKKmwWCHZB4<axevzHz%AG
zPhL(%&w7f7{&sS8SrlU`7%U#B)eosCY}_hFSdnkb@o5S0LKs<hd-}-dQi8!P>A`!a
z-`OJ*R#VQ8PTN?;7~d$n&wq`rU@z}b{gQ9G_eqLk$sNAY2v|Gj_SD!c_bZY{Ezqap
zx3QlmucG*)<>)=-tzZIN{^gPAAkMtRo(oX2{P}IFw(bK7AD?pbPkQr8VRO^QZt~!U
zZH5+q-q?=;N7tM8Dz#>Cco*S?8@+DOtySjk>(N<!m-aMM*n{NIL-puQJLYZ>hy45W
zu~aNb>F=NQ6?Ij@*UgO!>U0i<1PZok16`ot6rC9!S{CJ2&%1j-9;9pjd@DHPCd4&6
zKFMB}J-Gixj^l-~j%=XEHe=VL_xiIECTy`7cGmWi4O4O@wW#HnearT9&i9)3lCy}R
z%_)r^cRrg_Sw{ufhKz3G*!^1@*xxScN#m4BagHc;HMA$$aq+grW$stZd;Sku=h&PH
z7cT4MiEZ1Q*!IM>t%>a?wr$(y#I`23-`Lhk?W$epRGt5@KJ@ClyD!T$=3HU1%GFx3
zE}xKN@Ao%xpbNIK-1_U(Y!QYydR1E5ypyVC^QIdZ;$aIojcP(pP;RdUf1H0%4DF}6
zB$YnTP|E2dbuMpOnIeCdK$N98OrV8>(**IH8ma>i1d2ixbwR(+mpR4*>#_VeW!LyI
zWjpR_5HongrPH=w<lq9fwpV^F_=)aSxuzOV)r;C+AQ)6TNpqQTd+L@Fvu09xwec!*
zJC#rqI<$IK__SE~;h!`)Wq-Ik5zt-#GUl-e;&yQ{Vhi-4%s9~Q=H{sfdm4)0Vpo_T
zs>1aC=%lQ3o56CzRjC(dLUrh&3;IjUYcbqMAVIC<$iimz!DzPbe-o`_i!OUJ(Ln*z
z><})xz)>UHn}JKz8zXL+^j|;u*<NUyNj%9??;X!p$ce-7S_rIq@Q%L1uV$p7FZ2U3
z@w%Fz@$z>nv)}Ar*ekSI#T`4vOh@a+l1nR#7HY+iLxm$d5Hu8~ZR8%^+hSW4@CsE`
z<$Ql`@(BrxgAflu50UH<;Zv_TP{2u$Q!Fl%fLh&F8k50-%BA;weD1f10AC!FSXJ6l
zT{qm_ziS}ST>mms3t&EU^-*F#-SR##EeM?K>`h&+roFm?@z~PzHwIMu4i_Jg!kJN7
zJ-t(85uke%0B`vDZFj9#ogR)LkU@61Mkx4gL*nV+t&@@IR8-6?5!=NjzG5M}($cS@
zKsIvA0%8D5x%9?G22Aws8_so`9-=Av7>x&ZFfpXUmbm+(2!WZzxd&V+3(6mRv}569
zR2C2hX@sCj|2z;|EX$C=a==`8xf8lB!f%J+54eQ5SNE3eol#Y#zJ4QJh>HWO<s?QW
zOq%$9MA@h;=9r2Dff0;DRtQ*iibNh`V4{BzvrAJ{m5cf@;-`%;od}DE8<$@3uj9uz
z9^8pOE9FbviGx!=f@0Px`bPg*avmIS?6r;Qo;lG(SGhnTYq30tAQ*Pxz#9WN3fN-W
zRd&X?TS^R^5c?ep!l;qxCTLCU03+ZsDdiuq4=^-^@=IE+e->eSg8}eZ-Dq#)z#6SG
z)VX8a-dx+(`14OG{Pe(nOK^H<Xl}@dI*@O;wD&oNb<da&Av3S$0s3Z(z)=;-@Q}J<
z;aB*qr12!r&ic{|Y8V~1s3o5NKpgamAM}Jv9V%w%H0vAB<13Zan4{kR-P>WfYe27e
zVE_6!l=05^H%Y()IFa>ZhbcXv05VG9gfE0Gdd$|H)hA+&eLKF(z+3m5vJjv`=fa37
zFp`!9#}61XAj?c?PU;RHs}D`n&f8i!B`lTXn@V4+_xJe`8bI(q_iv_Ev+LHd44YUW
zY@mcyEjip;Wf~dMh*KfG(j^zz{X(mz?nu+yXN;qzLsBiv%Y0YO30#6|1A>ZYKvk-&
zLd*$Bohf(I48D}1w(1pDceuZ`G`7m1r&#B^{`(+r`TWlB4zu=#^Y8PX?iiPoRNqb8
zT|@6?clY%`E#1jtcI)L-A+IiC=j%5lsst@nsastPUm7XIBa))nMdVJ|t(ACm<B!pe
zNe$R4B*j4M5^w5N$$Y120*V*65nB7tz=kTzm*t@XRaV(8uN26rp=n$c<Y#?53i(6-
z(bsYI^bSP)>54q?F6tC&Ykya=WsY2*cooO%niWwUX_XBUrp@KPD5#|4vipVvQ-<hk
z<8Th`Uo2a6_&T)@G$)_)Uaw=#hNjn$duHCDQ5&+69Zt^7DMU-B1(FL}v$E{F&QcZi
zX8RD{-aN5Fmf;Hzi8`dCK+*1f&0tb7GRo%~{3R4_S<dGBb`(>{?REP0e7%DI(*0n1
z8y<fR**U4oO^hD=<1XtZ-D%Ug*4e!k916&fn(tuN1!i*wXm_39MgNT&QU+y(3e2|5
zq}yNOc`P%tGqZ@g0m??iE-|e2q<ginapUS?O%Z{W__f~Z;n|#T;CQ9cbzF3P>yyw`
z-g^(b5&G)3m$4rT=ur-lJ}>JY^H~~b*!ufYe6~I<#S=EWoa6@tq>B;4)k7XxN5F@5
zsE?=j#QsU4|D~izz0RgQCkcGQjs)duGW?JECEm9@&u?i44|qtGnYLt`muopX(j&a^
zoeF<MoyPOCr8tKAm+R_?UH*HACfF&Y_X!henfs1o7mh5;gm*XQPxj<*bO=NyH#*mw
zwrCKD<CBFNy)rM&Bf>lShp&%wZNDMda}v+VDIE^IDI{HE1JVT;jgo72T5mwfDkz3l
zbPiM^nJZ)LZ{Rw$QNtcMuixTn(k^FNzdgO8LTc1U;=CqnpJilPYT!J15OGmM@JZ^Y
zl0?x3ViBksb7&=PJG@8fue(=KUC7$Ua0bBCVwWkTPjm%8i^=A}6mbSKyv!TarJC+u
zes}OT8EdY-BvNX)jdyZr=kvJ9RZKRdOKX-v#&!wYC-7=ONdSy{m0d+b7MXFoZNhyD
zgs8~@vF!`SEqtzCSOhGV@);&3`8{~VKQ|!@(<gMEUtm#Xj#)tT`4zqm%*T9+KX2kz
zQxUfWl6rbD&ycuePjT)-5tqn%byi@&B0Uuu?Itb5{*S?BFIs>z+j`qBE3ustrC{uo
zP`*8BDG<)Op~x9y04)4t+Z~3#Mj#Q6z-rU+`BGIoVp^|oxFM|LvFza#vLab2WN#&+
z4YqPBK@ZCQ-T^4p(EYVw54DEZ9{h&_tK);o)0rb(;Iq-15s4+J{XeCtzJg3~4Smk6
zOP*%>yxtRjl7e>QSLWv_ApXf)KPtvsn|sp25iqCDqAX3Fs|+gf7ZA7XS|&`s4qG?Z
zlSLtDvG?;nK6TTbD*3vzJ|*-TYg;^5U_Wahp`sY>*$1nB;D{|S{wVL_dcAKS0$mm}
zZ}{d@M8{Mogg@|$xnqP3<2SMG^11)U*C50*Y4Z3@{G6JTRRsL$AnibIrRlu(t3`Kv
z4zR4wyV`5W9r8*I#WjI&a}Pj&beo8mP+&K^GAQA`W1AV0hH9-IlBa|S@!<MSVcgnZ
z975jgpI%Vb;ptb_r`Q?gYXW<*RRzsQ_wZU=SL-7is`;VTl|9`itN;*NCC&NxG;c|-
zxwhwAnkMQdSe!LkVfYWj6@;7eIR?|U3r#j2d5-@}m;Qq@wDkR1kQ|1IFYRpqhaJzv
z!JP(k@YCFg$^}IR#vXrK?ja>w=UdZDrf3!0T0*mRkaCiCJY2Cv8b9<t&&&jMWvX5N
zYXFf+&*_+Tp6zBOVvUvzy^Q<j--#B86)-Q>gX=xcy0Bs4>Dc3A9h0Q><mkZb03&CG
zw92KSL|$GqW%VLK7G<OojG-1)MFq{GjGB)+pH%6U<TCRE-fl9WM03H>U4J?H`nsB=
zaZ6}7Irtc-$=iirWeR18aS<L(T=!Eh)=RP2a>n2=OJb+SR0J-${b{h(p2oET=y%)?
z@28pAldcTBEd8zgve6jLCJki{2lYm<?M=yA`)IW@m$P$+4ou!%&uiM*?62SEZr@oR
zcFJPZ7NjWzh6bD5FI7v&w9gU&$?rZLJAq1^g8I2%_ZOE-ug}*EU!TX_i&FIxngP;*
zOyAKHt{r-%w8A$$J3Lm(#1P-afkVgZegd9LkntNfp=4@3^k<ZH${3u(3LC@p24x2N
zInB7y5|Pqt?CtF`?6O6%8=eh1M@tXGZ7FHKU1NWM?f|kVB%;|<8Ab_$p}&4Pk%VZy
zO<@rV44Js`i?h460QfCA1N`oa%Erf4NU4DpKYCa!9TJqXM1Gi2mrnl7o(G&FbQH2K
zp31*#8anSOO2rid>1QZ33G?;qFzdi|u}=DK+op#tG{Ll2<cGGXkF=+939<5eUBu$u
zS5-{lhD+O|@)_XJS|6ipB&61Wd-`IKM<M1`vLL(7Wj+E8-R?{|%Q&c=hkh#{3x)GH
zC?_*meynwYPO^6{w#cifK>d#i9`)~V`a(c~?oY1_MDjbWYk}XU&D{_6%(j|jjm3!o
zc|Z}f+fcS>mrRD>I&K}Fnw$nPiv$|1HG~)l7pf|g!GWI6hX+sm)7l`gSNF8uUOGB`
zZNg>$je0=%5e8#ujl;df6@QhQ6J<LOBDLD9^Q1Z_z@+k>bVp(e_H%eQ;EDXN?%UB{
zcE<k8mA|9=ZTs@N>?$d&0W^@KH$?gDuN7a;g9<k^wZn^oReDdwuM_+-hzy;aHaQr^
z%PA*yJhSsUDyotMV*b)sC#Oh6NT<eOc3JtZ%Ip)@oK7z1Q?o*q=~vOn2B+<`p@N_O
z*2K#Bon^jW)M_k`{%>&CvnQB9ba)MzKrZ9Z4@_{+K~V+i<CGmdCPc=m^g59#EcXW5
zy61CBH71DBy+z2k36u5cESBl99>U$aLa9a7v@9Pr0peiY!nZ=OEad?5Q|{x^D)ch2
z_^K#_d(=eO-y$wh67xGD^jJq6z+C!%pg*Yg$8ra1d&8`&!C*}BBuAboNApvmzNg`{
znOlI|(h67>$@J7W=g&~kWw-antsTJkzKe>u@u|#+@r<o;r}~-3T9A*!j^RqQ5Al;3
zWIUx%uH0Rdb%@?Wkn<f0sz1#?CV=#94RV17^rEN~S=V@>JZDofGr(?Sk5l&=h;1*}
zYkQr8%-4=;9T~*<wLISE9t+0br9-7DM*7~palK9nTh=ke{9xDW>2(>brAIbms2Pxv
z!)s6Jw;xbhDDv2XwCSl}M?GsJn~teoERw7=HyMw|w-&DtLo{jx<<Mcm5YHf$EWo%T
z!0izJ&<Aig9#p&WX#JJNlqq@$G;O!!O(Nl$ilrh*`b7uvtLd?^I?}wwY94Gnp8RFA
z+T4zK2pYFA`bHCrFqEk$%7edZ()CI*LmJ$b=&Zw~h+Zh-(E>y$goK<6lj^X64AI0N
zoqht}@JdHI6cId{pz?hl4l@(tK%iO=&QLNO8kN%}h+{-#>`D(kqE9#z*d^OsM*zQI
zD7)&l=LIq3KSzv`DSb&+<PlEZY_b9cBK?A#R+?Vps|)_moc^6jQ>M5Xk>zZS^0@#*
z8mdmdjuF+iX&o&tHS7yZTpC9l&`BCC7XRYh;BXBUPd8?J^Egq2k6Scf35Rn-R0YOD
z5Q%>L;ecRc!f6h^s=E;igv^=Vd;bTgNC|lZmlwYuBn!vBX(3BZ)lXJ`c?m*_K(O2$
z1#PNX{RIWmJ{z4ZEdYZBk}&G9mGUQ!gcx!=p<a(vV;ni1FbErh8w3#Gt$r;9yI_Wn
zsI*B?%XFDn8%siyPGC1l0)iffYd3(g^q(ewom)W_*eHxVV%i8OVmIQ-sGs?<VNs+w
zJ7ZhgZ80b(&}rqAqauM=qqZ@HNtJ4@oPQjJ)(QZSC4(+i!P_SzGL{$yA*6{&b>D>u
zm)%=R_~|Ahx?o3<Ai-OKr_2M=xGaK%aTg_XH$tuz#PBelcfwdwP>^2_652qP2jss|
z!EvAx;b6wwWKIUMq@LX0t*6lA)y(rkM)8FyqkWZt0p>9f3+p|<^7NwR85o*M*H4O)
zh*(&7UaLN@FW&I|^gbxw2mhN6L1TXbL0D;nmsX`I=wh5}B|@I;{p$-v>`n@o)lwYP
zSe?4Oe@I`)e}5m_nOpP1?3?Sc_mb?uBS4jCLQX!Plj1_c7UDc|!j%4f7JmuVrb35V
zRk1Y;v?;XI^m37bU6)aGyg*bgF~Q1^SMW6nWWavP@hojH48Nb;96yNsUGtnbgA`}K
zz+&V-V}|TdZ;|l+fr{dI?qql1Z&LMl{na;c$m3|Knnrgpv_sO#)o_?ro7P1z@hK3k
zOBrGs5i;0daF7VShf9_yZH~-ha+6c5+E^=F?n-aN0zEpo;1B#@8lqbBqa1>$MwFcE
zwzd~K^B>?B9HI7$;s0+Ta&Z1HT7{YU|3djV(*lSAXlW?7pwvJe`;7^dtENmMl9vKG
z#C?S4o(+Mc!xuJ*1Q|38VNlQj(nU->DHkzXfvdXf3tP!Z^qOqSkN{|{OEWiy9Us;z
z#>MD4tK+Zz6DQVJmRFV%KYCw!&c!^7B#Z0v3~gf!6=R;R++YY7X)_77ENccS^U|j2
z!v-b=^Y74Ck!IkD4i}jT{PI*SWt_oZpD#DJ+Znm!pG9c34-r&O35w``H=~QC;rHj+
zEhens%&C#RUcHx!OieN?{QE_=f>b4xurF?J&s#6I*8yM&i?N~Chqc@5aSNVVs>Ad`
zAeOyfhX+yZT=yOKEWDDo>?{s`<;UUcM^hRpS;hd_{X5XLhyNZ`WguF9!T0W&LRN?H
z_tp8|J5KXR%iQHz^$wz-Vc9dTb{ElnkV#MFsmkiRnmjA$CQ92*dOMBR8KOKCtH$Do
z7(5p8gOSptCpChUG27H3-Cz4DT+<6fb;1wPoE%ewZnDm~)oswC%gUJ?Dg*YE(Dbr&
zGK~0UL$JV<;L@osgpehCjN1z6eVX=GN%i+;hEHND<tG=ig^q3dRHoed;@ZlWxU>vy
zQV6fj4@Y^wdk(G>S>)XDQ|^+X^j$@)>k|dZzkui*6-?Q~?g)qRCYK-<-P|^Y?=w&I
zJPV$V%cyeQ{>6bR@k@+RY$avZWH;xoo;Z0^)>Pnf(0JXx%~rd*B05)9GQCxa{^i8y
z^n`tZ(VysSo);|59N34<4LzK?iV)cetz$I|HFJ7Gx9%N=^TN$UWC{uQ!eB?l0y`3E
zVrsE?yYt~7P_m}Oxwfp~JF@Jvne_K>PY7-3Pt)%>HD%1n8}%q2k>JL54MMv*P~*gS
zK{X%~EAR|~j$JIV(6ZaC10nW$UuCiQ?z5HFuC+s>ZqDC=&B~@j`@%R~In?W;VpSlf
zNGr5x)LkoWBkPM{7<10}>#!~;evqDQ0k=-Jl9UHs%>{&Jj?#VDivUbg+pSQpe{13G
zb#u}&)d3U47rmvBKLlf3^QdJfB~V3cV;%TNZ;UfUIY>8Jv6(4arn-CaUoz+L3N!{J
z0v_>fL6|A_khA?I>vh5=GOU9WNGXmHtZO_UmprF(i4OP{j|M7_m7&fu3K9LdB_1I$
zc2yywh?7J*6M;)``JVz4J&As+(ue*U-U5#%9h;(%^x=y4M`NskY{$Y(|8@ng>;hm>
z0S(C6@1SjAg$cod%Hk%2pm7ZQU1(-J08PydPzOXJ1pB-n#Gm<=dBwwybN{;;CJ}Cc
zMb?U$$d!~3ek1Os>@!?Y=jhzk^SC!*2D=;yXYf4R8XGF6RraMQBvPhih|fpkYFR^A
zR@jKUl++a-f*J%H>a*45l>~p7VhJcU<<u*m5x_y?hYVKxG|A_Mijf%CA=$DTTmfKd
zlES;Vv+hNlDUT@N@>U|ah5RwFJ9E`J!9R62YZA)Ar@+qBGEC_3W|wcG;TL!vX)
z=Qxmx9s`yaL%U8cgh<BYRNDqirfu|fV{vkmVxBp)lo#Tli$;l~FN0iJ1p)a;3$n^a
zsxR5_?@&O}&0CQKa0VCaCd)a-$aRUkI_QkA0P88YqLg!^^Jc+J?OG<Y1v22KA;apE
zl){Y5=hVzL`52Vn;04hn3_J+eMS-A)zX<M+YZq`v8PA5NnQ{tt1>y%4idZ#{IFNLY
zO>VXjbF|>wolO}+$@uV*v4FKDLftOy5T??P$f7jQkBgEn{^^LQIWruC=)<<G63V&=
z)V%#$q%_DSVB`>qoRFR!GSFn~>iF*)hBgjdcF2Xt_rw!gY;C4%!ol$O=w$DF5YUc-
z+)j&b5nRw}>BBdx;xBt5u{DGR3=U-LMGOfZj+0&VH0U<`i2V?d{=k)SEqWt=LC_-c
zFi*W@nEzsi0M+^s8t~Qhmnynp_t6}ig!7zg<<~>W@L1&p`P7^R55euzxZr_cZA#J6
zk9TrmcSb3YV#|u2md%(Q_`12#rMmrr=w0%K97{@B|4|^Qdd7?lOS4qsM=~uI+2#~s
zWjXc6P|F0Ym3G)kb^x2qo;m!zu85;Xa32k)=YxEQ$obk}6-2aa+8e-TK#L{eDAzAe
zd>d$%LAib0Lna4x@Ysdabzb*vsh#+f46T?jI?(MK>5Dp9NfK=|JmJG+o0O&nw9B&X
zxpEtzU76xd4SB6zDR+{)-odW{9ZJ%w`dNW3S}Q+aKvT?TEnsyO%T+D=zDAOsPRr2B
zK5eh`Jd`G=vfw6#Kejj<;gaDZrRIZ%-}*O7ksRzATq@@0HMIox);*5YyajOt38-cJ
zYNc#CsAEJ%v2`N-6?eKP(J_YhgU4_JVi4f>RpR&o4Y#gOt~qvj4z-u3WlD(d`7%pC
zWEMEp(F_^Q3((mwPx(fwJ2W}a_ZqqF^&%@$N!dXtGvk`U%ErP4=}TSM7ms923IROx
zU>afjgAx2VtNGa$d?YYmm*}(+9t9gNeJOm~C_nKT$1(~lTB2(q91V=#OkhWqGd(&$
zT+_R+I!q;OspxRj9`6O}CsuXYPzU>u!m@JKEqy@eN0^+rzYRX4Z0TqnNp^kE=TqgU
zGs}TUXbFEwsJDO0bw^grN)C>4j>KZ3L#~1OzLe81GYuyj`PW41&liU)gZ*-UPMvGs
ztkNOJDev{s;<IjS8{vm6h7DK9TJGQ7yZ7Y!x|kJaMXipSg$!`wfyqS2yYrtc9g}57
zQ1o0)0N&d&9^rP%VRJrrr^|gazp@<d)%>T6%vz!?x@1zCEqz58lA1L>o0epeR#*CH
zm#2{Ho4zpKly;Sux6|VvH)&7`OxM+Y^X)l39p@SfHQ80%%ge33v+khFcUTqoVaCPN
zeB58;p&A!kC%4rtErj=X=9`K`rwvjPSbnvK2S#hJ-1*nPny@t>%y!Zh?sy9+cMt0H
zhyTKZX>nd`T&pWe>beMc{B6krf)yeYQMy2HBIq~Q6UfsAsCaF7TAJX508yFi6Oscg
zIbBG=ExAoBZkzfEZb;Lsa`$8&iv#{0P)h{yWK8<T+VS@()ke9-!i)0?Y(ij?Q#)Ke
z0~OwT)AC)~PLY$RgpY#~2@^)GOyC%ze<7ce-t#7e6Rko7SR>w)+TJ2n8RM9!)6i3E
z%&&Q<5K#0vzLtSzqi8_r<;Ri3J3z1+3&A~Sz16IiKq;2QuQL9?2HM~q>qpc>Y^Z$*
z-V&=nxrmaQ&z&A%?_-5%yf#%>_09PNfq@;-zSM%9oC;HM_pe2}ya7r~Rr~~lPg+s`
zV<lE|N6fEAb6#d0L_?zISI>oI8r%5KwC^@iE#i#bT%hxS-9M1z+%g*R^BlZ25B3r>
z!2@w_@;g>xjsYh|Q1ELi@K&C@V^Eqgtzgv>1Pi!FE^g_D8H7Mfd<wSs;1(cSlr~bZ
zApIUQ*x#8qXK3C5%T?kc(BDbE5@cq1^UZl-8^NLTgaxP6meF%_0tHt57aYOI+1?^0
z%!E4G5*48G_cyHQPPp>XJiBaLqZ241gU!L|Al-ORCYM#8IvKoBmm8#POp?8iSd_^B
zxdyukXG!e3LL)twv#lp{C%^+^IIhcwCkiEdSH{=`oVP-}SD*OZ^2iY1165k!du4{y
z6n$dkbF}HQB<`R8Fn^lG_b^{dvhc_BaFb0D0e?kR6>SnT@WkM8={8k+TGu>x&9(bH
z#kvoHkMw7{4Z?kU^H85xi=}*>Ushi}%xvJbr6F4M5pefqy%5^%q##;u=`%mS?9Moj
za<>8RpGnw-I~S6Pcp5@zdv^lt%+64*!O1uTQ9JZh)r8>EmRP`R7GAgXP{RNEXTr$K
zvXE0RVH*6>eu91*eZY-V#V=snxdb?ghMEN5%ZK8nX61Kp?f^kGh!)DzuD(I>z*)GN
zSW*xGKSb&G|B2Afip=*4yE^hyg<D<)y<2)i;ID+?%6VCx74l~zLXyp+;zg)R(#GOF
z{L};gNJchaJb<!6l6rS+divf^Pn`|2#g4IY2!1&?<oKlfq@#9W3Se%WPM(ji>CBYz
zECj*|bob=6V~wevOWszPN}*SsKDs$&it%{?-9DdT%uq1M1LRgF$4|2+H8ikJfNV(Z
zk;ThHf*!th%i-ag^eqNmOfnYs5ofT)d=cs9esC*xarr6(WFvcMPgB??3BfxSssmYW
zRR5W@vY^nw(t5d8&v8kk;>u5PypsN^4wND{UC=<DA!|?_MbAco^^*mMrV?&XAuALE
zI#WVAl}9FHj+^|T-wIhQGgkDSD?H~Y*=2Z0kMj&@8+qwK^-CfiqV5+j7H4{D$tu;5
zv(;WXoMHP(WW!9dTv&m}ZB*HQ37OYZ(f~N@dharFnSBT4rkM+G7G;qT+mkfl)2<S!
zuw0|d9}N;F7}7GWvKYM*lrr*mcLNJx3#Xoujs2vr8Ky;aB(=FelE`IH<tCO)SDumy
z?=xd^TmQ85IoMJ(m+G&Y?n{5ba!gn-bjxk}Y};$uUrjA3kP_s?4c`XKyGE`Cn!!B^
z+8|&pZXMV>TXqsdHXe<ssHV=z+V5-0ahd^o5b;rLtGe{~U~m#5y?kR#l}Ha@`!flp
zG7Wm8ws#vP?3QYY+%Za_%K%~y6*!N*Mv7ZPP^{FPW5QC4`$RMfCPlm=>kWlu%NeFj
za2_JzAULrt;36A^WuA>bB_@bXNr_Zxhf;wv%NvPePE&9gPPz!|%%-7^1&?loY@KId
zG!ok(q+N9_%vZmIOK1vB`UM1d*bL@$LTo)okNs|Esd;Q%4r7wuC;n!a^oxHICg*05
zj0Pht+}Ym*WpwIQzyX7zpYdpW7&1{5E<mfv<%DI96tOX~@s=1pyx;ZAWO&`zq!zK>
zR5G!gJ3{H6R_DkyX-%x>Z|)ZiEQT|N^#~a|g*MnyRRu_Ox<a`bV;v>XLZhxsu4R_e
z0+^FHzIHtgWZcp18(q3C70l4pUvnOT)6d%$?Jr^uhDL|r_6O0q!+f>NQM*_9okqEA
zL%tkrQVrBzitWq?3`@y`A8niAs4|Nqa*u?foC_U<3yDI&acP3I|4~p9BV53Y+D~mw
z1(^~*Q0`~SYnbPc(6s`pG-|A453$EmBy$)FUa?UJ!f20>NbqWG+1-)aA0IO|i3?W_
z(TC4q5u#_0NXib!=z;sKc&Kkh+u&<WW>cXLPTb*x+b<5o!8wAO6X#=@?ZujvYLmcS
zMe!J5FogIAn=JLz%m3QVw-fS2s+!%gcxGHT8CzxM@5ox1*Zl@!bD1S!+*|Y#+ETSs
zxSTj2qh5REnE0o_8(-f|k2n*EGG#!6Y#e>pUm5KZEnv<}spt$e+z?)?f-Io&rgYvm
z+gG{-E^i)9uhT(E(Z#~(91-ysV=R=M{J|C090GOorg;8@4$>qR<)u)39a{s#XB?=#
zjto)B`ke`LsCNxixydcmG+!1tEtcAFIL0R6Z7FD&i#OOhYoUj8Ni^)AcrUn%H4Ts}
zkw|^;gUX>Ep29)voq#h)m6{sZh{Mpy$HFzqYmm)y;X8+Mc|^@DFEi&KV^=;d8?4?j
z8ywp5p#9IRoAYnmZ7E?bdoHXOqc?3lxrF9pdw$-!!fqf?z%$xeSpP3}Eg}wuhjBLS
z-99#2U$M}Vs4VdiHX4W|p=gkOZE><~mh~goEdpY~s!254LyUbh34JCJ+sy8K>oaRv
zu17M9{JN8dQ8z0En(w?a<U_5(5!Kj#MM<iMN${Dc{;5^R=kbT=+Dk^MMj;ho%k8^0
zZ-@c$Z%paH5%8`es?ryRn!)@;YJ6Eeo}ll1EJR#ef(~I8qu!1kwpY6YZyD(7fe2%I
z5HawBjfDR!g(wF7jqgEoR*mipG&g)~7M}|sZ?P@Tm<T8?kr!fpnTP)apk{8~mRMD@
z@7w992Q-m{Fx?629C9_n%GQjqCpO4xPi%7rNaBP7ulk|a-h(uw7~<?zuK#L|@MB&h
zG-1oBR3a9^Xk{6)CG7IZ-QMtx4W!VO^~p1Z5lpF5;$v@9zW)=;Rc1SUsn0v{#lMrR
zPf!M{C~=ragHdJgN0gx;2A^}~QhE^(wRH3+aL5t5uu;;rh<$ikYz_HySM$3FT*zpm
z6OBX`xY>+$iG3|mQ=$Rd7ix)z6F^8NR+50+-Pk?k+PB!MkWgM5WYudJ1moH{K}cO|
zn4$O&Lj$tkr}=MY?EZH{#n*l$%=njLMG<W0Z_(1C68Tm+M)<&uzmohG8CtRv+Yr%>
zIi7Q04N+XAc@8KRS8z&@`tm}1u-n~LcS42rK!z|*z2eJ&h!@>AP1XRZF3ZM|yp0ZA
zNsT?<P}&$0Zvm*4T#vs2!hOc(LN2)}H=X;tS{Rw!&T2B%@BSv*w7nn6b_MOxg&Y^z
zpbJ|VCyaN-4Qq@|MnR8RrJD?u?|Nu8z(0!|d{_17)Vpm~`cn#msjmxi|C(;N4&N=1
zfHrH}hau$sdt$gF=C-hFP?#>P-{nOkX(HH^ZA93gj>T2Mnx8^Laq{uqD3~y`r!^3-
z#Vs6Fw5pQ~vr}Wc4?Nz4^f3v*GpDSYNnRpO>~lc=JDCAsXf5^K0c~(2*zdZuwC6l8
zk9)WuMwKeA!bx_&*12F?#rd3pS(pJH7#HR=J=D*O*hK)FlNEJQdDqgg*Z~ZZT2DRN
z_8nrp6fX#tUg_X-)}ZuFwVBh)2_S2l$DE^Y#T(7uZ|b%u8bDPw$5lf#m$BwyX5-am
z6beIzx!@TIzC5?V&qeB5)tvh+SVSF7n85C3U8clLCSX;-%$Lu0p^o(IHBAi;%!}uE
zxwrUw4;ykBGrFJc#Ub>$eR}6y;oSM`zf|bUxMaVuuxJ6qDtM`1(@KtRyq=DmsiiFW
zvmkHySwgm1MFu_NK~)<dz#LS)nVJ$#MMr0qg8Km)sv1z%OgiJl9s-7q>sM|ef=X9?
z%;w#Mr+a8aueyKGagWn&CmMCYue+y(ZYw@=$@gQyngNC-gSB0t@9y5p2^LvCBqeU9
z^%a^#WKUEBi@{gJx0m00R+y1jSg~L`)hhgb*OSx^RbaxOC@f9p1CzD8>p3BS<GIm;
zX^t(&5mT|dS&J4=c7`UUWUWbNG}O>DQun5Hg=aCj5Fmag4P?j-5m`ZfOBy%n3t2ds
ztUwT!09&7oRmWv>(I|X|M!^``65$;l^v;mfrr;Ht-($$r$$tULvac)h8-g1?K+|>V
z+Hg53=+#T2@jD!UZZ?(Z!kyvx#2^AD`8w?s67VDP*qK<;prHVwz!=pHyG0>n-)D_<
zX(8=|({09l0dNybF)NwI6d`bNrSn$dm>eFRN6_2r>Xk0_@*tsi!_$k4DQ*jMpFGk&
z8f*C%{o2I$LxEw!sJuzFw`KA$v}$DpZRCDs=bUCFhe&RKl(G~zaZ08d%dX|lhr?~O
z?dTs3FqHl6^eWSMAVJ)WoPZU88-lU{8Ves6-Z`wp<<}EUp8RhFSscR<7k|M+0o6ct
ze5k1~slH4@%zQZK?7U3J<2rD_(ZFB|PF@ZN^}G;81X5#@`)hMb{$Xn{$vill#c8~?
zqUs+aKM!PV=MZC9m48)c9rYntlKzUQIO{q{sNmY9I2f^wKoHvP0H`nojv>jQ{90;C
zLVf+`^XW~Rvvu#_0Bd|-fx8B1Y;hEAEceMtaqiyA31beAh9?(vus}<;4?7c4gaTe3
zI6P+*bOd^Rc5E~R%#MpYld}I}5FoiH#Ed`0INY@=+!~pwm&~;`J!&T&>n9tlHV<r-
zuzXo<FhnTMfFhi&mG1GYQe6Lb)+j`<p=Y`nrk^a{eT`>h-{2d^SDaY|-&aSzx#<OU
z=$ds<q`NlHy|mWP*9;l!&L=qalsWI%7T^cl==t@8@tIMd&;MS2ozHRpa?mY1$>QIU
zBLzva8;>j<+El-faaFT75Bh3GcLg$?{rc2leHb|}0BV96xpcL-8WEi>JPU(ZY~39j
zjF^A<u?cjfA6}YRAlqFP;q>xZoT25sIC{LgykK(fAcGw5boZljk<M3b443XKd>hQ4
z_16;F<hg0_fBEL=aWW^JGR1$Ty`74ub`Tks<%XA?IVbtaXWrw%kNnIa{J-0K$o9t8
zuq>SaJ2KC~l7<fb^Y`f1{4xEfP%fM1h=d;~<dteVp0}PVq<W(gI2`pbq(H$y$>uTf
zGE}KqD&Eg|y)z2X$K^Ni0AhV!+`PQb$JrU5s>#t<W-n>LH1{TjCIyJNKQB#x>GbK%
zPc+ui3r$C$Rp{-^Pr>v(X0vId(TDf#+@75DY{NQ%JumN5X~3z@h5piEYd7<Oh1ZnB
z5XE{s&wA!jerE*2^!8gPjkqd1Ked*sD+V8O>CtLo-n!BD@;%i{IsFgh)OI7jRXLgQ
zu#TUnUmMlokEHuCso<*fyfpXNb(n|(p&?8A0+H5ia`XP%A^rAb)_j49>OWM*t{y}p
zsnNeGJau2#sX%;Z3EqUX5jSo&y)1>@+M6lSP1V0_?WXi6yGe%Y$$Wkdn!hIlSudNX
z%{ivSdd{v75)!R+CO*P!cZTWcD5FQHeeBd-`IN9Jo5ji0vf6lbXm!uuX=}C3ON78~
ziD#34b<E0a$!$`mvk<PNa>MQlwEZ_f{gskpOmSlQR0=$I_A`xO=ACF<0@ZqBngrpz
z9zRVto34HuATZaGo^Dqh&W=K(Sq{WeGPbUrWvJ8tZtn6UBw(*jhWu6?zSIR!B5a?_
zXtGTGk?ODG#7lKPD(+j_IT4cjg&Z{b<;UyN=G&sjIcW)%m`^dn{DPtar{zLe_m7;4
zi&c4Vy&YJkaVxe;1HCWG*%38f``r){FHz;du250ql#Nf0S_wLJV!c|^C4fc$QV=3?
zEx;x^qiqFq)>UA?zVRO{NbXskl?qJqf~V_$Ifkv|*OkrF-ZQtTS+(8MqiM1<u!Cfy
zO&2y56^h2v2aOPf^TBsKLAtWK!VSr?@-DY#de6YelZ#Le7h@*`yMCFlKl}l144&h`
zZQy^^*i}2&vZ)TZODK}EmDgADMoJZGC1=5PAsM+Dob_WG+I?dZ?gt19*^?;?9-Thw
zr4*C+RPprR)O_O}O)<=&Y4_A<!9dl_5Nd(4uIdxYhGxaH{Ur;M&7N72@YVv9VlsWD
zqCg-PN$z|z6s_X^xuk<a!dU*C4`6tegBc57h;lPIO0PxADD03Xd|Dtj%ug55ghy5Q
zWwHXkYMSz76VwESuePqu7jTahwLeSj&2qYhU)j97Z3!tr3%Ujh3S#Et$jsaOq5=xF
z)O6nlk(cw0|K;uYit5MkrTAg|G$`KetPK=EQUf_k3i5-k7~}@|E-&aRz&$f)n0ixo
zn0g^~OxQdqWPm`D3{Z*QFt@CfyPrjeEvJqA<N7yC5?Zpc_zaHZ-4>P60%-`&X)17a
zHsDiMz@FG9<-fBo_v`IJ{<pn1dhl1@DPHJ2kVv7xau&>FVlC{mYPD^Y%Wod+c0b@(
zSCaNb2c+J=`5fJ#C|402aMkpRzAU*R#An42k5@hZ=#6$P%c9~5+~qMm39eVy{Jslx
z>VF*6#GOOa;auPhdlaLthJ-9KAvtTfn|CF@q1NrjZm@=SyLe1Ag;3<j2{i=_tP8KA
zI9P*LaA!~7)b?2{5tB7OP`>XU3nqYkipV>4jork31~f^MkMhV%d8p^X0;d#?V*w(7
zW728OS$Yj`r7j%K3~580mFqaIO1uV|OrD%B6Ej?QunB+*&zO0J;{e4=!Qg=W56=V;
zGnYBmAm^KOwD=g-vvG_L01WlaMpp3WY4L#Vi`kA1SB@x>*S{9gIZL0v*Z@<KFgm4$
zrJG0201*RGKmp+kY(mQdWXmnR9Pt2Aiv*3G4~kLx?AUcZld0f%758MMR{g}`1_NW^
z_Jy-LM=)54fU4G4Vg(EP%s6b<qsPJAG7j*$v+lw4&&S7M-c%TQZEGf?Qe`r#PF*8g
z?cXi0LpEXml&?MS2E;fz`GBN&mQ3h3nFY-Pl2d)ae03uS7@v;|aDqYG?G;;x$FH}G
z^w_j5W`Z`}Vz+|v<<+aq4UPnqhuQ79`g&arNoIV*sE@7YUT%HgRq6kr<DNM$OXb~;
zci9xvS5HccnT0vYhD7Nrn1Q;2=uEw+?{BvpoaaK#Bgjg%32>#5)j+7n{~Sk>pw|35
zAyNnJ4fM@oAJ>UXzuh`Kns&T`bAvLGNPN;^VE2rkFur4s59au71i;ZlFa)v({r5%g
zZ;zKMxIh8^tyW?k{mPC>nHJc1<w}9KXn!EAa}{hiBF3u<*CZ7ub$+Eix|M4*j2Yeh
z%f%hxv^6HkmtZ`F*aI5v#m}XpY9XGNex_GoghLeuv%k~_<PVtc(!j${j8G9)ZP@*d
z@ek@)zN!<X$&T-h@FH~9mULpefpg5w&P+zU%PM8d-|UvBLiqe=nORrb%QP5Ywc#kV
zm`e#5LVyRk+8Lhi7k{=;a^6LV?#)lgywm(;<>ASb_2k;p`3?N$Y>P`wdY5+!L=66h
zIs|t%OAinBXFdl?%L^3-WalTe?GRI0oT^bIs8E-~^!{rRzINn_g#3^CoW?T#A0Mye
z0g@Nn9L#lutDnt!H{rD7FQfn>?ZVSFFi4ekTj8eiAXunl7m+$~1;z^X;eWzgNT+5<
z?PI}D-#?v3noD34PPpD_4@ooh)%l0f-!3>O3ASdQkz25Zofy%77dN<juMa$LY?n}U
z<X@ZXH$zY5FEY<L`}RU#Jvtx!&Q7@IPiJtF+MbnV5pzRqe67E6<dCw3;+YD^2mcZY
zI*e$rC9-=ZrAz?vSd8SKAC5)+llJ7`t^Uq3Ugqb@6Kny4h@MI+vLJIf|3&rcQH_Mc
zO!G$6?<C>NWK7L*dqm9~l+qU|KwlcPPTT1n=#;wQ3cf7B|CvbO_t=A9JbH+Bd9w|Q
z2dt=d@)6d?ZUD~XAXpBc%im$9$sx{5H*7lpYS3C6_w1q_&u_p!GbIL2bDL6`ygRQ{
z%dh-b`RAPE&w$@wACJzm2Yw|R;vr=kY&OFSncJ0Ya^jD7tX3b|%(O~W06u`3J8ca0
zN3OK!XxVQ{pl(|XukJ97B@t-4>_9!y$p4LK2)|TACkKUu{tt!1kv~ktsrqHd{!wiU
z-)UsQ91V<lZt<chwyvkr`n!i1Ll60x>Z^M_`_u2~J@BpJVa2-1!_)I=KQJ?-rrKDV
zo}q4b0Ln#}qJmAwl7Y?`GcBv>CxqAafdrhwD$K4kL>j>MarSh5ddRx&^>cqc8<0!>
zi<(*a^5Ys}r!YZIhBUYf_Pm{Lw4GoX^u9h_B3)U~(aBT92=>07hNT(N7}1i1M<48T
zd)=Sy{}G&_wcW!u`nbCsj@t`9z{_z4XcTxk&ag#?cC^`EAG2s%6)wg;UwU1}RRHOV
zDq@O67j4&V`Puwrl$ZlnYPRA-MF)YW%2@V2&PCbk(yJ~@e&IW;`i^o73y)6|*A}!4
z)v-Y<dW%C!(%}OYe$jpA<XbN)tNIR!h|N|UT{B3|*i<~1y*}&u@7GplHC!!+cUsw_
z$+8A3=Z_4PvrMX|u(d8nOA}J!^tht@?IdcB<1lfeU+2y<!f_J}Ge)i^A4t<gY1ZAK
zRM514ZuIqi3?I`nx<RFZ%w8A7#2^y=f|_O-c^h^~hC;zsO$L6iN1Te-<rc3ly_Xw!
zj36fcWl4&ehO>af42U1TMFMp@(%C`PmY)Y9L5Ni*Il(f*Bs9WY5M=$ft^IMD7N<_{
z0{4>PLv?dqm!0=Lo_6ptVpSqvkCPxn-lqvBE479{{M4ja2D3S^K62JDv;te9t^Io4
zGKd(acFGY?pFwHMK}T4I>}#RUaF@YqtAJ@giSowpTfA9R1%-m*3UVKIl4ouIVartv
zU^}-fRLMD5llP||)}ht_%<o~+As$CG+KY%U%qoi#h@061JA-sJ2JX*frj#iMZfIrN
zDdWBLPig3%1G4~-z<JjQ$?lRKKh6zR&P5yoS7nYIIx%n#nK$V7pm6{FV)-|=OI1m;
z$uA+FN$qfrm4*E@xt9gYnI!)w-+CJ;Ias;!t9!4%Y#1k6=z1m{7g;adhW_HbevNiL
z)rGa7PK%XkFq^94k=}xFh!f3{cip|VtxCTQLH*yPeoKu3aRWhNUu!qETpmYwsdsw}
z*G#(#;zn7yA1<!<V-s;xT2>$)C#9tx;s(;HWzX&0rGOG8*DIG{mi5Z3rkm4mXpl4y
zLndCJltSET9=X(XzoD3rZ2|!>oY*YSRry#T^s1k>3r%KL)ML(kw*R@gV=pUJ<o#I8
zXgne?drG9hoI?|AWq-*rsCCy*zpdaGIIO8OZUP{}uiJ*LP4SyKbs{f#kQ$s(gA=GV
zV&`HEjFZDYe$C;#qj{&CE)_SQY0?*~P-cQ4BH5XKjw~u)#ha+yGKjaaN53xI^({96
zdKL?35q@fhKw@8A-OE;Ae|QzEklzF$>=54hx^ZH_QI6o|+y6|0OuBxF6fHvWqu>ea
z9tSj_>{EZ|nV1Nh3ZaE{s-{dR9*{t2v3hBkPluBHsjd6it(qL}C0X1f8Ro`H(E<s(
z<Bmp;|J~<Fg5&l2b}@WTgelr)KcoNgH{XJ>$Nk&;^$PFh{IM;nH>ca{a>Y}21e_EU
z{KPH~DE$(Bn!vQn6j3j_@!%998|EAg2EURj3)l~b+-xQ)V#L+u#D@*ttbnb9lLP=*
z!^`W!+L6jG6w8q5n}468(-XIn$e&k4Su0h#O8%!{YE*M;sGG^ws@oc1=^^32zi!0B
zI;!EXl$coO!TG`hpeTS&X1?OtD;JfxvI~#_HgC9Dp1U53Y#ND#w$O(16)-h?{!F<H
z;YZ?|$0;F4IHDM^2ut?ImU(Y2`MUjbBG#M>4B<;E#C-EgiYTL*<qp{qF)l{cGN#5#
zJ#r$dHI2#-T%=aYGck1Z7NTO1uOB8x*7E45AE|RAFjaL|T1g~fxoFiuIU(_bj=DVn
zk~4$*CGUBlqs(L!-h?<U)D-&fT+F#;41=S<fQv=S632?KxJcwPdZEMpT9utakQP*0
zQ%HmoK_>l(rvP;p0cA`hxqc``$~P@hhcb4Bd1bpjM7~mVTiLQh`z4(e$N~vCQ2`$M
zUm{0@R>HHJ)oXFCj5lHox;Q?IrzG&D=?s8Uf%2sV4S)&(ZQS1l6zz6Nql;+#Ai=VK
zS%CbCWan5JHec&&eI<jz0;iOTh;cqkLOl@QPCAVkJL<`{XPV*!EVm0WfS-9S2{`If
zO8U27#(#bH#LWZ3JC4KTp^RrM+N2Wll)u*Qg9v~6W)_xZ)@nQ}m3Eo7i%Uvi18Q2#
z8(eebVXELjb{wHO5q~x(@IXPTrbduS&FIX6d-2AxU#20@=)R_yyHls+3Y`K8e{RZc
z<fg6j<mLNk9tskoMF!ngYy&Sqhm%vdO)t6xNK#dKtWYw*CtE@!=Ok%_sRW?m9F0Va
zv9}Jhadf!%bsUVfN#+OYKlLt^cU<^_s`z+}ic!sg5g^lar4l83qJuw+rw(V)sR%_?
zhPr*9<s#A^-RGp1+7B%}mpK?diAK1wlUpJ8(RVksTNFbDmS-A9NW=GH|4_z{<_co?
zMjh?ITRqH2;V>jdB7TOD=0#19`J7z?o3S~~Z5U2A)d<VQIc)?+xQgf2EZ8%xjgT>a
zIg~mBnOxIE`xI<OH2qvo6~b9|)znKwO-tn<ST2)bS4498R%m1nIGP&bY;z7wSR#ue
zu*!D-?7{>7mKXz#_8|&J8VH4hudn$8?s0cmek;o(FLssoyd{(N)Mva*`_K8HnCOf8
zHuc1sF8ZhXX2FtxJ1z^231$11+sE~5R5HH+-z-ZPGZk8Gfq06TV|XTa<ndzPC>ipP
zeKaD_jxlxk&rvoz<ry|RiD7E?C3I5+i7vea;h|MDFr*pak0@;}4OgS5Eu@Q}O8t*A
zSD6ZQtFowY32w?Cfz`p~O1j|NIzz*9&P$NkPQE;$IL~*dY8ybw5+Y)YF_Ny%-WY!%
z6$D3Wq+cHOyYKAaBS?{xHAi*oY^8^>5elmb387f2GYMe_rmGm?WHF2js9{L%Y1(N7
zH)`my=FV2l21e+-^YMDO?BTx_dSYicO(D17k*N#rhKa(g3~v|liqlG*%q8SgxD`|B
z*%6BJp@)=3XVhWWiSh`zPOH<tFFgSuX#+tdCg?He<r=z9j_FaOECJ$$!D_^37aQ{B
zHzkItD@n~yUuV>D_#P<ISbIDHnp@yWDxj_S^7Rm|+==vS07X5c*pz!COC<RZVolNK
z#O4XL^|S6An`g!ZT8|mO9e@`~Lwp)!4Me(7{*t7g>%v<W=jYC}@e_t8cftp9LB5&!
z=Dhu&vyf%FL!g`?-PIEBR1)(D&sm|hblFG=C24eQR>Z&^r>W4BId8;dh^6C|zMIR>
z0n^f?y|&BlMw;sX4Bsg+Z*&D$WLY}^ry8z?Oto7>RMQ@3uuCds^gV)@t7p&iiLm=U
zQR(}4#y?c{Ld$=}51i7o9FIU+Qs{JD)Faz2Ij%7$wbo`W?*YrkJVQCxGda014BmK&
z&fO&j{ra2r_th@2TC+&_&mICh_ji&|Y|>ZZHQON<73W|8>p<%{jP-RS(*^P6!ElKB
zUTohPimUzkWo3kJsN`Xz^K{{HoPUwNnWdC_LJ!1H3pLfno0RRsd=QXd1?<MH*zNbD
z?xj4<zhfooYwt3TSB{i@sqIfyh>1hoA4#Wn%&fhSTDZ9v)gr=h;^jyj4nwdvBX>Ji
zwm;P_BOt~Ix;RR`bfAgo{aby=kLPGri)TrJ5fP^eR->MoqbcznJ0@AdmHG3H)dn~N
zu+Z|AkY+NfMA7V>g#!|&PkTN@3%jnyXq1jo*K;yhLat;)j(5V;fbN_f;t&{l5KT6f
zPHaVXWa(3^Va2aq8;g)i9$D(|36FYBnmiL_3UD)FFP7K&Hg8nj!PTmI#pi~P>cy^@
z{;>9hI%-5f)@_YaG-E>YRFC0UDQ`5|(%#8F&Cnw0kWLwS6MzhPew!^Cqn(YlOp*@?
zrPUnHa#}$tJ+(MbTO8GszsnwKNL<eB84As-hxY%gyZ)<I4Dg@)aK6UisO{6w02xC5
zjzjHxaj5|BgLjVaaiFXka9(Qr&O}Q}svgl7J|j|u#xS=|62Hq0>`LKoCu$jA-M)1l
z2yEhG@ab;%CkCEUQ_mT*VLhuKZ}P+3->X7^@@jMK{YQs2U3w+((4?Mdp3D0f#r%!=
zLH;cu@Be8VP_8K;<>hbSdlixF-KRa&T2&Y_YHGLl83B80qkag>V?}kUuT82j;zT<=
zjd8fh8mG`Pft^NrY}2T5Gf}8ebwS-PKYOIhqoRBZgaqEw<a&pW8Aox}OcOmG+Yu<M
zYcOIt$*So()8M^>?R1td@PTwrm%Iv`^l`YS5Z#n6$vzZ17ubHxEupW!HT&SI{Bi(y
z<FU=zHhR#<!WqUdKnykasCDezA`_m`Ooyl7vpsyJ5aTT#y^1a>%kx6(D=Tv$?VnsZ
zk8gi_!T<tZ!*FU>O@V!lGH%rQmmO4u<H;I?>tjXTQ|M+LBr7;9YuQQSUhmxNJb9z#
zYxiSo_cy1W3!~Vl)!u!9xC${&Bl0C;!cBd7B3%eu^&SH-tKl9Q+JwkbrJppz$6gmh
z`3z5|6n;wkxa;h=j<@lDUBHCE0#k#)l}wGVe1J5BSn$$C(C1m52nzTht?c_SsG;*)
zkt^T2hJG$PzYmtKr1pyJ`7G$lmJB5nViFNGZ=*5)^sb{*1FsBepO89qK0vB||4#1)
zHEtn04DsVgN9Y4ch1x4CL?s34EsZ0`v~Uk!1N`6Hc%)3evJa*@w8WKEitmU}cU)!*
zp#=rmKr;;3cP`Fr<)^jDZn8!FP*p#&VoAEuU6E3pm<#Nkpo_u|VG76LEf}`F`B7Ez
z3CN&i!LN#)wimCzd(!SFK-D0ynwWb%(lm(y_+Z>W4!S!rKs2px64dVh0Fgj$zXO;+
zSeGEo0UdwT=rH>5(X$7W)2GuXlV|qf$%N?c9#ko$m<p2x^K+!g2th^&YUdm?#_W>W
zF;(!Un<)`N)K2CE5kaF3kN%piH>+abPRDWPF$FCAD))<3W#<xuuuw8Aa_NRJl8S|q
z<u(jq#iL_0JEV~y@Dql%%eXm%y|hf@<#MwLfC+y>qqjxlRwYPFZNgaN?V*Tq8Ryl-
zY~kLfh?+Q&U^kH=PALsz&+U*vRGDb_RZ}?A!DXW$x_<P$uGYbvcJRu-j2TYr&Fb2l
zV`D@UJTCTxTUX-PX|oN3x`W!<IZY%|Mn$`;x|x+>bHZqx>!47G5g}iLL|HWs-eX2N
zk{W+vNvNNEF>@<Wf`le%iHi_811K5whS5;m^um5J0e*If1b+&i{CWIjx|i1)8O$S)
z+hV?}o#oW#Qc8~PvYh*2j=01+*<A$K3D*&!!l7o60@S0;O<j42H6obMZX`8g2GhvE
z*<w*F!v0KC-gB_;5MUf*&LfcZtXx!U<Q;$2Jv1OE!6l_3tsu@mtv&^}R=b6Bf-9&R
zBrg7CQ?2Lq)uurgU%NoY$Hz7ev^T135@m7pbUj;^`S{OjxyTRPi}7(}z(3At0d*n`
zZR+yH*|wQ^&IpABPJFY^?zx5Hc*lZWxm~^}Jz!jdugU)T#jJM5LH(gPjy~U=|3-iC
z?|wbSz$2=Y6?@$&>iS;a4IpFK{p2vZf^iHKcu_Z@uuzpEy=;b44^P~}l0yAzu~?oD
zXXfw$Lx#(K6{?*8U?Qh%Ex0^$cI4yF9qSZuoUvGX0no68G|A8Wz=sP8gVAZ@Pre!&
z^I-Dp)9KlhAN+g)rH&=`{^Oy7G-iLSN0m(t=$_}}JI^9M7X4I!z`3fv>->{Qa1!_W
zY@6rhoulCc_rh6IfuFGQ3xLO^5|j@Wr_^=u=$fA)oD%rVNrL^AuVLBrM;F&Gt~m{9
z8MvWE%Z<{e^;J0BG)d(wL>6FY(h;mpnRgRiFz3wfJ`8TK=bF>wJ7FnKah!j7QLKhD
z!ztS%!DUsi7Cs1lHwif!g7Udd*vO{-{KO`qlNGnKiE$`fU`$&q0+qh)fS@^|nCU(U
zU>FtMO#Y7?8*Wt8LtN{WN<Cyf?HGomtds4pqOj06G0$p>t06a_&JT-K(jUE|7uaYx
z!jir7LgVcF01M3|;`RX-nx22L5P6ttD2?R$Y_%Jv*YhY8AwJBc_#~m&i@Xm}@(d18
zkQ8hfzuX>-Zi?0*4HCTxeqDkGMuW1Yns#GQ7tO9Nhgjlpj#Jx=@IE5YO3(~A0UFY^
z5==Yk|D)?+02)|H)1<p%2P2r(yK()8#dcmVH%(P<_x2UW^4Den9N~X<C@kdRgy6NM
zaTe&#NMhrkL)Go5Ab|;t#S*vZn*gPYnPi_A$_5mmOysG&oF=AiPV(_~R|7S+#p0X%
zz-c+5kz`5jK7-}G=3!8I1WPKoOj+8tDM6u1NdBZyfy=vj6NE0*Xs%OY<@qM0?W1Y-
zGxVR#H=f7PFk~D{XtsZJ1}Ux~=(a_@e>yrj{V9V5i_yt185x~?Z-3o?`T)L8A7&qo
z9-X>%_V=;<2*o~@WAGQOg?-=zb)9Sr>>U&;sRn`GQ-f3QE6`OylNd9js@J~dfOeO)
zwX!-7rI+c{s`-8g2(3(td$B6kUeSXhmn13w7&pK=Y4p2$bvJ*p%~nr1di+CzNSPAk
z%n9M->Yj?~38Y!7!oCm!P2mU<T`=|w;KOpZE@ENw53b8!7-sFE`PT;ez_ac0Z~vBt
z<EyPudj&8|9qt>b*_+udWu2p@+H)>>Gxq8H)HU?$VL0=sp-Aiz_?>c=j}N_8J_v^e
zp=t5_T4!RVx=4Sm^kFQ4&<Z2jNB^d+qHqI+0wr`juLh?{8E-H;lA`fpSETI|d!0|O
zbGsq%N3Hhax300O$`?n&(7disOK30wRnqWVQTM{(ouYnoJ7^smf)cE-k?6kKKLl^V
zv%}K2-F{V+N5jzp$elC01zB2c+k$NS?Y;gjs<N>D#Z`ZY8rJXAmt!r+6e=*jJ%xON
zc7Po4dNJhi`$Kl$8gGUxoGSK!e}hzBuA|HIs@yiAI!cm?_1j)f{EsPWFTFIoHL6gb
zorC^1$G>Y^I?=h#d3A4})*|-ymZEenr#m$uZMqYQl}?E3cePrP<WZh4<FSktj@$|7
zuT(-rL_UA^Ezus`LNT$okf1LC5dQvj3w6gZxBFOmWOa)Z%j3E89;nrdwLk%PA(*aG
z-SM0sxNe<8G&GJ+&UfX!Syo<E8|Wcrx|;AXQsBCbk-qfG)ClM|la5)TupzJ|j!v9Z
z_ouM7@+gw`n1odc)^W^tjIcRy=bF9*N`X4!t(t#G|6^d#(iq(jxxL>{A&=LX5cO2#
z&#PUzI0~YTv_+(X?dnTV#ttCJl#cp}x5Ai-=w03MPT15WeXC(l*52E0yuw$)B!N?H
zmkD$Rt!BE)2$TfS$v|rN7rj|cGo!er31RHLvXWzr2w`@g$jVkthpGpsiRx)-Xbyc7
z)cX>Tg1_rRywe1s<emNe3tlH-FPEw<0viM}Fg7=r$t?myf3;g%Z`?K(-e;pfVjj~)
zM-lI2_bC^*$zq#i9S22$0EIl3J=)BS97z*5=%3%i+aWb0+v6b905w2U<l(t~=Og`j
zRu*Jd+JE8aVtw-Y<nxTUvG`-Lo;^Q5d3r|l%oIja$!F(RC;kI6Bcd!6ohc@YQqRuU
zCr<?b@%(=<f1mSwzJxtWO5vOH%abQBUOjtvetKpn3RZAMWcY<F>=+R+2Fv-eckfR>
zynH)9d-mq#+u!W3jVKrqB>ei#hu@z2rMNCQFGU#t_4Li@*)umz3uQnIKYsr9?7f$8
ze4;rk;V4AS=2XF`oBQu=KiIjH6skmlR?R0TWmyPrf8utv9a4o5jHxg*EZrcHg()=)
zgNx>7S$Dnt1!ILYBL1S<T)Nq&Alk$wmQ}y3{bW+W((w>qo$88`C7rfg_c;R*$~bLp
zhcrynCJu!Yflx3n>aeS?n|`P}w~;6))AGKJ+<@Ek&Gn(`~MurdUBZH(~U`f31X}
zQF--Mf7{hzrcp%i?Sn&jAgS;`i)v#B=ZtDl2bs+YDYOm;OWIa(jb<pqBFdmt=iV-~
zET|M{EO+)o7$KupZtV~(Cs-Mc)Osr$0{?}ftL<hnH0`Djt|kphN^$cEw;RR5FU@7`
zEKR`#>9kXub)SNw36tn&e^rZN<<!ME=!?a5e=8>d=)-8q&;whq6$(aBJWd4@1i6eB
z4?C+{z!Zw__)GWI+X4c?hTWXdu|k~cxrChwO{)Kj@`z}Vs;htYA*t0UBo&1aQ($J$
z74ae2Y=&SwElRcHzkgac{P<+iIxo=%(n$22;P&>&Wg6?Y3vYO^1t)RbE%WDP-7mW4
ze`fH?(z;NRMQi=jZS>>6oB}B1KsoZoNg=nJT`~8B^m1E$Qp{t=6a48Jc$IY+A*fR~
zl>|HrP6De2W6FXS#M#mQibkQ{oxS<h`5PRaFd7}}op*Rhm!-kXhz@^xKKn0}7YdPB
zNLN4RywEeEtp4;&Xi4o)s6x+QpFDm2f7=XBS)V-peMU~6zOw&&{_X|*c>QwrkCW5a
zZY}%0TZmYt!BS8Is9j1JTaO;I)O6K@Osv5ntpf9^XPl{p(oRoM_1;wLIy>WzT$BkY
zX~&m~a!8?&s58M{j+|jyJV@@wo#)8nu@aW&BfWj-tLu9d$E8u<D%qWWrno!pfA{b+
z#l?407@zjDvM^vyDGSY=zW(rKf-<F3_6%i47NsoX=<NaCcx36VH%cgQnfNaGbExPH
z>*2%VL#@}zjMQRH>k_cYQKeTBVCG2qHnAQMMMqYviy}D^>=%!osL}{>Dy$n?VxjGq
zZ8yxJ0y$u4&7*j%9X6#O5QyJ!f4DmXQF=>$k3f`++Mh=YL|dj|8yh%xsvLB?-Bbs}
z-I0Z*93l+*qfFYXJ=u1H3UHcq2mD?Y;EteD1ydpy?ZBWqvd(;Ik`GvTGN@MV<~qd`
zvG6tG=NMBAS`9+u2Oj~iF530F-T*NA_~QXV_YH@?Gw1{*-z(?@(MJtBe*@qaOaks~
z!9SSf%vV2XClS!T;0FZUkp-m!x?Vk!v|I4IgH6iP>5oIu9aAg`&|j%stOJAX$og`@
zrbmLkAG*3)2cknMY<FK^2l_yWe1ph$h6pboodoX+5nl4+)+J&k6_6iPP~_X^r)SWL
z>jT2#$ih)bhS1t(!u9P%e<Z0m(kyj1mUg!?d6*~Ik&C9b45iGaJup~~tVI_rM2&3x
zV6fPNLy=ni_@r9(zB8v5WJk#NWgm^#p471ntkjXYxQca86)I7KwzwTsy}m&~cZMc4
z-w9h!)7g}>f`Jp1r11UeFU|GV^Oc}#PIy$QEXdD+t~DhRe*bCue@Ofg9<|qA1!9g$
z6Cpq#N<hs*BSDligOU<6+u>TCp0P1KMlA;mXlf415}qFW!xNMeyduU|Y_J^PN#ka>
zlN`9EzIn-JuyjFrTG7>9q?xc~v;KhO&u!qYz@5TK(?>dsalPwH#*$pQF9k}x)F#ed
z*PiaB%(5DBbcjs5e?SN}cyTCbQ^o@>+SRHKBpDn=Cw*)pDVuoZ?WVs8I#QNb4#BW!
ze()B7c+y1U`Pc1s6IfBg%#L6@MH8A{aWsAHzBGj*6a#nYTDLvaFjA7JzOSCW*UE-}
z&|cTB0|Cy!K#6qi+ikZ9HwCt+qE$XV`4pCs0uNAsy}&3(e^}a9-Q`b#oTcf$1kT#m
zKSkph6&G$c`<DxVg1ha_(7Wjzbf(jm!@?&EFuX#3K3#g05-&XxZ4S+5-0pI_sL>a)
zOOyROf^8&GmBCy!aS;I~4B-X}lM+?j4_y=PGT?AKrkpcqSs7rejO^{;5Z)@5j8$U1
zB~=FPIn<sLe}8&LcLG@!MnP_w+sfzz`As`SQhXev;B!=9hjG62LFVpVRCL@doM?&u
zITeom(5zO`Ea~2<uNN`xl?9_X9&Zjnl}J#p+mQ5len~b|{U^|)_edyf0!i+R?GSuj
z5l-)sZG*Qb$+))JN+qr|=>`Bgs(HANu=gSoL&Nu3e?@RfQ?j_{hdx}yIrT@~^~-j<
zx(sPUaBMW<{gQ$#ivAmVM9GB0>oM%Kp<ok6QoQs-U0oKFnVbk-aPaE6z0=WYY0LEG
z7eaCAy~G_SW{LYD*-DaR>wQkrj4SMQeRvZ=@b)Il-GCyHz#E2Y5omt{H7*Q?w8KnE
zqiTnCe^qxrWSv_H%p3l!8h~juXvz#MS$Q4r4k2Pwa1YD2Yq!@+e=7z+0irx+jk<5H
zH$Ke4_|)uI912hvL!{p}Lv^vLy(0ng64og3Vk<bmB`QVcj{#V5ii(PC0LUpcmXodJ
zx{DB(oa3gihfpP;%_qC@V92O+hTAx>i^M|?f6GuNA@P?Y-Tg&>H5xDUF6*mmyBb2)
zqsi-=_06hY``YASI~I_kvX^<mW~HHcS9KL?E~Qx85>_bp*y(+&0BMlVZ0Ip9tP?}&
zlw8grnY%e;($N`nOx&Ef7RIf$Y`noBj7z+sy6f&W=5|<9p$0R*G6~?iB-ji=;Zk6U
ze+Vo#&o0HCS)nL^VM(6G9|}UIc7hO0&XURdRdc<>^o%@IxBvznFfPy)>%I?(6`T&S
ze^>w21dq1JK&3^Nh^|C(n@7Vvj$3&|U<+fqoJd~Ck{9;%CcBnKqyYlO*A|*4wG3e+
zlHN+R8?ON0&ahmfy({!S;3e=EsxX#sf16<$4$ribd(vu&(mp$VA7%m^iH5mYwE=l#
z&nOn&FNk4SH9q;oO2Jj)q`XN3^dHAV!gH+yCcO8rp8ZXQbn9|3wvJobhao{Kll&rH
zy%*twgx1czZdj(9+TTAzt08gPa?>oTRd`+i@P{DK$Q+sPIkKy{5{h{Si*6IJe;^oW
z_r7va>6Jrfo|2+;RYZ1-l%tn003`$}@=>Po@Y+n-hEn`G^Gw4r4OELo4Pe(z2cX9h
zxQEgy89ovL8~%OaJsGAdVn{B;_<fCkApzpEGCl6VYA6#<zDFH!C_3RPlIGDrU}O-U
z;L@GwyN`)bBJ}f1fT&Pcqg1Q9e?mN{2_L};NV*xE$d#f%1*nvEJKSvj%N?jiOksU_
z75h9&**#HTfAO1f$r7*eQ>fjn)L1y9qo~w2uB%TWi87uR^y{&S$6erh>AlP$RTN@H
z?Y0oT`>+c++LWjwuN~u_XozIb7%<5|Q!lN&9By8m_QPL+Vc_|5JZzsye==iwIwS$b
z;sO(Kv}~J2Xl$VH!ETVyA5j4n+pmC9VFkp}EDEtxnqz;GL8+{!LBIRWHO-Knng*&N
z6EzLQ+^=a?U;8x;R?y@S$n2AWLci@1bE5CvF5@#BDD>DF)m0ZC$AM#&3Af%<-4Od6
zh`AjAXCI82{i9_CFlQ{#e?3NwMKtVJKar4>eWn~UVlZ3hQU2;OvR~lt8et~-rp`8>
zk}~UgGlxK}jQ!`TihZo%d-%zAH<(_ki{KN=V3KXIgXMA`I^<3PVIO)4Z~&Hvd<NPx
zrZ#gIDan|7039$s0kt3U=^~6#g<kbLl-F<wNK=HNwy*192-bl_f21Vhok_MQrcaX6
zCyuc)OQ{>grG}4Pg=f|GvL32t)rY(w35&nD7kgNaBXzPdIYJ4fV#hXM1gM{cU|>`i
z&8ms|=9pkZ4IOu``x(+w4negN^Tn5mdftUNqY__RMjp?>PrmCd;1kfyXKI0Vve{q-
zk(S?hFqiaLDzVMJe+6(;hbpcVr+cnjQgq$Nq^NK{K=|p=BIX<gg#h^yuSaO&pnGy%
z9L7TmR0|t0P@4^O-D^C$fV`dv*GVl-o(4H|OVJ_9^f)8<n<x_$zbEGHtLOcg&$haQ
z7u{5=h@S*%-dVf|<J2Io%7XiVJ{klqRceibh9P4*Ku$-Ze~zB_wnKc~E38y0hBgr-
zDD=Wbwb`^$S2QKqM@IoPw-Zr7r@BCvur{DlXktCf3TfA%Lr$^1L$itrQy>7{)J|Fc
z)i=VzRN4-xY?cix$Bd=@G~>*&8U{xnCran_A|ob~`;b&JZuaYC>xZaH(79a&ZGwvT
zxpbZg+Z!xZe^6=f!+VqT=CE|cn$tSiSCsoWArrl;tIMw+pLm)d+8jbLdPa?DxGn^&
z2#1=bJ3dh=OMVhwKKfbM9d~^8`5rXEN{lbfC9yZD#Qyz-f9eydCL(4E=9f?-U_Mml
z*_>KaK-I;t6pp4trFYmaX^|4G_ZC4IY9JOSZu{*Ke>eibPc&XEM%3=+VHV8#3Q%l@
zcfGs8Y_P-F-2g>#O-7A3s8un%Zj6mLw+u*}7W!^iKeH<!yw+sMKxBU#U|BQFb<qti
zV#U5c_Mnc=P0fT4f7fbaJCW%G@lWgvz+I!H7gZlZ4e&=gKpQzIsNM-KH;W*Wlqt)F
zn6%dre*g(gq!R<VM~q=9_lHGQdd<JYCci{b@@4<i+Glb|66tSPoE7b>|FjtNTCs1D
zMDKv9()O(AGTX-APFVDBcDOf7p(_NmQ=iAcweE$1yJ{}F%3u70ElY!)P6}81@BcX<
zY*A%yWOH<KWnpa!Wo~3|VrmL9IW-_KAa7!71qw4aI5w9AK>|dVP2&L&57fRdw`l^z
zj@t@NVn<e*mu%w!7=Mad#Xtn`misdE%rno-^4*LibVlqy|98ILd$;#)M!RR>&wM?5
zcDi?TBE-xjMlmI3r{{a_1v)b(NySWanUHjLy52ib2}_=y{<6n-!W5M-=yb7n@ap8d
zzuKpqC7PMkKmGc}>*puOuTEc{ytY3cozS$u2GcsxT>HUNx_>e7pf~1_b8e@c9Wo71
zyOAe$V4A?|iu#wIi>U<;!=OW&+GF6$Iw6|Lbnr5ji6$aUSTx-;u$&QLTvm3^L_#GI
z{#mtJbPrXc4GAwdZJlRpZ;w=%FnC^EE%Um24igg`-!8MZvnfqdMpYQ?*Gm(jIPPK9
zRNYXRfa@^9qJP@FUFCj3rdW8qY5k5B7vbTJvtFtRHDOYBSOyCz9-g^jlEQyuC&Qt_
zjtaL+*t$;5_~kI)RZ-5nf#61iXIyqz0w>FaNpLb{-Q%C^Q<X@=C>naxz0DKB(fDU)
zm)=W6;lTXniC>3F5x`Y+hA@fHl7)e9?IT!M8$L7*;eUjo4_2$9yznkFoZ|@>o!?)a
z&c26;;x3d9MUu`K)hbcxOlhSPzzzi6v*W#^<8Nney~+2Eew@+0qrchzJ$v;W{v3Zj
z`_0~q<8Gem$Q*(?L?#0WNTuyM33IWTm+q9BG8InV*434V5hWBsaCUI^6j6`1%gTix
zn=%t-Xn*o{(@nutLKwq|m$^s2QfaW@rL(EEAVYt6aB;!a15Hm8BGL2^TZ?Z09d@{l
zY>cD`9AXB*0f;g1A47=6=z@I(ELY{~1_P1sp|7b)I6<pyuG$KDP==vQDnBcud<W3l
zyzx=2xd`K~i_BY8FnTx66d~5}N{PqCnF3DN+JCO|K%BW4ry8IpEf)htIWGQj>1JX;
zaSRi|%@{)%{6u5$TNrp>2^pMyURNFOGH^DIyq)qzqJ@Yo8~`l^0=n9?SB^yigoYqG
zt8>phN*S|jf_pBWtuCs%XqVmY1^fgwGDt-LKA^L()IZ&<v`3IHPxcovN)fvkSy48v
z3x5I2@Hzz#0KC)NZC#@uB?j!~w=Qup1G7tcr>h1@@~W=<LkN{H<#n;h6Te}=Sa|=q
z^mLJOG+4Xz=@{S{BXFISrO&1+;aszOY>GwvL;{d062PX(eezIDhlllC+!BLal1>;Y
zK{^tCtQh1HSO#_u>m-mnZ46rY2NH+W#D61kVm6m)%;x3T0C_pDZ>|C~Aep$}beT1z
zf+4*v^6nM4YPXlL==r9cw?$RDSQj>+HSfpz?I|6Yk@ur|<vBP_lrUlbW?5}ki*mo)
zt^lK(RBZXo>Lm2p?O_K>EsbGU`Y;9qg!yjPRqc?;HN;68z<%mc$N<|!N1^C91%H;}
zsoCOu4d)H(=kv^O6;hE%rM|~jfpoVNDNT4(r0<<kjpUfD^6b)i6zpeM&!H_?@M7tY
zr6hXcZILxT8$l{HQEAr5X556Jy(}y5GntZbfcK?;W+d{COODq4F-7DbipFCH#JmtV
z>n|I}P!QjsCBg=pVtwVH0Mx5NkbfW>pjwtGD#`P#X+1@Cb7M5D;BlF?#dU`q2Aqk~
zAP**$1ijpCGI7<!b}2#tVp?^jh;aP*`sK41Ct%}rs{8;%+KT0y{;>T$2~5FI7Ejh0
zW9j{CD~d(l6c=T_@Nudnxl?*+i3}1F8A#|T?Y{rvt8bpa{Px=pa@PMC0)JnD`|51v
z)Qf;}O=2O?!mho<2j@~v`^o2<;?lDc0gegw57EF;E$&L8X$+8i>V{umG;k@I+-*K6
zYA8X`_K>PUrqbF)3Po)7@OWwt2n6gSfkV}U#ax$&5uB$0!Q2xFkyvO3-6FI=TK4q8
zZ4?IEm$}0!Xg1i@7J=B<#D8sByJC7qqQZK><BZxQgT!}U)t;TW2u|$jiJqdL?qOgy
z1tQ~Hz%V^vEGmyG9Z!b*q8Rc^S+)KMTBzZ>y#MZGW`d2E7hX==!pGG!kUv3#+5z8H
zZSGT)kSvBX5~dMUkBtC@JDRvpC{SVsA1}Qfps-;m;hOx~Z(LBM?SCAoAdtDlD5*l+
zP=wQBQM83K5tv-Y@X6keO<8S%*-VPfgKBJ|_x_QgLuYlP5L_PJLub_)RAnyj^CTr$
zzMVQYgjy|Cn6y8sgQ&Lh6$Ej>TU)Gik7k<cu+?4M)C+|kz;&!jZ)Xh(p=I@_1UdAW
z`jcviIM8~qPQo8V8-J)8ka7`~;H;R&o4gG`GaS(~Sy?%#?l-;yASQ&^txX7s7=>9S
z3EIh^h<$PG;}x=sLRj4RrKv`YSFH~cCIR|5cIf+wB1zxF_nmT+WRNLiLN+O$zsdY+
zATu=vMG)ehRZIew4GUl(C@tBRxxoocj?6t+ZeVT@K-l{|{(nc1@eFt2#1^bXu-%r`
zMfP@;$EHn4iXpzJWoW%UDJ3}RI-h%27=i<rSy?nr8Npz|!>+)ZL8@|r@Os}k6I;Ro
zB!-~f6`s9*BjzNaZWOh#ih>QK0+YmUas&fVwD&r1n(V?+p#Z0I<ev9MyBxDg3<o^{
z2a(7Khg}Uh5r2arHvWvjTo6+gQ(<78e+)$o2&f41yS60c)Ry#MORm>1qg&R%$bg!a
z(;Tv2PX17?oO*<^OJbJFU6ccH;K?TH&aC$R2z&j&5E`S*5lUb<XzYgm#qC~ki4BLU
zZZ~BXqytB=1u_SR#02FVN0wtojUy;Gqu%}%1nW+1On*$F{rWwP_4^Xg8k8DHoY>)=
zZ)!&mw(6Fs5pFzjgMe13z3~JlHQOB;ATOW>$@}CrY;6HiM-5WvO&e-zVo;wIp$7ya
zZ)_tSQ@|o?Gk;31_1%Sl0BFRnRMs>;wm2bpoiV|ZRXO(K<bHxG04@WW)bC`6ppUW@
zE95l#_kZ?G56A0@PN-}jHPiEyK#rw$od;(6BuY&z5JP4I&Jds;Lwt8#MVC;z=4!-a
z>0zg0N2hgxEVRUKFY>Xvj|pi?m^Gc?`f<fl3VA)HcAfuCEQxr(x^^K>dL5?FGf}p<
zjWT^KiLWP8fPFM9vNQKc^#uAVFE4!h0U;sND1Q%7xupu(ZmQgym~`qStG2jWg`~m-
z_5!fU4h0H!_<eucUVsV_wlsak;yVw-UIP!Z$F9zUx>x7HO4-rPfrc$j-5fwx5ZgBg
z)OHKQp}PLiN8d)0wml~YR<+Fvjs2nN=D#bVA&{s>an$SnbI8Gj@7!^0@<S3(Q%(MD
zZGY4&pRVfa&}RUvM={22o8S9O3#^t4*J85~u2Bdchnr*w@lor4a3$Gm{Y%UIcennx
zq;}~~-)kd;HnOcT5Wr3K)&oTg8A}51si{7Wp<N$GP~QE0v_6gz3A3vt*3Mh^0T8ZC
zZr=xVEV*?bFtEx{$tr?_qnKb87n7F(5PxMVQD$(tG`JHO%D2}=5F*N2wjTzen<|z4
z7y^|G_8(*_2b^VvPi&Na^1(Ng1SB8?!K4cI9Xi;7iC>{Kb2lf1g$#yS=IilZqd25d
zF=Mpq*v*}yUtd!K{wRtt+raLg+TI$rYtMR(ZQv2gM2rmQL<l&DA`<UzCP~XD6@S}<
z?TNO4ctel`AY5IE(g|xMjEyZ&yb;nUxRK1j2xiiYKn7x~+imlp(3l595;rO4#$8p5
zCP>er52vX_8IL!>_Tp+=tPM^&AZXA%BZ3CiAI`K}^#kJLCoN|OuH)FL9SE0QAGO?4
ziFjuT+c(^<&<5SQ$?Hl~uuu$-u76`>I$62eFILc6p&aev)_z=|5eCO?@V8`J7gKh<
zc!d!^Q-bKABWwYAF`P8EXeG8un_?Y^S4N6nWtLBzVuTpQ8Qw38xwlS_pqAbZ_KPFY
zCnoGT4=y)7oAg_h%i<!I->6sKZL*cGmVjlr95ngtz0GtT)?3QPw5Mv&|9>X-4EonR
znwe42*wYL<B+uyPil(+OW&NA07ay{<7hS^YRD{J3A<`lB5HquPSoZTXJ53k}^L0ai
z4=ldgxcn|y0)jty>d$Sp?$DJizwEpaem=Anwu^_NY(r+J_zlb&1k2gMbyX~UUI{<<
zUi|2hK~?8eBD?@8FWxk5=6^ci(y9oAqy6pkZo2TiH{GV}-IYOxGI)ylGONAwARVCL
zH|PK2?B8xaWyMY>cXppEuj|i;=dmS{`<}5l4+j!>$qA|4zT?#xl{!rHMNrvs?s_il
z!Rz+y;E(pCXHT8&Qrii_D)e_>pyb6>o}c{m>h#UazxxY)+e_vFO@AN#b^*AC_s@4#
z!wJvN4xXGiEiCQ#O7U)_EZVWn;3!r7ClBnDVO9T!=IpF|@|phulIGxrH*Ez6gXJzd
zW7u<fBih?5)AxS<p@8Eb(m2Aw19$zOZc{Ye$R2(Abbrg_@jHT^-+uo2GQZj1?>1;z
zHr~%PV{?WyGnnDhXKSv(!%vUgE}6YoG6VGdAHV=L@SD7}1tye}PhbPi!j#zix!@@N
z*?6G=eBiv2;CBTGpWg5-_&|15Tkru1VjJZ5hfny{4k{26gU6j^?1TZVdgvL#s)x5b
zV5Kd4KLA%<Az=Ug7iqVYeV6@E0viM~G&VPv98m&8mpAbNI090%mvQj{J%5=IJ-ObT
zJd^pi*Z+k3h3Ma(!y1G!c;<R>^6dP_mzUSCuk4MIXF}0D{E%n%8kKMjUgxh}et7-U
z_wT1yFW-It{;mDl$c$4-!_V)2di%=1O6W`oBE$6`UcY;N_0nBunKEF8zkdDx>VvnC
z5;M_YV$QWSamoqJ1Xq(OQ-5&P-F)`k*&{Nr-GmpkWw+ni%S>lXsrcTjbK&mQnWiFM
zT-Hsvm>ayfZ_DF5pP$)lQv-K0E+<n;GQ-?2)$-Ve8T>1o=GcnAI0t21rZ+cp@v$k3
z#l!5`pLWgmcJ}S;TYHxlnN%`{<PU!dt5AWfoL~Lp^7`ZZzxw+{4u4+ZJpA@AXD-z|
zV}|$5-8I#=Th5-H28YNz6D*I9IYWZkRHE6im%91RUgs<`LPrb!*v@9#(-+4-xCcIV
z^~bh@^=_Rv?8g4=%>q;kO~EXh5#b;BrRrwSrW9`x_LrXBzdEa^i~JiG`EL%KUT){j
z!>)72C<qgY*5B-x%YU*tHZsK2I@$pCdy9e9^Bn{Po_uk-D%b1!I3o9TvtFD=d*g3k
z1V#+Ef4RLwkxb@9g*zyHag4qIjIagGa0_Fwpw!<vd_@3+l$pKO^Zb_q;XDsKpyeRE
zHuQ1(3b=$0efZlV8vgf<U8&nQTZrm#hr~Z^(XF-a8~$sciGKm{0YaE?@4JRq<&bHd
z#J%_+LON0!gSaRYX7Y>?+_y^tAWfcFvEDm_Ij|K%YgL3zaEjONjvsY|0+>{sM=I@{
zHIxDG<}vn*`gnzI<=IF<+;p_A{H2&XqZ#Zl=kfWr*tnaS$PCwUrM4?~ZRVYovkAn3
z3;1g(m1>m{3V-}yeXaw=^WY6d5R}*62%A1yMdJTZ&i9SGE-COQiHv{s?uW6+Oew^M
zD+ByZGwnn8avSOi<5UbEcYBcWV%7TCX(e#|rd$_Yxd?_)rVd<7!DHy!!bgA_N~4{Z
zVI>aM3!~As^D+Q}03a~kyH(*m4%teuAXc5X%NWVTFn@}qAH}lWe&Zi!85A^%i|vZ7
z-vI~yVEK`?1k2i{Sg!+%@r-kPM_YOyfMGd9V51KR%j4E=OJ~BA!_J6QE|)^oBg!D^
z8d0_=x+04xQ}`MHgD(*fHiMLKTW-q+;^7Q5nN0qGcUMi|5U$bg26kR=V&>7P3vQ~e
z4eVuviGSg{@j1nm86>DpW<sM0JAab`Hpgf-P~taGfn0?YpoP%KZH>ty6(-BP-t6{W
z(N(pBrnE^bqHX>f_z$v0<lsL~WXq;(SK(D6r_ttW3vUYU(~7g+2D5NCW4ND7dnt!X
zB#<KNwykc~4*}pgMIuX_APGimRWysT^~eP$V1GI2R$=>K2Fv9TA1sp^b0pxyfdI34
zUN=oS@4Oj;!u@G~0b<4=TNgem60$7X<p{QJAAp8jw5Lpic}_zi{Cs-bS^y+>v`Ld7
zX>&FUnBjoFsDxb9%BBr$l*})h_!ePIbnK#pdjS<y+f{StcgP*3*$`|492KpHC4gSg
z9)CF(F{=ebQs|n8uqMlCFFGOU@OX6Bw(bJfr9NOUo{=0Q1A3$gp^;qCehL5@HB>p>
zL!-|s$Tp3tde@ZGxNA=rxdAba$*?QBl}9D8p&{tL>$pLX4a&r;o8nV2n+pVG*#<c1
zT*tWF!fVSWrJpnsJ-YQ$SW$-C?3#KPUVlspQd!7!B}u%p1<ETUZ3=uPVp{Y(7ugZE
zB@#P&Y(d#GkXPtBtO(5Jj~-&WFB>qLAg^<bW>>VIGOt!Z;#;-UgE+9JhaxCz=m+AP
z5cxzQ^6PDEKp5lkqT~ON#)KgyE%)1bBrBj@k{T(*CbguLW9TBf6rn>0OXvU*u7Blv
z7ao=dANI?@!zQJ`yllF{Qvn2n5v;;HsLqyr+wZ&@0N&`U0S4`$W|jp2h+Ylsw{3MB
z;OV*<WcGE96h;}AM9{<^fwMl|JalC{gU5qNXC!&8x(x~g1d2lV1fL6r?dZazQF8>@
z9D*GEO>oWUQME&!aD#w2HeEky`hU9IzVKvd5y&_~@UE^F$G6X(J)cAPZ;JUR=%U<B
zp-BYiVV4$^_Ob9XQ22~@HTTQ>yz<27<cPqiN560^OZQbk9kB_3NJoa#$Z!$0CUYHo
zxVQ`{shLRysVU2_N0Vg5rtDTOfuX$zPD3^269l5Fu$LKoD*&MjL<8lIC4W}v=?o2G
z7Xu!}4TvGb`{D-aLPo&+zG;JUvSCpvTA003iX#@%iP!?I4JBbpCZyq1^HdW1BeJI6
z?bjZiR=i3ybT&I%ly_%-%co96f-=sNG%fF{c^P)CNs4lSg9{#t?v>98-d}hdq9GFl
zY-;ZvtJnpOg`U5=_<M+^kbg;{MN;tYBw(FT=+0eJ$6)6&`sA)!_|jta5>;`lURK;T
z#V**M1Mf?2j-w8_f21zYuD~Z2en8W1US^v==uNntmf0KGSSG=?r2)iE@wUvXHqGIl
zA%eUsQyH4qLFhwUk_Kvzf!;GR;mPwJY9^!LumceXEpOhdp$~!a1b?PxQujRR#kbYG
zsoQ$lVJIXUh_dq|4}*<XxcTQllnsIj)Ilmqmm!K0L=AGTjbfxzCNYYk`*BSbiv8Zq
z!S;*8Jy^|wdx&ZfNK{KnhY^4rRs<seGPprz#ghG$|6Nfw2Zb7<mr}jx^#d~X125lw
zxCkpDH=oD)!jrOICx5+y6zm)g8qsj%P^Yz&r4B65i>6w};;tFWt*6mMdwJaJW{pnW
zY#TFPpx=viTL(NdgVNJBPxs*+0=UUwM4x6Ws4a=DZhU)W+Zc+1=(f5;{=_yJ+XJFU
z`b4M#NVLmvXP%oR9=rpkBse>`_jzl2(;*K}2&Szb{XF<erGE-NU~lr1#f6Rt0$dN|
zlbAacc;_al*Qw9?bQ%f;C)iZ&il*3DJ?~ZoicS4x45H}=F(M#I*s(ZOu_X1xVORsQ
znF~be*zjs(je$7Tw%Cu0)0Fsj1lR@_KyMt^OCvR!j9p}*CM(-~VfI~gQ8DC9MStzv
z&<0q&gDAdV`G43#cVkcqjt<<~b);HJ@-JZs?&2DOifjNmIbZ`Pw0cYyEYU_{KF2bk
zO*)*2JvzWS?qjTB^_cHZ9D6=cx|hi*l*jW0!q5d4pHX0e8#tEQVz*mYa~zpWnLPj!
zDIjxClP*<~Fz<q}wDLdY?}$(9#y3@VvP*kO<Z(U>=zkdYVcW~S*RUFvLg%*Cb{+>n
zJn5Fvz4v064#|F73|B=P-j_2unC}f+N>Ii1{&p2cM$%Pdl-A2wd&IGdh6Di5@IkXV
zGA`?ah=PQZD5QfOrZ*M!N+k;^OF2?bs;Z13ZS_bCYOqQ(*iTWdq@wk;j01IAi!^dL
zzVX4Y!GBWE_E;j==9Z&!X>rcgTfkG=*%cqOsni}AA;rD>>CKxlT?i#ZrhOtgnuGDP
z?ZT3yd&dM=y?pOysYfDu)ASA+pm@28lU&fAgr$CD>0Kg?#`JvrB*XSpBu%a3ggUoK
zeLNpSHV=+Gx>#W)&V#!;L)@psT`YYjmA-=!hJTQF`>-D9R1Ze`r0o&t_nQD3De<l`
zh%`un$l924I>$lKlUc=i%Bp#{hrD<QImB~BY*e<8vrwLTf$I(JBzkqs(<8H*QQB$i
zeKRk!;5tE6PklT-hZ<E4ya(DRD*A{d7@s1g1A2=zcAy{nocPE*t_>@(bWAx`i`VP%
z$$t|k#!^^+98ztg8rBk97CT<r6rakE?(j9<V+5oUo-Bh1jng179G!`;GYVgKZ(rkY
zhT<(~8qLBwZ5NJCB&Y<<;vSykGgF$|cJ+TcCxZ8YU>J<#u*`DXsH1L5wVPst6dO+n
zYJNn8y;FvM_>E?%KZ_}yr@CvmAC}J<Hh*pRRksRPNvb#jKdPrc(W^Gw40;K3TcvX9
z<>=7TwVnEhg%ro-XEPi2(^&IRc#pld-#ehd9P|!@^DNgppv2Amj-YQtldf@a4Q;d-
z)ch}Z5cW%i1iL{8p>4;>9#19^VUg&7h2wk2^yxfp7-_&?0%E~vud7di+oZr#oPRR%
zP4AR^jOf2cbOeC`WWjX`V1U)@>&f3vK2Ny+l4=SiW+JEszn*|HaGy-gHz%(yPR=gg
zPP%4ao}B$Wp(kfQ+W)+|JcmCQ-%oyb^7_KP=W9O95_X0LUW0Yq_Y506ej782Y4v|G
z$_};Fz^L(>Hv<ki%|gNE6pO$`7k^TK8#dJBPO9X+u3%N&u0n~V8IedM4d~C!rrd@D
zp4`%{OmG-GZ+lAN<ea3|DIKe*B=-Zsk&NZ$5lLeBVVN7A&LN{glyb!Qs9EuQGpTV?
zw#s>pqudBCSi4=9ZE&4ENz}=8Pko!xJDK^<zfBn_{BdyW*aFI=PAywcP=5dq92~K^
zLr{I#A?0=ukCXT(zn6e5rEdntnJKIzO#Xyy1vwA}siat7U;k2Uc57#;fX)aRbKe%X
zWe6#w<fsvoq}PZ=gxe0E3^@65xiog}H#+)C4H5!tOv2)P!e|V^eb(a>$`zz>;uH!(
z$8rf3L|SwI3!DP*l(0uAJb!~vP;;n=Ijj#g+;d8ttwWQetU>~ix#2p<VP<y)t{rF(
zI~>NoA{}Aa&nob8)US#Tn_Ga7Od9hpUNYDW7S+1ASw{d9DGn+JkP}Dc^mDcKXmvA#
zG)-({pCNP_Be{OwEyw{whiA_e0+@#J=MT5{;SiPC+`vP~db6wIXInoK0E#NO-B+F0
z_iiYGq9IVQ&3Zgm@*iHfV=5%gz5RG90++h)MW(Lu`3iY>j+7JIT|{&5s@RT0&K}lk
z(N}PTQwIB4CdW?X{KI8%ghopfV(q_w1Mk_Yl9y^*0viM~H#RtziCY3gl~4jFf3Z{B
zfkkNFedj(C*HxiiHK9sWJwEq5f9J(zk|La>=Ewh@E(Vu_%LH3m_%&T5&&Gq%31f*u
zN)W-4@qFMO;6y1TS&~tXQkjewgB^h=+8zHjAQTaSIWUc9gPrm7150E`Vikz54)$N4
zSUO{f3Z8lT$;)32add*^wo1Y<e<JZQ&pc165(!L#O2agyl%kB0WJofgTGnria(c0v
zX{(7KhC!|q@<UrKruBN+qVpfk*J1cP#3@q5@)TujK4A%_Lk!%*MP8JXo%dBSo9x<$
z;q%tRkM<cuSO68Hlv%2tPEX(IwfROfBuE-Xu7Ui-3JV{$ge~jx?6hg~Zq|CiG0Hd#
zUYKw0VW5A?d|lU1x@Hp`qBVLP>}EuH{#u_EO{;4kL84*=*Lhu6AFMY7Ng~6G$0I9W
zDnJ1h9fRh5`ID&O)HpNQdFbSx&U7<%5yn&?l4Aeh>C?WDA@-adS3f#Gg)*$$iCET`
z;Q<0GSG8_eb=i;25W6Q#ASHpi_2eI0B`z07HW!bsc-er^rR9<c^DMa8p6kBv$G(!F
z7MbK%Q^Sx*)6YoF#K5Jm(Pls)mTmMIj4twb+9wecxo4OR2$%@fmtz6~MSs@AqFci*
zGhGWz688Gx`>rwQxyC<jbe^^qRJ*~RjlS{M!z`1CW3>(ByTa@`beZh+5tF-AQ@%+x
zR%H0LX!{{J*x&C1(Koy<(c{n*4k7A3acFw1#UbdOYynA81f2`t5{QKD^^JdM+jYQU
zw<rE@I0PR93_FDYmVMvP;(uKc$6>aEt@nU9|L0MZ@aT%+sehj#oJtRJs?<ip=tS@Y
zsER|R%ubM*^}|Rsdj|%Auq0qk;@;ufBCs*eLgHWP>8f_y00sG&Y*nh?Mx=;<KD3Tv
z=<cZs8H2Gf&!_sjEd@r6gvM%Su!N<?iEtwr%vK~AQ8b>0w+6W#G=DI{6$zxOX^OWO
zI>egO*zhYi6%kEiYt5%q-B`IaMO@&3;LUKLOa>pC7zJt)tAfTbGcuGyl%s^YTAiI+
zZm0vEs-9><qUaDvSj7~Hf(si+2@#iy^#cjajHS_)a%Qbap|_~4BLP-C4g<xaLrN#c
z!x36ZDx&aJ<7@*ou?#F)(Yk&i=>{bqiuRW=1Og#{s+_h(RW`muNE{Q=tfoGDLPX2X
zU3j*$pEnVEarFoh2W49kf8l8v;{jnm9Uq2GTmm{{ML6U^s6cn%ZHmS6qWD@jp(;d5
zy84EcC?pK5T|wKmxoXz1A}wrZg4L78mR6O%1#%n<X?c;i^QvAr9UM`@La08RYX?Q6
z!|Z8)S6!9jI@}tN_i!t~4jy#+DgzW{vC8Io)1sKcl*YhlzkCrAPmzu?AtMq4!iUtf
zd6LDjl={8*TuHKNu)fxLDg(A^eYq-X7jT%MEX7wU+a^8ed)w~}+96Ir)FZ6gyl(Z(
zwRi!+*_3bIdgs`tEx6!7@8T>Armmf$l%^zqWT9GltY#|avebI!v4t5AAuOxb=WBzv
zX?}6xI|PQx?`0NmbtGf{o=+lEB+&Dj)pamV{($S0y0df$O*)~9+rtw!6Aq)!9I($0
z2cyH^lD1yy!RXHf4@S?;KhKW$;n(5M$ybAeLo4U{E4SOs!<9>6BLI&;O*nI14^XCm
zF~lUbb+wGH#)h$WWldEY9dffA`WUR>-9}dHe75%Om!xsf$5w*;_8@qa|BK6*pgbcT
z`DWh8*f#XvIh44z;e{CqdqK<)$Sr0LqtM)$+=7kE5{&aSW@%aL_eHgGz=frd&?_pu
zoGe0M)%Yz13NDjuBi&agoMzq1LVmD+UOnx>BP!uyfvLb<x!visk9*Ahoc57=yVL$=
zE3UoJrF(F@3;k8R0y}H-<_hFyDcQE?vkvse{*T1=eGcs{AmR4sIfDiMHmmQA*SU51
z-j4Gam~fo?jq^)8pFWYmyPi+x-u}cHZ?O=MCuTOhuvl!4C)mqwI-YKO#CHKjL_vt^
zUL0T8@${d8cl+b1dwkjPX@33%0&+w(Wo~41baG{3Z3<;>WN%_>3NtV_ATS_rVrmL8
zHaRm2Wo~3|VrmLAF_%&60uz_NVFD(9O^!Pb!ypWXcTV9k9qM8N1jeL6?UF|+IYFup
zl``c1OCeCH@?h!vANCF$33!^a*NyFL2Rhhqts8WKT|61EXtmH1!kgs)0V$4+fTmW+
z4TOzV%ACR{`lbB$>v)3;5i{Y%s_VU-gY(I#YLpG>B4|vERAjL(v-#<kemeUucI>Ai
z$yQ-aii$igLzk<hK`FT^{N_gI+k*>iY<wg0F!^VqF2IAO`2ubyIJcKjWda)mF*h}r
zZe;>Pmskh_a(^aZeY<%5?y=bSW&7RDzZNdfjLj|VyV)#W8^3h*QLrVKux^+?W`%oJ
z(q)c^jUPX~@msadw6!Wd{o!y|S8Km+O~$0cQ-3U<{o;x#ky#;^D-H(P@YB2YdEYk=
zZLxp!TbNRrwD{a}v_|tKlbMk4*IR>oR?2v{g4r4KTYrVlEGJ*Cci}{tDaLTEZyUeJ
zStf*&X>oH{_f@ltFN3Y%BmgMG%M8!7;b1X?#j)pHWWwSJPi@neVbx?(T7hqS42w(y
ze6;xC$7GhUil?=ApQ7`bavb;lnWbk1%UN3M_90}MVNxRK<+}RQy6_Hk{znC|Vz~e5
zF@}RV;D3ZdYXj02U~xc`1VPysRh>K#!kV-`=j;$=kptdJPooU{6Gr0Z6yH^dzsM!P
z!<H+?F#Z&HaLP(I4m|7?IY)@H=s9Cfi)nyG#vD-%AqQ$`g8U`0u}mq1t!VKOVH~=*
zFE*QM_YnNHnN^N<*AGow^^e<d5TuAT8XdWB+J6*TH@tbb_MjxjLA<!o2v@P&Bn)%z
zFbG}suqzURV3Ttm!I*~qp)I=r4Y!$A<nc{{!K13^oF0xZ+VBPmG|?JesCMi6uqlHB
z!emO2bGNs@0Wz;rw3U)amNMXxB}-v9&+@t5gi$b7aSsv#aubv!6H4T0f5=kfL&7+r
zuz%gx)%|lybSD`ezAbtXvn~MyI%&oXD<a#$B}$9B>ifD(#5Pi>6Y{VjiM>ap8Jx`q
z5rVGRaS#D~kxzr@!xi?6j2mZXnZ?9;X7Pbp$WahrMI2ohbzN=}9oT^IuLx&u@TG6w
ze~5r_o+&PgQG@YvVBm*OpArO&Aud3?eScyAqqvozq`xHw%R$S^I)n{^qPf7uY*yWU
zt<hl1N{CRcg1Yllb&oO%@f(FI$|%=9c@U>4qp)T*!?pL5;GJkbaL(@@i~a@C25~<T
zZ4eGeqKz5~dPWqPS^(*wK{GM3+vX6Kp-KW7NZGmsp-}`vAMymubyAye#+s`v*MIpu
z>zpChHTUUIKA<=&tJQ9Q=&@!ffzNNtt}7nOr1+o@(vI`-zNzab5l2X3&QlZtHxhx!
zWYG8AaP;mj;N`OicRgc%=aig-wK*qiw@o??kim_cLtV598kY|W{dJ#I8(4`DG`n(_
zn9Vgg+gG861TG5&Wr3lkZ@NSo&3_Hra9?0KU^%|5=n~v4*F)n_b*B=tkG>md5-^BO
ziyQ*7aH3`kAp=WiLO24YuI}2RjhYGpSA>0)<kTl!KB&XG*{#cV7b7DzsGczw0vM^N
z4IFbxwwhhk2go<baC~}G7Bv!7X55iXKY=8M?T|LwX!0-N2vr_^zK{!Eazf7J!bpKH
z138kOM0(UTwS;G!Qc=^mHc)092#U=(N?L4LB}l5`6P@;biX|>5dm%cSnUR1sDd@sb
z)X{~jkI=uJw*w6Vk^+CDm^3qCE}?k;@{gZ>nv-KF+>%qBi3oETp!3nBdr^YyFesg8
zH6<a*Mq7S40GxP{k`I>@vv+|Ladw8*sqM^9N3h8OXNH<XhxJR*<W%jjl{FU6ga!cT
zj9j~uolMcrrrne{DM7MKW8|e`$ia0{uMc=#<-2J`kk_fB2vC2zQ!N=KM_2s^w=!Vm
zF)(^=HXS_<#TrUvmf`@LU#L4Hx!)IEml6Z~bAr+f2R6{1<D1@z9EL<G(>*(s1}msi
zL-oZOSXpXGD01&_mVaM-S&DeMzml0<N@%paAT#YW<h1_`@b-Ffb^Y_QZx7|->Yq!t
zxcZy_@9l?o@aKQ}uggCy-d~4v=D!t8GX}pENainKq<>Gw;@5)MCca8K1;4wHMN}Vd
zZ+*{p#%`#GP|@J8GA5J1pWO_KgV!Q>kB7(G4Nc^$l%gy@nrxwy5Yn9HmgJ-BjZOJA
z<q=FQZaK~lo555>X-{bYJ=!s=Cubs1{?biSEd&i-x7B~XkC(;L_jIH)J@zLsrsVE;
zFwNnZ8HISs8@=jden?8N^A}w!At3UDeA4%ck@OUJwWFX0Q2Bkrn-H!oo|$TeFZ5K(
zW^QuGdKf7*Sx=Rp<@)Gi=o^LRkTN<JHGIomY^J?fF?penZPFcspXT-QIP*u>D(5<b
zHf?3n3{8LK%w_SWy!<>U7e2o|W#b_ZuhY<g=flg77!!sU4Ip7`JJ7Afe6FlM4o0}i
zoaTeSVGuLb!hcPoYJp!vJVA#$_oT<Ziyuk?)-^fQ`tAUuQ{t@eJft2py-azoMqfKp
z0fB?rz(u;;gwp0N`V}ik>WiGriMf9)*J*z93TS`WES3|2+!kM}ZK`aYV{@iql&xdi
zcG5{YdSly0M;#j-+iz^!?%1|%+crDa$xO{movN9C@O*fx_Py6$Yh8DSC0!xb!u^18
z2{qez0LkxU!682d5g$cdT-R8p{=;B0PtWt?E0%PGQV7C=Wm6#Ozc-7z?kBL1r|Z#!
zT8f`C@w^8h_&}LEq5)eef+->@^R{nTn@?si$dRJ27H3OX6i<)%zI=xx@iu9(<THCX
zQMMX-qTn{>Jl2uomy*U`B|R?TwXZiu9n`R`|NX82{FfUQj+veH|9e+({uiN;mzPo2
z#Kz3YoP-6Ca7#;>f`AUj0R*MmSf7`0R_#=;ew&ZPa1!6>es-<pdU3k55ck%4tzVhY
z&C2O;lbD>qQu}tKerGUu!MO|KG14blQy>BL_miV4Vm`cI9RINM*SE`r(T8?2?hi-j
zmu>a3v%1}nxuta_WmMmVu&biRgw1gn8ah3{=Gd5Zsi_RtR|WJwfDW%~Z1BIS^UbZk
zUM6k3s_9Y}c_)v4<ll70TjXy~O#wg7+f&SJf$-&**EUla?>VgXT=O$$-7Qs3sya>W
zYtyv)Jj|6v71d7}mghb@ZLt%D#A`#-vhY&&JkAdm-DTx}udU(JmKUzPY}F(SoX&J?
zQraia1d?(VF~$@LfbT;b%7`uii|Xb>ht}`5zTP~J#!=>GXB<K-2D>4#MOH{Wgdcp!
z<Sfb><j!UXHD_EQgt#jo8y{?+%ZQP`bk*&3hwO#Q^}&=;=;LAWY7BA0SNmWx*3{R{
z83v=Gtg*4%z263&f}-#UnzgU{*wbhOO-f(x%Q|l>5#+VXfpMiJJ*Z2IkK9g2g(%F`
z&oi_;0YA2WJ3@7%*{yMzd>+r2pNNS*_(OQurww(c-LWzuG@dY)A20?M)XuH-mRVU|
zHlScYujq(j@Aa)2fo~+r)g<^<kvT(}Wo*E>fvu3a_nA776R_u>7SM73jhbYDs!ODp
zY}lxNl5;|q18V->ADl<7LfsqpcP$L-yI?9YD05wNM1qY}+H$rKz-_RUo(G9&vdoAe
z-ggpCog%d^SeF7g@Th9|tF0vJsb!qJX%~cCa+LlY{MbqcxNuUAYUnMuJB0bfjPB4L
zP>y6KN;<8{Iet)ZbCUml?67hgK?&D3Ul%YYhuWg01QOjLtN85DWfvPJuz;!w!r=~x
z0jVSlP~u*nWkJx~i^#Z9|5A8Arr7z1%S3gl72AkXvZ(8gO<uNnMBDjuF`6WBg>aJE
zsnP6w^rrfcUEn7&-42JSo=f<ZBvX9EgUap!d=O;Fc>@d|*cc|6vU#bYC>kLrZ=XId
z#|26RfNEDe<S+WG2bH&e&}aU#1N?zj(I2B#+q0UO-yZzqk4XwMX4)b4$kgEXShAU-
z2QTY#5DiCp*<M27Vf2@`s>;2hiXqgsj5%T$a2WOxX8vOHB$U*<lh2s`baGfOV`gCo
z&=Zk)cgP$&Z%UbZwoA*-Xo+!HqDwhm(M_?_lnyMgSRnWiM>KvnH=n!xYqO@-b$J5z
zSNd!Mw(TZRH>)#Ppjcqihtu8hY}g&f??}2Wa{tJFo)b#PyVV+efr}g^0m;$*mQ`PY
zshZ#_0$}oLb}_6N`vxGbSR*@7rZm%+KaS77ad_4>zl3Ep-s>4O7)eEkm6-lu<E#(n
zl!Jc115RpcS03RY3aCctOc3;i8{de^lWw0A?FWm(S<Qno4K#+&Y>4AoQXKtTkBK;n
z*S#7$dvt(Rd3Iw#f}iPT%pQ`Zz`?UX<psM@(j@rFUG5t;Tl%za>fDKFKu6LG8YC~W
zk?1^Ok{Gw}ioo>ferAP==+Q4I4PYgd3u$%<2Kp)a67eCU!s?S#3@<?aLH-H3Hh?T^
zpOaK&JKnazOZ-I4xJ0C5g#)uJQ@QVhOMuLH(X-{6J)i^TRs=wVF5Z>Ym_e<e%KGK*
z*!tTi?9a>^pxOq@v&Ng`W#gP8=K4sp1f$L(6~5d&y#*Z+YMjSiO<j=oi+9leh{<Nx
z9LSbPz|Tjg<BWBeEy5jOT#@la@G;_Uiwll=R~Vme@CUt>DVDzwWgP<r3%qZ*y}$^f
zeb5d1IS}T&Fmu!*`Sye)NY<AY!Uk$_#3i?WA{K|Fmk}%cPvv3Fr!$WrR$aOJa=H6~
z6-1j#!$*_0M2`|dZD}`_yqu|g99N4lGms_3H&V^PKf;EL`7YCha8HbC$AOGkFqWJP
zMkwL$oKk_KL-Fjn;$r)ryh0*)Pw+}E0jIK4-IkQ-9;{?^t~cfdA`Fyy@MG5p&U_69
z*1Vk~hz%)0YJipjrYq>XhMkPgi9H9hoxss<GLd%ttPM>}7X>&Q^vumvJV6_w1`yMZ
z?5eP7SQk^UxE!giocq8kELpIFX2^Q_=gu>|&{#4i$k7~LTf3`VqPo{-<El0IhTAkI
zf0p4T(RcO#v&Ttm*^DNg<(M2MxUl4b%H(oUC3~9LUtHi53nrX4+IfwKs*i?x?=&HN
zQv*C(r(1D>TL^)m`0ZB0W%K|K0q}KGihZd4o8rYTKMxvOArz!sxZSid$exwplVm9c
z^Tn!5E21qg>9U%5Nv7;MrSzu*b{MS7cX0GLQ67|~jyi4LLLki};BS*REB!N{3imm`
z^BfoMFDqUxYEvK*iKJ|ZsMwaY!)V3`^$KDp>%R1WI*y?1GNxji^1$+RD=^;C%EP?k
z!ZyU0(~tq=K%<(qjQo<pP=VgAU4>gX_qhvcpp~@GrG?~xojO~N0#B&5m_V4N`cgnG
zAGK#ROAYxRV+Y7E3qkfwK^8SQnV(#72~)}%n@4c1!~~55a``(KTc6NkLDKR9(wH_=
zY_`<(I+oZXnYbYMVu2b%PFr8SRJSp0%Q&cb-mS21NnTU<@vgJacEl73k_2-eR1z{r
zUTFpYReTo;>yLFzX}6xW+IgL>C#Wpbj{zhpT?OIJ7D==v3_*v}pBA7~dNmRdk~WzX
zM@KZi#M~*__+SRW%V_Z@hB6dP6ZxeCT>aRapn<^c3+#xp-|V#uXb{zusJc7>#Ejh=
ziR4#zI;Eg+BQ9m1%t5;W8Pz*T71!~f%FJ>}*9X1`tN!L}@->8cS2JSxx@CE!qZ&_F
zp#`67OcYw+SxUrFhP=;|a!4W~Do<CYufLI@5DMo<e?f%+MHxvw`eeBM4?l#srWll{
zQ`>N}q~TPYoI2BMkUfa$(iK)C4-w;QC%HKc5{(~dR;c|$j3pGzoiTHv6=R4OzZp*r
z>W7wDCn-u`0zGf^!P3UC6z4^Em)flvu`9ajCg>r-`DzFwwt6Ae<t}=*0c|93$>^Gi
z!XEyvs>=pI+^QP+0(rFYGv6_3f@K4dq@*|WtI`TH0f}?CU~Jy%?O_Z$`YpweupuiN
zJE3lo5Vsxf>*GnRLyc_j*BXNIT#ER+E{BWjU%G0Olm{f&>N;HP)D7NjSkgmcyi?Hx
z_>^n9)7L*|xuac>KmOT-Va3zL;@Atc0uYa%S-FaU9^4%cPe_`=rOnGJa$3RV^gnb^
zyiRW>K0?>YUL35Y4gZ0g)Gj#Kf!QPXJ~I4Wz)$ok5GqjikbFG=fsH?tIz@laBIW4;
zo7jY@^8pdc#j}D3g^>SoAAlN(b-d(OU=Jfpj+Jg-x-^fUY@#*fT=z~5h8lW`1m=8o
z64tv1{AlsmdtK{43!5#;&V*c}tQ3?cwB7GPNT2Dw{4vA60+_6t%}{YZl5LN>!s3Y9
zlg=!GY+e4H>K=zl9o+uH4K=#i6|HE%qI~#s;$8m8jq(VAsbWBTa+d8CJi;IpOAi9v
ze{T5KW(yQA2=hdw-SipvpdD&nykcVa9SeN{5CsJ(QBM+F>hb8L@Y5bVsVrlHo76<H
zIj7AL=>WqHDu>Q1W?1KhQFb#&OkRY+IX;h&tm>JV<Vu855Y)cWhk8%g`SvTaB|2r)
z!nb8u^*6FTVj@YF%<Q$@DCe@g)OF7#$G-l`QS;WvBLhN|NJ=*M-3^b39ga|cR^Hh@
zkZPw3cfY7TupQc_O)lCV-7u;?(=2+2D&$1p2v<7-eA@crM2^Z)!Hz0-e)gTzi5t~~
z)?HA~9fsRLK77U<F9_j^vps7fdb4cpxKo25Rh#9&TblV}0&>slSHWY?*x?A7iy8#6
z#!kc!*HXa4-Y6V*lZzQ<XQZY0HNevx=)KHNz&2=&0PjgD`85U=Sw@0<y6efkYLM``
zC{ohb5}{&DE2f=QIKs%?@eRJynM##}3KWK$5NnMJ=UZt3|2<w-c{XXOHJF%t7tm;h
zx&_MM`a!^$ZV*B7hst{y%fk+C*Q?jj&N7jtha4JBRNo?N9PuDyqq7Is4c*Ze=u8!G
z6fL7KK#>@cB@s<X4|Zz2K=x`INL&)Z>0Y{Tx!#cWp6p@>aN1yPjFOe~%Em#9_jAu&
zx#jI^8pBIa$K$U~-+`&y`9%ak=W3|ic`i$l>wASW&c6D_FPf}3!TcZV$bVx|SXh}z
zIR8iIWM=-~`v@~jLM<poN*f876PPAS3KJ=q1!#UsIw=?-@S?q2Vub@U82NDo1IOZ0
zKZeN^L(ZuB{H^Wh@)dG?{~RmVX<65H@}`e^<1Bk?E(R}Efc39Ze^jWZTj2uhAU&ZO
zf9YV<mbP&IME^3*XVZ48_Y(S+p`MDf%a6=v29gy~&90W*q8&>n`U<i6qH@lkjY07q
zyg!X>&`>4*0J|AAMB%bBXZd~s8u%2N7VB24I+hK<!nNF}mtE}vG_v7h=tI;ylk&xo
z12@GW^EU-OR_zY$w65hRR-m_$z?XlDj0w<*vYy^{B1JQE%#OxyF^9A-;Tir817^pa
zaBdi4p<ws@*SwZc^RH27!dg=aIb*}a&N`6L;eBXjK<Ij9HKwAul_JaaJAQq6-*z_a
zlYzPj&=jZu#jCOtB1&sKE6}#ZG8jpJ@-+!GOgq8dad`0^S!i{u{(&24xp>l;>y%6S
zPH(Gqtq@w<E>sZrXsu57s}!mreF{IqTr`mqx~WAMz`{~&L)Hho#wkZxk05W{c!&e`
zG>yp!kYd|<?JcCv`#Ir>>p7Ce!=cO>Jx(B%cB-MO$)^t9l5|C|j;2D7M^CG&oi(jq
zcIPRk{qlp}xA9&`xyKO9{v+$nh`C3pNgUizkab3ik;JCT<H3Chw0^ste(%XAMw#bi
z4&$-fMXP?T`swnr9naMhR0a)vN8qvzT*>+oNN6KT{v=-vkdSkn_m$&d{Nx?a&TMt8
zdQ0v0fq?+YgyEEn?pU`?(IF(6u<k99wxeHn>4qIfD*-);-mR707(#T=;vGEw69w!c
zN9JOHJY$N`7<=K20I3~AcOrg=3a9~O%%V)PO4A1ZdZ@K|ynKytWqprwbQvhK#5YF)
zZk(EvKyH%K&mqPF#*?+7w|ytoB%}1bH=w)x5T)fk?H&riPUI-+ZEf}p_@0gwNz~Y7
z^%>?h0Au_WGZ6L2Ap2eSj*dNDgBm*<H@&URx*`me!jZgFB=<F}nytDVaXW5PM>%V$
z#5><5F%Gi0$_UP15qduVbZHZ*T4Ef4>M7Stpme!{IHo6lyQ~4`(4*C>&-OY@87O<^
zF!z9Tm-`O+i=Q;KMJBlBYl6nHGsvK*sRhsjdgVIk1(u3#5GuC1ZUusI$^fVigCC#*
z+QnPJ06{#DLU<V!{j3SP@(*SbB7K@L#enVhi!llA0dNh#?2mr-Qa)nho1{kIXwx?x
zh`OPtpgs^?R}@2peJQjwaGzs20_dB6EHtJU+DC^I6a!ioZ*l%DmVSL4u8xm))3<GQ
zaeKa0L-KjPU_Sx3zwW;Eu@{fqi;Ky>Ic8nVI2LCbxJ)3$2R?+&k>!Xa$e9J=R5X@u
z{;5OgiO&e;GNgNFmu0U6Vst50lwiLAFy|A2DfkGsxW9NP_~<K$taf?Jlq#8?C@Eog
z8%ikZvHzy+6F=kpoV4crhMxc1^+{o+0t*F#1iS{%EZ7a?QDY@zjghm24uWuujCpDM
zNd5em>XDl~$~wE$O$GCaW;1cGSQ{&q#P$5LUjB_AMrhoCqM=n!JmHf>f{3@o+UKB2
z05LC>tPS>V<X}{Wn$h^uc0mQF7{6x&Df**QH^P^odAhP*oppiTF=kq3SyWVmsFMqX
zh#qgJjts*ah{9MfeCSL=pXT=?lNyNJ^<f{y0q5~p3liM*+gI2cnI(~92g4N-X_H|U
zXhw~_-?)jJ6@v3ky#|c;I88<2WK1pGPC=RCrdR>S1;fySs#U@QDXO1t1}XQ-rHrKk
z!Q)j9sS%v<WB(rO<fK(kh@7FtLok3)g6XsZ((<(3VL5En%Nwhqz5v5On!l(_)279>
zu}iSOUzs?fv_^9sJlTnr<ig~I%!DEo)A$~3;^VrU@`4>%B?oIqOh1p2uBh$>lA{?q
zLZl@W!z~_F(WfJuRz6_VdRD=tqF?GynV46$G+jKYxw;07$5n0o{Pd%E{KA1YzoW_`
zhgDaTMt3TT3^hSeikX)y+i4k~!gY?eL|Ub_mT+g?0bJy@P&xS_LSgzen9dm~A19jz
zrxW#d=AN6(bj6MeveXpgH7w_zjSgU*K5aX=kJm_NzzXijnj@wIWeX7|(u=h_#eDX;
zXHojV;{w~{lBjcWcn#>j0WV-t6~BOspA+e0cxuD^;^ckm2^F8+Q5!0Q3j<{EO)F80
zK$yabUw2gvG=m^iB<r*`G66*X=~K_gVW0ycDn_TA9Y=HPk*?~!b$lT=JykUGd&_iN
z>viAr{40Z^{Z4g=38ia`U}1$BbLO=UJX09C<hH`?J*97?FP%I*+Z!{dW{feBH196w
zqy6hVt<<ln80VrqGT|iNI4kf|ujN9jFdl21GzFBEmuyz>Rv5h9Kh2gjU`OD<*NiRa
z_6E@p?kf89tG0*}*fAxjqh@iE+JpcFzSyy-L~tJ|WQvlB-yMJECYd9D{u$z5XgC(>
z8F80&ABwc?)rRF(!O*qaf$fD}-t?j3rQs*L>iz=N{(39;-*cLo<-Z0p3k!htKgTrg
zH`R=Vnf?Em({ZGfz)o%Jm<{&$t?7V4&^KhfR^(&4D$Lugfh(WT&TpV#a~NZGKWPt0
zaFN!0fun0Ved(ne@B@>kPO`D&kuyaG!3{)H1S>*Sf$t%|LoW$ZGwCtrtCee`quafk
z>`L>wma8Ird&}#deD<dbjufTdCjUlcx1gG6Vo?6iK~beM;Ns=(QCgwi_9t@3wEJsU
zTo5fy(01$Q7O&^+W^=Wz-lw@9Mg>Z+<QH;T&2%Vri~r$}nLyXe5`SSuY~q_)_1F0e
zu*1WE*im^z8SU%cmJ#T19qx}e*k@xy4%W>mwsKOu+$`|^7PH;;c~z|Rn?@}V<GWt=
zuZ{|A9en3+pbDhfO@6Ka8=;K2SnPqVjlGH;t^WYy7AGl8rY!Z>MNXKfIQ*2qHt`PR
zlOpz5ja^{(QpOTr5G5jVcb9c^yOMIHa%WXoVURKy1tnzO)#edr3*?w^1T&qTNAu}+
zd^2&V+q$}K^TSYAz5z0()0)kulr*OluDtp--}*B?Fb-<jGUlGcv-!tv(5#8Zt=C1y
zX06M)1FSIm{+G$UhO@jltZ>TiDKYZ*{q>CaYY`WUp1R<mUgmOLiDmxpyY$=Z36_>h
zx%`m&pB9r!3EZ`PYF2Vc)xb~Xyj^FE=QZZnvYs1uIGIQW9Ld&f-4a7cB{$edH`|QM
z>F(e<;M%1-@M?RDqhA!N>hLduGB%|U?&r$l$L2B+577}0ML%XI(4P}~ZllxZZROt<
zymYC5198U3)+$m<dY(%2UM{rI4;#pFG~v~O%AGV+%GQ5BnG^%0YiUb^9o2a%H3V39
z#hbPcdm{cSV&t@$-4x~T_Vn*REBc?Flk_*?0co#qf_JMqdZiL)g=Sq{Ne0!gbaZEw
zLtNLPzp8eis>}GVf+b=g!Y#6^K)+6sHS6avAQ+fy&(B&Oin0H~`rEGcm)@B{ztf^h
z^@sKBab}l%x}TIy?$E<vRNZPUUA%*~90;vgs<ZWGfON3suWn{NiT<bpsZncb6kwy)
z0Gi4p>e4_;2cEAaU>C^zDPK3wLmH*jXP|89U%k$S@t-p~be`O+N0#UGeZa{-vuCTq
zfd?4jL_ydk%dm#7;WKLJFKq81Zdzbo=l+=%add)bQB&*#bMf)AV(<Md6coyu4(LNr
zO&Ke;qbzw>S@tkfA^_ib?7*!?-cT@S0GdH*OJh7KK6y9dL#jZA{oZD8_vld75X0lI
zw<bkfN1E&G(D^Qqf?>Z4VPpIk{<ENmPOZ;eN76cN=w6*;yW{oE@?`2^lH;qBjAPr&
z?91cx^}DU^VR`Y|Mz_o1-0Qm@JsnGS)f(<<1qP&$1N#U8uJSO6h2Kcz-vl-YGf-xs
zw{$JnMN=@+6*mBPhTC6SoE+quQoD3vfpf#ssn>Gb>f<2=t#Yva_Md^8aQRaka@<5s
z%~c*AJ5dS_3kBOx9T>xsfpTzyFItoz^i`wVZ;pKti6LyWEDfU5BtcJn!m(o?Aa}0B
z8C@>l*Ys8v)Fty^H&P06-&DArD`0{~I9A+r1gKUrwYa96zl1t_x*Zo<$IV<ixXj)A
zR4tEb7%dd%G#@Swy;$SB9o#>8@|5y+OLJdE<JH32Wk?k0hPqhZ3$<9T3@_ave3iej
zf4bK}9U_;QBI=Sq?DLghv0v);yz(XOG{C4a5$JHh-m$Gdyt;|=U<{)He}Nr_S2?_;
z43uETjoXbnEWAWsD=6`z{gqI>xN{$w-~NJ_9upkA*5k|yCe)??4(jpbzKF@%HrvMn
zHb5xK^JDRChxC9*Zm(iE)V(J{jwm(Dde|5R)#CZ??685I6g~}DM`WzkMPKOFrSC10
zD^J6x2H71piBYA5J8UjbCy)X133H%XXj6}k0IvBoBM%9y2PM+00rEp4+Md6Qrzsm5
z>^u1U=7vBKLOSaK!Vi-2_FaZNRowFr<WFDKcJpT5+I3buS1f+uSP6HUV$o3!`|*dH
z1coBG$`7EFzGurlHRp3Xb*BI9=5>3U$MHRxossDc$Sfq8?U<kDBJim)W<HUGz$Sf6
zg?MD5K`8Tc1%dR{q3j5i&F=sp2&Qg|$7omL>U><95c^vm^E^h#*PdiIsK=+f8kxwi
zC2n`?Y8sr`6k&{Hq*xFs5h-*}ia1mPF*wfX9FX{16}@52=OlfSNtbM2Y?O=2|9W~d
zL_g7=EEt6FK0Xxf1vtSZu5ADZMS-mrGQnjG(&)-S3t+nvcnA=n%*7R(y_Q%|>N)B2
zd8on#U^$h*o-qMg;GYiJ>kOdEp@=1_%piWwo`~O>DBE46i(G;d8A`zQqlC+fHmV?%
zvh_&)+xT9j+h$nTx~IP>B8DYrl*uzrFbH%+B-7|271Sz~K<^y%!M6N9x--TXbRo2%
zSdh#*3Fe?80-CboKRdI^j;xdVT<ku%hYg!c?HC{|LfmsMM8CL_P%HGZpZ3SG>>-pN
zT+GGsp{_(Q_Ev9_^a8{f{9xg0w#G-8MstuHub~_M$fIb33P`|}SYZXb5b86U;(xsO
zSc89!b|Xre18cIOd)82Md!+u3Kqf>eGPh&dc?**A<te=I1j7(t<A67XgL-lh!7Sv*
zwJZXDlUJy@Z~JYt5LBP)IWVuV%IbISTxo7W!%q&VItIz6;Y_q%cOfw_3=9Mckuv|j
zP;t3Os(x8eNDAAzZLhHT(Is@%rMoggRRbXEn!X;=1d0az-Sjo4Xy2{O1J#idr3b`>
zofL6<lyd-R#&(@|Qk9yjh88g5<^HZjMy93eUUP&{W(nHSELMAguV&F*Q&NOphwE&p
z#S}ij2WhXb1MnbMEqys#;`^Xg22Eys5YoiSZ^ZJEFjB&PpgQ-WYFVAupN4GdfyKde
zji5~u0Qaa6u2?o4iR62XAmV3v7kU=q1JiL<W$BC_F7qBW=y8I-60P&tAe-1yL@_!R
zXd7qTYp@_J^nhD#h+x(nDmnULl_40=xtL_IF!6%tHuVpA>N1a%Gs<5U8!#o{zwd0r
z;)p0ou!iRz_1+6G<b>-K3OL02F#(3)VXwYUK-~FxOBf1OJK2EjR3~{W&EHc@^(M3|
zO_>x9-95>t$JS}(k@WQrYU634@#zkn5*6}>$az<<YwPKBtT8yu+3wNF=#+FTUa*-Y
z`fH6HtP+^xsU@F}q?weY9o{&xQ%PWYml^$|$85>v^SR;Hh^;8%<TN!-9TRHi6iMsc
zK<JNX60-Bpe)Rq5rcLsHwe5D`O-+7V2?}_0wvl-+UwR*~oX^r7f4~&bI&JyHV^@5+
zOiqNBn|JFVL_R-nYad2>S=Crrq<&+L%}CJzVG!768IymQ6mmb<&wFzRMF-K{$|qEy
zrUDg*i@9(bkEga3rN}X5f13Z|BV|&N1QL*)DoiGdu{1^kCp>#MgYr}$nG{)QzXcSC
z4wA=YRK_bXgkF20+7;y$_5E)ZEK-tVK>)d6`p~~D{BKjYnYFH9izpsvSlMnq(Z{CH
z5ULhUm!0H12G8^YNsKWL<<~`Hx#7!d7^ERgfT8i$t50t+`n=v=JniF%1<7O_&~Ioc
zvoK+3!yV@wjsQVvyfAy8%OzgZCVk#$b2VbbQeQ6W(otcq4IBPeisfHr(1LdruN!m^
zOot*U?Tg4Ct)P%U+DP<eD0P8Mbx5|}xNWC};E#nR-!DerM(EB?i|CBmDFc~Ehi-x3
zRyfH*$YqwvdoSazC60e_xC9|+K+%oY<Ajtj8K<+y6Y`|WV1teky$X{;z=(+_=+di<
zEPj>o;YOVnh14*rZ5@RK*#g5N)IsFIfiz+)LY&5!W-jrBVxi6A=>e>PaOzpvxd?6H
zGi1v;25zr67y4f*0S>LgM(^u0AL3#N&i0u^k+FE4l`#q~2QvE<AH!#Epy920l8Nz8
ze&$mGF*&u4sSInFvD+h=wF!&D$<*F*G?sX4!hrn0b9edkVCt~3MP!?qeW)o*(u|zd
z-|`iF!}vUMyA!7<NF~i0bq^~icy3gFDfxtot<k#m^BNko40CF+UH(rL7>~ity2nZQ
zbeKRTr#6g>A$rBW%hsG6pn&1)5pms*RHAue(D?O;Z-WAsB5(Y5g6S`h%C(GQ&<>I~
zsCTNk9w<|*vJMNR$*wc6;&2RJ_6eh(AxT_%$=F>8S0KN(OIX+PCBUbq`F<yUNyKEg
zvc@*G%80z8UiC!txz8-1CGBK{G0**Vf`Y(eqAng*#-q`kD~K@S2NH3UWJV|O4?UXo
z>983|j3f(S)Jbt5Fcn?K&Pc#y6BseG+v8efgrLUmE*q6t_qq8(yvMLOMGT`*@C7Tt
z#~az%yGJ(q>Ql1G-DhDRSK;@U(~s1y=;B;X=rF4tig==}fOMYBtVfSEh+LmA>8h-8
zHhx#H!^TtL;gk<h0oPDG_)R9fH&Dxs8o&O<*iXQAB*(sRqDI}<5vS8Pi9-HJVPjmj
z5c?Vl+;)*I(*~hgEo8@fv#i35EDxNb+==e_4dZsj@C!u74_2aZiL&#;fg3M`zs{CV
zVBfCZzKT)Bv+C!B;y`1Y-k-~so4XW<x7z9^XY<hMez=o}bRaB88ai3pg3;^nW5@QZ
zoG*R4iRuqF*JR7e`{iP`En4mESv~lA70+4>on+l7T2t6m@$!;F6?Nc^G`l`1dcK9{
z<?PAOt&&zqkI;W0wKAA=p^nf?!Bb7Q{{@Ad6h6M#?z>Y)IHq^49}k3sM`BXU`Aonl
zub7X>bqSg_0ttm2Nh5Ygg97cr3|hjsW)^!}5J(0hVbeGfQt7GPJZ0)$tV{ZZG!C&{
zDlbS3TS92-hXWgNJ2nmvw%$-MQ!YH1R~wBT=ZO*}lru?Hr8o&Hr~dv6O+0;HZcK}k
z#Vx&j8&Y{Zh0yjbc6R`;R&wY)H!U2ItT~CTue%V=24X~2zpw5)3;QL9_e%kKkyX}6
zod}9L=0fYkl-EMfMUr&#+J_rlCPN9qGnf*+c#bb@Fwqt?j;oh-c1)$bCglK!P}IEI
zn!y8rCINZ?zAqlzVi(LT9a86Twtw_JdC1aqiU0B~MPqo7ey<_vb4NW(rFk-4^scD{
z%QR^Q5W5!RW#))Srl}#&?@2nD=e#K5#7-He=zS41v^<slNu#f(VA*YIhr?y<1}!sk
z2dCBWpdk*qw~)W-c(Y)cH7clf!+ayp<5(!zzQg?bRrzlLyi6k>U+b$Sj@{O*Vy2D9
zazRkuDMyGRiXv1D>x1Xt6-dI=N3Ak%;;}JGV5?!PK|a2)6J3JU`LonudXmcuql1hs
zvJDmc$#veH-hiNVel5Z~rE~63)Ea4ZD8+-OS#d459t*^VV6v=nEU$Rd=SOSZzRCW2
ztQV?Ob!jPI@E&%Qh}Sao?=^B4uvEDcs)^^tohV)lNQk!sTBzxFMAv{AOccz0ru<_x
zAPVgOonn{<RJf4R`~*znj+Fg1YxDxB295()Jd*{%z_<MceU^<hAg7&5M*H60imr8s
zupLU3gSF>;_&Ne4iKKm4UK<jvUoZFcqr_;^k5``BNx<ni>Z8fTSk{g;9II<0bpys}
zK@hoYi!RZ$;W9Q*Mw1~x;~b{fE(5*{_{UHHUAw(HW=yKmfZd5y#}7Oox~sM0`j`Xq
z(Y}^(a-XGe<TN{Pd9vGzjC!2<!i-n;w;=R3j9A9|ZEN*)p)EtDR585i^xy~lX~Z}i
zb@M}zw3$dK>~-sy+71!wjgh6o*mN|aoY5GUY|wh1IR*Jiu6RKJ7~ZhpFu<__2sRzc
zruihbf)_w9b<{kYc9G&hAoMcnPA9vL#}xLtaJ)Ih&Bc;a538B%;1Oh{ba<)-FNZ%)
zUY+t*F^NN)Z5k5!X(<kamz*NLGT?G~7y^4*_}0MvH#8f=zRn_%o+VjtjhE<BJ~Xv}
z3>j^<uj>Gv8J{)5esc#sb%y&7kP!WCE;^{#nde;_6(=NXJKd`bu3N*+jG16qZF>NU
zS#$!8(BxQPJuW#a_eq~Rv35EL|A{}Dx<ZToPM2qiqAG*HH=Nx)p`Ga-K0=EiDZ8*O
z!dI*AhsKeW%KI9HRQr6XCDt)dT_=&k9mrgMs|nh_KsC}SuHTpvAS)&XKv)I}pNqLg
zqOOZy5ux5`TgxzvRMEeg0u(Fu^ojk4KTFEP-*|l~>)&+}-ahFSorVTGY~CpB)Q`e;
z_+K*roEJ%SdZ(m{Fs88fErX@f^E+LF+M=2a^Q&ElRe&nRE7ZgdhQBOZ#Nv<{d_dA+
znFqAcX|BolnuIJJ=GI=P0>iwdDszT@f9-Ju#0^b#p_1L=lj`|7^dpv3-S-yLjrk*w
zVHEc#e5r#-R~s&~zJba}&h(fkrH4Ehf?<YsPFB_}GD!U(M~U8gA~H_M_F+CJ->*RS
znU<TM?sbH<SC85J$w`3C8Qq2fXQgkDTF%ENmF?j9WL^1j-|b#gL3{dtNNE4<=x60*
z=K7yY7t4P-`oX@P{du9_RG6AE_`|4E_k9BXibQ0%M^@VscgCwJx<X(?Koe_y3V(^o
zt26Gd*RryY@jwhG;SGV?>A|DDln6bl1)vO&jy)lT13P6|Sk}q_Q^nB1(G%52@W&FC
zxa@!U@Deg62OV`n_Xa0{j5v&``Dj?1bd1@0U;j+rOHxC(eY`%-)__68j+7ejUXBm@
z$O5g?Da#B0VvOUl`ie||;UR3&^3?Pdi4&D+4pZ>-C&pu}?{n2oXn^K#dZn}r37Xjz
zc@%LsJ#j~7QEu?+^KC{QLx#J$^*NxnDA8A2T%l+IE0^LaqPsn)PEq@e;=0LxJF`Um
zmb}s~p<&MINk=uMGG!7YuxD!5_UH=TYnN4OUF~7B?Vr|(zheUMF>5k?soKYx<>d!X
zBD9RWm;qHJ%emFxNP9z`jP8!MmX24SIkvaEy}M)B&X)I(x9*hcZhwKQuI%^Iy~U($
zvkgG-nPhZtPnq-|P6=$<mZA1s%syC|-!#P8?u|Wov~yxwvBtBP_&}Ck!BX>_vGYMJ
zJhkG(w<c|<6qO(#g`L_z@+T=wZHM@Ob$oL>rdL7vMLS?AFOEWaiH`2dPtNYw(-b>L
z%EY(}7UW*z%|%eQmtBy0i(mvHSVPa<niI?C-B66+?N3=bm;}7<Jc>e_ozD?G%a-v|
zkdEDc<=?rTB;@+z_931!(B>b!S?*6mdWjhRsA1ucPx<;lng~zl&(~kR1@TTH(+1=1
zj2$y*7~~k2@Rt;DWhY@yF#@~#SVHq^?zM3(EtNh$`ycV>@>2aS)4nnunz|yI{zevt
zB18z;$SH~!2e=B=qnrdQCk47nyWck7t^}P+j)F3nqt5IdtA1OjBFT-Tsew6W_O9hH
z_-+)`BKC1Wr_IW-6V+e?MYV^zcQ$``&W6G1(Z)zQ_0x_5<r}1ef319adS5qDDVVa>
zR@^?CO%X+F&Y%tu`e|Y~=^T^1;+aQurPSt?D4ip8dyNeZa7jBC2hKgcF%Yk6Goa7)
zv<RH)bvkIc{yY&EO*eY<f^<hAxsV~zOB9nGh<^RR2DxtU6EFt<S{zI%t@U+^vYJOh
zEqxus=-nl<4V(C~zZ5hLDQ^#5Q6<te^O}{a=y_1FtCC?Ju+pIGC_fix05CfvaYhKN
z%1aSP1}Sq9zJX<^ykmN<v-3fHUJaGwc(oxvO54rBK_mq0j031yq4JYI4(+T_I4^H%
z%0Ym@_o-MikdM8mr(T{!s?_%5b8lA29S9D%&Yv6Ko&4>HUu0|0Buq5^XBfR|`qWIN
z1$elJZpxjJS7fPjMT#i(+&F!$2*IbSJzo8o!W*AgRaWhiEHFYa?ws=C>)!t$TP(P{
zF3ZFQM6w7!bwV|zU`>nO%Cy{rYJ_PjU;Uwg{XLBo``#OY|2nA)(EbW-{?fr$fY^;E
zuq|&d(X^gb8uw`L))E6j!KhaqKvrW4ey;s9_N3IVU(+EnR_tzqJx2^FALO(C>-wh?
z;^uVD?Gnf|Sc1v&BsM^vUPWsEdW|}X^=_q2IoJ8zI)y}<y1@tzV#xis29>-?qEJ9J
zu=$qU&d)f5jP{qwNXF#W;4=kWf=VH|3KEXBm#JyL#uAp%3qK{?49rDrCUpoW%;4Ln
z!-!XWJ&g|pZl{sU`3spJ5{_7bT$gtBzEF>J^r-lCE*1@z!|0^_+-kGbIj^V2fW9Oc
z!l=x1=^mfUg4lTah1j_R5j(^&l^VqlVD5xy0D2g}2kSHl19}UrMdEGCe~1!yF~FiH
zcE?{Z(?e;w@`x>-RTN2T74VoDH$ICU$0g^$6}}38pJ|U0qWi=<gThYYN`L}?4>gj4
zgSMPb)D}EPy=9HQBR}tTe@WFZ%8Z<wC>f>@1|Ew85ksOzSnY+6dK!8r!^CL_+`9;J
zRn}MDi5nW0FZ?B71zsGe<L6k@?<ve|#=6aKf?`diIt?NVI+Yf75Z=~yRC<PMsna6K
z3B6Kx^DuF`XHaovxUf8;K>s7atzhim;dkpaF3v;%A-Ii@vBUbhcc<hp2+8Pt+T!=n
zim5a6>cI{XG7?NQKRH;^XA}-lAY4)=1zC_Iw`jPjUNOSY*^D+zl_94w*dmpl4elW}
z2$Ff2nd16Z2)Gpc-NHeFEk~b|Ae+q)Ap)NaKu4&(B@J5c^?qrO8ynhfoXWb!U0)WY
zOtB$733F51x5}-A)Z?hyZPF(Ji>`3)t;T%>b9{5)-7Ke>UoWJT^zwWGbk|BAIgU$<
zJ|vJm>)A+vx;A6X5BduTA=<+ugV8VU1Yao^yG|`G1YJa23_yFTZ?jZCWHvRRiR~e|
zbhQ5AeIf9jr~mRb^%E#oRc}5~xr?JGI`m+Oo#$ocH;D*=XKE_%T#yhXTbblJR2hd2
zJs*q9&Ls8~Rn$X9J6_}l#-a8@EZuL`s$Ts>ko{X*m3G}uk7A;(UD?^2bpECvwg*N*
z<<&Rh2QR17E{_^6xjeyPUrT{j{+h7T5&4A5l}eJ4a=sp00Xg#v`WJ&{#LgMV3J7Vm
z=iv~jFqwogJ`LG5_>bBUYmVbNMcJIs-F}8(PEZsnb_>+^*n$BE;P<B(wC2!y-bgrP
z!(rQJjneyOs0!;?7Jlx7iOcEe-h+<fTV6dhf8^TD`Wo~mEg`uE`Uwa~g**zz;$Ue9
zT!UTpa521UYjkvVy*4jH+7X6*P*iJOwzZZ-WT+bjqGT%P)sbro@DdW>*-$#BoJ3Ml
zFK$=}n!gmL=f=qad$>x%fSvDGXXUjra69T;jTk~4qFT-;3JWH=2MRfC)`soEqucmU
z!<5)d;Owp`N2F644AZWP%@W**7D)HnDbl}eYUX4}4}PPXiBNNQu=5^otdN5iDyQPA
z3*q?+RkW6S)NV0;$7g8;|J1s(B{OxmMVs|jSwv){=IIy#^&VLM*&vN*xR{{JU{X=p
zSxl1BWz9z36BEIsahs}N;$6%)K*(@s<Hr{?j$Ssc>T|g-#6ys;bvZ+kLnywSo0D7}
z?DK*D6-o@4%&RX2<&d0W#}R2bG{n!35gD5QhoGI~#IcP%EI+=oari9U{;}?C2N|oS
z?7(ChFmr4JtP0Kpu61kw+y#7^K(X3ug}lQF6~XQr=|Uq7#dIL;aWorEy9Q!z!1MIA
zdJe)ql0$u0pu;|R{%$ROL4y3z#E!nHi02utW2{9mhx<4%$Lo(jAzAQr!Bs^eG92^_
zrkr(&L5~=Y|6J8=?)2;MwIKhxSfW6)$6;)<N|4S2SfD8|>^)%qs5+DLV@<M85g2_{
z(Asu3(SU^#Eh70;)L8r@=mVe8o;u-YFqNhFldK2v<p9k!kSkYovfUijAPy$FIkx_`
z1P9mT!2MO|)aD*z_u!YkbR&psrYs?7OfNI@xMKmE-L_4=&QvydgBvz}G<JI+aw~aP
z_4-*A5DDQ|OEwDH-k{~yfcY8X1Anz8feQ6I_X=cUiCxO=tiEdXc+E6MZjmCh%JDY+
zjLUYOXnge6IVxJKH54;$l>je4<b+mKq{1e~o!t5$##L}Flon(T(C%Q3r^ogeJuu49
zV&_ZrkamARxD?Je^dY#Eqdb<gM<J?D_sD|>s7J+m$(G6tt&jV6%fD=2ef3<`c22s*
z$Ki|WA3rpLDSP>u8IFpE&jh;lF$A%Z=p%(wmGaz-So@X(Q5s$OjL=c+9l$;c>V-MH
zREh|GiKh3K+z`;x+J8L5aGzk#s=YJ5kcV?OQtcC7b19oyxpKwyhdhKDd(q6~O^gCM
z<&P{_F%hWOLG)GYUb4pay`RG>cB_KghOnJV3G*(&m)((93PA3=OJN%11@b$e4+SFO
z=V5eTUur{K_R7$}0|{yxY)q~&Aj!y?zxj)FCFF7`V>PQ5zeeR7Khyfbig;k(4me~k
z6BwSa7uZU?Q3dB|sKg|1YAiBa4;8av&Z?z8M9fEN6o>92ey|ZK<+Z<ZN8Lf^`bWkA
zEy1dr-0OYTE;B6K0W2@nB;Z7=|9I53#esggsqJqe>H__bma>CmI)T77!<2NAj=_J|
zAxtM>#S*fmV~J|Hq&`10E}b~^7{GVqQKpg!59|fxrSIGai6fDf>kQl%+_|H;3oIy9
zfkjG?tO|n)hl>^i-Z#i`^*4Rk<kon*@N^MzgrFoi#uA;nK!)jT*Bso4QSpc~=S`Q$
z&u3p&)WiaH(jEELCkeeAzadvS<5d5Lw+f9sx3I+!RoEH(Lg`}NUw`YZFf~|Cp!VKo
zWcKEn_skAT<_SYX^8#bw$EX&*Y$ysRUo0_bwaGc37E55AbIZlW3Ok4&6u)Hv%H`FN
zKIW()zk|V2psz0)UQXzdOD6x+Y-e_k=R01%COjX6XA0Oocwee<evt)Is!OAFn-TXG
zzZJX5@^?7j7YE&GqrO@;lJ$d(%KyaPXy%3>*P>--%wSz4hg(mMP#dRjf{!k)Uz#?b
zXY!h9t4iXPYgZm+?)^q8rLoml=U2Px#g8`V<d-yDpeZU>l`e<(xZ{0I?UkGWyUF_0
zHCP8cj77waPaEd9{piw5sj~bRgnzSTI1dE_s-fj`dX23`JiYf)CS69oKzw}XvQqOp
zgl0hPws&IhdQ8j^TW-W*sC_w?gW|uJC-S<WiEUej=%~nmdjz65P)pHYhOGtfUB8E(
zRO6l%fmcHyX|F3i8Z;nJ#Re5qu|1`Yp5u!-!ivwt!>#U?$|_v;{}Ow)xy#N*mJ?gc
z!Dv0n5}5-guPGcDt}M_#C#gJdc>P1Uw&J`3CqPl1=KCuU&vem1gbJb!faza8`fmO2
zJ41Z*kTWhI-b~pJ3I%gI-3U$UnWSz|WSq48K*yM?$uA)<4g!v?eCp4b?-KK_?$_z^
z>dpa@;MjmiTt@{>z#0+R=#KL7_b>4~mVlK$-rKm(7Q9Q-vPLC+ueVx8KsUL)XaG=~
zVWs5G)P3K9Re!g`>f(h*n0*vM$Pu5lHXx9}++iO1E^16TU=6|1AA*0?Jy4UzP(24!
z&zUJtoqj1tV$`E<3AtY{zE>AS>`UY+K_T9)x`HIf=b!co6fxd$_<BbM`)lCxzc*zT
zz<;?)Secjs|FbD4<i((av#_xJhYJ+A`Fq_4e-w4HzRUkc#>!~%>J8Gpj*uLSJ*=_G
zzXt@=NI1GMj7Iqg;c#)g_*HF_BBbGBC1Oz67lO^Rto+>J>=&Yd9JK-Z8E|fUb#k;g
zK>;0W=`Lq=@?daqw7z*lp1?l+4_9joZy0h7tV$vdKR_7O@&`7@kC;X;hg&`13ZqHq
zwuK?}@y*2G`@!w_^7J&LZs!Aj63G}Ki=Szr8X#5(YH$DTRXp~IgU@f3{d4@~ar;!C
z;-kr&UutUcajbsbuPfHVLY9MtWO&n|_LBQ_jBWe*`1ta2{-mV!$I@D%_4`JZmFWOp
zz8hx41u>hbAtr}bf0coJ>Cgo1>L%p(vbrvgG4qLW&IPJDHzE|Pka4M6R3hi6QcTTt
z*w$aPmz(e)r_9;WI-Vx1I@cpf{ORMIELUhhRPa${BBQAyO0LtOuYUaNG%kjJn8|Du
zisI!khEw~v?)2L_xFXRm5?G+Di%>RLO1Xri7%`lnK5ov>8IS>;X)g#|9JH>tvFXE|
z6TGRjWi!C|_3tpA+O3dz|I)+#A&)pc4-pmFw22q`Smn#0A&p9!IV>6%wwa_P;|uTc
zr+mwfm2Edm%U9cJHS)z%96V}<N=f043h}VQC)&IrKXBDe5w!6k85ZEaU?&Q#PN
za>+ienp43H!Cf_hKeMiZ53O2s!Z%udGw!zU;iPaj>Ghv4<@bpX;ba&a?DzjF>KODK
zxG$4q<~E~5)5^yaU4Qd9skV3ERrTviu-4a2`6Dp<n{2=TNJY$_I81uWyPQ`_9DRSb
z%gRP#9|@jl84T;EP|!e~03$J*rPI-H)JGq@x6UwWxhw@iL91Z_nh6S2ELqPj!Th#B
zwW$ELuu^kd+SF}6&--we+^tCMllcM8WlFe)rhKgwZeOf~fTuEQZ-nPJguuMhF9A9}
zD~T<|xAI5zR%asHt`H*-j#aPiqpBLPPBducm}u7t`FoOkT?n?=HPQ$s!L7WjHOvKq
zBzR_sBmjIZPX}7zo0H`_)V?_!nw!5+w@9Umt+MgH%IF80lxyBQX_(#TXZho{g5NBL
z#(=-VUvfmf3h*F+g=~yG)mLB5K-Dd{h*hhdBW?IYSj60yD_36{>=q*EV{mn}z8)wW
z{7}T_{&)?`<Nmnz<zfGc_L=$Nd{>;HZYDIf{0o@py^8(KGRtI4Q2bmaO+s+aCVRI_
ziu{35re?9&&>Yg>pp-#em2^)zwD=noqe5BOJgA4uwm7C(VFXk;ANG(c*EakipwM{h
zb5;`ei;x*@Aak3C#y}qBh#=iQBTjIPiMvly5K`O~H*DK#2v>?z97j`&O28!S7xFG;
z0qTd-=C|w*j2RZ*5u?T1$3#cY2W*JM?H8~@G3XClM3RqP%;RXNu5PyOfhX!0$D;vI
zd54|Z9rNfjnc8Kve5F?6q~UkPk}Aaxq)+gfs2mu`$x#&vYYU0;G-Dso0?f9k@*#sZ
zHM>NZd}G{3%CZoyR_THnpz;qylks?LgQ>Cv3Gvv0n6B3*QG=Z~cw$yGMR9n5oNn{e
z0UckaRKOJ&Z}_zXwmcnibBS}3SaVAR<(eU+0t8iT2RH<jm%ht4g~m3h^HLcH(yNkb
zK>)?w;NSX4gz?gIPrQ5}_fvso9YiPPH^{DM=0)j_jLR4P1MwHyjCzmq-#OGfFkd*f
z4~`k&*tB_Kc_Y{_9(i4PNVXY+peDlfl$+aClMDL_#SXACjI{=1tF&k8wtxZ+&{DyM
zF_?Z*GXyfx?)Q7&mv8{Si|~1=^u0Sa1)4QAnNI!5(WyrTE3w3G!lKR@9e{>hO!vJd
z$LpKlYKXJPu1_sNktPqSPfTf?_-h}tp6@SE2tiI5Q!skM2UkWaeFMU|-*^2d6A)aw
zLcrA<p9^G!1FqcBQYDL)VZxG=GHP8#WVOJuM$|bk`#JsiPiggxV2U?6q7sHnFHjWH
zI`<QnmuoN#Bn%FA;Li@0fhyWbRK3JDsHbJ{BzM!bXQZ!CgY@}}lDYC8I>#niJZlXw
zuI6u36`Cn?#4>eKcj7o8X1iE|5OX!cf+AKU7%b9hgn4K{+>yl=CM>~UtXukF0atcd
zj<|lX8GfyX{7j+v{;CW=eQ>X9q4wSPN47gfF7BDj{G+#H5)LSnp&0!VXYA6Wh$2R=
zl$LC_MXrx^jw0BdhH@ArI~I`=b~X<1w>DFu@nnUTQ(7z7GRj2a#p#`scw$4RPBjyu
z{U^_#H=k`o+$azd>ipTmZ_@Z*6H=wd>98wbM+D6FNB~Soc099j;j$d9zdvc&W)jZm
zSrckr0}783bpb(i@EQ!dU$|0PQ%KZHTSsL3b(=d6@ip!JP>53!KL)=Wvb;BN7#*Xs
zee8No2n>8~pYTA<C~=*5+ii7DG;s=gB+!1lzz-q_BX~Cj6AX}8CoTOK4SIqt<i|kB
zE5JmYYG6ha);^c`KC6r+$kWG~rOB4gbK=6ge&s4YZ*$cWy~%VcnXg0>+#K2(ne7i|
zjVgVbtD812@QGnjC0JzRa#RMm#bxWbhBGnf58Y9d0Qa2x0|P;zMLr1{1vK2&LPk2L
z_;F~ygX&95C(L+Jl<m=-LNoej+~7NloC_a7pR;A_Y{A&wHNFyb4$)PQNy1ccLEmaw
z9eRM#TgBwf@(st%<dbs1<}$EMW0Mm~*Q%TvkZwA7r@ivh`&m`+UY-P;d$tZ<pNz!;
z6I9L%h8fTh61m2O0EdLGH|Z^%4KyeG!>SO}U1Q`NYXm+mK`29-irkRlIfGEezHtXF
zbg$EX#c<8Sc`bC0jQ`y0GEfA5^XzMndBM;FIx)#}?%93Qep=n(tf=JzaTNV0gF;pD
zcw3Ix{qV`z*T=Z$NTCjR;R*JN{azP!0*0m(Blpzw%jfKx&!HRclg;V*%%GaUJ0CoX
zI0VQK_oaNHZ~%9lE`P1epcvH_bP>j64NI?*3`SRk*Lh${mO9(b?1bf=s-G1B$GGD+
z*R|TIl*8wXA#Vk4SPH6t?H{TEURYgPz?Qpr1f70PPT3P5?;HY5zZ{uA$EsOK&!6v~
zrlHnj+bQS=Yk6-=JM8skB%{WGXHG50H~^TKm1nF|VS=3aaGJbK9F?7-eG1YEx92qt
ztrrxuUNXbR)eNI}9jGCYf=XvXE9+$*+C=h}q+{rZ+k+iQfr1{qso;eAs121KVrj?7
z8jSrpW8|s{tpEcKCPKl>Fgj{@q?D5q+OSQ@lgpt*8%S~S7b&3?6haU=#TO9871;$k
zkExT|GjIRpN^;HQGtH|_K$068qg%0<7^EeVg`Ih!#Vy4f8)_AEqqJI#-sR<)3~sjw
z)?9+ENZDu5D?zDM(qE4dz4?D^y#sfpQMav|tQZyBR>gKwv6G5fu`4!LY-`1~ZL?y#
zV%yfOv+w!tKDV9y7v47CIY%Gu>AfFaE+Zf&@p>C9&}Q&chtALgpM%Nix3Fnj@KIzi
z8AArhxmX8SJJ>3@yM{?OmhR~&RMLLwNl=H`hcXr4Oo23YJ>KT+%o>`rM!;c6q&+rN
z>}6+ejf_iv*{hrm!Qv3cI*(S^iK;sN7;-xb_!<#rl*{;-{sIeA%2)dz##0Uw8fKFJ
z>h|Jf|8LI{+y9WE!1iAm3KKd2d*E9yLdTwb2{9M|X$0to0v#rjgCBjA^?5uHj#n5~
zS~p%X|C3`3+gK(Jk0?j)mp97504ibzV>~i=cq8sZkvtB&4K$813d#y$u3xNr$`;kh
zZyzD^{%lAB>Zk=Gp`=x_6d_yL+Si{GNcZ<(A}Arr@(C%Jj>uyE*rmZ4+@KC!044o5
z8%*p9OV%${`4?D{sND3m!xP65)v1UpOd^Fq#c$bfjZ!JJ85#siQ&Br0L_L5UI3h?(
z4<G{m1j^I{D1ncHF7yESI7t$}oqr8&Z(O2;g|&;;M%ZBOEEMa&%YsOL0qDVdLGr%<
zLda-HK?$oX$(~JYKdcdUIY1e|0Dj<AAOd{=5Mbd1%F+jnfggh`3;=lu=*b(j0*d8q
zrVk(xh9SV3K3xXy>3{g}|1pcPuyb<!f4TtlGaLM$Fkoi`^%?$C|911tD4(19s8rzi
zr~Em4ATbN#G1Xx)s3H@zL^?G?`E}uClkgFou&<cCL65WsOBKPw_RK4f%eFhc8p5dF
zz9E$^rW)wwKx>%B$xg<aOt-#m3+U`U@*H%9ECUW2WIqT*@*e~{tU&_Qt$627z9{cX
zpGnOhJ~5C~Vp(u0z`&10<N{0PY|NMm@d=n;J}9NN;G(Lf_C+?2E~+@;k=%L7HlClh
zj;_k7v?MV+s*kaI2p8ihH^J63>?oyonYg);me()Noaw%;G^?KZlaF!C5n*RMp<*-@
zf_0Rb9EXOYdzu-{Mu-^;x6g`6m4|O-6nB9wLr<dpsI94dz)-M1ca0jI^?{R%=%!jX
zeNg+a!k2kUEfS-*_H|K=4IQeCz7lSCAN@lrnRV7CvbH9{eLnPbd$r6jQeadP^#xqX
z8ND3I7A2yRvU;TXg{2#yJjA9!I@*AbvDZT>b9mw8KXgBpWuWn54fgBOMTj>!*QyRA
z%%@Nb49-W#fR9~K^YTff$Nw5Q;PyQSyCeg_^P`%eG!Agq8sA#~mLJFKL8h%>%F2eT
z`F5Ay$+j4FR-CvrvfXo&Y}uK3Hu=!CNE!)I7~-RAMz>*$wGkAZY|g0HwTM`z25Y!J
zt0k<W{gKaHhbz*muQtK}HMiZnEUKE2t*N1l>f9gI0>4{2`vm)BbZ?E)w8(bLyPk#W
zWFbKQB0ny<8#U1!BFT@L9dYG-bG90pG^O!+o$4)%KP=xd*`E8|@@sH>YoHt*jHqiS
zxZ_*d)cR9{OLDN}`r=B^%OP%R@Y@};5B5u{h!aaa4KTmBr{AVC>LBZqvD%Cir?(sT
z_8CQ`11RTQGE!kQOvE28?U=X<mrl6UMn!iVsEl%rS|r~kdvCkm&E0G_GAd`&JaiOW
z1auR7UyK)MvJdYzD^6UH`iWpYeU9OkT&iYJlQ5(>5N2TZ7@{EM60^nZnRfLc$JKP4
z@S8MIoDuW0-OgXFqc)OP$Rf$Yeli=1Le~PD5g55I-`oH*@Vu^7>n_BbkvTnlV8{WW
z^_RE?;)#D`AG7v!mpJ{MSKD#5UcTd8lji$aFTK4`kg|jk5Nx*j7_a;coO5dzCw!i{
z9I7Pn)4TLpF?h<e)ar|u>}r139(36D#>JQhT89}0{oj8mI~&damhRkK|F2Etf4M~1
z{|A={`#+ZmsLmAN^6!SBHUs<yKK83%6;e#}(6iSOi1$>z2Decq!4na8ds!eKeelvx
zp7*1|w8wwUr4JnSGo*;1YVjv+CDNiUzpe<8DZr%@sp$b-B~lkoRxRgqf-L(h<&lwX
z?q<#_Y?wGJ$6V0f+`G3pe>ln#6wpau64Q!69h@-#D67qA5E(JwP;n~<x_#6WAlc3z
zjXc_)V;4bAoh9Jtby0m7i#OI=#&i8NkxWu8Ze-nSb)3(^HF23M6#c7FYj5WO9;sA>
zH6E6D$1*nY&DISz3{?!Dj;ZmG#%dCuDYG916zgp@T`}KwArzM>HL9ik!mu__#MZOI
zRl=K{rj?lVlD}Eqk&6HWq??nD>w)RA&bwX|jr5fKj-6}7s#=~)Mu#Kn#oiHSFY$m9
z`uQ8JMJOegSDW^j_+45maSBH_f|=UH(*~k>vp|{~-6DbRIgl&K)l7Z2gU@c!E|L{N
zBFao!=!r5d8bq~Iz*mzn$`N3O-mE&|5KU96U`h$@$336;4ZOk+h)oWbaUDaEKue1i
zfTLi^eP*ncMPRgg-P8f<5M|0Gt<{_xZKsI{4m)gZGh<pjWAWd)>_FkJRBF8!?fSQ%
zR()zt0=RN`E}^ZLf18a*;AUu-bL-a650&~BIu`cLSGX^21{uZQxR-FvMG8_DysqC7
zj@yt{bF0f6zwfFS=w^X-(`mPvbB2Q#Bu?TD%M96aX!&C0g%ld(4RD_!2WN6V+Y6Ei
zj~u?MwyYA{cx3Es3{cwRA0|ZYE8e2!>N}oUtY{V#$COGl@h~ft_Z=Z2%v%nUf({qU
z)jAzPxg{yHi1BwL&a6WoA%jyL=GAocOTvXzQ36QP28ikaR~*h~>?eM}zShgB@B&$u
zCv!=Na->OxzyUH8k|_MaZoRwneqnU4<L9h^)jm-c6Tj%vWO$K~?&9Ak1;L+z@c_14
z@4{3+Em+uW6lCZa95(jj=>t9gzKeWoI9kWQzqqnsJpaTRh!(LV5D=9&^VqohXlg8Y
zNzTo*ZxR~;g#kuIjcI6jqU@678Wk$&x2?HiV9v$3E2lr8e{sEq=0^mPjICKK!6@vq
zHWQ^IkM7M>orzH=?WP(1&KV1bd<IB<KB_jug{o!;y`DwI(j6&PAs3nUMy0@36?;6P
zl}?48OiR&Fn7}e@Kd}Vj?-_5_LD7H{cKFJTuC^lpMUeKx;L-$z)NR6YdO4gvnO5He
zh%K*&Ct}x%BQ3#|O!d$XY`mnx%&-^!nUz|=dNF<mxjb8O#35^mBdgSEx&{G2LSkDD
z0%Y+$t}g3C?IOGx-Cu(FaV$ZG>`bsG6sI?wR>L$=p2U4$*HMR7Xs1S+M~FWAm!_++
z{2enu(H%ykEK-udd;6fjlE#z|n!1zYJH1H*TwhrE?F4?dw#3g;D>s7Tl8J*c&9Gvl
z5PT&)`RX|ZLF+t}ILl5uHAO+IKKCHnA1uKv7MLC(5U)|0ujT6^O2tSU&G2bDJRxnx
z>#8<1tA73dE4OH&&<>gl$gS`*vx41*>90+|q)LHkd+F0v-73}U{Ybjt%o-eS$+1CH
zACXxoCE0PYEoQ$;I2I*EdA?s(aNXw}xIwgbJ6h>|g?6d-`OgieIZtq0aUYMeCcv2O
z+V~Itz9U$)c_fR!8cMuzN!^=x-7i|6sY~|51y-XzL{aU}#2^R%EdMwZvHRKuntMc`
zGTEI=#cpagApFwOe(L$pc%OCh0A0mq&02|ZzLxM3iRpM`trQRA0tfQj7?*^Inx!{)
zrWgvzCmQ)5ACz^PP>NcGKFRHpGhQV|JCaKCQyU8=|KdEc-Z^S^kayj&`<zZb72=#;
zakb4|9^6H3k)L?#<VU!24#S`x>;^sX;sN6nzmyfn>`Qc_S;;)T4$bR=F4uUaceIG1
zmOU-`Q}ZHbomb2dj=i5On%gaY=rNk2ETsNNrv@V2Z0?++V3KeBT<5)fE*1u^Hj4vJ
z4HC!Y7*DU%C48P>>k@gc;_uA>Dv<)@-zK#NqeEGL7}`7(coLqi908GU27;$Rc7o5p
z=VwF$acVf?>d88Zj0GhXPj!~yMC5E*7LVZFaUOd8qoD!4Z@J$GxK9r-T9-=AD$xe(
zO@+n-lq2I0n2d2$RE@V_D%>;l+QS{;$XH2<`Xcdzmg!z8xMf^#>z#+Wz?4R%dF4my
zwv@pA8Haqe$JpsY^y%Yz3UP>mN9jCS58*oq@V7!U?SXUPqnfh{N19U@nrLDO2ri-#
zw)&xDlUj0c!$S*3=mJi?QE`bzhUo!tMR>PMPG}D7f4*2yVG0o6%DBVoc={!u9tuG|
zV?KR4YPK$h+l`)7@hfwkBm06w)tBvb$_{@9pn=zm`l-AYTlYh+AFM|}0m2NmrYuWi
z*l&=?CAvK+NlO|fa7;y>Pn~)rgTG5<6_2=o=;QG58NCs@{({!~P?_Pycb8M8-ew$G
zUpc@EOxUlj0TCPf9whD-#l3xu@C4bEGpa5cabJxUAf@?mJfWx3;~}c6KM%Bfly<1l
zC)2a&mJCfh91eM;CdI@7|9rqYu_EnGOH*7^DzX1=za&SC?x&J8Y`U~;sqj~MkTx78
zd_QH))8-hF-+;C%4(WV&prsNhdTzQ=Zs4N|<MVd6Q1n*~7$da`%li<ROKLwJ17k}(
zpF>PSJ}hLZgMf~TUq194x~iEFtDa0TvBkpl@(@%haVajqpR5Z9HV9?rOGPN~#n(pG
z-+S0Xqu{r$+P@oP*89CVt;roh>or{<q27Q!&tAuig}^`!`{@SL(zTGsA|R)cDHvGW
zuBe899V2{QLp&yV`AES=TkKlB*&hSp+v|mk?xASB$5~rW%iXX$>ljVtr08WtdD(-G
zI&bDPhI(u_nF=+4wEwynti@Svyz8bvoDrP6);9ijcY8d%5=Z_+t?hn&c=g%-`q=&I
z_&7qoK6;3aw6pc~+^A9MHe&gAPZ9RSa~%b|*?PB{&Zby)V6?UJ4y6&yKt4}U|2=Nd
zz~7)h8bABx9PT1@j<``ylbiDw7EzcY*r}uhijeT&k(B=(_?(M~Ow-5RPmWy_<y%kl
zaG-!??Xp5R%|bVjpOR-TzPnQb&YtDuvq@xBSd8~Qu)RO8vA+~6bWYgRKE*F^zT5UE
zr`x>`Ixj~2rhg?~XvLg!;$hzsBJbbadq#!RNN)(M&pXZq`0d>UL+NgKpD;m+o%Sas
z>nd_MmWab3U<!h6BEsL@#VBIVS_#m^#{BU0fZap2m9ocS1{T@{Y%fpaLyTAf4*_y_
z3^ry^5Wh`GU5)#S+TxC!mL)-;uiWf8+C#xLXTdY+sS28EARnWfTg&(sM7yv8$r|@C
zzfE`au@SWK<;HkAe;iITt&;~vdvs}{huPnYU1J~<P_p0<qB}s1iLoGcf(c&yV<&+F
zliMKE=Dv&2P~w<SpC}cUdk;@#`WT=F;|E*Jc=zb%>k@i_3lm`wi8w}udAJ}&k<{h|
ziCH^^ftE%EMnZTr<V%R}_PHC_Gjy1^7v~arg7HV+7LUFi&HzlFSFmQB8}BSHf}!js
zl1W$^2xF?~!aH<k9hb{C<P9nZ(hM_>7^)Y1dWwqWBHmfnDZ0mgLS$Dk<FlWzLJ%V@
zz-QQGyfs^SsgwKJ9<6kg<yS#ZMks$#qOP3V2bSja>MzssNu9@6o|#5rplH5U(DlW2
z-{F#{lS`!1emxoD$A0ay=mi93iqwg{@|fuY4?MK1U-K0TcM9fA=dL?kJ7f>XO@~fh
zJ5^)c>*XRz6XY#euAgMJ`A^rPEm`(ut%{vp2~RQ{Q*&emhWdBna{%Gs;w*t?qZ%=}
zh54nyK1~&M)r3z}K_wr45x&D%8F12;d%r^Ov3+NLcEeqPQ9#!`N3x^Axcu%#NlQut
zlCerXLhb_4U%&qxtiuT>WhHC|4-+A{fs6-jZ*Pn!MnFF5!4sT6;b?#%rQ(vg;JT=U
z7=pVKhXix_i+wkFzIqImg?VmOEb{9|LzdMoJ*uO1TFzP%%|-qcwCTRUHF@Tga4oMV
z_NnI{xm_~Pah9EIv7*3F2*OQ`W@Xj@Ub6Zjp(#DqqKXdpJJ~Z-J$J>Hk*@av=v$WS
zi<6&u(?37#|FS>a9<@J+eYZEZm*PW`&>Qo}_J6s|jNnnkzlZp`>VZBh!ulUn$$!XO
zHa7PECT}_ZV`=}d%uA4EH-H{Q?F4Xy6H_}IUA#R{TL9%d0ce4J4xg(npe-M_m&4tQ
z3}WAZTx-txQAlr}Oz?CM@UFr~N?bhJXlEw_*b(Tirb0VcCG_zTU7|1t=lzHK9qN>k
zW@aQcQ&$N}5=ObyCwWw6(WUe3q1|pnWgICM253%vA|sne9@??^`*^9Ms>g=D17Y%e
z8La<$7-qK5*D0{t=}K9hHcpb;bXM<49(ZMIB5XjoYK^tt<keLj)xXU3!E66bPBPy2
z^sq`uTRkXm!OS0Brb2trxaZ<??pLP`cBE-TJ+X`yZa~iFzMO-)WuWKX0*X2+!`@lU
zZ)Sv)`|eGs*T!-Wia~vG;rw**Q}v4r&*SvIcz1Ab4H4kkDAY~=tG&CU*HtN5`L2ZI
zxP#b@46ewoO%A;N#ReCxg{ow<YlRKpI+R|ZSzAmJ!@5U{j%`+!BQw?{d5?zMuUtqZ
zw3`RtF8uanjo#<ng0b`t6%3qzC3fuDXxlOH=vx=-;%v@2{p;<AHy5ruVu~hE0g($$
zlaGSOI)1>W(2@b(>uM`pxOJPrg|f0%DP=o#C)K2IrW%b;R_jrY^rIPX*vGg{=g@K)
z*br@^OjSC=peU;M47QH3Fq1RuD?JW!lWCL!rC_<?M$O-|l~1ifrFo{a{k^GY6K(Io
zVkl@fCSEXf_UCNM4*k16;<8b*e&X_K*$>*d6d1rL%IBQw!tI-JLD*Cow(3zh#}HpG
z`~aT-FZ=I=N*HCmj|Bt)q?WnZqT9~AJq?Omy7Hgk@!2mZKyV};QVHQd^XQ|bSp6(<
zh`;o*yE@+;0H7vwCSY1z1IX^;>sOc8Hy~qAmbb&>;at{TVU(etF~fy`K{%r+Mv?oa
zGc?eXi~sbzrNb6WPAOoff1Zzt*cefbhB(Z2y|+8}_}75mJ$dm%c&^6xAH;LD2(G2O
zwwQ8qa5lpc5M7kxdQaoS83I)leVu?HkD5Sw=vfj^M<M~?$y}N1&*NAY`+y~y$Sts=
zDrR`v_(}#7gklzUpH;iiYgOfaF5MHUpc$Y^>I$1Yc`Gk0aZ<i9L*SJ)tiiEz-%F7Z
zO&tkgd4d+Pg-EZB)N1ilAJT4mna6_fwSha0yF8I9UKOGw8mIj7*P^)v?6^lrF`h|P
zWu?m?#0H&=EW*P2`=!A3diU4NrlNoE;)T};CZxj9EY`-5%aA3*u-JeWd)7n0?-#Jb
zj|XxjNv-pl%Nw_oNSQ#<fw#*JqZ=90w&Sb$5}yE)CS01{`??=j|E>S_{@qR-OjMYk
zv&3vynu<#KF+)KJ^3XaQ#!F@jq7>YwHa@s-e9(YVmPnS{v+~2YmSq4nu+lC7A%gdy
zWo{XSS_$iq#kR%Zic0B!CkY*6j05bogl3T=wT3!^j3s|w+wKA*tC}hOE8J*;!&UuJ
zq>3A)EP93tbCBG(f9JXURHYbT|82mJJLsK>9wnTrWy6N^#}Ap>KacIi-oO3PA%h|<
zMAiFIWATE!v+TnZxCj6E8H=IKp@>hQRigxjY=1-X%h~4;V>ZB~^ya_UIg<hE!{{R9
z0nwG4a@k3fd4`1{DW#|t!Oz{Vw++N`_+!FoG)Z&mqt#2j<slo*XY!mmYPy(zOlBH;
zIBb0T^#(RtnIxIkeeAYgH2LKNyK8T`;C2f`H%m-}%MiKMW!W6q1ItWv1nocJSB`3I
zzn4w<#b^=-CcGg|*X`aScwYhxSZ~VlPT7U?f%3N76X|~vl{520+O^y;LM?!wBRE%q
z6Gi>y#RQ!=P}yP8vVN`BiZhV(owPhRI6Xt^iOFr#h6(4ol)w?ew&lizHlcBAsy*Y)
z)&-xuQ4GYm9qDMITNQfTj8=5}W;Q$7j`AH03_W~w*P;?OPFZAa*O4BW_cu^L5AFOU
z>12PX3PSWe=mH}dLUV}kVLa!A1_*H)xE<B>T%0uM4JlMBI$VUOasf{&&0}S`_$dfE
zLX9YYilL<HiNRU!cTYk)tifalm}b4nEHt|}yln7~i|WJm)+<_A)!k#ePnA?3L`|n`
zObKvfU=GU5PvTL<2zmh)mSRODtA&j&koY1>C+O(>aG!ZP>xS2omy%=q(k1R*-w@+k
z3R7uFie}+yCKQVx%rL_@Xi|d&dB_QX>tr5+y-T5P?4H#G>XqXW#?0Q8@-$I1=&WNJ
z$MmkG?Go4et=;pER`jN-|Bg;Vvr>Y0r`SVYr>bHXr_{eP%47yoB^Ppini;dRg|Z6z
ziG!6tnj)6zS~xdJN`tcF7^`-A?ohZ8N36;sHK9oeq}^KycoW0}rU^AE3Z0c}rE=vd
zBjw7lPfHe-PEztVAo|3}XUn|Excg(*T^Ap}VN`S%K~t*ejhjFTt^r~>nxDx45Ln65
zo@ZDC;@E_8Cj-FGDML+s>^?2#kjlaD(2^!Zvn1~2w95K2J>mRWbWyJB8`b<=1gFX&
z{A3<f@h!jCNry(<?d$B^h@ayiJFFyGk3kLp7ze6|Th|TxW|o=Meao^~$=Fi0@j`X6
zLHZM8zWcMd+8vZ=Q+M9MQO%{ac){kTy5IO)euV26_DA2=;f0%urLvy%{&<tzfTX+t
z<PZYs1TD5+08aoA48zoif-CKNW_MpC{N5LOf13CLZDuq!CHFqYAaxPMD^6dVaOrgp
zA<_|sqGeTN5gSH4&Wp(Fl;N1(IY2q$#f|r(g%K7rq(^Q|3*$XlQ)6_R>)jM>jL0pv
zYjMgqcIe`tv;6KZ7k$zLuVPR{bwM*Mdw1fokU=shgN+fGd#z5lM{h!yfvcRA;&iyy
zqaDVNo4HbF3CwBA;N~kPSazH{$4Q{*v;8A23!x&-P}&EM-Q$75#P=uA4?2xIoNOQn
zKE@EIlPT0@rn=mL>nzpaUB0?PCZ5OcuUKIayGe&c{OTfaHT)`ExJ=iYB+~Wa*?@VO
zb#?8k&$1ZsJZ0{t4*GPnTGnvJVZNmfq%;0%Kb7Er)U8E@5#mrBH;j<`GB^igyp(dT
z-!FJH7kV+eIJRl5!+^}-qgm72&iUw0n-sHxs7F|SmZ}yUO7T!&n{MmBx6l~&SmB1#
zyPoPMQ>?7p5ta`52GJzy5-O{rs0{N{q}>4O;m#bm(FeXlL0Y!jei(kbVgt?z0#QL4
zz@1_Z+kfAlZ;vD|pwALrYX)SPz38mILQ$JjyCGZAoa|dXZD(Y#2Uf}(qS#w~UDGn!
zjMweYjVNQ=UjGd6FW?b_Yj~hiD&WSO>jEmK28lT2PZaU2`dtO;oi<)KuIe#)mst@i
z8bkqkIQFXNg$+&@FCKa&)}T?~S-$(eY&^Az>!>Ke;TT12d@EjS=Kmt*6rh4cuMPI=
z|Fw7iveEPF!~Uh+<Ojj;t-_DInOLZNan8LA1<^x)J45Bptsu|hVmO~H#hg%-L<SN8
z)(Z^d(bJW}^-Gkz$ca}@TU387L!mMhJBbcp<m%~Ab1++o()G_QW?M)|KM>m0P-SCC
ziPjzkzTR_*D_r!>K!N{&x<fV3%XWS8(Loor&+B<@SR_8_YCUF9>UQzmw$@YV;wD0e
z0W@n9>8OUO!Ow|DiGrU53|yTV(cQ;_Q+^wX2qh!xX`1+%<*cz#D&-`VrSZqWa2qRN
zYig+~|KI~(3yA!Ya}~ZViuKeHw<`HPvp0h^tY>Y-t6Z{>HJvnah6ViY=bOqm%Qv4`
ztvEx=ABRcv%d|W686LV1?3NOQM}e+$X_%a}exMor(yid7X?i2GbHU(ebTYG-ISc8*
zk;J_Ef|U;wO;L+AJLe98Z+Z2klG*P-8ZWWihBvEVA8P4H)YvlR!M)aLoM9sSayc(K
zQTlH|+-VaPsS{d0+?lhiAHBI7msl(j5Y>?&Q2Ru8-|6FagFf$b)K9kPH)+iZd)h==
z5egpUrv+N5!nWqIrBfy6d<F7DSC=z31dQ&-mVaTcZiJKoUGrF2?j!#9cQSt9@Il)7
z2%S96Yv7OYL<Hm2OtbqANLhJ0-VN;?dRy6_G}N^>>FEp<EPQs*pop@I>>{EII(T(M
zeRm4YG={d#DmR3jX4){+tlbrf^nqeaYh$9Q=}Sig1jA!9!(%ujN}5w8NdPRsk9kZx
zczo$ssO@D2R@qw~!uN7pNd{J+Tln~N)FoFr=FYQqA$1F6p<cnN9UMx>RtR~-3|cMv
z&7c)0wRz_GdWD|OOo7*DZ;grq5**~f?C`uNoKmhadh_7rjktI=iT>_9g~|r!I5%A)
zv>M*BgRZ#s&B%(zNJDfNI3Di$qWc6&2(~M3%H`Eg43*9SwEDXXglsC1>x&^;8K$Rb
z6ow3(2qKsF(U`1Y{|C-QSi6m}=#Mc^Apn7n@-!!_y^^fTCmo7fW8R*STCS=Pv;f4-
z6@ymZwV?1crIL3!TFaTRToe$>uYi_Wo}jYB^t;doUwzE`wyRKj76~%_82OpzUUJZ9
zs4p%F?rswd7Ga_E_c?JMre0=>xfso2mvffF9e#-p_?_I3Cn4^{FNObGhH<d}2kT_v
z;sF`<{Hp<44+Jm+?YY^!4l^63IUp+2zKV{DYqBej@I>i_IDLGYs#DyQmyj|KwU^FD
z=zRT}oD58Df&gY`F8W;!y*nSTR}l!?c$kz`#N}?w`d79-s`e-$X&4{R7vm3}5C0~F
z&&6A$3lA7udXjOd#z-FR#jx$9T|slwATV;duI-R+#57+Z*!?IPIOa6e<ytpxkK$+W
zTrcI($&l|gOQV5OJH{I)$NFPa9#$A0${Ex_<cb|fXg<vkO>$-bYN4Q9=smgWcH$#5
zsg>Mq9=AtQ8L^_@NEhiS2e6q13bP<)e&#-f0b)^naAoE+qYksR;8-4R^%(Z6HU9Xf
zwueUR;YU&+eF!g4ysY<En+kqAIZT;2(Xn9hKkHa_r_bM58{PsnO(gbi=K;<^Li^y<
zy*DMyKB+7%hfIaUblqG8cWxzx8-7!^qS&gX7qMt$RBRO4*oJ{pV&sC#KP-6s7qeC_
zzoMngexQ9|cPB^pcHR5%#coicOa?Rumt|bmT8q*Gf3zDRjz1#!nXXwXs<{Tq#YOG*
z7XG;sM1+GXV$Ny(s5wDa1Si^&a_~S6b?70?5JVJ}=lDvK48bI_dGwJwXynzI;YZpi
zPFwe*C0w!8bH_hLOH@q#yo3KS44Fb^Y7dAkAs-%csP@>j7yCAYT5rc}o9!z<x8F%Y
zR3b+K{1!DH^?HP#95bluUxW*2ne{hd<dS@~av*-8=sX>7wi7IJ73t<#9#7&l&SH4a
z%-2K7#LGlg_vo1U<$s^&cZ~U*ULu87<5c}?zjDia>7xB}z^jfK-ko{<pXv2IWu}%x
zrkEdlw5~>d(ea@zd*t8i_f=k}?RyK<=+U1C8oQ``DQ{F8m1)=zS}I0RaheF4cVB8m
zn^gM_ezJ4p@`gvY201vgen34z3*WuXE_c8}n(u$op&#FH|2|~IV_2lfVZpAQ^~Er>
zr#0Mj-#J|1QdAsO!@+i^h53{8zy&T_OmLQ<W8qz}?EKeu-BN)_ic)pfYze6jMv;yb
zSR`)F<)?g#a7hk<CT}*Mw@T56K+AM221}#iU9xH>g1$!M^!8SY8rmGR1{;-ofIX{l
z0YR}_pvLpg@?AY#_6_bId$x!GGnXBRQz*ey^qs^t)&o7{!#!GRrc;+Zbnio@Q3Owv
z*~uZ=JuAmHWxw;&im|SYP+6(YQL9+zXFQJi!4QBUj`$Fz&iA@H`Kbg~D1-eMg^BN2
zQv2Q~x0`4^538~D-M<CL9~LxDwxQ<Gk4&WV<8<l1P*+<nC*In@exzw!n$w4W@qzua
z3=1HuvH#We#mou{8v}>|FEn-R);TeJpK6r!>nUn+6Lv9mpc~UVphwpxuKh6Q4GK9g
z+`}m)>vi1vKHuEqO=t_}8CGlgCp?+$r3kZ~y03Ig*I@w|Kkkyg_Qa2xo$yJ&S9}gf
z9xv89u?v$W2(wN|v1hveMW7ME0K||Jsep;I>pDO3@Z)?IKcUY7|1wbuqZofo+0U&C
zdEDI^tq`Y1vqJ}wt24qHn1orSsUMkaWp(@dtX*}T<m7x^-&SdXq`n_^>I$9paEZu)
zr|>fdf8<n=0Z7c8y-wG!-lljVO(`0&un>%YAzMT2rHTtoG%eWXlzguc1@muYQwXI~
z2NByI4lR}{?YUF~CB!+q)hh}&3CV@OlTT<buTg;=cFxtQO_)@<$IGi4T=6m-HmJ%^
z!1t|*ss@{SyQHmu@cIReDSNtC3F>eNh*28AiVHyc54t*}l{Cb=8WjEBN8L_RJw=+#
z_hB0rHXs!+#{c<j!buJDNKlz4smeax_T9L~@PZVQ#3SiDka%fcA2#WH+18RF(%Sj~
z&oxq?&m0v7a!8)smDnw@i0!LYzQqi&+JuYF<+TkGAhNkYEXJZC-l95bP^Ep~u`Fbt
zy>yBTrOW&`YH8o9Fz^0G)4LjF$x+(s<y2<UsjE?~6qr5*3tMu1Jo9Ad;8Ep0urv-Y
zq<l58)TS5+G!^{POrSmVGt^{AN@;N;CgLe&hCs_NuDL6-)6OR*<Psu}v4H|(*|1uw
zW6e(WqkQ9tg#u4f`CIs##1=LZjMIyAV$^@nJwuQw=HogOaZ?{r@@nd@?|>SbhT8U2
zQMf_wP>ycZlE*22VU{Zn8X<MwP_)};Z3>xA-V{S2P=5m<V~xJS`@s6!E_TpK{dJ#a
zwaX;_oA!4p`Pscz%adVAS}<LfFFn)w!9piTC9`@kg58wmFE9aJ&GR2vHb~&4wWlOr
zrk5?d_70rw&nJs7C(>%Zctf|A_sqSlu|%33%X08~GTsF;SI#4UT?-?asF3pY!pv9c
z?nVVhfy%)fe7rWa#eySp6IUwV>jdafZj6bEj`?jQ`#fZDNm85sD1(ZJ4__-&PG+8Z
z{=DxA(drxK&4t(4^G-*qouKFQYgU-ls&lAPt9#U6JWY+j??gE3Uvl-;2E#V366#~H
zp(J`0nQ<kjhwoaf5hHGXvyvfwe4-tKWiZB)1+LQR7Grb3YYaT6!B5~em%SYGFZ^;Y
zN#VusLDbsCtKI4Z_>V3=8>4TkvoJSEEpyfXT(@^L;7YBYpx6x1%U`+O%K-a}T!<b+
zxou|egJhq`up%(<dlxgM8S1ncmf}Tk19pP{tCaVK0TIKG8WUdN(p;gt0P3`I?-{uE
z0UT+pz+b*&ng*85e?|IRQ=4Vg@a?`luUdDPnlnjiR@<FAd@%GDi*E0>X>3@~bvOU?
z+D{!a@+0-(bXp2*@P2kxKOV1##~{<ob;L}4uK++br96InOq)EOs*ArPr#1f#3VwA}
zJhKzyVCmn25@~6ZAIf{|dKWiv{N@nWh{26<h7IWfAN)FSJQCya35hlrZ4bg*2H=yk
zu>2n!8RvhRk^YYkBu>u%${Z(&2B1K8oPDr@*rEaCz-c?Pt<KdF6mm2pr?o3lRDLK$
z(mIwW51RgEY33{ztYI1~)mrA!z(W|cVHRcjBveVwU};oD%zTR^Zv=~=QW64TX)MH=
zOS5Gvyq_4-^y|m#Of4FtlN%T2iRn{er|P-NqydEf6b#TKd4RaEByf4M2~={{OeMIV
z2tJj~K(%#n6@FW|`tpSuId?Q^3Y<Y|$b!_heY;5NlpP=D%wJJc5dA2I3m@IOzf%NH
ztgMZE_J<bKcOa!L@%YrW&gS|tl_3{?Z-b~X$f;sU$$l5~lI)72c;3pG^6H;2HN!a3
zMi9C;S@xw8^%8H|_q-P0YQbzh_!?ZnLu}9e07h<@oqe~j@d+4$Q(N+!{oEv{><`_%
zYVq6?T~>Q>udI2slFTGSnm;S;8uK~Dh^e;Dc^|}>7(5DQEceVox>HM=l&2s>iikp<
zn{725ksAHO(LFw56AB>4c;$IC2ZxXKVVLeEIiVqJibP{OU}a+b=+K?)_LVzyyTao~
z2O4btak;HPr3{eZhWQB#uuc`*pz)duKotrRE;Q4Mk^?MU!oKyqxmZ;Z^<ozZ#caf)
zSJSceJZRgwxvat$m%duV!Kq&}KK#C6f@<G$yXAB<!eChf_31trS*tjUPo>;-F7Xm(
z+kiaP25RSjitgnKpsgA66eH0OeM-%$%lb>6YAs`~u-W`}BZ5Ujj&b&?(-JtNYmqiC
zEA9+*E_c={eJBKn`{T*qsA$40pvRYZtciVZOPO??S<(7EscFas%@=;+1%e|pED;qE
zosRQAd=w}9f7_in{{uVzAIFgk<Nyaw2^`Y4vHLrWdTE|_Y{&g9YeO!1^(Ol^8lJ5E
zC*urO3WC63#w{u4q3aI?=HBfY-*{Hm0U@oHbO9DLy@B}U)D-{S1e>T&W?jIv=5weJ
zXuToUoY=fmUsfn(eH8>UXWDe+x(nv&FI_!Y)bjS9ZZ!+WWc%*Y_xIe<>v18%90>Xf
zIZDP8yz=QwL%E(hI6XhnsL}6k;|JmsEz~Qe;J*id@5fuNg<c<O(!kaS`Zx#zeLgQ*
zwz}R0-#49BR<z$gxQ>KE#q$t$ss@MdfDia(0dNI(Wm{i+{Ms;)1g^8%kY|U0^TfG{
z!~XsyiwK(63YuTcv~yH;6*jBhKnt&Vc~XoG%bqhu=iq~}y|sh(Q~8GAxrn{p*pAmj
zDtcKh?jQIXdjBk6(@wTFq==f(eB&0Yif83Qvd<!HX@6&i8d@1D9Y?<%y!n1J+E0@S
zc?1PuPR-9TeYk9=^N4+zA*B?`VKKgO`530<<5%zIp*5qACUEL0{Sk4}2F76T1N`DP
zt995Ft&{t^)~@pBRY{ZO6m<9*)*oGUuByGxYz$KsmOvTbpmh#)eBouG$>_BlCGPQ7
zrh`dqf+-P>tS=<(ik~<$hW>@mq3-M0yKh7>e5e-i_|ar{z6kQJSTX&r3oJrz9f%An
zYD=mH)0_g&nGz4J9xv8@0LJYEr?76sBX9xr-QZ-S=s%fJry)GIzVp_^#2p03PsJJx
zvPEG<BID4Q!Ll#zNCPreM{`W)lN#yfeuO$}P$gv8l4Ltm7n~?;WGjjM(55eM{=Q{*
z>PqPA;mh+zJ(Cpm&aM%hK?|(~j{;DS+o5J&1!0>rF?MITOxn0S0(bunh+a3m?@tH+
znqNkSDpqr*rkGxRd=WNi&ETyEc#4scuJv>n>@rRnJHT*u`XpOq0R|g&dZ|?+I5K^v
zaz2-ob+Z_%?L+fJ4b)JqMXA9P%2cdHCc=aUgSru9D>H0G=X<c#hV+CF5MX7~NT%C7
zV~ZLO`sFXye@bm|fqf$)x0IRQgbuq=uA`~z8}$`W9j@sF{>@e3#*q6m?1x67&vm*b
zs_R@87Lm-sjm|Csc)BsqU~wU<)>Vr5`-O2a3A^`n(40p}0U8$WSGZvSu2CqKGe8rs
zVrfmfUfU04bKRnK#oCqb7clyjH&MVKfuaOsw)&8Zf6%|k@Xd^<<*2A0%Tt?0iEjUE
zJP$GM1KVVpsF(fpCsUoKcvx}R{uw^0AU_vTF`QAt?1eEZS6Xyb`>7G4P`dNtjS>Df
zJDuTlh`NQSIK9oE3)@yHaOD^e&=!TSI*^GCBL<Fm!uxMB-!VeUx#Vm6Ekz!!J{VUz
z-CxJMe=%f#0DaKX+OM%Tan4=ZVvxY8f4uC>KdGi)uBvX>B-%5@%6)Tq+CQq<%s0DT
zD-?TunLLP#2VkO7|9~DRS!z`4vUt1VIaz5Rltxp=m$Bh4@vA4`J_)re&V(BM-b5j9
zk7-!YmAIGBUfLr-gbJsWoWRHGT19?t)(T+*4w0!U3@qjJ&IceNtuI_<)bl9y)1bsT
zwdz)S+(3a9-di3WbX%62E*}*H8I{WiaEA3i2Y^*s&@M_Nu*hn|7Ab+n$5}e481;kw
zgl`{hU;Dd#Dy%5E7C0Cp@Bp`e`3G=;05i%XY}?E8nuaiE8wYLk@ts*@49)mQKwPIs
z_bTue037El<lAthE6A=nJA2Se8_e^w$LJODj74j`v`+IQGoiV+rY9C<Si8U%gX_F3
zos%2ObVX1`JCO=G<KqJ)qd}I-uj-bRfd2?!d=Y+G>_E0NWJu0^#9Cx4b(PoZw&R7w
zm0|`$ZY3%wl;dH1I(!7IQzho_#F?+fxn|LD0dF9ydGzdrD+_fqcu}mqKxQ-BMDy0r
z3`%UJb!P4l?fS;o#j;dgc}PE$R2szEYC0E1L4o9ur3wiw^X^9Uc!?YXu@6}AqJflZ
zaHsB6n1C0w_Y67Dw>{Z?*9umDyD=onYWl+3Q7sKodGuDzJ8=4VeD*lFAtpA&u!PXx
zKsJAWtCrtLT!fx_w24sSzT8z+be=fJF;ENW8%?1X&8O+9e(->@)NbVGf6?#(!s0)d
zjmTk=0E=3ReX2zMWX?SiG}nh%>Hd^-sOD*HSMLtH$r)!pDsE>s{b#f=+B8JBsScM3
zfa4`M;_?9ip9u`TAv(Nk_);<nmrGqgkcT-@)mBIUicHh*%3I;)pj~dxMYwzVYy%rd
z+Q!1A6JasR=bkIB&WK{hHG|F;f-6}2B8Gk2j?)sj9xtE1zp=4Sk)hCxyMiIsN%?n!
zz2nSn2F6uD%6Vp23~qXW>BM=cVJSOotz>6l`0v+s`|o9o*kBBYkaPcSVAwG)Q1H&f
zPlVpg2}zvgUfYQ@QU3~nR{Zx1L5kp#^BV;MnFB`S-cf8EMF8WMaU5i*rl3cYbO9iv
zw!o%dYY9tcZ40f_;XtZyV(z$Pa9L?JX?icg^9d4x&&|8=T29@41*$^CDaFCv37-YP
zA)ze5cc_P)f9$(?!Ic7LzuWZz#4P`D<$XJ6E5vEgL5x8PvQ}YlzPc@)P6kZhMAf5~
z==CQ^A`x0az{VG8O?#~GQlOVtQx&>#{9#U7Q!0dd<_-QvC#EwisJe~^>(V9ak1U-S
zyk1{c3VQ}7fQHKAa-WNCBYbetLbDRBFf};@ef{SHA|g8AH91oLAE|W(<b9e04vVkE
zt<MjWC-Kq&{ed&$YqKku<Z!uczPB!bZ_!A3F@f+1Y?plosN5y}MB)MK&h<>+s<mKU
zw1be!8EU?(j-(_;SMZ(~(2R)0>fli(;}`sa75OPt6<U7<Wx9)O_r;s)k$`&OqIIR@
zEZUPZ@-5M3y-fXP_l^f0c&PZ&Nyg}pn0xq2iR7N=uF1+JVZsP*s{BG~z(PZ&v#3gJ
zXN?#M;IJxX&`Q=zbCg?07XoPBroNl0FwP2*1#w`zh=oiNUKoMDpu&v?d#nn0;5GE$
z@|Wt-tGmhT?d0>yapdWM>GN+otDGu%yg9+oBBMbYxsEZK<8)pFpIv!+;jhJ-t<h9H
z(&6(QBLcD#5U;cF=YMp67k%lDra|-}N*=&EXhY1of|mA~r;urRsa(9M7cp=sij}%{
zCveN$7g3<(`Mai)06J-i`J=DKi8)2nUn@J$Fos2(-1c^yVbRH~E531e>^%J$XB*_q
ztR|jPu}eBazuMCS92$YnnRG-pV}CHvbLv%qKIX7Mi)RDwib_lm*CB~eQ^N#b+%X&*
zWJpWyV=c^dHV8E8HHmwg$4Cf=vdEo`%`BBHgG^tGd5*gRU<(3@;h<E|_sXUt<b7O(
zElpSlNKt-V#B1k^!QRcy_mBK|_Y(3<Yb4HhZ|_3S#*R7zh9Y_nm~KJI22jMpze^>#
z8FzQ;6o1-6efl+9miGQQ4e_)G0f1rh$V%IZ9|!Ik<PDA8C0X<5$QDP?$U=oeiHIa9
zo)gng<~{c_l+01N*HRz2{GV@Lc|p?d&ooGes%g6@_8S5eOF1k_cn8LILVxD^1P$@)
z)q;e!uWez02Pfc;y|Y(=y`|$2DhAdb?<d6~j%-@rwhAI45dw|4_LOLdRDiI>@W{zz
z6Xyk=Qv3X-NypUNv33~F(Ze_XKS>LJ`iLaN7U!0-3-^~tE$O|gnql&N#8~DIDlOuV
zVXkDwzEK^=2aU0ZOIv*i6PDNtIP)ceX<Fuv(U!9V!6wdZqoa{(bN;m&^>_t{kW2xN
z?@&^PuiHXo_7=NWn~%{C1$;UqeBuaUSu=s!7HfC!i4xnK*oUJ`FYYkY3j8RZ;fbHQ
z!e~lSymNn{S#MCbWocg(BXn0sFgIsRgLC_N!s^}%hm-Q4l}Fx@5jk>Oz;9P)3|YB-
zC0SE}@5_L|$W`w;Aq_bG;T+#Nc(%#JlNa5`wj35*<;wHxD|OXpHip+*1uzF!Fcf!E
z?W#PzqLY3HHroX;Ho@n>aQ}R^f+T*P8aI_!_frCSPe$GVCfe%e)3w2APv#&5@jNbG
zXQ^!ESd1pt!cw=ljrV0bPKB9xd~ql~pBQ!EQr2e~q5ER!(uGC7<F2MbUuGkNZ!NS}
z>RrJVQ||S=c0H7*s01>V3iq^}Qo$fBa8!!eecThh#75wDpyvy0TIY!U|6b2?G5_!N
zJR1wkf4kba{(qFze>DR`uyL{fmn_c71UQ3Rf-tiFbq5}&HhRFXSqPdZz`_Z2aavA`
z;2H%x{cz}iH_HqEcLrM)OG%c4l>7E}2lSRNTPjG>SKG*uCMYFm(+5U^A)wM)Qn!3v
zgievvO_kGVj5q!|t8taXNEAgyJV)v+$1KMMStm1otyG@+VvvQqQo)tICy>VU<+Ls=
zi`D`RRe{ArkFL6Rk3r)hO{VLVP3*FvJsq7<CCoCWx}6(#AkleSNhk^u;krVNMae$(
zGm5?OW4_&_UcSY%hgRg@<nFKM_WIG~0eRfhXo2c-=w`awLE~I*>z<9Rg+X)?B5S37
z@w_kR!%VbBNqdiA{34pWopzo5oOGx$Y+{;`>cCWC6+cqSJ;@o!ENa`*MEoEroa*Mq
z_Aajozksb&V-1>!>e74<iabEouQknu$K}Hj&l@7S&a&o$6YvTN%4qO1(S~o^{$~)U
ziByxEX$q_6$SW=n#`BkN2BKE5FqGH^iKr3<im*-we_Mr^A;Oo?p`#rQG{EX5Iv5M|
z(tvJp^0igy?X41ytqLLWgIdYzAQvvx9T60H_4J_F_2%{aWxHX0u=nH%nHXgnR7Ckt
z96tz!?f01`qun(Va{KS%_{q#IRr=rJ`76z)^NCDiG<OILV%;X|zzi#X-q>QgyOENN
z@u(d~;vfbnRmGEqkSgPl$DHjShsL|Yg#s(`4O?uS{p(L^eSr<7J(m)9a7J2YNj6>4
z=Y37R;~a~;V<=L8kJyh3>H(bza*s_Xp;E#kg^M4q8~kG6V`k3JluE9<=?w0C7TY^T
z7$JY&Zs-l%BWd(vEXhSg!2`(=jSRqMaS@}|t#}|aoc7Yn21!x$@W35(9z+QlA%J0!
zJCEW>EK#@4ebt|xcD#ss18MvL+kN35M?R2p+{`veFOc4o9FkagGtaMKY1}K%LH0;U
zR_I`T7~7POT{%5vuW=sR?uo9K3J|5yF<|`o5h$|1rZ>N>`)!coksuqfvuC6aKC{hH
zWa<}zB?)3v)Md28zsM`)BU&x~g$AzI!P#dkXytE6ibsoLT)c@D>Eb*4&irc4tewU4
z9$X}@4Jn~6I?u!Bx6H?{A0eqSi@j0mv!^)^V*|Lu(BUZ3PK~yac>WzEV8Y}T7BH9-
zUvv3*9rqz|y)GB|xE%1Qa)9j;@tC<>t}p?dp|o&NWDCwr;N&JK+I69HqXBcFKlExD
zj=NheL!|WM#1hU!0rNsoj9|@BUw4SxHmcva)rkA>N`=?VPqUl7q)rx&#gwyU*0#U(
zvS>)J7RTa-<55I55CI|sLgiZ9=EaeJM3Z%e?lMk1X|JF$TbMniO0^zE?YC&;Z9}2C
z;FgGs-aphMsL|-g9W7|EdjcWDuz0JYSr8t&z|rPavL{^{^ED-b1&&G>4VEXL13r!I
z<Y)@?ONafrLQWz}@aVTn0)xGcG<gbjW31P99j<}kjuZPZ(498RXGxLZ2e7qfUf56;
zF+44*wp;g;N?&Ng;18RPLjDxOhz~F0sCeg|LWmvujEpHhEfhLZy}$wpdd)!!hO0FL
zV<<Hy`KLBbiB1{)z`<0XwJci#B1NuY-W`Jrqs1KGR_YS`t5A8kYlLDbk|l*J*JSwb
zP@6w52V<$YaEIvL@vj4<<Yk)jP&kE!rWX_S0HiG=PzOI|31_T!2GUSNU#l-)aWpy2
z3+2n-RLwRQ1%+Y5WPwUaN=4^sJdVpn{3qkkF|+9flYc-G>-)-E8v6Ja#4&#`=@=xv
zljL#098Kj|1wD+D;a!vu@E2wwW~Shy2Be#+=+)QdiH!rn`{ckNVF2@t+haGKC2aTB
znGH^9%<2=dagRp`e{Y|5Jq!r1HE(y9Zw<A1HASS!B$_he=YYnH!vaG8(n7!JB5>s}
zFmJmJxe=eWyFm`PML>oK9{$r}dI|i&D;JU4Sg^sha+<f=)Rklt;!QFWmm^tgf)d>~
zL&aw(_D0`)lVaQHnPq}S55$|QZwEN?dMX>0XZhL2_z@0n!_Z(}k*QHP{RC!T%61#W
z5wKQv<NpHEn1JL^$GX3VcgNd)*GTgVqk3ph$-!FS2VmA_t3TowrkTHOiaDq_(j&6{
z(%sv|=$$#LY^tiT{lKtx?{k1`E$il-!Av-|vEZf8NEi#XDg2N|%~})KDr!hPfi;N3
z?jXHT=pdy=*oez3vi(yoWR{^~w9_3gm*eeH%xeN~;|z2?ZjD%#Pzn){1KIZBQcW9`
zdqunz_UFwzZVaE%k!cN^>U6_k)Tj&LpJ!X+?2SB!hzKh_cZ;RZFk2Z}+TsZL@QOyj
zm$&Yx^&}<DD1E0*%yj%{pMV{NZ?u`EUVBQzf?>6j(I%D}#f#*DY!4aZw4#?-h#t6L
z-uP6JP6b&M0t_Kb3|;L(lZ5~yNN#{+6^N|}@Bu8lnf^2Ja-?yVQ?TWms^|T@Ot8P$
z5cxH=dcNEBb#&3gv@;T_e<U=q>4S5Sv{e}!M)}*{2{N~z7~)|2*+Q>#Ij2A`PgY@R
z{i*KS|IBgXjEfr6A@dim_)GZN^F9L!IOSq)R1}lN{HXdp7TCm2CL0uCkN~vaJ(flA
zO#*O`dIFDPW{$uPeMAkWpon)?-F5&026Iw_h>gYYJ=2Ca!m?RZ?tIEX0+8el8GRay
z{4mdvlxKJfZb~B_x8)O+nkDD=nipZhn#H!r(w-?U_z5Sr`9WYz;OOnUCq1Sa4CvlA
zyN;$XTgb`LAaZ`J6z~-h0WAD^`P4=xH33q%ry0_|CiWa<^kCvbtnpZE?aw~b5%Im8
z_C7p_Ho`8t=jD!tneLo{6@EdIL0vaX(g?Ws4?^w}TdznTalV`if3}XkJDb5`W=H4Y
z>_Jz2D6^=;R+IW3fb(BnbBqHqb1O6q4NOV$<hwcMhD;!FwG3nkL==xdXm7gQp@6I@
zH(UrTQ-%}lByS(K*wdWwDoX3$;<4Gm$BFL+B@_K01nI7vss%nB14-o!&IV7WE#x6l
zK$btvRULFzXx$A<8fS4CL#>iwo-trdw1=XH9dB$jn7_6`jA_5Th4Yu58y$(asi+=k
zRUPy;LN!bzFs7&DN)whYOPOzst#m1>CiquELXNeWzqR2f+ym$dMHXQv_&%?`z#Xh&
ziT;N<>_3<UD-ZX7)9PIRVc7qF>)?1b2ue^@Dc~D$T{HU4S33K54I07<MTEv^KNxsm
zvBa(zMQAqenpwBtBIq=mG&ITNii)}Rw%N1&%(47bwMj@`>Ie1UN4U^YMT4Sw4%I@<
zPV9@-?d$9L0iP9Bb8Q4IOIx=90`Ux7a^cMH{5JZqG~Jr1Y|ESX*R5LpuuorW_<o!~
zyJ|b&RCbrg+v(}+Zq_=D2PwPS4R*7=wQ4^e0rvmH);Ta|8nkUXwrzW2+qP}n))U*w
z#L2|AZF6F4V%yp*zTK_*-e1twU3XQV)%S57=Q6$j*X!Nc+g<FA+^%F)>BqvKK1rjZ
zWv5#M%r7uK$pSL_hj%K5lqAoE_sa9$@58Oi%GT@PHj&4fjG*siXXhE#syBx9GXb-6
z2Gh`G7=|i`&%LJIk@Yrl^jD@RbGA{j$pHWfUBs~1$k3iV#nPU<eV0)=HP#^s{me3l
z{~Sh;R*EFEciX+mQggUYR>Rg%cgn8ZVOJ%;M1F{wl~;RoCe4V`+`A0sqIRfE+BVU)
z@A%%AOaK%m?V25KP63?|F-K!dY?O_#<M9+-Aakbjrstp8!Cw=4yzx|V^6vC5mB#?Q
zO-ryg)FO_N?;4${j<O<S=m0fb`bKq2u-#F|jMUUU<+V_|5bS6hgUuw6X0I00_9x+T
zVcg%kM`@D%R`WiXRaE3gh%}P0HV9~7UASV%*J_x&g5{=d_cG18|K#P6%jCM@p`4$L
zKx)r0%u=#&1{EShK>D7AC1a*8Dc%6W6Ga{x61U}&^(@}A9UtprNKjU$gkT_j!qnS$
zT(s13SoG5shZp<vgcDN4Y!YJUZd#&b0hB^>E)yRNHNj8;AX26bv>jNqNu^MD(LZ8+
zOj&Yx_D1s-n$Ct>!=$E!frx#o@~n5yusUiBy2|$mRBBrKRA9>WyAU8GLrg$&Qr@^W
zhns7_G*RWUk}utK{);NvZRtW*s7`lV?g!`uFrwS8E}Hp3HESp{>R+`Vu_gNc<NqoG
zmG3au$?g7d6Q0%Yar^f2dxY@U{bGF`TpKPHIHooW73l^_>0<*&?Ww9Ve`Zp0O58t>
zNC%Og{uY+)7u`cKRhZFF0T5+QY(1<!ydrMP0P&O0y|r$z6|H;YCrUxQo^k_)J_jbD
z5{vKJsiY#8iz2&CR0oX5xPJJz=q}eEWM+dOH`c&e3AMx2r9oxL6W7C{NUg*6*A4ju
zdh=$~55VL)=+S>;Rn*S~TgwKLW0gT3C!iX$ed%gY5u1V0Y0n%Ja%4-Dd^tStVVLxt
z;QjUlu3R_<;8ee*Bm{AC^zrHP{h&r+OV+`W+h-{*ne_B1znQNrhv|Fm(`>3hSXq3N
znDTN)x=<5DiIrt1#O{ZyxE{8ny*Ir64VEt;HA5eVnS?|io5q@T_uvYcYt?*89jDD#
z{h$?5zslGmjqxpO36TYL6N99fpz_4lAU4;8?`4@jVndslZ(r-@BSa~}*CRn-n8sCr
z>3V05^zy3yX4mO5#cQaijd7+y0)y_=s`Pz4u#Yfo#@o2$Da{?qI;EgN0Wk*FJf7-7
zl_5oLf3|CjG{6oB^@Erxc8cZ2IF?FPJgfp(2$0rT>Iid#D!@~Sw!jZ#WXlNo@*>HF
z>le}NS_spYc)2G}R22v^jN>M`3}5dh1BqknO$YWL@yQm~d`O}Hp8KKhYm6`6H63<A
zi{|u0QtVfqVeE6oBO6Lg@Y9@!>IfXjKu9^@m_jB%i~o(kQIox&C~3TsV7~&naH|DW
z^{lckSx`;VQ;3)cm!Tn$o*e9-(zLnV6o0$L+wpQef0UHJX>uE3SmGhN8Gs1^^h5&&
z98v_&Y5y9sbMO{=f#7;pSkd?F{Gl?YTH74v<&p!l5k?(*nsw{;iqGaDdQl00b;@`v
zyrRM`QRd-*JxL~l^A})-3j!(4fC2}^Df*bEm&|xQi>OKqMaQz0#fG)?X(*5<Q~1M<
z!=pcwldy)3Kb|Lm=Yuag3sxwQGbbKHNY2BVwu;X8-BI(!rDrHj;!EaRJPH69SUQ(S
znqf#h-D-~weazkY4s$c|OE2L$oMCGSEguo5S>Nm~&&&@p5~7{1TVgABQ3C-!8=Qnr
z$?ddCP`Yx(ypf?KG*Hu!Ve>m@NZ@_LXl7oSOoM?Sw$qK_Fp$Qg<dh~d7(k*;BFq%4
zEtOfEz+ewis%#QRB8DO9fAhkga!#DV{GZ)ukF~}GN9u@?5NGQR>&YJMFNpS!c%??X
z{Pa0E`nWst0#y}#Py69ik`e*qVN+`siq^4m#Vxw@m2#NI!7O?7k*BueF)H~hk@7X?
zQB*;5<y?M*2|#~Jn3FsafAejtIHXafOrN?l*<dCj0M8ZqEC?*d)xmAqwXV4<LE0xF
zIJttW1sBaN=|yf~FJ5+Ur%jL^h#q)dlq0dwhHB!hJK9{_>ZrRFRU`l+%f{sm?DAS(
zCyCG0?gZ_H%cZD-pt`r{NxQ&hpr2ao)tSnE(u28L>sWP}yeb=UWRxFSATCgI-#)65
zmdTR27s=|P7g5e4E;dV1l8_w@cE4tLKQopWek8Z_yAtN?RlH@d=y4tI$JI31LW}!b
zSA-V=Qb?{RK59@F=B?5Y`3PkNvO2_=D9Bwt?;nXCcv~+<{Ho-|@gbA_i<@G6a<=Y%
za~_>NsKBF0cO2nPXDOe$NYk`vU(1PhX3S+WGSz6*L03Zu0dYJbd7z`XwB0%oP2m1C
zu6htM(0|ieX@>P6EWoj8DfK^~qz_gr0=|lX)rb}0l@MRNLVmYhiD!$uE~J@%eN}Hv
z46ekmXMNcfhJ+DApmG3*cb&i-0gtfdS|kmU4Vs`(^n#x2=E!4VZsprPuA}>sD7%p}
zB3`E%$A{O1;^iUFFohsQzGEF{6NRB=AF=Bla~o9Mm0k6l!UR)#Ao}eGfYl=uXYApK
zFH52WddXU`d26Beh?=v*=^JSmed=|zSG+x^SGCd_8-hk&H0hkKXVuC1hWBhLsiCja
zK%aQQgzB}ja`NQiqU7sE`92s4jPf2YC_bJotxdvsnuXZ#ke6c*IkHDBu^?Vl!^-Et
zgwMe}iwLBtQuOk3AL82(@H=T$F2ntgiw4VP6E<$smbIF@T$=_^B>F+Qs?CPFmAqIw
zr>RIGx=`7N0#=Vh2)EAmlH3xV`laVuvAFQMGb&RcG2law0&98tvt;%N(yUcHb>mlO
zJr2UQb<d;L03T%;C9h1IQ~|bEDo_q^6?gBR?|T&rSyK5EV5cz&5Xe3)N8uvVZuRqD
zWSt)2U(tD%3W3+2KiAzD^I0c@!rDcquJ5VyKA)c{f$d4+ai!&k1h2vH-}l}<=qP;b
z(S_X<f?V%+NKa#X-Ur-WE5%;I)RRC9X=+GM@0jloy!p>p2Jb_?p#P8w|EF7u;(sZp
zIGI@fulk6S>Hj?0{ePj5Gfhbam;#`+5w|h+<40{EBz_@pF`D!1B~q}l2*RfgB6|Xo
z4+4gZ3nOJpEn|{e<M}C-XzZ+@j!Yee<z(Ci&a5`qlh5JS`{1+y|I>KG@Tq72g9i{E
z`)UpfOkRF0EnOVq79aK8h-0z!c4Q3`-n2i5s<`}5KH$Te$L9=Ijkojd8X!9+j8$W_
zuylEGI()t|SU{6vL__!GeS6)S_TBD@o7?3(xb@<@C)<y9)x>?F^`i-}nerv3y}--u
z($TO(Cy>^sqF?wrKkx8j?n=NEc1%n?r>}Yy_A%4b{*_fXVwO*at<LfM?*GzG-ImHr
z=YhCkx77N`%&UyRYksm54yXfTN|4>1tO(yT1SXJ4UUv5w#9>Ik;jd=vQ~_=2JW-8E
zbALJa$B#uXsFN?ORW5q=6ua(;Jc2rRS`jgD1ILfNZa?X$$XAP=^wYCvM`St>0bB9~
z7UxNuD(j#T8<h?YwDoxJv9BN=LQ%}imQzTzQ+ryvya8%Bqmna|1%x+bD=(%_U)uB7
zHitH2?Yw_ZQ;gu>P0_OK#B|cM6|@cJ2lrPo4*Xcfi^cRE?fHg19pM8gev9y|n6*;8
z&;Zh9l`M~Ezq)kN>|6<v;I!rf3>`f^RfQbih?!83fVd=k+oK=@hqvecwVZW0qwie-
z4L^i!c&oV~*AvWW0Kx-~;p&PvnW9XM(DP3WjK(oGVdJP?-m?UXi*AKwm<x1&yP+CT
zpr?@jhJ3S!oo=|6VA~&VwHZODPm@K~D0+r4c(^xb>4Mrl9$!z74F#i69wFRgTQdV&
zTT&-{cAJ<8P>(g=O7+Y5H`sP)LE_a*orXp{Jl@kGrFPXV0x;Ay5b+X~2KhI(nqIbe
zQui$D_~z7%2jc0(_DzY@6f@PO7@7rJ3#kwb{udgP^JD4o;_z_i$gi{3oMC7B_2Q6W
zuUF&S^Jg~loB4b2;-538Mdk@&BvvHBS;-A=S4qGoSV?WB*}LNoV3?koSm0=MgB&<y
zBD3Boxv#_D8}NA{MayakT#9Va{x_RAMx{R-CqF12D-0(wWag0`nM$=KTtD%b5AMQP
z(LL0hUlk4zNqSg&w}VGyZ640;>c(e-^fiYt;ost4dH-%k!$W`)bIHKyBatR@IVbZP
zvnphD`gNqXQ}wo^M(rouLu1E1tu>m^Bd}Zfqu}v;L;;ZC`e<l3;a%{TJC}(!ZY@+#
z3VEP^*%gP<fA{#6WvN9)@1c$Pr|}{M{bT<76p#+?%1tT69HV&%6AHQ5*v!@E#AImT
zV=a(HpNnWbj#|8VnPp~hok{Eo^Twe%#pQCQmYh(LQSv-Y0YNDvo^!b%O1trPMH~s)
z*UmYP@&{n)AvA#B%2U>`d4)nUToy<viJ`O@2!XXkJA^FB2E|#o5-pm_$Id<Z7dWr;
zxqs)mKjpl1k{C}O9b^L93>De=ipp;h72#tf$!35lvFJCj3@18^DJFTYVcT1my*`;R
zW}G^re7#WrZt^sJKC~-*;ip?;`9Ch$AKs>j2ngWcD)g6qjAWAX(>p|LFC8>1rO9-`
zZ=-74gU_-Fm;-~E772ECa1c|f!)mxubfk$(&gz|a+ZN6a;q(KkQp<@5Vc^w8v)lja
zII#_~63D%Lq$es?0W=$xTfQFo);S`UOly}m5&rASw(n^tD|U{lE-Q&x(~$?%v|Ypr
z{5RmJ)Zi9NM#Prl?&;B`L=Jw`bhk~A0Fsq6GWZx+7L`F@C~#kelk@5x7FqddF`Y$u
zHVmA+%;FEKlw%~SP>5xIUe*UE69@><L15^!D4YX}or0DbG0erc;cvD*XU-OyBDM;p
zJW6R$_o5<7EDjn{b`*NNeC%c|Tf*Ju!Y2R|2Kir&2P*^Qzg4Ofld4rCaf{5`JA<*Y
zQAEu|7~c5(E!OIv+-|NXbJnh4ygo^7;5B=W8ABwKdZ^oxKph*+8}!3qG*}xC<!2Lv
zaJ5uu&xc8_c*t`pWv42*&7;WaZ49E_Fdfpnk;%@FAD?~VCoZ=lLKM8TGy(qq!Y%<`
z*vxJwNVgRCg>=7(d(~s<rVoK4my-{Hc9T>Q7IHt)!U-M2QoYQRL&~5`D7i{z;7Bu!
z&|s=Bo|VKPl*YPw!Xl4I)B6x}^GH16O!xZ9bIK!SxKUMt;v-cwCzxo%717JvG74^I
z&Hh-c*mShItL+qXgL)q9=~^NxD31fI6%Z(vVBHcJD5q<*e9QmgO9iHKxH?tb4j?{z
zrw&gQ74XGWz^&MI45jI%-C@)Tt6#0t_B+ADBMWXcF|7l)(zf|2RV1N2BEg{%d6;#d
zCeeoZ&x)+?IaoU3q1b)m`C_{Z>&SF31afnd;rHbui8}YHBkFyUX9DIq?a~2xAhC3P
zy12pjHS((E`7TL1*b%%cKCZA$&^H_u`+I0lr+03Q-61l|b!CA_5n_=}8Mmk!I5l^_
zDQH8DM0#>#xx;633JpfjZSn4mhxZazoXu{<I3BIlnyJTWRK6?=&N5PuH*HZXM32J9
z+j6qNM5rjQ>W_unX%}3H6Qltck(d0-C7_E+?#A5&ad>4#+4)Hw4jvp?*0}XhIEpg<
z+-_*?owhO{u}l$1vu-#8p<HC%e;?am4igGLxM%~x=8_K2-U8HUPN!lL=i*B>%ic_y
zhhBO2&(b$`)h;TFXUTqlc@bjdD^UHR<X*5xix9NGiEvQErdn^bJWT>%5;b2&+OWe`
z*EmRh05LF@%J;B1x-n<+qvi~{vnWYqdF$+x5jt8=WgsFT#|$uk!Nd0Kj_LBe>9aoO
zn{G<Ov+S#LTO0Duo}+{!?g|jdeEQ=$Mh#TI_eecOw@q3r7`=DJ6*30!reFja>-kA5
z&+`bSOIQ>YKFb%EZKMLS<d!g`23@3F8hS^baWh5*(1`z7_%1mdKKZM_FNbY#lalnM
z?p7uHXCFD-uST2(YK?uWQY9!OQRjn}DEqum&I;o$>TUk*itO31`@k<1t-M2mv9<$N
z4(#CL<K!?~eDzTx!AH(~Lp$Y^E4qIK5)7Utop;MPNIba6j*0>F^!fd^#Q)ITTvU=2
z5)L({1bXx$Sy7wx!#y0$GkX=f=6|cYX`)eoQTi(bV4iWy=oYt@;gN{sPV+xUod07P
z9EuqG1qC#SDHlB#e!=ka*vRR<#4Zc>I(PEeBx84$)e<v6y7|cF^bm2#f{=+H_m9m_
zCVTg}!ET<N^uYw6-MUN(0`qWLSYh_CVE0O_1;+u(6$Y`&6C~bSqht_Y(z}84@c47D
z9N+KK666)7MC2hHPw^sN*<==&Uq*@U7Zq$SZTQ$qZJSSAo}QB^BG%J~siQuMnKeND
zahUS_U|YPni3P`<>lnyl(}3LZ3#|4Mzi+ZWub57Ngg!C9J(z`8V$!Rs?EIL{@rs*#
zubH`5&9|KQ{VCrqUUD3U|Nerc<XVgS?^%<R`TvAUW;V|MFKYe=I+~L`&8Y{30?-c=
z%m^2D?H7gDDzmJ*uwIzV3~nUf5NI)q0E*c2ZDyy2#r1J>Jeh{higLp0GZU@71e4N9
zdIVlmKu@Z+JEvnJlMug-02RT;4O(Nkh(1;zKa+ci``Ykv>=(L@h3arnEib2oh%y4^
z99T@+$-r9@$LX%r>Xv`qDbzu+V9iZ)TF2YiZ&|h4-t8M|>o~T42W%b()07&out4;@
zp^12z;x4qCKmP&5;lv~LA9nm-{4Em)$N$UL|AD{dO1o|R*{`;q11<-~WuxMS1JYdz
zS|xO^K%HOYhV3$yd!iiN!LT4>;>eTj!=7Xz=e9v_ILpD|7|xpfG7Ze)WrT=60YR=0
zJ(s~q)vgJ~S0tb`dM<4)jmhCpvB1Lc%Yp5~T@JfRKa5ET_8+~N4$PO;_kr^I!~#Wo
z-xe&s@5_oVdqBlwbmMmn@2@Hogv%N8!sF~v3x*vjehe4^O@g<KB5~Bv-1V^Dl{7b%
znGFKb{_3Ur@aM<F2HTc%nvbDSdc3eJe{Z&4-Rkor>$zB?q4Y{&nh$srs4JMT?_5jV
zg3AJGPs>Wxy{3lxtOc`;W*XLG>MQeZ7({S}AHJ_^4dA}MSZT(Alle9PinSDX#7J85
zi8WX<H&fG*&Udq5RkzIxOo(akm<yFq-)}_|Z6JDf`SDr-o^vh?b+v$XZIIJzImnS-
zDieDy7i~{m)KG4PO|T{`HM5^wdr1{qFIxmO;ilKph*4m;UNkD_X$mvbEMHemziz3S
zAEF?_3P6TXkvuZ>eewP((RF2{3L^)fg)mH)3`1_mQ{Ys*jA+ORGtlivPi5?JRimrm
zG?+%o<Is3y-T!g7!4*A`fcvSn^aaohE8_hbAk|yd@2t>P?p(B;n-7^3wn;_GUJ}q~
zWXIF7oP`RnDF;%J)lPB)msd-KOFz+@`sr0P0z8%L&e)%6EyxQs3R_-!I6+E|T+>z$
z!f|5W&QS#FH1+X_UZUy(t|@GbTA(ZAbWo}5+3K7qPfCaPblTf;H2`++yP@c!SDa${
zo)RiuG^FHYl;VKP5o675H0>p1B^&C<&Eq&Z{w29iZj@eVZJkU84b~kwwk_kVroPSr
zfMxDmyC24iBy=uGTR9I_za>;4wjp_V3o@?#GpN3uN$o0i`HC4jralQHod;&nGsZvX
z?sff9NiKK+*2*Ps^<gt4A!9f?ku_2NQ@E!t8V<RbzC282qkL_$Xe#3Md$g_a5HR-!
z=2L32BEPaew{b#IAtQGYDl8{V@Z{em0K}j<A0n)JM35j={bB?tU^58hI%ZNsO++9=
zbIr_waXVA5zMSV`^A2rYk$3i-0~@5V3f7!1k#1a7Hql~B6I=ITzQj6I#ai;@kYisA
zFX%%__?4wJyRGh+ZYn%FRN~zwAP`BCT%>>|F*Z}}lDNVN=yR3$R=MWL3`Ai;K%&0d
z*3CdTxa42Afi-BbTV~S1Mt5?4sXj5^bun-sai3=@%QoB)2-p<tF6|kIebH<~p8%nO
za4J$(;1bQvUA_*){iP&p60F6a9w*`wK+G&Q^4`*h3Ji^#lMvVDuWktjizh*_b?hPf
zN)ZEiWigb6=@K02RX48qymbF302ZFD%1CxpHc;rAmecNW$l4A}_lkyRW()0;k@xo{
zAyX&~l<OJGYZh2hxJn9-)c0enmD|>k7<<O|BXeY^>wDwrt%J6G$6DQhP85?Ay#AAq
z=r9%afZ4<y|8bo)m)?#(r2rIRW&4_3wqPU+jGH>XJtDE~nOW;C*+nP`U{<{**^7Cd
z5~-HQ1!f6di=%hB(OMmj+Xx#B#8m`_8jj1T{yOBl%${^aABDuB!mODd5yt>F8u)RI
zsb}lx_viFRdGAB^0YJ$=PB$TH9ey>y`Fp8f?2Xru#$Jlx&_wxXG_@<*UX`M8(U#{o
zl#S8&g<O5{7`n6vAtZx3;QrMbFv0P7mo!g4ePrBufsVT?Lg)fKqmAv1-iPT#$vWha
znwMoa5g*Y0_R`+L2Whvyjb}MXH9r}z#INeEkyR2CWXk)vq?+imjV#%lH#xZsDb491
zc0~iZ&+6tV5?fzCh~V*w&yNK-N8-0X`*t^92<XYIdfp|9Ub5u@?AYJ&pkAydv`VFd
zQvBgD?%U^@Q33RVCFp<HB^>Au_(;ux*k6@(P7H4auAeUO9#ST+x%v~_c#3mvZ6muP
zTqWkEm5Vm7ng8A$UBLoH$5wOJQZ8BYeZMkrxVxdRbxMBFbMhu67Y9Qhnic;DGX^(j
z_9-2@7xYgP^HTQ%*!T#EkEvNDi>8>hV(f%73L)l9MyuMDoWFHwRqKc?lu@<aq9JgN
zu2}2?;(KDuJS>?4(_`BQW72V9371Dg_hXY6<|Y>aaX-bJINcwNM}=wMP~Y5M@3>#t
zU;JNI4{uGE7B6t7X|ShoAv`ZYv|%@6{9DwLL|cvN`Nc&55<X*?W3%^k`XmfX2{$2`
zZBSHHcF)#*1=&?c#rp^^IgKG{avw;_drqCJm!2G^49dnghK0+n$umZ@FnQ$l>BwiL
zmLfT!^7W&6sGd`1Yl|_>fdsnP8Z`RBx17e{tvAfGsq!yAtzm8`&EwLW?;9bx=50}e
z3cPPadje+w*>l^-?qS)seCEIaHAMS@vmbU2n!6Ug6r{@3r;dm=<bHIqn`}rkA4ae#
zCtNUjUr2N(obbf*z&1ztFb)1!z%lW60@cHdaUShZ+UGp8VxjhqxRY5s0v`9WPzGi-
zX68|YpU)QcvLSY~b}mHLN^}SHKbZdZo9@G=vu!j0(@u#l2&@pn9f>(f%7<T!2h9GY
zJ-069S*^-*65K4GFC$e)PyyDns&5;rElEf}45?M#(L_kzS=2RIZD$b-BxMkcQiXe4
z>A~v19el13bk?I>>(~@xJZ*AgCq6hfMrKnKK&-m5h0Mcu{;V67W?&EdsMsGHPbauS
z!XbV@cC>jF0AD*!4{V@cIf+SR*hbdV2RJkfY|o=gy9qihcRTru5&o94kKERg<w+@^
zKcmv0FyDC`=!;eM7sgpk=^oPhjXNYEZc3dQUec+OX3=f$Tom_u#n0nd+7iXpd88?=
zF3e-{D=_)iP_8C_Q`?DN(gjbF{#iTyIsF^}vaqmWfk67f6@}zZYAhe7cJk5bQ#3vL
z>>NmysVX0huD{m;e(>E+LbvX3A`F?Jgn}r9733qBuE-L#F#UC#BMRavFs{Yj3^AW_
zO!31jKjFMcWjE!u%Z7-hg}N~I&cs2YMJSqqqv_6e(^D53_%ckA4Lr8K;+@sUOJE;B
z*JpGYk#@CQ#8V2v`xBZrVHII&&0n*=Ah7#i6ZtbuCO%y8lU}{MDV$k?MA@PVlPD8P
z>w$-fr=w5wHOJQA#*a7;fmhq;9GT$>I0ZwBTJUf+IO~3l3Hlc-E}SWXG#*@(dtYL3
zQdDc}Lw8=ABck&eWC8aWb(r+IlrjW>?5!-ETpv7QV6i<?l25jR6cSz1Y?s4ZX*^uY
z?I6z(HvvOVpv=?7gQ47?s6wRZAA$HgbqEZ8v-#y}k+A;-SxzM+m)k{pgbG^9BBIjS
zDid<Cv#dPdP#Gcg8Bt+&%FZvZ!I-Gj^VOJ!3c=5L<q2Nda#BdKlnEvLBQ7Vv*_aS=
zsk36)KLWBPL{YZ{)zsI*k}AiKLdI-q?vFhh{ffdqH&?#bv3O%=_*34c1ObNgX*J$<
z=DjDt^*z}IuFwwT<sTOW{}PuM64u4D_%^65XkYD;+U=%7m9On;i)*Wza<=z4o!M<n
z;!hog#g7)ps%Imqw}6`G%aLI~hcuxU^WYU9u7PT_8ZU}FQJkET1Ba`F|8XX|_vv7u
zZO`L-M@8p5Q;KO2{q(?ZW2l2JK>LaA3l15)^Xy>(h9)T57^)HM8vKuHtmx*a=wLKv
zoan#jVy^!pLYX<(*#B=Z=0gAPNGJ=}|0Y7GCP02Bl9V&nmfrqlu&2pRf&>6?a-$bM
z+PxlJTr}rO(7*SdA+qu^NApW;1iH(^-8-Sr<>0wF>as&wX0a)!UL3lr96ng1ROgE_
zt~V2iqjWrJa84uu<}U?oyg65~t@P!dq2`FV#W9-w3s)Q4vHjvjf2|_3F5md&seYx}
zc3x(M5}JklE8Nf#ASd74T?+?vQh0~KB+COj^{QL^R|8@zSwCvFX!n()_O=PTen-xu
zqdJvct-n21obvJiNF>ukgX=-AvRx!uZHg%b%|sVyw9f3tAHo#Jy|~TsFD6-w$L&8m
z^s7JU(eb3nfVMp@J0jbP#3NBDv{okNcrGx$oQ$B=xT{BtqOy{_OCkVEct}_5^w5O?
zVvI2Wdu&@}E9!-+oKgHX`9i){p6m8BjmBOfvU{Wf7ojP*DRR8Jl%UH2O0f5|G|X9s
z-Yod7ns(2xS?q4luj=>XNy46>_{my}Ke}CA5BGRRA>Hs2(g9;cc-cU($N?GqAw8cS
zF_41TBO>FN{6Nha(+hz5!rp3PehjX3`t(aYkDavCzoI(QsEa*R3ZOi{RTc%ObmEK_
zew(Kb#Sy&f0VOr>Hi$adTXy*SaW++Snk9p1Yy1PUzwvBF<jBiBgW3$Bozik#;2pH<
z*1J&e{K86)F(;74i_rVbG;B!7?gOhsGEx{yqKE<hCQ8}fV$%btxVA<^{aU5ou{I=~
zNe)D{fuU>Sz8bIDrfso_H-v~GC%=Hu9KL=bp2<UEj8%Y3L6ygzzo*D617VgTAj~vd
z2yH{^`>WgFWO(BOVxq-gP+a9LZMcb^PZkNmo&r^D@`NY$%C<{)1eZ=`<fgO<5&>k#
z^b1{NvzSjBm9qvQ;4#|=VOBE3oq_JxY|AdEfvD4~v!`6nYxodl6k*pXw(z?j?0AJl
zPG^d9W<HxzJwoDmrs32E$#>)KA_dF*^|h2?5Lh+2WsKOP*a~iL-cY-%oMTRi9kB-i
zM`W@}EE5SF$StPyMGi>;ZTy01mGHpC+q!XUD!j(e@>~r7g=L5ZMGl3<S-%ELSrZ|u
zPFEhfR0A!o%vqmY^;TMEFkEbYGFldir7~_hs2AY?vo~(beNo}JwX|ijm^h&RdP`I#
zhy@*W*F<<`A3<wR_OF>BE|fCnWZ_G3(~$*1p{{%vE0%UOCBAXe92pVBSaW|SljxeN
zDw1lGoWTlUgYph{dB&L$fd(VS%p@8&R#e2yq2mz6RV$bV1c$;hpMIC|ix#B5pZAL4
zAD;DlaTBhh?jjc0LH<ydpp2xevC9IR$fD;|nQQJjnR76_-KkT>q7)s0CG-&A*bpnu
z2>}vf4L^0MQST%f1WmMiiA0cIY~0&u3jg7vIRY1;y#t5ux1&lCv*Ip>JL8Pt9Ucc?
zsu1W@=mS6=LV9&$Rxoe0KY+R$jcHHq=9?Kb5R@1^L&d&(r(3_d=fng9qkNGX2)s0d
zmdJP)N*WC5vW(q3Fh6$qdbAds!w;64X)z*?tGT&!qFqhLu;htdc1m1y1;L7GyzZ{z
zz2_8Am{B$0iZ#h9S-h@ZdRFfuz4-8H6&Zz7MQBV1!z!G@w!Liv@qR5c_n7~*@hD;n
zUuWKMeap&AujTuR)B;B=lfkOu{&^E+o$2B~t>+@SMJRD0e~((0l^#dbTse_RdFj+?
zMPiF3vI()u2QZ`XtD}Z<5TLe$cXz;Y@0|eroI{#GN(piv{I0-l;@Q5eh)j6qjB``V
z7!sFoiv$}(L?K*B;|qIpB$^WpASAt!bqG6xEAlQeK>$&xvgDdHB#&rnpkX@&9%K~x
zu3W4S&z$)8EL?V<#LUvdf`Py<dKl(Z88$taDA3E8Sb2Kmja$!9au)c=dL*(Nn;^ij
zLlhIUQqNNU-RF(3KG~7gGv(f-G-rMGt_&Zz0c3?(J6I0c_(nsl76zR~dYHfL0x$6c
zYxc-lB>f_I6+UX!KE1S19e)^7P`Ig3UFHH&@skzN<FQgg=TF_=eR}E1rk@6jiID6E
zpe+-bdh~77U>WFMI*zR&Sw`vFDi+{PM=5XE?HZ%oNE152_)~dQJydX}r#T#_z6Jq1
zh78M=<&W9npN(QZ2hmrZuUMF8Yeiu9SGNo{{sA-S3oPBHDs87(DL`1Nh$%Qc6bM6@
zxV$>ELtzWps6M4<%l(`)lL76_x1y<7A!~``QvcuOT4$#skLSX;l*{O2ej~soIN%Rx
zKC<4pRCKXdr%hqR@vc|cts5>6d4g~XFJs#D(b>jf2|?e9KXQJKv%+ktyvA=jr_PPd
zHW{XPa^n0Kal}7;$dyoNxm-%_a%EwAR@F}lV6)1Bk{w%D9hTgB(E34<)O}!GqksS2
zZn_{GhJ)M`Ee{ukdm<TLIl=+9lozpT3a2RKK~@y0=OYUwLj#yrNv?3wR$w;bEUgj*
zle6erg|EP4aO}H+Xu@)7*WBe;!P#`X2wmdD8_%di&*=+R$FWnC&fnyC_sgJcKqA;w
zC2R>T{3}5WjU|klY=tZBXY?*%MsNc0jB8`@UFjoCSEXn{=_9!Vmp=gy#N@a}hkFQ*
zV5-}(x*e5xjo}qZ^S?7<qojwL8=S8_fxmQy$U{17w=I~<sD8o8*=oPnAQMokkHNv^
z)+WHbxwADrS1xZE2@L%h>dGr}a(j2Wa~V24$+?cvhiGT}lVHdY^109f+z$Jt1sN$a
zU|2u~n`x940p@jv-{k<)$x~jkLxt#^UDN=eaC5<jO9m%JV@SI*KmQXyNB80<F7P&0
z^Kdx^@(>dnxX~;ljav15LipdMeMzML)OWQ&K(g0m*~wHvw!YETsy*tmioi)OQ+dqe
zT=6Blb2#O9wk=nKTbK#Sc@TT3+<)peE)qxp9G7<p@S#qOWNiRxuGk(*<u_J+XC8!A
zWKlisOV2+ssCG|preAbOrZ*m!j+h-?b-%JyPTTTryqZ_~ASo>|b4)OPsijt4ny-z1
z-ub#AH};DL#^fc;1k}SQCbV}ZzF8F3;RTCFQCmv#>XIwX`}N`vEP%}OWZIJTPmLi{
z_jM_=UO#tq+D-s4eWLA}UdupNi)6Xa9FApSHid6BHzI^f>K6S3Ef%_Aw)OsX|Cy%*
zX-t0<ifA{Lcy<$2!8jXG%W>`P<81pi5&LjS@i&Cy;bi^nC9YTqfR|wqCtaH?35T!U
z7%w{Vl*ri=_gZ&>dUc|N8QU1INI%=?CmHYUL`m-|bT<!J!0cFf61;%bxe2=A_`0H)
zR59&hb*^n4r<L4!Hcy%1NSC6MSZ>umWOu9L6T~eL?_lsOkr4|k6=R>j^IOFqQ;ovm
z=IF@h%{f@PQI2zTI4oO~x8@Mx%^QCfkM8+;%|Bh=82z)u8ozP_xYqlA5)JB`WwHjJ
zB*S%3)4Kxnwfn;s_Qq#H_8s^%Hqn>S`nC|B?Y-R_Yq%h&;TF-b^pLklt@PCJK)76Q
zxG69E);fFp`O+aBVH#%lE#?@A+L7*yNm|22|9C2!z0qJ4=g|_8FdFT0ZWC!ob40AH
z%%J?q-z~;cO*=g#HiY#*avtf9jhK8KP6)&{LJm&jS_au7mFDqJ{|^E8zffBiCN{=2
z0bEegG`|%PM^MF(^|YH65Ds9>G^$k)T>#O{zj62RhJH(-bZ2(|rYd`fPpV+EHp#+I
z@AL^cqj`#jn%36V4NeWork5TohkvQ!KmM3^_ce|Uc0r?QC>VM8L{&sZQOT?pLJZ(h
z>`WxR%L>HpC&Y8>R{d-`P|hUBsMHqF)otQz3eB+JM5bVJWfwZVvfVf{wMGi5#sHJ{
znhqlqIjqqLucf9Pct@52y0|!XCZy=LiA#3lJm_N1UMq+5x*0B(FvtGm;~0V2yvrVm
zXt*ri6=;lCGjaBxDz|a0diR%)8XE`xi#IIW2_z%0yZc|?Ms-4{<QYRM6th~Pxt$D@
zHnGXw5&}zz!QC;IqpsTc;+PEIynqa@1pFaOm9WX#b91hX2_v_RAbWf~2041@XSo;$
z39x}9A>5v6sKO{h@a`k5hsugtV^<e5&Rnnb@%~bFqfSlM%V<l~rM8tP?{pX>oA8<P
zjVyosEh%*SqqKn8Ftw1M;Gq9;u)mAw*e&Bi_~tE95FRS^q94lg!rCx_1{kGV*r94F
z!k&k;&JKgIVdVArY=Koe{6+0?bh9~+b{v-HjT~J+F{XA&lR3afpTOjfVR4nYb9O>%
zl7RyXiRHq|;kOmE6IGiwnjBstT#cJ?228<pT{X<??u8E<X(G*QcWKEpfQ7MuBF8RG
z`zOu~6F9VK##7Y}j$xYe34oqVRUb1i0tE-tj6iBHAPYK)Hf_o32U_f(PM@btm7%`6
z6<Wn4`%kmmwuUfCPZr-0rj&U!9l=piQZ>`LW9#W$5&@LND@U~n{I3jiAzV91K9;zn
zwI7=JanK;+Vi#H~`8kwK(Sp@v4MZAv0}y{JTqMozEZAz0<&s|OCE(w!-2hn~;;v}1
zY`DRa2pLn^E*z}clu+HO(p3M{B*~A|>XsTr$R)ChP+#=;zKV`L@HFsQH?wu;(aGV+
zQk!WRddx9506zwp!~-dHe-XrDZE&%}lTuuF+P8WX%lDl_;COoJ!ys=rPk2ozFX#PR
zun33na^jBoOz5b)2av6&`(?82@$T(@d!Ic`|8@55_4x$(;`X}#f!N5AHYmNIebbjv
z1|GUk0I^CrMx_|+u%q|IvrL%zd-{2Aa~%k4oW-H!b@&$#P$}5}G+yUc&$^IfA`+yo
zax(O%6SYP~<Lu~~wg>f6zy$N4tRxRZ5DK~#T)&wHs9r6J89+0_*0e{E2~-Rx*1qOV
z(l5Xehi?qm!ZofzHL8u>fEtlaK#4$m424)BDf|!QM}Z)3YB;gg=w01bakD1|tpV+r
z;hPJ%Rz2L5INwNl=-K!rqpp2neI2YWbS|9*A1~_s<*i#uH60ioq<?;b4fPi#{=<aK
zc%<K-VvzpIJb=<cB+cKIMcPyt^b>g*aYd;CJQ@*zM5c1suxbi^i)t9bchOlJ+qiNH
z=N+<LS;+4;$$WTpN&dyKAO5U}QAyO?JA>7S%mBiw`c$&Qlmx<=O=5jE+{cMolipIG
zP0GfH%$xcTH`Zf5=>%H?m5C!rSF7F=wI8@ecn_FA2LP+ClUo)%cFOEXgD`;MpO)aG
zG4MtK)yk<a?M-N}XX!P^N<K{RCUQ86DySEK0W=q_a~?FLmzgfM7fM;=9op-XUE>?Q
zHO`Bug*h;?n#c1r{i$3&S`EHKhdlKKG!RlJ)|oUXQzY1rtr)tt0U26a7=(aT7%Sks
zs|uZW7y#obF4h<&K6ZFSKhHE4?RsRlG8#01Zk<kbMKrJF{+4C1u##_jbGs5>0ips_
zttg@vpzD<xHCZE#?;gm~|B4U;c08{O`{$xTGxqe!svwtF)HO%+w)q#*Y!D#ocj;zl
zjJMlj&5w&TL-_GgZ|Mr9Nj0A}RAkgQ+=L~g1n`Y;ukr<tBLakvy#9*`%P&ZiH!uLS
z|4xjk-sH&P+~mjroHu$zu|EycE=lx?a_)*%kHACcWx;n%VDm>j5pv7wH<g~6Gn76h
zgEuO}TDzQ2@M^nvR8}P1XUKCf4yNP?Y%xlnXbl&YLW1=E&;*O9i;TaFRP`4rA$&S`
z4!}?N41mM5LAq7`70P3zAq+Z*?@k^jDP}Em036DZJbGZCF_aer6TF{@N4@xPn#B~-
zLZRHAWQA$*EY$~9a3a~es>Ckf^_ffpXpS;ROIxGPK#dAk7AAu#k(S&V$y4+!?ma)7
zop$eqjRjL|n~$LN3nLJ@*O@{BcZwPY0(_ocBnn6jo2q=S+cNj9`fLp?aEH;5b`o?+
z%{}%gHF#!tn`EB4=KZ?B0kRZxro-^-!(@hJkVf>-8Zgu`t?yfp?M@1sN?h(JdGo}@
zd1BNkSYYoL0BNFryC8nWh@Rg+)MX58sI~86go+gCp%I|~iY)R{*j#IG%FEun0?Zt8
zbT_(yS0FUVdD3uR&eWjtE_k>ze7P<|s89u*$1Ik*(uZ(dZxj-RAgXW(@0G3qdOwWL
z0ur=k4Ov{&O0~0VGu=9+r`gz{MxexTjqyNcGkgU)e=0I``{1C)m0sl7k@}^>)eiV0
zXfz@!XqLJPRv-EU7pZJJ@&-)N04(2?Lo0eKzVgEXB%-&|L9fRUQ`Jb=M%SiKTVMNj
zRUHAXgYzw$+hQm{&Bn)t2WWA3!7{j1!G%X_ZNztGBy(?C;}|HS0qBaQ;_!hB>#}l4
zyI*ntrkJ{DJ;>|cwc6g8j%6c<#*ar(Lme^F9ogOh-Mlbu07V~V8)!v502l?kQPuUV
zp(XFLoD=UG8y!|#=OBDJT>SC4Xho3hRC=E5!`Y=Kg?1Sz<wz!HYUG!&QwkZ1@<Rv^
z$kCLR^OhaQ3E*{+zF7Hhv81emdmsA4%eeg9=~XCmJl|UR)T|1}`CMnHaVSW}@-P_z
zBE$k!kBSw`t+SQ${HB`@pvnR!TDN;+*m4C9-$#$F^;8?E$mIjhj3uQ|y&jaRPED6}
zjVx-wddGo7ZHIPYKRGOO#MRv>hd{>FpHmu;4CHBUEmYf9-l2o%tEb_CYzBqNowTV&
zLq;UeWj@+4F)U|37mCl2<Kvb5c>0`If_*lOt?m=r-Az59XSX3B8#++*!K2K*feGzv
z7q#&X29F8&AZ9)mLZ)s;p-Vw|c5unV<<d2O`4*<eFY72uX~X26xEAS?(x-kE)XJvQ
z7dH~XItF~fHo|98r13F=;({@=GjpctGJ=Yvk^BRZHFB0jc4dv0l=16%U;cVdmN*yN
z=J4i-p044ySvW4J{0s3!Za5Gld=jD3Z@1#k?J|T__)GV?(Md1~D@w2PNz<YRN=0l3
z(fd403w#**o1m$*XJLz2B6eW-zzaBzkH<ERh6xl8go7<jlIdqn#(fYc;HI>KeUNSd
ziS4@22EqNCnun86lZlfD@~){UC$>nEn-a+c(}-iaJ>glG3vxi~Oq=Jm-!m6wSV!A3
z-kts2o1v&h58&G-081H!=x4g2qYrOxqV5;w@<1urQYD-2-!Rs)F4B`fN4ljVjaS|Q
zEQPZ1T`oh6R>rE&m$xs_MyQKJ)tz{N`FqtAg1hQ(EiRIuN^NJv9Orp4m0|kXI8RJ5
zv92$ILg?`#6K4BLg|wp&O|vu+3p~ZYtR%~N5-8ME@yChun~qLtcYAt~nk*&8W%OF$
zD|Yc(9tEnR)TK4V2CyYi#|fcGPxP5-V9_z1_jb4FAh2;fYdmp1P!cB0-S2LI`={fC
zktmd3qF_JOaHetd$T13-vWyc8(;XjmhDuO=p&3D7@f&AHx<(X&^W3?2q?H6wB@-0^
zxRePqr&<4I6=`&lD^MrV%s7(}qzlFg?<=kXFo5{cZ^Je7VVs%OPI{_|>VFNXAlcgv
z+-qh>Q5Zs|3{<yQfQh7MmxGA|$Yg%kp(Wcbqa8PhSLH-uv06+)lm&X~V`PKnDf`V9
zH=|Qmk3Mn~Aq8!gt0VE0s_x3u!#TqL%{Yy~FGn3m_2r;_yYE3H_~=8=k|MB+z!=}4
zPz44{j&`~eB+d|hB9_|O1eqW$X%_qnp!k3ctb!3jOaZFHwniaZ>VEbHr0on|dwB@`
zf)1aGfDDm+s8ZO^_o!9CoKm<<s(v@_V9AEoaA#kd<S_Gj!w{kOzOtL_@T3*#kcRK6
zlZ4t3p|V7R9zm7!b+ON~gfQl{ffz7J&e+E;7DSbnFpu-{dVch1Od=<m_HA0`rxcFi
z2rnqzR1GDJ-bZ#BZS%wi7&LOJBVJ<{u7HWFkkew2`#ZQ+^pH6Jab|yW^3Wjp2r3R<
zU-)(4F5y#Xp{h~w=w=sZ4>qQ|4goEph12bA`5oNqOjJQ*HjM9!Gy__{-<?qwB}}0P
zHbj^OIv;+G|6|nPmZ>{L7a}-jeZ;uV9Lo!mxR^DYXI%Fn#(!Z0Y)i<X&;6P`G%)*u
zlD&hBicc(8<iUaqsiWLS&}aj#BG)tl6eOh~8l@@4Jr|?Cph?RI(DLr}&8zuLp!wb3
z2y8+sxCgg5#@l3ewq4^P8b+41$PrNCXCg`BDR_@P*~P*PigZSmTIkUFlA`|pAVAS&
z%ETL$4ci|kN)Dd`{7ImHC|8VF$(}6D_Q|rScMHP$l_>i1J<^`D*&X5H@p|k+Z@m!V
z5{wq-!LG#Zlb$B!6sQw@w{d#LEP`0(W(z*Bik&poy2ezkkme%_aRgDlrih&yp{Z>7
z7^6>QTzMR^3LgScUvq(@=kT2f=_;-Bmo_4)zY%Uly1^a?^wo)gO`DX9$coyp5`9K9
zH?SL`+VM^oYynvw_JuIyU15re{^?k46G4B!Gx9^^MWU%T50QSL!(~+Su{GuZrCX6<
zo1z?59jx+HAB2j6cU)wP<R1M4_i@bm#7MlX0N>E?hkD_!4sgBUw$owmLuowdNjBm4
zwBj*8fiUJ7fJL&>@(YO(kJ%%8vns)Al~<6KX9+c>uPsA-)$e7K>z6nxx-3v|<k@C{
zsb#Vtm#NCbce;NR3U#QYRVZDkM(Uz+AEWwl{f;rS_$li&(jU1rleiwu+>s%@WmBkL
zl=6Wn3V|g{%{kS!<G&RF>NJ@IC<Pr(IZ+U!ASG}0fZcp5C*L4$WAUf^gQO@u;`u3=
z-vPJVjT_CHk>#4PY|z{@5kdz0D*eE8H?9ZZkkbq>@{IQk_IH?M2a(I!Hhs)cLGvp?
zf)?B^R4{IQ&_|xACp8PSTq~~dWf%}3E?b)*pYnfv#Ub99GCPmS$a=J1DKk{b8Te1z
zg@Ptr0beX4gS!v)jyKqQ38GIQ+J>nAWQ1a`+_ui?IJ}Y2X^L}I<FnOg89-r_P&nmg
zQ<u_Oy;l%3mcMt(mNr~1kn%;p;cytSy74edC+k-sYwG{D)RmJ+@hx~bJ_Z$ep>E(o
z7XryR_y%(*?)LWwsvTHNyLw+$8B1#&J|I=!0%Vp)cWblWenBGAzqf3bVB%7LPL5)3
zT$ojChAIY^cw47Z;~o!#qk@Y65^C1r_kVJt?}4((H7~ho;r6%XPTR<yYG_K-pMR-y
z(lfQfYQ0wAPrI&<kf7Z<P`MgzAV_}LI(H8%wh#y3{dc;u+81}?Yb3k6Wbgsz@|cti
zp%I!$6$1fIzQ%GU3?)>rDHFj?=%Eu`CUEqPbhdFi<HDs^Y4LE^XwZ9R{jP9wZYUaj
zc_c=<E<5IPP|AFn2c6_^40(FazHt@!aB2Ry5&Qkj(VP?FkhaVFbKx<vrhV~({wSEW
zbmBLbk^OfJ@+r#B+1zJy-?>DyK;lq|#A7_qslcP`>+`6rhqXz}lJ3lH4thOia&(;!
zAMXB!3nPMr4RX1BnjhT^f{-@!9UXs1f3Af$BElM5?bWU_^yug6b(4B0=F2LNV@^(I
z_yp2M^hwTz8iN>hYhKOf+IaVT@BnUH`2S&|C`s?-9KKz=R$lAtGxYjdV1bM1BA*f>
z1;Hg6lQE9--i{XM_mfsr-8ZEP_?lo-lSqS&q+R#C&M9IGv7*v+eJwmb>iA%cO4?BH
z`kg-DZMcn72?aF{ldB23#cVYEs@9Eh90^8#Ub4494_=WXvcLE4cA0{!9|Lr9pv5vS
zU_Te_*VH29qF3!QpQtU1?H@|#2Zgw)?YL>2&-3lWbcr|av794>LLCVyZtF1RL8kU&
z%ju<1t&_Oj47d2!fsjok30%WNQw8nqK9~48gj$oOz$tC0#X%|UYq1U{&|^;uk~g=p
z?kzkC_0m-?6O1U9VBdb=V*&Oyh5D6*M^O>=TP7TD^wxs1y8AOlmkYR-`Tfdbg5DeW
z4(uH8hXM@t%l^%Zd7b!;K+y!%zVE`rApbSS(T2GLb-9|4C^y2f0y~BT_kTH^&T7|X
zVG}tOoc2>Y_OpUVO&CazIN7avzG|X|x+<FC!ZpBAHD5c%TP7|IB><FrL#rD{%8jTD
zWv?<+cC6yBENdb_6PeI`<vToy{q!WxJ;kdR-gqMIR$Td^HT4nSK6$C_@P4nVo@cqd
z8++o(zM3{;K*)hu0oooL(1Kxz`!hdCZvI*B(fkdGYcdXV`1JAN4%~;%8yCDZ*;4ap
zcKKdCG0tl3;oj{Q)JucD0wD*C*^Q?uDsHD%VyZZ(x-BWpPBExs4u`5B>k5&e?Pz?u
zPi(WjJ4=72U&j^yVuZ#*0u4pVG#`lmg&8<C^w6lyab3#P#b9CS#b=_oBg@s<V>S7g
z0u3AO)1M~K{;C_<WHJajlVsQw4o%e2`bMLNfNOBCuI5c*&DP!*VJjQZDTouwO0Y6-
zewKv$B6QOYP0RKtBY4@&$A|N&)n~yzFVmLrUjQAgAi!YzmDH4dtePlFyoq&Po{J-k
z`gn7r1&yUB*?P853ll*E$S+b}-}eZ{_hQ(hQgBKcp7+-g=L(A`=m5ttg3n0)$F#-*
zp4a0Q!^-4F>kf}Uu;(m*L=oUz{|_$%oAkujjqNvxko7u}mibBW*q8C^-XVv@EFzsM
zXVD;L?JU4To|G)tywUBlIhEP^b7RZN`rs`8*^E=#4)aOE(`$2cbJ0Lo7M5@T1trN8
z=XREKQa9H9bx^hUyUOu;BBO`dprx|QQ=r&hmvsb$-N_v5;5P%nL7EH28R-CfUu7I|
z`}#<gujz2Kg3G-VG9YCn|GW)j^2uM@NR30qDA_ubZw~ltHF~ZQ6t^#ug&jy-&Tn-J
zX#V0H5-M=P3WEz9@{#=A!36(c?7RL7fO;;Uud8!(ZdF4bgWI+T9kbCijfe1olTsKm
z$TQw$u$c~r%Fhch#QU1AL$FC{GPEnPV+8Uo*v-fExNH=RXe&6<^SFLY5e6G6aSI#J
z9&%IsI`6tyDF{-rWPJRM-IUeIF2Gq8P|gPhxZ#chFH7z(w@(ST%d}!2vMHn^(QiQ^
zgKGQQw$2vXj#4D3y?C<4*lpqiP;W}bFPl~;D!U7Zs*M7ed)(#1GSl3cTi}veLRs-d
zkl1GABDC-}oGmVmahyqE32-m<$Z8fxXQIPg_xmeE9J$dWP}%<$-ghN51fFdGA23Dp
zG=?)57#2qP9PX_W_>#~dKTnjncv+Ukj1~@vQ#fvp!AM^BIHL-zj)cgod+04K_Snn*
zJ*cy{MGOYeAqSA9>+!ql3*`)j*sbbjnFeaE=8>j178179g@E&s1#R)FUY`qiFyW(U
zdm9L{*7>J!C}MG6P0~9El1~{wb#?(~nsR#D9{mrt&N(=;=v~*bZQB#ucG58?wv$OF
zR>!t&+s?$cZQGh)ZqBXx-E*tX`L}CV_3Em<tG~7O`#z5#soP0EoneOm$Q|cSFJ6@Q
zTm{AB;NHA$e-`g%t1_7Eu;JD3)&mt9M1qNHcNi<uCW2s0;IqT%kF42^C$7Z%`=I#f
z3+RYAcj~yC>kKT;Dj$n_*mI3WckoA6{wAVPL)x&8?&|FRMTiK+{#tj0f3TzzUN@3x
zca<XBk+X_VJ>`;*btE6kNP4Uw{9{@jZL5@~y%ZfDiJH{|ATY3i^Q#J<BL_*G-5P~f
zCh~6&w=!BNaLP{owJ1deg0htnD}B_mB4YZ)W0+i_R`;wN)ZmOtV0VGNPW^qLX0sET
zO4Gx8e+kllv^5SE)TzjSOQ|$EelC^65Y!2AOr9YKDc+C(p2pXgHKRo@?K#cWj}d2D
zee;tLUtXPsNz>8vkS<_<n`x36@dBgL=Ri&~Ov@AnxVTOoG9MB3fDYD&#*Y|eP7l{@
zHIZAH9O@NQw;Rg|W(j)6`7j7c$*zJ4KfY;}_ZCy$O9=;;asKPgjE^eYby69IB99fz
zRu?Ie5%wAy)_Rt5#4$*|KQROB%AM}2Ust)qLrQpYjCQxmTI<Q@E-WhAo+jUWA^LE^
z?w(8@2m)*Puzr$?=D5C)t5NSV91jP@cH=qJ(3X1GxeaY_=ANI95_u+{%?(rWCwLq8
zCq+mNWr)k&_oI7nH9G&;vkCPL=3d+cRqE3{Fq}zjFoAtYoGNyP>Z6Cc;sYzF<RJ@k
zPg>(ln!}bL{)rR4#IZp?p?A##8MDJlq&wOUlr>OBd#r0KBQO`Pxg(|oN%QzCJll$F
z^vjP_ESj3fGO~_3G3dJTc@>(J-UU%9pQc-m-Bu*W+YRFIVXdr@o$~J;_&HxRv7!ZI
z#DL-CrrD;P72In}$3_QA0A-W}bC!U879kGm+mA*u5?MtZ;~GC7_@Mc`dbkimRfL+q
zKt+g*4F+zlXx$L2WEmpDJv59Dh2o4!5{(dH?epxn8k;W1gtDe$A8w86oj>d#h8^+9
z772Z+b@uqi4CE2Hyllo`3ftUG0FdCt%$1P>gq=?Dzgg&aVsXwKE|&sS{oZyz4`Bqp
zd69vNl!a}UImI$mDQu?bUKl^kmU%dNbTK%w%64`W+VDY61r$2tK@K|KVmS=`@Db-n
zGS+4oLSH1@e%SYI9YU!zyY9rY+Jn$Vwg20HiNS7p7L7$2SL4h~g!J<JnoNx$Ip^Gr
z^zPLCIGg<Vg6)?Rrb&g91;;02WoP++1p;=K|FjDJyPV6;5>HB*s`~`y2F6y9y7UBQ
z3_115_VX!~{~3%72*)p6X!T$=7i6Op0wrV@IdPq?w^J-`DjL4V_$p`fV%6*_#hhRz
zQ?OG}V;fOZu|oae+4#(aACKDS;%$81Y&OTJSTR)k3nxelwhdKFuz@dBZrj4G`;Ho(
zIYrR`ST|+XEttD~+@MP=ln#gJo@p*i_ls|;&Fy`|Y%OUTcty_^5o#9`TN}~R?Rr6h
zE;{&mVSYE74JT5<<5}lIlaHHB_P0u>!>)X~ZPsxIpu=g`lyTuM#~(E&ujI@}aBRfL
zI`tjP2Q=q&R)g{-jm|kn?Kut|d2Fd|Ibm*6<Ep>TnO*6}84^d&{;?m(7@ccdu-0Se
zVjLw9jPF1OmTfS+tOP;hhF5Y4iojCS+v_`Q`u8&qXE`ogYt2dK?GS*_lK7!TXj)!?
z$c?M(+SL;HvPlGoP1Bw%tpQ*%nN@7x<jr&oXFvo_wphglx!Uxr#iE+$k3pI1Bbj2&
z|A96f<Q%z@MzJx%PJvMLvXD(Q9}S#9^LarF&2*TjZoGUCDeBxKj#RoA%2;5Okg?mm
z_lzLeqW5%NDU_(Ozroj%-FpYXKkQIWf~BBV{B6Ad{(DQD(e`5m%-L5OkjnzVvcGoD
zaKgFtaLIDy(07<JN?=e`vyObUL^5#u_nT`{mo^0~=^aPhnLY!57H7;cUQ8X4&DO|A
zxt-@%>|VAV0x$go5l8OlF)k#ocE?HE)q*y(w|0Y30*3fC(8?!g^S)?PNJWp80zA6(
zgEoE{&ptNT`8PHG>Z0N$hH}Byg<vmbrWqNLernB2gmZ^fvYLBjn3I9bL#YaI302T>
z2Sd`1*?mMQLg2Q@v?kqn4YSU7qQ2HiN=5yV@QY_K0;mB2KUQE{Ib4_wKa0+Kz1t13
z2{DSN8baZ|=<|q}98BU<8nxiTbYRQT9nBg=(j%qRHs;U40|jaQUT7#p9X7-V2I3d!
zP3~F7jdfJ2bmy!v$7SIU@IRayZDm)VJjFJ&XI^<6;MSJmrl66$=zwEl%LA=K(IYe*
z!s-9!m?6z*$UH-k|E{@VM<Zc(sHmJi>1JqBlj!W&e{68(UWH5tTMsc3grX7t2`-4S
zUD&zqEE2CIvN~(x7epYCVvWhYT}HuH^Fg@PZHC67Ptcy{#2g&wjiP2kOW?56?*bMM
zej`k|`3$$$EefOa{@3`ZQZj^(I}%@xN^mB|8mQ-jIhsr(0uyGq9J*>Ymjyi!!7-&&
z>Na6a*p<ibNeYEhmlNSz%N$PN1?JpNN*)IWI5vq}mzRpmv0MH<(R{4{rX_FW(#bHY
zesaSEaMFAXXYXE3(ko*oxo`c2h^9$WL+#M{yf%=RB+*+XdM_QW2uSXw%IbCUNljFc
z0zwP(IMh?2+A~A*kMlcmiz8DSh{wdE;kTaV^!>zNfhefa1J&=U7d{gnbH+y_=!%Kc
zTG3O(B$I^U#CaIQZdfKc=aEy6O_EJYn-pXiUQ1Op-`O@|w74yQigWO2s&;L^V9$?i
ziTz%}Q}L{l^~9@h=BIBfNU>yT5l;saa4laNu1m<FatO>o3~o(OX#~rruGSAKIPU}Q
zJwRG~WaW>j9NfR_xa`FBZrYRYKBVZFW6p#J6ro&%<qiUDGDc=T#cI{ro!_sj<T#p+
zj)Lw{Q66%Pi8YbXtWgy&C#g`%D&MfXf2Z{0P7=&#ktGc-<Vr-ZBgOIsU5iD2K-(kU
zKjto8_<p6_4Z^drc|0KOj*i!=ec`f;^qK&|%Rpa}^{&;R5cES-x%<)lwd`RLB*&yR
z0YOe&bQ3`=4Qz*pdMG;llUSceEYYKMPMx3(NFXQ#D1W^1v#M$&qHm`NPY!t{qsg7j
zr@sY(UrtilZoz>qdSJ|t$d-FbV1&p8U7cBbb$lJn35}eHFTLn$8xcHacF=f%ZAEOp
z2#8k2UQX9aR?rs-v(5efkQQGumz^{fNrt7lEL@=8WLL+}5ZDlMjWH=0as<@p2j4P*
zEE0~Mu)aLle-bo^b;S%`EcP+@c?YQkLl(GNxPE0SQC-3?eyU*QhX;cI;7M;K!#rKc
zOeV;$JYGfHdn0r{aHU;wY1>=8ohML!i5S|8xdH!nm7Y$)7a4@S(IarY5D@xubUVON
zO)b~}?%1H+1-t{gGao+`$cE4cL4~(moR|?x_q@hX0pci#;S&zb8hcXqo*&!f%GZ@t
z=#KV9bpP1i(omN`Jaru;kk9qEq8o0Q)qcLxDJDSR(;+8_mnl$jOG|lOwC{CM9~tMz
zaJ7P;`)5}os8)4XxZ&sdfey14Go9dqVdvDWmL;;F4VpZp8V5Zyayo=fX={%++GWxN
zR|drIO0!Ag#NBu2@s%uy-~M6kl|X3R$2^(3-9i~=OWa~2epo7JpfQ^K>LW$koIX+z
zj@(~~M8i1pWsgl^hgXIXUNAKr47pjT^z95t9d5v6fVLnHd<Y&@i+P`G9x3~<5g{B;
z;}s5TFQJJJbF@P&cOJPyHHGW3Mu>^Ub#=#3y&A3^A)NLTfY2r!X^}ijOe!YWIx*yO
zmGH2f?-Vg7|M=WX0(#~bdCsG;!)?{&sFPfSh(p4Tkb4VxaFMfD;E5V_;;Z4?<L;WU
zV;T{E<qR(W?^A!@*gm!yK-d~_;R$q9PLGS${%I=z7nnJyWoqFU7$Yn&udIK)<`xK@
zy8Z=51PrkCyPs7o?FrcK+N2-9<NJ4dzSPy;e%^2-w6$?}028su_4v0}UAa1z7+6&)
zp?3BYp{Ev=D7G^TFqAg;C%UJ3Bh1%b5%z7UnQ;8vIVO;77Wb@C&rIDV$6U^r#K}o{
zyQ{PvD7kTibGtWqSoAk6_huN{Q=>NG%`kTJ3rGqM3DW!S{QFt|)Zpuyj~)cp%zL99
zPK%DG)i%QdT^O-CV`tRwqk*mIU8nhsXrlD7k;Pu>lXX>6ZKw1(@fW^b54f2Q3(*!!
zasj|YzgcfB%1$hW$e5^Dj)`(+Vyx!d#qc4>Z56eO@D)vrh&uq&O5Xm?$Z7@N5;!2<
z0~C;>uH~9y%&e?OMUO(ke7Zey-|OSK>vydB^%8snz|}^GNX*j-Fn@<@Ro=KWksb)=
zmM}Zpq^{-_eZ#8=wo_l2GNHcYv3M2jN(1YTo9`d+_V&M_&Vsp;^>HOod43HKZR-v@
zKhk#Le4c0d5T1@<VRjrh^b0{#>g>rZ0D?u;vScC9_X|_AjS;?BoHrVxaWx?)v+EV0
zb%{dJBgA(EdVhFFid=+V#l5URBz`c&IEuDGIeZ?yJ9--s{PFT}zCSNLOJMc>hhSFw
z`6hJY#`y6+qD9|>;D1`QJggl5$<DL0GNb(uVhej>?KiI_Sal+1K^Ud${f9TX_HyD`
zPAfO0D<u+)=<+5R>A@3PV0P#M$otErym=L(LXbC3c}Hgj@sW=#Y|*069>a!d?xpIj
zmiIWPPbPIE<>?{{x$-?bP*wplE+9|bs3MI-t<)n^o;~+i$X4*g;!PAyyouw@gw^B4
z_s{4}Dx)%xxgT>B1%w1iTowWny*G5zh_eW@!EZ`v`%Ro8Ph38W>4u14+%FH6E(NGf
zFX+Lb5WXxA!7ubwzBD1o#vWq%<696~rkJ(m?jwRx%#We@9a||#3E*DsSmozT9-%}f
zF#bD5AC}EP+4ys`DkT%}K6sOwA$mMO?ERzm>&z6`_(`Zy0vXMw3H)0_<0aH|6k^op
zB9wEqsB6xhpOAkAC9tVs*Y2ec824<g>8KT|v`8(9?$)g8atR}aqY?FM8Ts0{J9Di<
zaN_Ve2=3kPTiwz}tpH|QB7zRgXc+`PlIB+lK>g?<X`xEYabLAKw2zzzproTh;X_!5
z{3`~!a!$n=JPqC{MKjG|`7A9-9AFn*DzdJ6a-3B(SZ37GS%s)SZLqxM@3^Wn6R-vD
z{e6O*5}SKvE2QvaKVQmZxfpWljNhs^0E}>T8Jj?5NJEhm@0^^S4Eg{;OWYt`{^u>i
z`X71^J2x}&f8Qei$)x>%+XhyS|I6F91P6Bp4Qky22UiCLR_#Lg=)JSR$rPaKPc(%8
zA&bZ?^_W#jN$HZq9}{(wBVIk#RqB3H6Z>#k|FS0j!{w*ccPp))WrY!P+;P>?2ZH3^
zOabY-qxs{J%M63y+8Cq7w$O1s;qbu{l7St9EQaF>g-gwS)2wsLPLx&n+{rb_SQ@2-
zmGeL_YhUmMNV=JTmg4=?4!aWoj<^n78DtsI=Cu(5S)Z^!swXui4Pp<APHImuJodEg
zJ7XAWtC^_L1$ztTKLp|X5yKA^HixV4g8oTH+C$}^$0OBpWDkvV6Sx3d#HJi}-|*d+
zk{&%}fd$2&f8c*Rf68>&_I=-ax%ql6eIfq(7#JZ2`m;wf1SuT*{Ix<AC~!*pcfWFK
z)F&OWJ_CF=<Gs5%a^7EZ;%%v@DJ9;iDn-9A5K^SJZ&?Tj@DXnKoRtv23^?z9J=^o%
z<-RP0|08qejlVk+CoMIR%{&`<c3TK%Qp7@=Cdp4PY(fDbkF+5Bu|qaqmb*iAsD_RB
zZe4Q$D@Qx#cd7k~Evw@=iw$~qu8hGf$I#t3?8DNqf{&z&T*l>SQ5RZWxGpCE@^(7E
zB<CL+t*W+QO6qeAmcpHyMey}MACL7+?QG`ri2XO0;o!xAJIG5|k+2D~TOImT%WAA<
z8@xrhZdKvhDRQ8W&2C9GFJp|+7gXz9COi5-$j+uFdPMbdQKy(PdHKCp@N}>=?jecd
zbTMeGD>9TYar1!Q*LJvBiNtI>ztEN>Dy|(UFBocsN@*@iYmy_oi&%1DnseKCZ=K~#
z?E0jib^t*URm8cq0J?~L{rp;GfOn6UH^Mbk`9YeanrzEb#kRwH?<kyXwKOX4*k~cp
z8q$fKTE~kJc__L$wC?v1r)D`DrE~BSYxI+tX7WZ`qIsISh$u)J?CZC+uOoI7JOMJ!
zjV3y;q>yucF|Oi>YIs45e#+;`47ueE9iBT_Jlgr(^h6a5#g5P!bzYIih=TaqUe6`m
zl|t&GgzToo<^?n*PFR<415SO;c<>oWIE)&&q25^ohT!o}cDJ8iWiyVBJy|O={nzAd
zX&F8{_Ddjn(dW5&D{({-2W2LfJIV$ur-2LUFQX&@%lpwpIxp4~8x#k%pO3tF=1JLD
zK0|e<xdSFz*m&^asvDnm8`Sxdu+Q``(w2dfVqSI?$L3m6Gg|gk`reb@^gIXPIaM#V
zCoySKI&U_wUFNWX-iTm)xv28n?0%t=78@+2yB4N+8H)=)=(;@NQMHSwmQdLMNGfeQ
zWYwoIUQUXm`c5iW{%4wM0X*zI+ulC(ZRiNUnzyKOwNyPa_pw&qInju?J>B1qAGMt7
z^v^1!cam=i*@(*RceWMca%H5z>kcPua?vtnDJjtAJ_T|Gi@`m8cCIV~L`Qj@s!;$U
z;LC@<rtV%^5Tx2%hG1-cDO7&>&tHmOxXqsEI6o-SSoZres`mTnnl*rp(*`n0bEG?a
zir3jBn%d|{#~x#fA&uDRTPEOKqODi`=C3<<zx>}1-=FClK9Bjkr-7=#DIbK0i&rN|
zk37wS1bz__PYZ&_$kcY&lo}4fASyq&LAeInR?h^2p>!;H;#NWZ2U+Q9Wx-U<JBY%X
z`|t#+urU^n(g4r5&03JQeed~%IeG&{*jCaM0du97&ERuW$`PF`I#c$ntV}7)+B?^O
zTzz2>5aGg95Jg#+?#41eQsItJSbYk?)V5ouy|i5f=Xcs)_7mKa?D-Zf*!g>63f`k)
ze`+?$6BXWGIP(BB2=+_eVX#9OREwCW%`?ggF#g`yrV*JH)V6NIn}uKyQ>(BHc|)`e
z%(MdWZ~lQ0LcK3!S<$i6%TN|9fHRX+{_yRGA!VM=SGe)tT~<NBszxnt;mP3(wjD(U
zG-qcnmX1V|>uu^CCp%8+T9RWm@cO=t-?yl!jz(2ScpRQuZ^YMrmFKMb_qZ?!BGjBR
z6H%VWq(M7}U29xEJ_`_2NCJWCtDp>|aP@7<lJlny7so@+j~{fIoPW;^1xKlS;0O`}
z2UfY8{?$vwc`z9R)AEGeKMYF&P7{9GsWbmjz<zs+ROgQ+dV1I1{zm(L8)+ZH#B_0d
zLBp+$<gxEDP?|8NE+C(cdYRS0kH|;H##cfWe@JzAkB0QXaa`+Bwwh(7s<7_*N7D%a
z#ko#iJ>WMwR*yWqal?7k0GApzJJ0((L3T)bOz@Pyp@uLCJpIeu{HQ{f`J4~)#s?}A
zJ6*14C416^m{i1WWHsc}sAxSbiV&MjKjE~)M;v$f$wcxAgLS8;3Ee%kc`;ef2pTc!
zxu7iWY3<kw#ve#kp$&h(NF-!c^s_WM4aAhaJ4W2Fc(5P&S_WPWdKCE+{bq@oz3>ZK
z?WwF@7OB1zSkyhO#GfZAL6d15%12D<nlN3Qu8%B$=xVA6UXhu0aLxJ4+j?hfER^?;
z`bJRBz!_b@4BLrK3~q9?6w!}74{pzETwqrB{*BwB$P}Nd`!seUx1G2)@)DZG>pvL=
zqknS2hqo-8*l5$A&M&fwrY^oo(cOta<)M(%0bjO7VCQT-onL~8>)%!NiH_K}T45Hn
z^huA@3=!D$L{ZHxaczY59EsWYk2X5>K5nPcqef)n9mpr4?q6<-h9I@*Os$K0e{wwA
zUF^t?XB)OO&I;0g+g4u)GbvdYRl*h~fo47&tu+8L)Zl|IeA0#+?PIzQ^#|ipciSS<
z5GC_-fOf6K<8{p@7!iGfU4MsH=G5lsJyCIoRE&_WO4tnyaw>lEbZrW0@1aj|cl}n#
zBc<|`NAxE|)*K)atB-&44rMx}7}=|-40SKuH$bPo4}^xWG@*xE_;YCbqIMnXQs(xH
zp!#fX=~(35g%QW0<9#d6zNx(b&qMt#XhZVQt~KQms9u9$7;MvLVH!x^_VPD%87UOJ
z&M!6J0NLC4!)9q?=yC-9<;B6%2Cwvg8Gio5lVRoLWdHBs=f60I|AjgH|A(K%J37i#
zW+ZS-AZo8Gp{er8ocqRMpr79lM@@MOWvX&pPKkeBHwZVn322&*yEwuA^sHnjj>IQf
zUZD;a^apHMUwb=4$Cp=Y8@RD1XEVlZUXCu$mp0etf)C#e!_E$#3;kWT8g28TN!e@`
zuFmx=0mtKyb1!%O^0@~E(+pVm6Kjv>!y}6sU{8nVlZ(63guJ%>Ei_{TGYt;^qyUny
z@7wWF<w|WX@a}v9*nLJt>~Jh<3Er5t7F@@SXJB1<OEF0uRL?#4hju@2s;ChO`uoab
z)*36e<d!>D!C_Vt${6~JDMp8h3zsZVq$|Xg*A3oUhl4t$^m+NcU+st{j3)DM?8{id
zRtZ94NH5ydWu4R&7yX@3;-b+c3#+wG_4Y8YyL1-bsfKf^=j}-6riMNSw#xZ2`}2a{
z)OHiA>Te5|--UdIbAWeuj0qg4+&i?*kPIX=e#Bvvcjq8a^6kMAQxSW*znI>y93E_-
zb_(G88{S*As0Orapzw7^RN>QErssjK#t6EWtDNGKkl5L|{drSu*pI#&h%z-UyuUkT
z8IQ*)f7C>D#mvAZI?CwR*zXq-6!g7=%Z*NYHi!$AGqayf`F2`PSmVdmh#yl*+$FJ5
zakWft@L$WBF8>tdPnm35p+elc`Bf?ZYFb>t*ZpMZN{}(bb=Rk<*$5ORn_yH5WKuge
zk6^*i0)wt2RVQ6B(9IF({P130e&4@b<6`rDzHGeB#Wv^;5=sT;eqLWLnPr`<fCLz`
zvc+}ODNw122N{tSWw*q}Ed2g5)%I>mjYk3Jr0XVR!31@y?2<^joiByGk&WU`<w?iV
zSHGaN55)zG7335sUHt}?CiNhs-l2e_1ILA}=~%}=G!_a4s+=V1G8|CR3@Hm~BZ;FF
z?b(qXt(x4@Uw_?=A&O(gUYPFI47~FDVO@J!mbXCi%EF{WagEeoXTGvR(>FyW3XQi+
zt{lxcA`P()ot3_F+p62di=G#DSP4lQ27wo)-PG&M77i)CnYS{2ZK4)7k{cgF0cm6)
zP=Xg+iC)Fp^{QSb?1`yvwK6_y<5VL5`mUH)e!sAT8dVE(p0`kRw3_fVEW##hgVx7P
zP#{RPidk8^9KVMA<}QyRy%Cjw$LI-XNvYHc!-@AQ<{I($iF6gY)3q|dL6vHQB>?p8
zPZWKt#*aSu|0Meo2@eA2tp-Urfjt9fej`m}8SRV?t?yF?9Zz?u@V^kI#Y5)o<9x;3
z0*!><N8@`&LIxLjpz|n@UDaA1sAD??#4ADW<kGu@gl?XbC86IdB3%s}Vq*t7xY!Tt
zV5$3>zxax)NNjgkRzOg>PJjsR=G_WPC_Y7j#wb>0>xEIw0%%7rqR>aMz}c6LOmEei
z3I5?mu*(Aqv+HmEVm`7Uc|Xb5W6Wz~`_6s<N$32#-IwaPs=dl2=?e5FSq(7#bZ0^}
zl7D!ls}#iMnu`JkBUr`)xl-UrzIoU!+f3?PWX&NwOG&gArVp(K^D>Ddb$w4Ym#T3o
ztP6q}ppca1oxzmqGS>|PWXbdF<1veQ<A=bt3tU|FeV~zHpVP56b{O*nsk@Y>a#5>d
zI|!G{CC>$&w2qiwIeJnbw_Lb!d+^wn2;L__fRP<0LlE6bgsF^deQ$^qfF&7?N@K+m
zzDTNfF4@elm*jO+nZCN`-NCRU(?&$wpu`>$OP9Bn+5dCi22L;yT-b(6$i{Ugcn=)n
z94hHg=<Bl&cc)grx|2mlV=)!O2!k8MD|<th9L&3BMdZM!LT5hS@^Gi%qHz!ZCIllT
z9DI0Z5akDe#<oev2DL?UB*Bx9y3nCV(GZiql)-TL8yDj{U8$e6X-!-6;WifblNxYg
z67_rZ`>V%<k$SBGUk+Ga3lM@c)N>HBF1pSl#%aX2@)$Q!E-TRc*vkV?MT`_qMgh(G
zny-J<eDZbd9f)t^<9B@p*?(}KZ8-E~Bg1&nV>%fR*}DsumhQZ}i^?HL__GA5D%Jwe
z_CSvW^@<1`p*M}CWDozfRT@0p-siVrqb*iFh(Y@_(xG?&^Gz4PUAv{O_m?R>*9aHP
zl}inyZW0&mDgbmY1UGvgp=T^*tC76Ov{<Ea!ro1xe|-7~o0&3NDi#I<h?74_^t}YZ
zBUWqqreG_kJCc0V3S@7P&<)x91~5A~QQiI7CPS<IFw_Kvz3SwLW8w3ZuWUq>MF(+N
zq=G9X<IHP;6KX-=uw(jw<5k+oDRMgYK+nFvMEyGp?#ZT`d7q1gp_k38fE+jyGZnSP
zqbs;v(||>*%zU9JiWA^^FkX~Wcx(}9aV^Uk3q^D+YHs>MP-*$!<OnszQ-tdcFjeq0
z3qz-}hrB8PvVs|MnK7-N=b=Mlqj<G6Y=)v@;rli4JeMdV*h?j91$k=T0Scv@3>n3X
z;afTf>L74*W^V07W7l*f5bkPQT(o@F3=JQ#DsiiUsQkb<bRw*HRoX$7pXD9)Nop9x
zYls!+pJ@&Iv9os#6G^PtcX0r~d+Z(uc9FCN2_r6ntG(#SAQ=%o0#4O8?3eNe*oX!Y
zhuMLO6WuhetC$*eNz3LqBl$OLp?te$ftJwfiVZXktf#Zv<In=4Fv?sgKv5}pIeTCs
z<KF8d#aHh$SQMogEXO69B+gAIAQnXkIy(s%O6upZN?I(g2i0X&at0fNya%F>#L6T1
z?+Bpd9E@a%qd1NW{~IeHA>t`yxa{Y^cmZ&LCD-bA6!LmHt&^ibdmaU}Ln4LHTz4|U
z2N=GeHNaciK90T)B-F*whPuNfHfBZ!;?xVQs{{n9t2Hn)T;ImC^sh*ihFr6S&dG*(
zXpM1(Qdxy+EC6<U1w_I%GrzpKcneF2R0=Y`KxzdYeIL98iUH38REwlQ7#QrU9swLA
zrec5fc}Zg{>Lcea`nPrjZ^~OK&8IlEP{6_=SNfx+ehI3AY8q#qD@FFKK+kmb8Y_+=
z3*`cP!V1cq5+2FRRY@K0N^w(0p7fWSXBpd?b1+dQp_6^EJ*Y#tesOKY6H;;D^~75z
zW=Rz+y<*N*JV73QMLf7y(59;fRtnG)N6&F&PpyL~rex9bLHIWZ3?B>KYsp4@=gs-Y
zb!W*(yKpk`6a?L5%(!l@|CaPmf#Chb3aGTW;Op%&YY@Y+8^5yMzL*M83Cc5y_e|&?
z>T!dT<7cuiy-%coPC37{Kc>%zstD)~0NxS1H*&JT!a(Oe43l(mAk%f)X(!NQl@U>s
zG=O;P({lS@Jf7)Br>hELXlP0KjaNGvDWwLT0D1ouDc-<|r%uW(6x>t%*;GhdO<tqt
zqRWmiQh)SUDIbl3lq6)2G^_O=%a?L$q6QUIY)N}76r$+)5tknG8|UG#0=~^4Gqvqm
zLdEkXNV<}YTMVN!1z{LQ!Be113_C)F8vZhmM|L8N+|$+g3n+v*VXbMc2u&4tb9*6>
zHygweqR10xVH&CJK1Hjd^QA<Wsbzw-)Hvmw#aI~<pEQ?WJ5`8eM3^o%LrjF@NfX-O
z^We2U)!`PUf8J-PVO7|VE8AF;3Pc3xAye&n6Z7*4=@4{{Wz&+h!V4&I0ia_2gD}Xb
zz)fnz|Ee}BrVCnb0o4{@cQrS^2-bRug5R-Rm%r#8D?NsSBdqnrHCxWw;-mUYur~9<
zUpL_I8uZ;rb|g?pjS<#r;7L`Bn(hcd@qMTO26~4;4hs4-_wj+czQYT4K^o@Ygpwm{
ztNlgv0JXpIL$uDNVjJlHNucN4LbwjP>33iJj69k+?W{C_?@IC=P-5WW+NzM+rtnxe
z7RuZ3Ok?D&yZtJ&iNJ;ktduN!K*bGCf{rGRGr2FjGYLG!Yk)4XDdSBH0CkqKgf`Gw
z7vDySS25WaABNHuoYYd&om3Uzj>Xk+8BrqOKOZV*sEzav_W)wKo>;jBCZX*+a~9G=
z+K5`6OL2HB(p6C>!?`91#)E+fMO8V|9YDkRGd3BeZjL2>a;@{?XWSW)fK6C8%zL8*
z<&%(3q}T=KLl#@}jxUaYMixE(z0tq@%}DOGYdJpaUvVcLXJ`e!Q(6n3cdh2!9^^v3
zo5^;)N|(pczXEitK|aFj?icIvuc#ioi16<=eAK%%V_3V;6N*jipQf>rGFbZ1UBr|m
zd<bk3<-G0*PoulYXt)}r9n5d~*geSJs~&S8L7-0@*;ir}&9-aqmM(=Q4rHcMAh6Kc
zJZ^iNMbWfvdV2+kJ2O%)zh{xKVAY*>J_3T%t~0?pVQqa>;JJo21TdPBecHk9%uVVQ
zIN(f7^<?W6g@)?;MzEdsc}l``zeS6nRHff=JbTmM&Q4}VcK^M}`43r=jg5u%|9#5F
z`aicmY;37U2H(PWUG3O!-@B_mwg+q+G4re(y@Xi31FHy;t%L$rJce1bzmXwmAm6}N
zF-PhsZf&wbZiQe)CYwOxj}2G^EzZ!(!kF4W6*bEvGTL=A;s0KREGGU-`A$742oIc0
zNvvg>(btvcDUba5n}Ir&%i<cGv;3kU0i9e;StD`cXe|{Oh27=u`8I%C3#b1Z+(B=8
z=1<qh`;T`etd5#w;Op^D?Uk6uqRRR0@muH0vmR;0&(U=uU$?vSqqp}5;GdyfHN9S@
zy~u~w)Y`A-^ZqX-EZs2Xvx|pXrauic66(y1{aQPF<QiBd$CE-GfA6O{A1X^<2O{A$
ziglJcb|-^?4nG2K<RPmR)Spbp5xcB_?Ur0Vd`&<2i0R`R>w2#YsZAwlg=N3i^lXST
z0>)%tL$g2I0$wV9hG1`Ow7fJ_dSDJ8%C-+_m~{8Liv~FW6E~0%2CNw@3BGX=P6d(c
zVX|wE7%&a2=*l?yDVyCH$qM<@3y;-8``?{;I)E0ivZ_Ju2=WJyP_tSc9q7M@U6pip
zrzW)&gNiC5eH;67lEn;`XB+9{Jz$9q&F{i=(HjOAJG<WTD08E~?R)zkc3C3;o{oGd
zAHQ<-<Oiw`5p2<LR_|t4&S69okp`cQ$?EXFThp_tJ+GCmiZdZ?aEsk7R-A{rtIj0`
z51%;TkqcX6WJ+*6S=W0XVx{oQWzt&hf$!8Erk)-H*X!fb(V+o|Ucb?@8rD+KO0h`v
z#ZO#uYT?$}nHl}8o^;!HJ+J5e4Ol*}JGYOOl^gwj;uB!Dx8w8qW=vveZ+#3H#Qjf<
z4mEB?&~r(YN&C~Wy%6&$<2!1HUsQx%<G6W1Vy(?2bx?zp%o}CJotLRk%&*woBF5R*
zPlD;3AIeZ~{5n@DGlBgG;dZTf9UJQ3rp`WL4)~wBTO3Gs>?G#6IfCGbp+@3>0p}ll
z<V=xpx}!q6O_i0Uz-jF#4B^VMtDN4R+bxHi^*>LB$Z@i=dLBVoRR~@i4Ame!T{ywO
zbx2dpIh-3Sc^D}9`+5;jTe*aPb$Xqe?Q|6xCFd<O-CJ~$pr_|>rniHUArlcdOrYCa
z&@UBn8NC9IMEW@KzjN?%pikPt&Ze<C+y4PHNJ#Fzh5FQbsej%s9$*`if8mq%;Yx(H
zlsVQiOkuV+A!ZulyWqSpw7B@A7({situ>Z^;;iD=BEmv85eBKS!tE>2gjFTnQsCe1
zK5SfNucW9wdixv{kNY!a;q9_hU```6XY?vH2k7arB^g2ntnJ!)_X@8YgJ-czm}%jB
z>FqFNO0+)F#jzSLQ}+lmjJ`7p@SjECDDc^KGa`BWvm9bh;|D$5%C(Bb@g+t8H_JP(
z3%8Q0qD(=j3Y!zK>P|b5Y&Iw&q3~xbh^p}%!$FMkQ(*?+^=>ZkZ>19cc)54zucwOa
zGy$?^83<S77DY(7I+tuWsx@8169Rq1(Kz~S=m3&FH^%DOgB7mzG+onjeFF<}4ZbjE
zewV7l#H}~uNf6F$j*3;nBy)Md>&~Hmd{3*>tLWe8g?<6S%}-nxzGsloNX1B#YRT+$
z)5lW5X1FRwaRKF)dai?_OR|jz0e2$0@Wzyxo#vLI{TGr2KApsW&OEueP^8u4&G=YA
zhZ{0_N!Iu(-^g31#Wy{7IN)pXdXo~0d)aS%FQMu}dPgANRG<P0ywie!6s9astwuIg
z%#?NqCEduKWoqXbB7!JnJdpJ-SGHHSgtkz+t$6S-2gm+?y%K#y#FQkUzM^2(of~|t
zNTSEpswE(PaNv&@Th@ZFpw=RwGY4d^DvyiG%yo}5?E@0vyWBqDa;~m5v(vQXUbEV1
zykKZiQgK?FHShLbtxZnAWRhQDIHU}nj<QK4g6*Z^qj&{q79ez6U2E&P6sN)}8g*77
zeWV1J01Z>(l~6JRhd@(EN||YD?_V^@apX&)Xr+-6xM*68)>9j61!sh+V4Zu#@{p^Z
zABLFzL{)`XH=U%HP||O!1#!6&O|M-%7B*6D{*eBz{R>aCb{qY`0|#wY4BrbH<WX9d
z<&O$YXvQ`js6QBmPLh|?P0T3wbeG|VMPSHOFx^(Xv4|+=6D;3nG#KiGlQSZs@f4Qi
z&G=&0J==ERK{)%t)Z)DE@%;hXP3qK^NLcbnALG=#DCn4=Z+c-o^>D`B>+r;<=2~F!
zgzDy_3S{w7QWvMdxx*-hamqlNywSG499K3bOhclhJ#i|iK0wc(knjIM(6;y{*4Qcf
zKJ#^9y(O<RlVl2;%>1pX6;)P|Xf089M+!KC!&ypk7A=9^0?8i@mxu<Bw0S|MrlK-=
zG{qdO%sAmZPfUtnFB%8>eI9Uvpn34Ld6V&iad@G@f!}3f(-$AFgG3YzHi~l*UoM@B
zcX3k0Eya!Hl{AXHYNGVzUG|wGK!54&Ne<9z)R(B%lsTMtZ2nt;F%NNL5L^^7bZLd_
zM5oIoa`#-L?Gf*{Ma>GT$chIguJLo=<Mke!XGmw$AG?I+Y~kk#8W_89lJPmP!X*t_
z^c-SyS>+Wdesv%~H;b`O*U_f)?%>1+;cIS?c`uHoJ{^Y;W_X?u(&LU-im`+xmamX%
z@|N6itVO*r5{xiPLZQByHVr_cRVWUsR&0-lv!E|7r_ITNHn$-wU3)|<0&iTVrZ3(s
zbrsfmJJGV3l9k;1H#{LS5>$WXrO63yJqT~Ms9yvOZIu(lC69MxsK9A7k8fF6C=P6C
z>S)Y_93CH|^Z}7BJTku0KpH0_9xoOkEelXs$^jS2+W$EuD%|KYB;;peYS1*~a6=#u
z;%J;8yFYO(M&bn09FgUkw3=U}GJoljTV^bg82}Z_AG6wHb`bQJe7m;3g!mB&c6GQ1
z+3E_Y4}eBb6x+gi^0Uv119>AEp_FY|bDg*ricwnYZIcq}I5MAO%<dx52jR(!=G>@r
zHjVr63tgF`tF4({aFoy2E=L-n6@j20c^ifl&BLY|t-D(zhq5A5!@lWhm{*n9JQrG5
z%*m0a8W`wlu52lVq!GSoAnVcgh@nA5y!QpJJ?4-GDlW&dLKS+hJwEKoAaNV&grK*W
zUfeYF$}YjMSGl2Vy3g)PB)~MsfmHFE8*&#mwZQI3`PSRjVCQE+8}k}cs|S6zuxtzY
zFKcv~7rbU>lA<0<a^F)gWFaST0z~%OqbM$~Hu5uXx@Oc)jg1~lO7D~N(B7a+ZRmlc
zL3&M@3=CIwL@Ae~tn_5Rg%wMQZj+K*R&*w7t8f?U<me*k3fdmB#b^;GQFlK~T|^s0
zT`!C>)$cJd<y9TxjDkWS3fZZnB6d}-D8osm=;5{RnR)kuW3;wgg_;_xXYxSG<thk=
zSk3iR2+dnT{QUZ`mpw}2c8qatf>3~!+Qj_$Dh(9HFO6CUVM;iMKP5x3WQC;x#;`Q@
zoNwMsUrmTwwKQNK^8|>ZhU$bG<p~}yQCxksmR)|TeeQ1fwKn!)C;8dI7|@11whu)2
z3C(gnw$%yao1J|l<jmTBD0+!g#|8AKV|-<zh46t8(7{P96wq6bS5aWd=AgiYdFk0^
z#A#jZ0E&ifcRtqm3C~sM7I*@2O*Qm4>s$Yl8U)-_9VeA!@bLbEZvM1zs06tizX1o(
z0RCl>{fdIS_fP+v^8Tw_vgYup;`Rp%55FyDa{O$>*?hcMdP*I2YVbks`%2v1GU?e?
zVmCc{Cy+VVp3T=rg*4i`h9)3bv0R04zR_E9KqchXzchb!O)==E3hM~pUdC2IQyBiD
zBDi5vYMmG2fZ?c;bHH&P6WfdDT_Lu&gh+AryO@q@zGD0u`tO>k^~&4m3G=Ji7$;f4
z^x>`5q-d-C5413M`L|3zahF5q=)w{zkyrHQcob3u!Z?wryGRHV7(O8MpECx{QE7)Q
z`C`<jdnG)4Z1_G>-ENEpNC{=e7bgXi&Y{f(x$=v&93)VkA9|8vue;p_WA2^@`~Do_
zba_)5TPWw%euq@cI*pj;uS()Cc<R;^Fi~tOn*V55d5W5pF)@@))v67`2sa3ls?$}V
zEpo?3v|@hn1O1DGXV`#;3!R0ZyhMVC8&K})0yN1eCx<zTdDT*CaB7%1x@xsshlS%_
zW#`gP#wuV4jf;h<992H2j;Gs)Z8XcZ1-}GnxpAg*29?Xc((qy4G}#YusDksEapR^T
zQTee+hl0?BLX@PwmS#47K{*TxHuggW$R{)B%SwTrn9og-WM~5y{SG0xQTrO-g;`LM
zBi&XObbj?j19dD}Lo0jnSX}1{z-{=GNTo_Ju^PtUP-jdivKQMHPRjkt^3V;70$qtb
zw(U|um*YSqwA}6PkM}!312(_nbTT9q&^HDf4q)idE<#&zGGTLg<4dIkdAPh5y|0rU
zN6?6N1_w_gHzR-q3$SR$nu@XVQ2iY7LcqzX5M^@Sz60|g{D@q4C}f_2w1q~^jb95P
z37R+|bI@0c_{g&=s)BX;&G|E+5HhdnTN_&74_*86^Yw{r{rDB<Cgs6?uVGXEdU91@
zD%Q)#6xL(B3}0?i6d8*jX>4W64r<%Vu`px;rLR4nqRc?Z@R0{2zV?BEmH{UZB2y3$
zT!}pT{n+#=ULhonG%^y?R0on7d3U)InlEM>FvD%BTh!*?IEd)UO>gG)@KdC8%j3H8
z+?$f&X*#*AHX9HH1DpxyeDync>}2;b?co$E!scDqq)YdZg=iBIE_gtnU%|m*!s|1<
zy~ZYE*snnO8_GeaPn-}>G>wa22^O-Sy-qJ=&NQfwqf-a4{MjaI^*r>CaxA|jT!ce*
zr|QI!m2=AOVJwAJLyngnF-c_TbA<W81as={rWjWhEXoKTd|TIEA>pxj)@F}6kj;rI
z<+P<hKmxQ3hD~k|F7B^*3hfuj0fHlKiC2HPr?P={0Za-<y6tBChk9V|vjuJ*y*2Qt
z69Ro!h<PsV&jT@d&T6Iug87OjR?}SXj45tL&{;Rxvdl&Cp+p9$$c`=U8gSZRp{5M?
zX8}$q%9`apJ|%s^&!~vUVHrsgfF~eN2)7LLd0<q*4&qyUUvYT^`n@lGdDKr6qEw1J
z4oaW^$VeiDZDHip+h=_+Wt!vWpd3KsDU8tGr<+YGfwJ^`=wEi2H3sus-emax%yB**
zpRhEows}}zV-b4k$o;IKP$oO_?QAaBMqDnUF(qLG|F_W#TAdz#XUByNng3@c^Ln<T
ze;vP^uz*ezpa*8EMt$f-TY6m_LzIFDR~hJYdN7?k3z|`;^=l>x64)|4;zk)GP1)^u
zr;RrgF#hM~dFWC@D+n+M&Yy*c-QRi8zvOD7#6H`WmLClbQ-^3hJ@tnvb<wJNsNO$?
z@Ks2e_l;LEuBsE+mKFS<jxp0unX4}sHy_;9z!HwCR0r>B9afkqXV)}WOp^-%5i8(n
zeE;>zD&Nh(Y1+VCUu5|aQSI;UFqI-l+L0OWNp%vAir=<aQ}kK;wE2}j<ba0yw+szo
z%J;Qt;svb?GN~z3%S^iJijF@LT0d5J!;W8*)0;-<txl7pD(12kb#NkG{?2qZgF$5M
zRbv{)KhOMIs>W2_uTS&$z;GS)o~{Na6Ra261;=T|vBntunp?FXS%7D}<CL)*=U#hp
zwFMpxHIKvn64;NP*%qAfPU%d)pUfU6=*;eqGg0U5&UL~?AofWJxG_Jme_V@<e5Wp=
z)zqymC`=GgVgkQyS>@eLc^*7LiC7rRWTTZgrgKaX{kmUBFWR6uZ9^-MsV4`Hh@^fC
zQHn;bN4Jo{{C^i%zjxO~5kB_gmC!_K&marfg4Ci$AR{k-Ej-)Qf)jbIvwc2paVBAl
zPj<|R#dl$NecC<GD|bDzB7jg|XQ-t=17}g;2F44C&fuI7<63d;oHs3YS~v7=Y9v;d
zFIE@h&h+ycsV;Z8s842c=yHH`REAqToZF^FT&(h=*Y$ypNp^?4<*t<;?;Gkg?j}Ui
z)JC!3E2^cER*drmzP#3^3D%3Fk36q~2t?Lt7zhooK@ZU=<BT#`T@<0za<Sb>+LOG#
zv<~&p*n^Va@}sNsx4i{GPsgY4>R%1m;1Xes1Kh9IO?YT&$whB-ix=SQJxdh^+MPks
zE#b{QC}*4;71v-L?a6M4)=%z<<^H;vkSKrp?DbFiWSOeOnT3kr@Ca(1Z<GSP7bfE^
zQB9bNelXNTcLD<#4dmF)3GNk5WrLdTYUHxBZ1*@4B1ZHTqIUt-Wb$(omZ?1%?#DC_
zv9OSpZ}$T!S-TZ(2O?13(~gV%oyHJMe5t_6j<g_wZo@9GLcUdGezVEiVW1CVH6{h)
zy=$UWos1Pa2oo#E*Qo+OyZwegsbTdf?FWllO@?O;O|S|yZ9-J~2E&uk5@qrQ61h5@
zz|RZEv*l-T(=Z>h>|cqeb(VhAtIl;PjhQU$$BL+uz#snH5Q{+cQkVlVa9p^z5*nWB
zi_gDGh>Y^<msrS_qH#hs;{J0NCp4%Akv_<{Ay8@br7K@p7!(f8(-Kjvg)MVKY89+h
zlru(Kp$MQv2^=8BxA~gt^?w3lFko!x<w9lUr%nMV8kmfm5jdn>KE@k*!z<%jCdh8A
zVp6J?|6X5)C-8vxZtGX$HgJj$GRgz?Q2f!Sa#d8QD=ce#!Pc=LJYE=uz3?Et2+Gr`
z*hJ3O5*C;{-HjAvhYC)MuS^I7onMBwP)4Vz7K#T;L&HG+5M^#;4FqPdzb8UY*TEL)
z^d$k#7%C-hWjlg*SfnO#V-a>ONFU51$94<Bzaxsm{nCI%5sZ$1Yq9<Ll~l@bG>Zf7
zHrvyx&okDIcxP7b=(3CDApXVP^zp8FHUizMrITiY{M`wc3|8E^K#AC%e|$zG8{Qdu
zL+R9`J(2UW#=JOe?syz<An%Qm1O^z`b+YLLhBp}YGUg{bU61~zUwW7wP5@4lhfH|h
zp03+dL1KZBwY3@#g3FRLI$nAZu#!3+s;^<{5`Xv&kTC{nWxQ?x61%7}mpFJIV$ys|
ztKL@vh@KDlsrr5+kwJko9Y*G)uyJC;CXxMx7!YZ7#cq0KE4w?FBn5hm(sQpfK+vP}
zRi^)WOv?5j%s5A?HZwQ^Cfongr(^rCK3y&|I3!RQLEJ01-^?<qd(B`Rr5Zxzm2w(3
zfF`bG^b@}U1&)14+F_f1lwy=pX9gEbOG)rj^Y?IIzi(U^BFDCS<lmqh5hVguW*loN
z0%bNemg~pnzsp~5b8#k(zK@{lZnh2?A!HpHwkSP_#%00-mGo0kGo|%%K0EsJE_f4J
z7&l@{_fV|*w1of5&-hOeoQ0j`{~h+S|A(yp|K(iR6YD@JQzKcx9l!^B|F(XyfLp-u
zU3)2pjd-@Y|8917d5S$+ReaiC8llwb`n&e;>G&_hN88_x`|pWNbFXNEI90(OyS3NL
zZyTiLmIx)hHJ2Cs1{BmVHI^S-N}5m>{NKsH2M+qw|G7l={{)d)d6?P$dyW4~5Sjh|
z29beNI@+=LBd7}c*l(zTU4u~l$~&R{{G$o<4Bq1L%gkV>!4uhAW`lBUVq@dAicjhS
zy3=uF%_f6j^5r}WdU^(g2I^cw7)3>pj==pBTaUZFeKC<wt-omukvFxBIbHcBb;auP
z;rr*$WL?7WbTZ}I`R(-Kv^6Q%J6iWwOF-bR2dQh0MHNL<AD<={_71<-)8o@pB-gdb
zn4DF4gn^QNhlr%CeOYv1?PuU^G9@q4=fhEEsn9>~w+XqIXeiXS<Gae#9(_UJ-NF$Q
z(>4^3>roCfrCfCc>;m(tf%~}yb#YSEFptJk)05MziuRBF)8^FH#d%ir(B;Zk)>0sa
zK#Sc6&W~U$tE%q^_D{Uxd7}0AapVdW{KTT#%1)1k<=ic<Jk=k?Q9JCpnJqv6IzrKL
zS$SWlHs(p>BPvASvxSU*5*$+VgV%3MF2Tjz&y*Oc=8+66L@i|E3t7q)*shB_dFd=w
zp7q0<$;vAGo$cG}&1}3EW83#vF$M$ohX$>BFC(N4aWNc!LTC3*w*vwzUGO2v=%ejQ
zTuxjzr|p8oKyAIOQ^1zG(hOD>%FKRR1Lm=Fg-@TB6{pl`DHP$i6<^}NxDB=>I8*~v
zNtO+N<L%_Ui6~q9^ZMLGw=SmS?Gd7<q^l_Dj=e|FA(qi;4<Lh@3>C}5X{`XYiDE_p
zshJW_Zm~$zh8RJhy!2Y@u8rXxO9|9-%K$Wh%sVBOS!01`a_c{9Objy06B)-Z2~{UK
z+M%)YOhtV`^`F&O;0vHjW(!uFeLU=#WaVWUQ~&no4EwdUGoGI^Q2<?TYtTr48Z);6
zD|6zQiEV8!TF7Y78<<oKPd6rh_=Bi)NS1aj+l==6l9&T&s({S5{ole!AMyTByuMGc
zn>GDgw7*B|zOh-#*7l}o*RGuz%@0rGUNwf4C#TsiPey#Tm6@kE{f58R=|va86XTO2
z8QrIQ+1$C**(y&mUG-9lg}(!5>V(+<;XD?}8<YH(x;(IY>C=F52%Jt4lUzouIX2Q{
zQoPnVGm5oHa>Lvru9!L%vz5&yGA8Y5$Lw8Or(gQ&BDDzjr19P>ACyygm#gLKmZh|o
z1C2bEGnxSW;l6-2(y^Z#hJq+&!J;r5XYZB)RM4*=dBs_U;#|ZBol!<W-kj&6K37jo
zBP1V`d};zG{4^ObqwN$@?H?K-Xu7@B6gIbb@W8jR2e7-V9Y%;j#aGtpClgGJnQVOO
zwC(ACIvkFy+8{x3qMxSdcCy8!aPqw!MY7J|zg|%M(*ur5WCWQ~)pcfk(v%ocje~qS
zcQ!R$7A6>IEF}U<sCJ=%Y64*+c<M@0zIm|22PK^(T5V<&d#n@iPJ5eV-Hmn$B6KO}
z4vj)@#y@wC;`~6K1R_FeA+6ch^X4#=y?4+%g{Z0em@S^G>&{4(0c<_`YB)5%r_U@E
z31;<O0YkGKsTU=HOe~7(WcPufKum5uDs=CcYtL=YJIEY^QLAEL;xm{$Wix@#)t?Oe
zFFe(z1hVpCZ7D}>g+CiqcTkW~P!B4K6@j{}p!EgGKgfraK}hIeAV?g=en1|NO_s2G
zs_168khp4d4wEzA5I}Smn4D^bn$akSEllyYKh|KgLej!~K!HfpPI!@Sy!4kMwn2JA
z)_IT88ytt=m89qaxw;~-jQw%PF`DgHB8PY-0mA&My=@Xolp?B^f&9Of7?d2{9%50$
z2-ro%@4GNOyrxI_PZAaVaka*jvs^xj5K*kQuf8dXihjJ3E(vbV$a}238M|bt>N9p2
z7X?UzS%uvKz^B8hjZ&679c#49%>TpIJ2nRzwO!hA$4<w#ZL?#$V<+7mTUTt`w(X8>
z+qTW=nYZqF?zd|Gz^>Y#_PO@C);ca8NOHO>Sa}{G&4%sq03rWx)56~<R3^?_+2-Q(
zy<LAwd?$irNrBEa#)2T`%V8v9Z&T2ZAzsPq)ZvKlo4gLZ44R2Qxcyg<0wE7>2J3#d
zOx>b5l%wHQ1b-g&%lCv&3uVMuZEiAoj>GmFs8nKZz#qzcGOve(8ntR$G#cLzNqtJV
zIj@+|-WzLkec(C+gbVI^b9>m1#;5oW+GXe4%DRhJJ;<0?pw{3XTbN_^%>b+4{n2J&
z+Z~;{7cI8~rp47&Cw2^$2sGd`-sc6LD|&f<xpp0aERU@iWB;ANuOG4yUNhP5f%x=z
zK<%bF90_vYAsEcpK(ow`HAEByE~Uf#uKr-)DH&6N0RR|Q-GA!xy;SC4D(JO-d40WN
zd+G@ME1taBot>KBs&gZfKV7jM;)ARJ--&q1lIt4m*@h%;NNM>VO^f_xFz{6ijc9O;
zgBc^%hFoU|t!A5iL##UPRO?Q(eld#zS;dVKr6BRX+3G0MXO??=MD8-dw3Fs4@K|O1
z0KGki2S^)@)DiY!1z41YgEPbLVl=up|Ag$6<r=K%m(;n43ooFFn#sWTg_Zlha9Z{E
zX+~bS(9iIThwTqhp9<}Au2#}q`$EUYCPXi_?=Z3neP2L)ve-kDLQV^5ULW;oN@eMa
z6qVv__opjG26_o$9IuL1*oYO=+IcC!`Eg%H2$%)^CA;}VVGY@qwAIRX0O2%K4e|5W
z`99i1X3N;!ZIDv`^=^Tk0{M=s_NaE^QG5dePsT}bIN^eCV}cANjqyIiO>r*#0wLbu
z<n0zFm}jgau`bp-WX6QSxwFLU4De>Ud8-OB$z3>Z8!KdWg#{IHDc5Pf|HE_CPMn8r
z0bcZ74pDOu$<bk}D|qO8bXJ!06T-_3ZZ0-mfpxxP>s*u9;hjYk-)B;%K&2ed_$0rz
zd-uxp)ncHpE_7GOGK^fkW^^ZM%Sdja!G0PMcR8(_x&$jGix#1aKlK=T`QN>q+eUQ;
z(`AVII#~^#G}@+w@OVnp+aBy6NxVdW0}@2kyk;rJWBu&(7zvs9rRX(_!mX%2N5kyU
zIlj9Q{7^m=wlT4w5Oab3d#Z(r+_2ljEW|##r9=<}kk|07P@wbu8K)B;AXWyZ(IN!F
zAou2tI*>97mLEjkq~ZHF{?Dl<_TD8?el9_Z{@YTd3J?3<*9FAIZ8zN8FhAQE0X*+G
zq%znWTrHX^9eGS%qt;mw!hvh}9w_DjkqaeB0!-yd>06Q@o%V%{IxLhS<Ktmv;vg+L
z*!fL(*dVMd;$@;B>xUn?%-35jY!n8^@|YsyM#>0>xc#;!rO17B-<>p|qTY6}{Sb_x
z0XIB~zTpwIHEt{s40>?OZ81VhAfHqw5X-E#<P7OL|NlF#KW>PaRk8dF#Uv<(Wx1W`
z(Uk{Jiz)!QFb|m|kUwl2+a7^<nC|)>MHB&Ypxn<=ceG|;eY^H>42Q4j$rDQThY8L2
z-AlwE_zmV%*2}k#*2^C787N*UvnzOU>2pDbK3}9AsOr~0=DF;-mcS9B#;N*#ef-<Y
zh8NeyPR*Yv^NI;i_VT(IB*vZd43#JRk%0JL!<}M=j1H?!JE++C$ZI!~<8MSAjR7~{
z9=})JT8>$E6mM;l-eQ{9#9I)1T}uPyb>mK-<mNjR;gRaq7ij#((VLbw_>)ga@U~=@
znq>4lGK$+tgzm28rGOS%u)s7^-sTQZ(qp)&bup>sK2lC7<y}w+4p$Ek;W(ktlIX??
z?g{!cj;4xIvGxdr5!cV(&Q)z~2680~j(iwvj_Z1{=cT>kq}>^opOV3lNbP+yYKFOS
zc4x+>j*Gc};G)(pT{c*>8|Pgk@bC%Y;fykrHpVQ5<d?a*L;#NblLr!gl^zeb31{xg
zxk3WaL#pG?ztNK?H>Las)?X>wgbVgeroEK#P`Nv27Sw2+lfI$yRjdlq!F&v&v#p9z
zNg{>~p5uqiaOc2zrk#sI^33Jp=hxa$9PZuog|P&m442HFDAZ-ufhUH!0@S2DW3R%M
z0E>$Uwf!Er8lb^45o@{&o0op5TRLug#+>UCr6_tlbN%vgtOT@iaJc9AE|cM0){?rC
zh6iltD)v2q8@WWuiY}wL-|BoUqYNz!4n}FatmESle0v>)>G*e8jtZ%p1`UsAM!<C@
z=>mx7{Br!!X&@4XJKc9zXaP~__*J!`Y22S=Vn~5`!0(ndtRCKfaii-70k<me>jsuR
z=MR3@nh<F9$qA(`+@BO;j51C{8Kj;^lI#%KsFYI+NZF`+o2Ss%t>qFuljQk7c5t;Q
zT>K-1$QNS6s0}`Ufb#vQA_gJHb&AgYA<nJv4X0~&!h;E~{OL?G3kc=@8>Nf>=kChS
z6X6t?1{~kbf3MpAR(W1+lKP-;a}oYyez2!jKQfVQ=HYV006LV7BL&532u{&F)qk^Q
zda0Kq9Gb3b-)A3SgjP{ncAYNo63z29ZCqcv6h95=Gf;xD!O&flrLab`v~u~6d-WBC
zJNp07L;uMpkg&3FGW}mc#Qq<d^k1TlJy}Twlp^_$G&mBdM6#DOI2Q2Z?V+?&^+A!O
zP_h;blwvyLq-v~Gr8w=A!x$sG_BvVc=q%oba?6abYG=rk-^0Pq{!ywlwYmdEVuGPc
zeiqL2(Cc7+Tw3>E6hSk)W4CU0VG8q$2c-&CPt*0($nN%Z_oMi3>8iJ_4&!L`=wYh*
z%hUU2s>b^<wEYA|q#cl+eai|qpJX%xzJV7mbfC`osi^h*B$%{k9g8T5fV1v+v9*8P
zsjjcxVy86!O1X)zf7;3BB;4v93U;X%%*X&jeg-b>3Ft5_|IlDK&;Rr6IVuor+;oL9
z7(uJj6L!<2%xspO{!(Q#w4G~`xV>sxZPOQ5&Svg+RH)zX&JMr~WPOOhVSruFA_mN3
zNgCd4&mAq9Uu_QEkB&+PpM1!m=^|Iup@JkhY<_O;t05#EE-+Rztl2%^-Z38)B))&e
z;#+!=pU=16HQVI3mMI675?-a&(d<2)WZ_do?iC_oymTdjo#*#@GpfVtbe9f-dhIJ~
zI(yMUfU@<ZOajDs|JVW=rUw!G=*w!X@OHYY>m<j6rhi9};POrNDplxV;LPR6;G&Xb
zx0O|%hR^~Z9%hwdW!2%qSVG~LeB3Ko^j7Hxe4A6YSjTFH6hH9FqjFd6bV~_+tcF%p
za0lWQCmfH%1_zxTF&9Pf{2JA!{2vrJ4H4dFM)#Ux{ej=66$yvJC4xfI0S}l_7+9)q
zQ^h^I+G#&(KYPs}D}LELj^FMoRS5Q#8EbN82{vNm^|#qQmS%2SYH}L<Wrpw9hM%+9
zIOOR?pDx1pyC9)UmA2aE=-2NR2$o9~KfW~7e+FMZ3ab(1u!|KfS470j{s+p5QWbgC
zs|XO7%mxDPF*(9xI?WgJC4nHdp_r=3H|9TM(9?^Fs@HBdV$3-eiFqjG(rQd1v}uY-
zUMh?vt{}xp5Kl+1Wm2;`YU=Ux?fh)@8TMEK9eedEJ$<>BTVyajPQr1v3wn=EgikTk
zXZ#rAye2%H$j2Q`C%Z4}kV_>*)7mgjdF0<mL4ZXwNLU*D$iM45h<daYVYyP3qUvG1
zeB~!|uAo<}mosI#x;7ei`rQT0P{#Ea>27~<*R0Vd7IP*Gx|Oqv;}C*rLf`a@P8(L?
zcvxUqPh^^L&Z<|~j+jka7flaZbB@|-oN0*Jp+vx;>6MY{4!DP)*VoMht8`5sL4N1_
zSOLtaASWM{FKA7PN%mb`TCEmEGaNBM#_#+{$D5rKt~y(-gPAGU{i<>D9UIriseODT
z2f5uj&kt8jjp-zQrAFA*LDUf38pmO`x){tU6q~6_E8vvCf}}h?nzr*cC>->16X6@*
zOsrkhopg0bd(z=YC}fbiZ|z5Do-o5=e*neG&talqOd}o`-OstO1{pL4Xt7}D-RuWW
zy3yPsHU69gdoNyE(XIZWL~>D&iPkQ_oVbSR{7?CkSEeF#%M?pGcaIYEAZEd%#NK4I
zVM9e_5b(0f1scM9e2k@*--|1@7Nr&kYFmjbQvCaJ+4)zQgU8_0)o<?n1?c^VPylvF
zB=zh<5&oL{!Y2Vy2DJ}dXz_S^fcjWM?>ili*ssz((cG3(RGb`c)~WDt;<Fh%?0+lX
zZ#>guu#Ry~#`Pi8+y}5F>c~DdilCH6$|c}Rg=C*+RV=icoUvrCB=;gOEq!1h!iZNv
zX5DAt;&i-zl_}H{*B|NqW`n)ZlE7vY`?UhBzpp?A!SoAup}n-_S%0f6PxWvC^IIQ3
zsLM}t=D|L;C@Dz|HD46=RL6`8u*T%@ZdrA_cZxdg#lBl;C0`yp-<*aWg`_?O72$2f
zeOw4F(|FjhlV@^J!cGLzC5V?XCw@UAR&=3x38vT)%*4%Jkm+u-7!&!8T7cV=(sKIu
zpj+ZV6MdTJO5SYJxY6j6TxJ@|b!GG1i31s#Vz^bca!@24-TZt2gj_Y_&0`^vp~yC#
z1SH9|X;8?&ycIs1QM^i=;`+wb-4<u6P$EX~DeUV;{V8mjSNt0Cbu4>4M*<^Q56iY3
zTmHm5{LLfQRo)(5pVyfn2jI|wWt(w7aD&ww#1yi7hL5+U(HhvAcR|&-W8|y6W^}<U
zwR>A;{kHH&BBFW!TI^QX1B2|Pvw5%XTvlPLYH4D*`K}^ZwY5zKL68&KKp5GvV2&dk
zk4(=|kI0__hSuPj3G#q()0hxl#K@|vxOP@yXf$0`K4{-$?kf(L9Y72C?A^*j0RVm`
zzRkx!Sr&an!qP7}H-v&87fX1o$8yidHEY(f7wj+bHUS{z@`}4EVIpyf19HKLM(yJg
zRB*g9cQI)31TZK^$bEma_<JZQe-l9O6I0{SL%|gkMY&04!OI*EQ3t}mQYndAwoXn%
z!C02QN$SH`zuV=v0R)ub+fV_T8!qh$2v|iO^G`w4BQRGEA#!HmA$3%J(`}m!!uH!l
z`P6K>`gr}Blpkn>YmpOOxbST-0qV8_jZ=1Yj3q7LPo7wcld?Ob))w}$w=9se*D(<C
z&j%u>y>i)W6L?!R>-QY-Lb06ThzF6yvXmO#uouS@q7Y3Lz*YW!cTHk2-$Y^mhEEb_
zcw4lclC3;8?G>4*oGlMYZI5r^IROKc#h?ou{Q1Lsw~y}o>b$XsXlw2kE$+F?K=cW+
zRdL|sPY-VAGdG|e-`E>|e3IPdh?5&>a#}mf&Ucqg$um<L5jOSC@}HxVs&r<|-QxTF
zQz$G|9P=<D0K0Vl4a}rU<I$SP0IAs~KKe9qdwI5i!}5LYjiwVf=#ixv1&fVe4vGw1
zoVu*rq2T%C-K}}EiT0F;$<IQasI!U{pK0uof?Z!~0-62dfno@xV%l_8^c9{IY2bVe
zvqRZD$Wi=XXtp9v@Sv#x52!KqoHB%n%Tv#cA+WIn9JR(_o>bW16T;H;((#lZ%4;{;
z+l1$P4U#?b=nu!!4Ub>fJ^M^ioW`PG><~P=k)b#*z^-^Qay+v4@=Y^#;$3NY+He&$
z+{L@b7uGJyGMCuY{7%GwD8V==kat|NAU06o(K(m5O|gT{rZ!v`t?B+i0LLho!MAbQ
zOG&2#OqQ=b;`Kmyb4?ZuYp_dm3cR~3W^X#b<1D1aJNqZvZ1|hs|EXhTNuhuh6PdpM
zf@mt|LHmmsL%LCW?p!WzE!Bn^Ps>tqZ%ZJzQy#@2(8BH#P8QP(a2~tUhedR3HV7V+
z3k}c+zgo(cv4Y0%yg-Hb(;B&;(pk?Y23tER`I~9gYoK$O`8>0B;pGbRnDKbnw!65o
z9m@AUZ<<PB=`9yT!ngDF`s2;^=Li!Nze5$-sakV~)Pju%bWvdTfE}mCPlvK&1&>`n
z5%wjL$|p0^LEw_Iu(SS8w;%g|CdB_91v!#qRl!++b2d5F?;+CU+S1IFR7OIl({GGq
z<nY6N$(wKbx3D-cj%^utdFqW|f6g)Qz`iNHg<4%7(^g5xB)=j;4_i6HPioGy59h&7
z@wyFpYkfYXDzOel@~PSJapnh5V^j*Cm5%zsQw-zC$qDq?(MlXNjvcSc%Wb)crbmP`
zVwu;WSrKkf>$DNC$HRefCSHQik+I|@`vMTS#LOK3<2Gmij|cs~F2Ip&2lH<O(WC~B
z46J%}@vVXz8xkSbOcM2gfzxrJn)f4+kCGjPetDO#EG!g|d7wggWBFKpKeIobFMT}1
zFgF_56MS!9+4Ags=|G*Ue>bn!|J&Z~b~mz|xIeCKso@gMc>-Ar>+ANnPMYOH!{seq
zqq+T*Yw_c({c8haGUJF~a^sJU9t?i=U*M&nU)t)qC)C0`6RDD2GYxUmIhZg@-pj!?
zj1ihNl?^dcHTaLG1^S(Y+1Qo5T>HS@uMv7QqsAlyh80{Fr+0CWq5`GoNreef{RjPc
z8TG0FGwHsqV`YI>jwm+_u(qjw6N$cJr^ll{!&@a*QZZ-q^Y&*&*do>GXIqce2tdw7
za?3y87jn2DtMiB$avkDYtKVdB&t=4%I`tae^QWhJnq8j*(*%<naf%v`$Bibt7jI@_
z)JhJ$K-a$t*R)_~mTLHVk>HHA;1O6ZG*{<#-pIMW?uPO2&iGj>ev|wP(cM3V1tO2*
zQ4;RuoP>V)mY*NrtMz5Ts7{Y?KLZ6SG{8Nm72l@=>=5f&LjO^5ZWc1J@kfScFT^#D
z=kSR~8IqHJBQ^D}0d^tvs>N**Fw-@7<1N07LH99=VxwKLrWfb-KSnUcI={v$P*y_A
zviZJ8ogkmP?25#QXtk<AWnY&6iF5*kFtf={x8vkjgC{V{cWO-Sgg}ZM3k22*9l23T
zB!XYLjTO<nU)w6niPiL&FGs%YG$N0aXYyR9n=~0P$++L%?%}n?&^}KSlrU0Mr#TE<
z7F}X64*s_J8E!`?{`Tz2`&s7Z)vcMB)BUJB+Q>Ey@`*REvXbzvcbdEXirJVWOW$Oi
z70K?vqWwpI`7N=cUX@slWjSD2LWxe*lc9D51y2bcUEEh>0A+72=FI&hBD){{cUu!V
z3<R93l4zNJcbSy|!PHA;9OmUfS$EKgd;qoGD*Ob#_ke^D%^$Rq`_J%>J626;LcTmM
z@44qtr3VV>b{UPG>Pam4<+wh<<8+RtJIKIGPCvP|4@d)1I~_J?S`i?<et}9Xau(7H
zBN>-*A`&-LMwmWPS{XxwVCx6Jf@nLoS1P9!WI&c+Iru$VH~UcKckTHnVu?ZcG?Vm6
z;FBDG%^CO*7`pGvk|Im_T}y28o|(W&g`qO4J<V^7*t3r@O<{{+wb7T1pn+{(T(MrL
zf1Gxx*!XZ^h<JTHd@*3#j(SiZ>;V-Xt;cwwgBA-LSwDuZu^*v3XxJ^s!dJX-`;c5A
z+vS8SCcTkj3C4{$pcf7T_Y#^TTq@6(&9XO<AwH??x5eX76M+O-@itxLIyi^juD8{$
zSF*h5Pa1jHQ`gktD#CKUarXHryp<*6v^fJUY6X^kdsQME-%%j0|0fb_2531h)v&nF
z4o#`PrMxS!n9+663WcW1AcK>Vl6e34Jy+F&fLFdwvHQB(QC=eEXYbOHibKXMB#WYU
zUh;S<(<hte#EC%D0`x^k_9)EjP@I`$1&GiA%i6L0vK4Eps;%I!5i=}#Cy9na&t!O5
zIc(4K)uwi`33H&LCtYEao>#5sjH6Cqd&zvUk{M0pR%hf8q;jU|D-c!J#w}KU3jQOg
z64a_&n?9-1Pz{t22BM@D4ep%CRowQL?l;`(6|R*K6)YYuc*bra78YF6f@Rhp%1UfI
zvx1^Nx2$hCZ#MFxUr?-|F!O<wm#i~bhvb1QmQ=RO=tF=NJT{X>NrBqpR?pg<gjRoh
zx$xNocoaIK6~L@KZI1n8qW9>q#!_MJ_48p~aS@cLRDnfQl$e|O{`+wex2oHL4}KW!
ztnFG+HK*~C`77+MNS~{RI0W}cWG|#kp{=jVj+r6tSVW-!z1QAB_#N1)Gl_!L8ruel
zN!aFwS};I~*R3d}QuMDw1s~z58iu9kS_CoYD)vt3rRDeCCjlhFeXTu7dIex{Mu;6|
ziCfWH@`GyjO~!tKM;-){pDEuO>+ef&wm`?*%f-->CMT&wE~l;@hc0$i&F?0ua~}g_
zvYsp#r`eIPK4Y)N04AH9HMiK)G5go>347u+$y)%FxgFE$5c@Z9TH&kW>tkWct!ukC
zI{3JAw5COoQ46qO5c$uW(h!;DPO8+-_sQf~$qCWp5@0s$D3LUHF{8kA99C>F<HMWc
zaI)kd({ub&vE0Xhv}1{mw@oi6+b*KmVx(*q-4sO@>IP<i879^1YS$5&2F)e8;n+7Q
z8UjFU%~`x)Rf1{en^|A!tZnE*&4B?gY{s03i=gwH+}8tF-9|Lp(E#1tR45g3F~w=c
z%izjAo1LYLkJDjk^&^!TnB1)&w^~ctAH=R?$kF7?TK6)eo*I2a3AkH~I-yJTP&5M(
ze`o*C?1eY_$2c1H%oFvojJC3$J0G^WHGr{Y*t1PABB}3#ZU=}smgm;=M%}S>n|BDO
z;-yZzPc<a?2_l{KTu@U)t#!ThE!mc}l+=-iP5Vb}j~5bDEM`FDn+Bn^&6R$B0o$o3
zPX_oHBb#=D-iwH$aG&i(m5$6i!UyEQg12%E<8k!^=_u@w6#Za)G&0984&00*5I{OE
zQv5)tq!AfLVeI8!#Y3cvwCY<b8|~NwJVoB`Yw_xyvQo+F%zSr|D1+7gr&B?W2fKc3
z<MV$slrgdx&ZH{dI<fdN+jTWc)+ZnN>3)76$Rx^|Vwxjd?zXvj0kOe+W#Bi57pG(N
zo?sC=Hs~}d;!7j8yju7tW^AgkHsH*&Z5jm%>9QFN+`d9hmzkZnk$ZV<RwlP_Or!6j
zE+y0YV%C7PadRMI$J2}&NZ+_Hw-R>#t}<fOqlB#Wc?aSIf^5ZGnIzV_?_Mh=V}!IG
z19Zh5B`LcK$i{zSU-=E3f5IIxlrZqNJB&Vn3{D=(V`ERpGd15Ob8@j@nw{>@#;WY(
zumt2_&SLo?PzBUKc!}_UQr*ei@0Zos=A2Y~$<vvh6nv>1%k#r<4nO=Z@q9nfNJ!UH
zzSHx=0t@*G5!ILnea8@URRr?e&RDzB&_hNJUDfmR)B52m{rT$a-dp}YnHUKYEg63f
z0-BVCg_HaL{`7JD$9nSL)6xGS+yjl;at><}s2la8f_?}56)G5!Ok1qMcywB|t+c#)
zsd^e^j=oZo{ZM44J`KAYf?fRj{2(xM(pLBy;%Y=pDVN?KuTDq;a<C$lfp3^!lNyxS
z@&a-tT}hwg8u524BP;CeXfprcB(i4Blslk2xphQoa%{;3Oz|tH`>7a$<G?4v6WmOf
zzM>Jj@%8v`yW8{Kg}dhZv0pCv`(hSlyGW|YF0mM5-{*_|<#g}v?hoG1PSTSve^kQI
zazzRX0C&BD#G$n;{C1z-?hhoJ43N|b>^I3P<uX7!QIIw^qn_MUb@tnatti!=WvaeE
zxwJeLxw`Zr9ruAjIfj}2D8ROy+%y60<N_zxP{7A<{dzH9EghO8zS=urcG27&T0rv0
zaLqdHx+ynX!Llc0*4<tjVQ1&h+)o!u$f2L9e6IuP(y)3t@tnLsy3Z0ii5_iw6Ak94
znYp<ATU`Y0t>@WM9|o-pOp_tEf`Z-xp*gdWM5?1xy}Pb;@+P6}24F;X=G07|UZmZh
zonUf^0!0<oo|e4nHZP*+=H5hWQ$EPp4ev`H|F&k;c%#wth03|aDvN|*oOXAg=k9U5
zzvf&YcDzHf(W3iWtiW9_rj1GE({>~1wZ1Sx0<zk>OLOtGew8Sl2ba~vv{j+Lzyk#}
zOTFXqv-&E}zctqV8Bi{R!LYDasqRw~g*QL82SUMMBlsU3-GD9Y%eA(3b!J9(`q}96
z+vXM)OxIfXS=Hd59-51HSR{oex3es+%NFTbP-G2jlY-TuEIiytxroEu?HukgFnBRU
zR9wr369w<D2k%$OnDyD}PY;@}-K2xhl#auhE)S;yLV@5_K!Ut=r_HDvlLU$(v$6nV
zg)vnc-m8WU9{5#`;Fu4Fe2LN<iah}<csi*c-H+$QGswEE1?Wwc=xi|=Flt7|2~Eal
z!nHa%DI)u0$^P2yluH3)jGeeW-E;%0?WiIIF0TGRzMSzt$~eq$S`u($bDw^WgMFis
z1WOWHn7_0C3D_(O%qyePFgtZ--QjT|Ieg|?r&-iAoD2$zXr)PxFwZrmr=W2BDF59i
z2T{2Q9cF@|lh{j!WFTP|4$URuF8~5ohCIOHk{L3RNSvtm#9hckR!;qB1?|t0W7{=W
z7mi(#qAIH6N}(Kqm_p?$;s3=Hb9OqyQIu^cUT5Nf3*5-TrB_Y3tci*Ki<azP4IDB-
zA@%UWf(<_t7&JOeLK|>X28#Q)zY1cYLd!w2;Ed<ompLAZcGq6)w1g?{^eZRfIRF+P
zX1K$PhSERxZ*j`zk|n`)^0S`r9%?hD$|r3yF>_+3GoVFmqOe1=15D(k=0V6^s8zR1
z8lY?mfKb>#xsq}z8ma_G+zN;ejp+g<SFyYxUKMJ4bTs2~GGtgnMZ#wk%cG6D-=YUW
zs|LO(tdA;0NDJX;zl6SlSoVP`4A~##eb`@BqDMgYJkfTN&UUn>RM$udGwTm265MVn
zEB-lQU~<F7NSS#DG2jEQkOeKY_!F!LqE<|X36R<beVB7?@sVyE4y7yw8R8R%7rijA
zbUXQJH)f)VSbG!MkxO1R^dZ%<_$@X<UfTWD%9dD$My{^Nek43~8djo$S=}xtY{U9#
z(CCN&yZz`qSM{y{#%J8$spFGCRi|^@wsE?N((b}jLyZ=i$sv^^Z5Yj9zoo9*h!~jc
z4-~M<;%V(#3q;HKz<00WT2Xe3QdMOBi}gjt7;V#)%><?&S|;d4%w%kY%7)7p8Ee8O
z?A+CZaA)5-s4>u>s^BRzr852Wvm1HQCi?;InTNrmvA<Sl9qa02Fy~YZ>mS_1k1SMB
z?G%yIBq@2d^l)Xak;~)TWTsi;+?Ac#1$dxf8U_};5hG#1rYIT;-m-^oi?IwC`GP@q
z(6vaQAzhIX>*u=V`SjBvL!FSlG|!bnt*hm~Dhh|1>O3tF3@?(MS}@oZH&b=ZxLr=J
zwUtV4PJ^bxWOwC#`K{Dl8aXl4rJTbgRp7ed59;PDPcQ`%=tw#``R5_54Z=HS0^&yU
zFsalKkWqAsO#70cA9IEULSpy#e;7$1L*{2fgy5YhT4H{ex9-`@CJ6Mgsp9J8be!Hs
z5h!(}&be7#(}8@$(VDEQgU6zEH9Mp~9(RLpUeKfnRy4Y$#f^T0BIyfD*0B~|&L1;I
zI@{WFRR8DZC{KYic&Yia$7R<t10txV>vfm1dc5B`8quy#E^*J1T1ZR&cA|;cu;w!4
zwpXtnGj~Vh+~@yzGMcw#d~n}9|E^XcCXZ{P0c7I4-yD~k3*F2JbVa_y{UHnDcR{S}
zMql;zSOsO5%RBm)<60uK_pKx$c3yE>#d}u4tqAjY30<H*pq#d;)@}PW2B_J3<%Xc3
z_k_{=?=G{fufKD0fKHz)&X0zlQXaJw?~NkvbH>+LC^}0mg^KDX8(es|X2^ZI-CC0P
zyi;0RxxnfU1yE~TjYFuW4h?xa*$eP<r*~%kUek55e>4<PnEdDR$n5&-BRGc{-<6>w
z{~^5x-n*kd=MzIcBzMU_2q3_21lW3e{7BlfN0D4nM7z(ERAaNE96sJZ<8rkPsiiBv
z3z_LSP8}z2Ag{rw<VN{IiXSr1%gGJ>h1seua2GeCKw4`5j8v`#0X4U5C`i}G2dWt%
z6~3YxXc&4W{?c4*M&!W~IG(Qu60&bTH#~EqAn|REd1uuIoyGL04d7fFtn}R@#nh`g
z0wf7?(kboKfy~Z=f~EckZ{s*=p<BC@?0`<;iORwZwX%K!KKq1RZ=GenaW!)$=Gxz$
zxa>1Y6`?C>Y4n8V879f|{JqA#yVUw$0_d#sK3_tSnQcpu$pJ8pr1W8EBgyspTY6E&
z${kY^k%23iw2C>1KEOfS-4Bp(UZq<qgO?<Pzg>8^-}_|(H*ql{OslE+c)0xO(YKgA
zB7bi7dcaNz)86wz$AEccBx6>8?x^%`L?+Jp^GJiovWqGp!$x`y<>$I!g-_c&W2@fk
zkc{SS4S1Rgf_}3ejlmV73JYJ}6!Kt{6U4RC&aKbO_?DLw(*juLk6978Wb>wMiHvH)
z;l<M&<Zh(%u(JhD`q9u}Z-YoO6pTA*Fe>XqdR=!C*po7kx2<isNA>+Uwi3_kNpvZU
zw-*SqmX0X9ns_UxMP(En$zAEnb#SQnbeo>E{ITfvyr!;31{YsEqI+;;p_PR}1E+o5
zZ{)2Kzif)`$^aZlH54P0q`n$ruc|C(v2&dVXbh@Bq8%^G**h<KiVKM;?C-!pUqf$w
zt8?P-%f^kS&N64_wpdJ|^R*t+jVB?EnsSM9V4wGBn_95$_1E#*lGwK-p`LQ+W<v4T
z0ZIHdUUO#a7XMA8yzFeWovqhL?%InHE=cdPiD+s~QyTCceoW())El^k5z=z8Jclip
z<T+jqDn`93V$9CgA3E&8LPx7FxQsPyf3?=-0NqA?B|}%!Bp~`gc=eRcUH>L;SDXb~
zddO;G$^_;|O=Z-11et*ki7c!z6cXz%{4m3;IxkMt4w<EFLeIEdQ#q+Uoo$+HK*hY>
zO8QI+4FxDIiQ2A^R^5{YaFMaL)M=~?HVKkZmAs_pw7IKsn&QFP73*9Gv9@?E^Wo_f
zouF$L{Y^0fhXRRGd4p%dLV3PB+o2;;^x^#;NB7slv1R7Kn0?8TS+<%5zN^RLSD60^
z#>8BCE&f50Y}n^^tyMGUl(lyV^7j{mg=Ah-Gzoy_w|y*b<S+22R;BLEDEFXTbK9T<
zK5+hl6mzVst|ql+OMxM6A&gm9yaxx)p9cAjNrwm#<GJN(-A#lvXTrw6*Fy!>*E%6;
zUPMFq*0$X;8stY-acRw%z%eOR2!Focg(fkC`IF2F7Jt5;>pexONEC=J@N|}Z-{VOO
z<Sqx6W_r4k&%|}B_HxI4q2UR&bPDaiI2kj}B^!@$f}0fte%!`@2~uNo!;T_E<C-$>
zH#XUS;|mYb9&5l6naM^W{{7mHd6|!!Dz4jH-WK3J=CnFC)ngeZ(=RoT<3HC>v}wKP
zD<Gy#+!v_vYMS~MLK&DhHD4TahwKtrQC|XNRg@Ew5-a-C9NbQXpWJa?zNYk>$K)Vu
z`Xs(rp%QlI_$qGm=j3$scco35X(*}tCjPS`E@gg8nVfvn+#-K4Q|f-?`;i-oFKA^K
z%n<^4#qrOOlb^4LMiRl=*}N1$2Mwuu-{CCaB}HQJ4`I_)u5ltZ>a|w@MJicg@hJ+x
z&6^>G=H`}_iaIUxauSq@D#~y<A&J)tDsDEs*h(I@@i=$#IbZ4)9X36I&Q45NUy!N3
z2f>608TN9dKWxlV`3kL_Be<<MAd{n;7ZaXMyYl{_tWh<EXxXtx0v#!wJ+T|FCvC~G
z8y8PhV<_*$WGJD|VPbkBpt2>v%*X^3%n9RgCJ0sE?K1@y=Z57a#o4kE?&pL`hYCSm
z2Q!JhT^zU_vYA6WTc!Cnbs*Y!`{gi6QG)_CV31Hy4+w`-pGBWPk<xav9*-w}U86e(
zldRneqcYTFPFcD9m5R(01CE%4FeZPa&lwRVbp>eCZ-4X!(5$aW*{~!D=7<6U6D-wO
zUwja0NFF5wLNU4SR4zGB8#fBC-lCv8%8AYy=@4mxY;RDd_Ipq^s#YKT<^v*BOUUg{
zT+=*ke_Q`ir@g%o{D&%Jp6Ct<`M={YXy(Je;KHVPN@v}-UI5&ycp{Fjex6oBoakEM
zI_Ik#-m}L+n_ObcLC7yz_;5hCaVIP_yz}uMTBCSl<>A_JR_}Mq)U8OcL)nYa0dI!z
zZ4!WQ+gg41`p~&quh?0qRe@6_t*fI&@>QUj#C6|to-~S&SVlMa_nTH2VL{D0Hxm2|
zs<<~`v+9MD?(O<<sUNJ{3n@I`4t#+l+6}e+|LrNsj7X4>H2-ntvvP3$Po{w5KS6{4
z7Oly#YT)F+U+uN1|1DaNgat&FDZgD$|L@=ZcsrI5V~-(i6Y%H2B(CpEsMPTZl>YDU
z>RV+}p*WO69ZcJx+9vvC@|iqp6H{=?(~x#wyITvFyLSUekPrWgG_9IlYdc(>Y5RM>
zt22{-A8QZ42GiC2iB&tT^Sz%gsXd%h6}|4+`(+D&GlMlt4JuAL3#S~*uKLKKN@!$3
z)cfo9aeFufY`tbD&|&>kp)MNDoHohU&nxusQQyr}zxOUbXC&@m4}7m-!o0@JYTeIh
zclw?z+n4?+)y()*fgBhM*4$XSPGla)&O`6Lz_I1U=lF>^0cY&${=QLG{?xbL#86rg
zXa)-;1r&;>@yYf|8MYeO#j(IEt4JcGhx@N}K0p~k#-<I<I1A4InS0|#9~X9e-|0c{
zo!~aKTz%X&PYm1<>#tQ?d6tsuL01?$d$Jz?o(3Dsr&M{$D@X~>sF}Lib+)RDmq>zu
z*kd;T9bGnF9cKkzwgOtl{CLI;zJ}x`vgr<}hh9#THh2B<ws1+devk9_f+jkMtE&-u
zLN;sFWB7z5IsnZ~-kyXs#Y<v?D>PK;<-+S~X?1nJ8#6jaTo|a=$GqQNQMl~Fw5i^n
znm`H%bab|!-41&MoUFlkP0NrC@HB_$_qIEE?rRQ=?xsk<lo+V!D-u9MuKn^r2!#NX
z9tg17oK5*QCLG<@YzxEzC%?6-)ka-gcG?uF$<x(7MNT!rXwejrpP*b2#kgPZ4oLfc
z+7dIt0=ux%g={~p)gYCQ3vxGxgsD+g*LVfRVC5?Yj+~=;hH1{AMU+U_t2$HtEBx65
zokZ57@%9nqdvNJenFolkL;JZpejx$6V$I4VsfHR=ZB5a#xv7#vdKz-Ps%Kc)B6(gi
zUra>4uz`r52QTFsHdR^fK$)LR;ZRjJ&++L?Io7xBAGyAx1}tdrsT80=1FbgIAN!k?
z5KY!Gf6~~MeFh-)H}yPb4<_k30#84R^mcY)Avk;);G5|T3(H@f-^f|O)g*!9&72zA
zu~re2XKd~m$Sh9b3G{@2ojvwPKYZ(a2OrRX!?*DJ|G9Kpo+bD(XV8dq%6RkKOQNRU
zQ)lZcLB%q@k*np__K-_Q<fW9hscCI>r9|XX6qD7wFg?VMAnMIOHIbKt+S)4Uc^vG{
z1+TUbHY%IeVol;%F`&xH`v((9HkUPWeLe93r}8`L3>Bv15|t!vwq5?)y`MZxj^&FP
zmm6xMybZ_Dl@&rX{qS4^Gs%L3zr$AtRzp^c<un5ulYWq0>o@iT=!M033{)4&9_koi
zSHm_%nmLGRM72Bz>xJRun1F+b_xT}pyB%DkK<_ZEn$ChF0S7UbJa-556V>GttuAKg
zofHZ^s0OwaBsio#WfX|Z|Fg#8DLS7WE0U<L?yHHV&fsCbPA7u?>je}i_GwVqC6$Nh
z$c^HM<m#oWY||yQl#ZPBhP4=E%DLh^KpqkMWs)BYuIViF@Fq~(WMl~za(Dcb$yl4(
zo+(4K6u$JsP?9eHC7%p{@dZJ`jHSRHxaf54&IlQ`)!j%8uFS@1fUZxI*9GhTrkt4i
zM<OXGgM`k0F&8N{a|R`rd<aY?#BE5#iu6a6lW*8P7vdROs)(?&l>s563Kt%FAncop
zh-u@We5nQ{Dgp3@1xW?(FrRqU@chV$Fl@L4@@27cu>nNzu#pD9d&!fpn6D)v%7QHR
zK3!VWKxz1^CQ2hu-p#XOa+LT)^5Cn6nu~WYUQS%kXqChtN$u-%<n2nO1a^NK{hC=y
zvoh)wb{jjZ^tYOIb8)_@0c(*1OXfHnSbv$0wipRW2$o55)vISoI|xb@G3m^nG6Wa@
zuSE!n5E}AhtcVx@@Kv3g6ev^y|IOXQy>Y2r<(D&SmQlXmB<e(~GbtwnM)gL6gPfCz
z$P*WdtN~%V$3X;MB83|-?<Nor=6@i|6Tf_DFS)dEMpj&){^QYpKJXDo1=C+Ac>ZAt
zfjV=|UJrhBIk7>Dbz`ZIBD#!Ox<L>_y!xv7plnr5F2NW;?c<MOiNUz$pMascWg$ah
z85_eRxlc(ZG*vZ}$5I<jRfRFzOM8!ePLFOQ5+<H3q=l}Fol3~6p%p)eFTPWe2R_Wi
z)cnxR#MDRKpWzILw^Z8YIKxZ|Tg#IS@P&StZ0K!vv}H}eT~krcM&0!y1y><zbsy>f
zrZy2wmqh^x5g-0hwXF<F=jtDHnQC^R{<77Mr}Sf62o06_S$@z<WuP2@TrA$0<F7zU
z2$9sl@PXt@hc~=AJ?NsHsSrW?2scT`pJ7MzQcQMJ-%f}!!GPPR7TYAA;F=Pliw+H}
z_J8gz+r<F|4kBRJPGG@)cKv^;B3gK*Ja^jZ<+A~`kBNFt=5V2g-1llxcl%M$KTroA
z75Mf5=>fBA%zhbz%&&j>A=+{{%cy)F44kyN-w*7k{OH+Eb4Y5bJa7?t{a0rj-syCd
z2-4eCIEcDvf$e7uO#1`nYbg>rB?{r6-`mQgsVGoxKIk#xA!vM@V0R2ZUMJQppe1Ta
zZuWsB=Sb6*_;SgEk0Sm6+rxRw+x<GZ#tlk^<JdIU0+(F;9^+dsT%;O@G~SH0wik4_
z3@ZNvz2ts|kpY>dMqQe)lvr24+|>&bFPNq1-qu=hxXD3&6FG53<%IH<4E7R1fdMuc
zKUu2)(TZ*&F8Cxim|<H#G@^EEMJW3a4@y9n?y`8bFd$h!i`Hl9tOOdq1!)gq_T6?#
zq}H{FgSgH137R2#0PUHMLcV@^q5SNqdWw>T*2^VD=8hBPF;(m^EoPNI{`qwSH4vul
z-A$Sur@W**+dLj0GQ-bsXykH9Y)jFRDQnHj$?C_+IGM^JXklC`B@C<pDtdmz&NC25
zc*mt`(n@+iyiRq{^9}aLTP}jGMtA+>6MD88`nl*RIs6(?yM0Mp+q#5h0X7t4o_#?A
zrBU(@lu-`XNr<*JIu*^?NCNYEA(&ajLQ_~WO?R9+`ENoI4KUjxrI}=xnvJ)V5^Uj4
zFkkE%#M3^U^{cy1!E=!?@QaZ|(;=Y9F)r2nuU?AdrqP^bui;U;ykoz&oCnWZ!7mF8
zXN0GNp@L2!C*^grGOyx`sIi!7G;Ek>)=BO@xSQO)atyaoxN1*CUk&cMyW3Mf1&bXt
zB34ANE#+$woE@-5;y^?{7q<`V$Jskn0=2~rQeiG7_5%>OBK`xAvnq2ozZ@Xid7-r<
z+xWPw=V;cLR0Nsn2!>b|wuCWvTq%u7R$X_4;I&1?kQz4C%HwHBG4QbTEXzV{j=6GK
zmi8)py|Hvd23>eU{fbj<Nifn~$}k>X9<lLdt|XjDv_~Cn{ZaRhxl?3amyX8Q5MzxP
znZ2ddQFq_K++ok5k-xu!VjYOoRNs?=Q{l-EBu`x=5nqQKPH5O1?ur|K(MU)8l4k%T
zxT*GF;CHsD3&y|3=Dnmi6EPiiAviO>Z-ek%lzjv}J34DXd?pDuWS1C0`KpNR)=JVp
z6YHXb+tbYV)uPO#RQ;}6?g&C=3+|S*lN6^2<pCEOdR1L&vK)hn76W*VG^>tefN-Le
zfZ>;Q<;5xd1c_lT`DK8wRKQa>?1I#;%kH@IsqiAe(<C5KOD^n68+ZOzRLbDxy+>3+
zB~k$IC_~M2L3~J*{?;jY(2ZU-DP-RH*Xv`Cw=0QuYdRSPK3P^BC+RxxlVurK(}
zGN&Tshzqvh&>6Uo7y}Tm2bGAVN`wt1M3L@xQ~0d(4M*^7+acSjW*o^>*=>1o)u!BV
z&e_xi-Z<)N0Xu-`^j7KH%tGI?uq@dz&Si13AW!{R0G6-GQOJzGt^-dUKuAcao3w`z
zI>Jfj(a=%NO_@A@M2=q&Om`A>wp;7W1>jy(bJX}}(oeZ{4g-v54D%yIoeAQ!?F|lE
zABf^VR1lTMs9fU>8K{liOm3IBL&Nb!qg%O1WYPQ6_NHJd+EechBY5QVlwdM-8WY!6
zi+_OruAauMg-~lH_pc<3`zg3L-(T6DBasSS?)>DGEwH%rLK;((@qkW3nA%|}iu7F*
z+A3{kNmbX%{}<qeiXA^b-F(xgFXYa-B7fqnu;(NU2~(y;K0_TbQhbS|HZESpNP4#<
z5^XTVHFSvQ?-9T9^I0i4IBJAHH3XhJdG@4$UbTOLo?y=u8hXH?iy5l6+)jcsp$g`2
zS=Jzr5LQ9=7FhM@j5&$vQlnI@o$SdI)yv%yN<1xk?3(6;#@Lz)=eT1zr|AY+D3WSH
ztfcb^I1=?tsFICv3l>l7S#&0x!08>Zd<Zjad~thy+H!+BOdm#;KRn}fsR}+tcfmE?
zb<viS`qTItBjt7DU$<sROj_Ij+22wBhZ(@i!tp<(EzbXkSwCL*o&sq6spYUP5w~ex
z<qcu1FM;-}*NHGXj!r8gkuJI)`%2;(@)T+X>&cW&8{Pct-9%R_@X{zeO*e?N0vcKO
z2Z6q~+jg|W?6kw~XZY8ox;c>XVJH7le?Rrx>GSsVd?<Q8V{MS8sQ+bQLhBinzc`L9
zE%O%xuF+(*y7^S)>m9JLwc|xR`ULqW!U*2mfnCt!^YkKIzgiD)WR%{7mQ#BN$B6V8
zmL!E~Jh?#X>S%p`sU~CuURFMo&Vo?n_XzdhZ{xoLe@7&qU^0HWzg!kSx1l2_E%tZm
z{Pnuf$BfKX9}K=?(D(M-QRtHs#a0-5S7-^1J4)dAx5l%!?*VqI)Kl)@igvtDmg{CN
z|K#G*Q!BK89C8{*l9Oa^_oa_1*lg@AX&eEdmT<FJjN@=zbKELAoYz$pIMyZ^(t3JX
zAFeN-o_LQNE74t<bM=H<ZC`)iA28k>Uglo9GXHko(=I%4@O#bTs@N)ytqa&1SGOo!
z>34V>kxOjraR4y6x>NZ+^x}!0Ujq>21%?U$v#^_S10AFD0ir2R5xmv=z?e(5AmoMo
z1x|uAZcqOUB)e3*hRdbgG&9DCJm-`%+`oE9WQsV|*GvyH+`d4Go4|?E0yZr{)5Bc{
zL3a=EGfbA$u}km9)4|+qHyIWLb29wrJNrGP9$c7zwphZTCmbto1?gx0O*QkU)Q2^3
z&gZ#R3Anf@W(I8lN&=UmM8Gciq9zp8K$-%@^W;dk2L2#}9e=xu5c6Yo3*mk$p?8C)
zD+nx}`J{L3^KKgP$s1$NC$vD&6}@HKKm=#ra|itd9c8H|hqyGl`Wp@@RfhMv(^z^5
z84a>WF95ltM(fCP|1j-!A;|b~iWi}sFWvrN2DFEi86{A9MF^A3uZZzTwMR(D$>*Hx
zx(H|S{c@{6-L0+Qpvun8bV&!Eg7=z~R*Rne*{FTZ2MMI&sS?b(RvFsWj`Y8EEcos0
zUM$-zDwX6&kSi8-(f1;CbKpJ7zNh=ag?{@;2jan+Qf~Ar6BH-MzOFWPkvJpfBw#Ne
zEroi~mUkxyLjS#^1yE0NoGC6-i#=wowqtnGD*nXzY%cZ3t-Zqy$9d^j$##%2kvme|
z!CAkc-K(A?L!$WJBwYx-S~YjfSjE<2DL(EYu61mg2w~znL2w~@+Pe@o2;aPqoo`&F
zfoaFf33oR_-3?er7KspjLOzAt`_m&^ourE^Z+ICIMW~@}a+^GGNxxj9g-VW|bm30F
z91piX@Ez%C^R`tIs^Q>&K(0gydYZ~i$Ztln!}ptcSDj*!80rM*;6?}N*=kj2^JU~<
zJMOH51Ms~I&c_U9=?l(+k7qxhG$5&h0R}t-s00Jt7IdCD>n}IX$GuIr^ewE0k!y+@
zI&JMFf<It>zo09nYV_N6(VPZKq!hMZxkRu-e2Y~)Lw}@OIYq=lCa8{51ZSmm4x=Ac
z=`-Y`Xr@BUGPtCd*o`W2H;XPs^+bWdC8{4&k0Gq~LOck?YMI?3@R0GGZ1Ci!0A}Cn
zApg|B{{h`+^+74Jf~J5W(IkfQnYedcm=vM&--Z~S3wEaDvZB?3%z@RO6AP2hMOR>j
zuuUVi`^jYIZ1U^#a27<f#Mq81Xcy}zw0b+lnsUzWpauCX)qS?fRjSW8M?3Rswdfg4
zNREEJEa(96SJp0Jj1*-1uogt90Z=<RVovf8wNnW{0QrRCZ>Uj@Y%Xb0!F&WY|DmHB
zc!tJhy6R4d0-4mi{1>_!d%OQ+My?%q&(J3hPF15_R6~ruG1S?V7##U3*_cTSYDsBc
z>v!M6yhS9O*q8k>#<)2g@}uYHgNY$#(vlBTjRN>&c!4&zw*Rny0S+peBmj-1RXd$(
zixJhoF*?*CfzKltmyo8$ltpmq;s&{1b<NaOYGjLJQny4s1S6~#HcOc06-kG=oHjyc
zpNSkzLYe+2Pb>EP>hAJ&N~y5mw9{Z(+a&%5)RSN(V#0)XR&G(zkHQ0!%>WMJchHu@
zdC7ow3=F?wcw*|Y|F!j_4A3Bx8ZxX~r!EN=yX;wA3tJko7qnfiFp3fgVeZcc^2og#
zf|=nHj~mtl9=oM(ndex5rP7K&+eGRLl_gp98hJa5yr$BD*rR7DiOoEFnNQsE3P}Ne
z;gh3KDe^W71y8rOT=D1xFDPWyU+S;>%@!&bCR}J!42H`wDmpC23Ybumgd8_JWpY;b
zSq_6B))r+W!GX-$OQq)PIOVxf4lsV-c=(dU&QV6MWc{YbWD}7201quA1a3=VXwRT~
z6yQUTS6jF-Sg@oKHv6gnrpD{+3oaZ)UMa<y6f3h9<QXpW4M{CZcBnX+Qwef)R21ik
zD}{@K2B&T*t#vkI0r1=`CPL~Qr_6c$TP0I@z|bjK>e=B|$0eE)pR_ha+|TwG+?-4H
zN(Ua32ZrR%)mlCYp8`~znGPErRNScLn@BeIPqR3udpV;6Y57JFq)PD|qyfTYUdaHz
z)58~Op~^XCm!BQ&l5394FVt6^TNLUvNC!Ktn9xwiN%*c~9{|SzJy?`PY}vrLqloL_
zM&H%e`4a0>vcbuZ2bI%d@*00QjVPMa;=yXR((KRoQ!m5VZ;8s76`68=9(<OC3E*SC
z4$>~eKyD6nmT{`>N!SDVEp^AN>?g$t<WvR~ENDvBIJB;2IQOmqgVXG{_iWLyRCq~p
z5u_gB+`_{WasX$H*-BS%i^6z9t(MrR^Sfq634sGAm>v{tzs|Krs#1V<=ns2{zvI0x
zH~bFX+9r9(`b1kt7DL1sPK`ksUaC46j6^VcARB>eq|dgJq1UyQWCVR*)}pz+V+n+q
zKn#zw@p>AmgN|R!Vtov!Fd_{TWa++KGN}YelB(+d84zIRhY7xon4dUbT(waBR%?^|
zA*fBK-_ij?Y<8}pyOEz7j%c78Oz<a~A7`iIa!%y+nS?Ck>5F`lZ+i{|Ti#RTRw9t=
z?zB&#`s@>~!^g*I;eDwEc2j8p6l8t5&z*-JY=P_zCDp*lRI_CkNgWlH7kQlENGgLb
zNW9ha8&GM5iE3b*K_adVp;A9jvS#ICQToHvrS4|v^XklPjh=LY1=SQ4jaI{GJmO|9
zoU>Z+v$z=nahSd+G7NuKqFhZ%8<ko;a=5_txM|G!d*BIMV8bvwiP0iBHX_(;nJ$C>
z6Zoidq*p&$?_L#OVp3)7bFR&j9WBX>$`JBbH-HvFA-+QD!?qkX8kl~ih4GP{lkh9f
zt%l|a1l8UckvrT@J$w;Eeh&@yH|K@2lN6QNSUaA9-ZV8;h;)!9!pLRHELj;so>oMa
zI6b-ZSc#)}fa9n(=xM?C|HaljMOOlK+q$uB+cqn<S+Q+fE4EQ9ww;P?+p5^Mlgh3C
zoVL$yx9$Bh-{;GiV~){#|Ez1TE<tLDLD&!8e+&@>;XXka!tsEijd;>1$wSl{<d`rF
z^&<kfYg3+^V#B~_cf((?sPZ?n+?2yPAF=al&;N0r)PINaR}%{tbK)3iq=lO?T6P9(
zUyHqg1u(meWqX=(%bhWR+6=o+5o3D`O?Aimknrz`zgzXEZSI}@MppzO?gzHPr9-$J
zT}Ggv>=*3b9iHshlIjr2MU~@c`J*_wbgcsrs)V7<2DMevYGFT5G`Car8zfCQaa}>_
z>w6ymF7ABB)C(-~?4xQC^9Zb^BvK~Ma$Q)qeyo*)`G5r7aUeN7caFvJj8+5I+P39^
zc%?(>j-%W_cEaIS839W!BxLK9`FsVL(1(5MMJm@xxz>bL^Qo!YJm?@e9(XB233q^e
z-7T+VB-o7wvi?NoE}xPgtq4f;D>-vm2rQF}=~ao+(5k98N{VPy$l9L>TSt?$kws?;
zx^F^hBp9eodt$-TM^O@xWgn=?hMf^m(AD4(aSQZ9ecT$5Wzke91(z9i;)Gf;*J-at
z#h-kGF3N<R_HH!RikK;AjTGsym!5zM>T<kc7Ih6D;Yp9S;RaZkueE)fQ7#kEqf?-<
z)^G`mR#@B4$gLcXML%irI}$^@@X>C+%boYUWG1x8FJ*%YB&;Zzn)$}-TuA&NZq`qA
z-2MQ0Mm-Wg1WcboLR$UoAJ@H@)Rj&4w$+weZdX4tV;j_Scr4uU1IO%-^{fHQ>uZ3h
zb)rx;KLUB(vp?^dE5=OeS*553D~S0Q;=Fw}O9y0~<LWpPFzOsp1#;;Vt|r}92@+o@
zGHw!D@n^0s$ik^pyce09PY*`^iM%fM$P4C?B4{}jtn1^IjUEX@+2#$`tBI&PwK0|a
zOyJ{Be%SUXIQl+*>~<RSE&YH)dk0R8X_d`%z1&l^0BXvXkDG+y#&xNK;<t@<B_r2q
z%4LN9MyG6JD94c*q~h%G<RS*xWYR+9Ng^hDG286S6nwO)?zMr$(|I0f8j1whKa7Q<
z;tp?RrQ$^6r)o)|XL<xSYGQeK-pZ4CMq<F=VEU2C!l5%by?)}LMP<MnqM5sxuUEde
z=b|V=B$!$Iglg;xOqgP3sdt~Di+_zqbo}MK3jD-ER-<{RT)xby@c?-6EIGF~2QnJ@
zl1J;Ny(rmqPQJqYD1LGheDwOs(pdjx^uodv<BCKRRW0rKg-rVlmX`_2HOX5x_k4i2
zN4u<LdrYI2F#Vh)_5~mS3Li283{A#4h-C;)jt)U1rP^*mgnQ`3Og@YH=yVFiJp6#A
z23-b_5>LzNF(;-7WfQUM&oQonAaT?aI1-g|adE{;<OpTB@`cPysVOGm3Q@`;w@g*9
z_YlY^?LUAeuXx-@DjfhJam1<?Z7}2dGvuGQgTI$A`;Eurr#2ul--e<4^N|!vfer=B
zko10^L9M2h?ILe_gDhFqNK;ga?97}9CeiymAF>ZY6l#bSM;^NwM&mA?d5=NVSo$WM
z*u)RhNM#2B3&D!>I&mQP0?BA?@&K(XQrZ-yl5s;VYskR<n$<DFVF-2q4{IB;y12#T
zXD(@W2;SklmO5bcqU;Y=NY(Um1P|@032V!8ha2ul(sWnv=abrmHmKrOm(uU6!qjp$
zkoI)EOVFv!R~^dum#(ga*D{&;o%JBoH*zr7ly{1!&K{2gscn0GV5G786$Eb<f}ly$
za{z+PL0O>JzbsUoEip7Z^gkm8kgrXB(@3DAW+s^Sp+Eo#MC(Naj7?(EepQCZLBl}c
z?;`Wl8&q;kpwC8J*RDgTr>e&3YG(ta{0Hf8VNsL|uwfSkmXP7+i0+YPU--HxL>lfu
z;QD@uIT%%}qcMmCi_$-fl8k^|zhGSX@sbe|R-F6kAVw##cydb9Oqfp8qRy29o{y;m
zM@6FOKYEWIRf6gd6=qg8@fB(;2yUj1NKq6cDDdchLhgjl<A6}AwFGIr+*5%@PFfV}
zk0%eIQYc6#>6|iUr401xYo|@9HTGBqUAQzo7*WY2_#+TGv;L+z%q{ua=^bi@dT-@N
zO{H{37ONBK*s(HB-K$K<m8%Dw#+vxopC5HF-%EfJ$9vs-+GJL#F_uSrI)X}k9dXrN
zf!dXHQ?dQ;+ynVuLuXj=TrWVD<ZCqS^$q;{KpaRB?RMx(+Z5qgg#FxfAc0t>t-2u8
zLQ^x+Liv%BEq-4TXPQGEw4GR=JNzcj1Gm<DAd5VcUd8<MiA=G#L8-p|GY_!;E~TG!
z4iT`Y%*L2b$3xd@78DW+m-n3u7vlTE$x4xY_R-cy@H3EeUB<nulCU};`jb?}H_O9q
z&@3(b=N;!{6}{n!*{*wgV;ACb#aZO1yH4K@c+$hYqjU1I2(?B0viEZYRHMEUvu0Tf
z$b!G@t{*sz+=sBNn8{dQ1<W&1v?>{9dLRH>YPTICW;r|4YT!}rFBDy7&vz!=1y4io
zE-6@KwBYAsOnVV!fdIZol#q7F9_Q=<M$s&fg^8Q_lsIs?7xR=`QXkZrf7P-wnqR<v
ztp1O4S}FD)PhYk0!*D-&-dF(&QnXAVn!ZBx=?sIviZiX(VL8f;j_*)K5r*SSg2Dh7
zZK%@W$!jR;3j{RGM|4{AVd=&&b$8d+H3l_*@rxhT>ZDU*WN5L*TSrM(VQQ?UQLKqa
zcB}~qeQyu-uSH~-l$B#9bmXQ9ACX|ZfGGfBQ>4s*Ygjrd#xXMgw}i<p!iz%D&vv`z
zpqTw^)S%ONiNp=*=k(u1g>xqwS2ut=z8}!rFdUU6ik)AHGZw?ecDKUiOXlGp!rqL0
zok@{mur1WR%pJ6q*;COlWcS!Pn5t@%Npzv4?q*?Zi?4^h>L)36zI6WCna<QrOjImH
zA79SzJd($CROn|O`ZnV9yJfDQyT3@~I(m@mxo@EIK4tp^!a~$u{m~~SLe2p%CR=<^
zC@UBX|DKRklS)0X{xjRcqgFY(l*1OCuTbTWvd|3-RZoU<O)6Gk)@`As{&g<^OqQ1^
z|NpN9_y@`4;QlXW3<o#of2-HI{}*#2_kY3@RhcENQ`$fY0nJ*Q4){`N)9gtJIER#6
z^>zw7oy6w4F)+5q-Dv+DkUqF7<j!cxVzUV3G#?MTTl)I!2(<PD!dOON!#zt!OBIWs
zI;pYP=C6aZM;6cS&&|8@zl45e?GKuGc+{xxWpEFao7}O;;d|`~xK`GyHZEYsOkWae
zPSwA}7+MUl0`|hfe#U&PcUCb2=V{X2sqnFd470xvsMcm{+p~z6vyDca^-k=y*nz5S
zwqC5*SQ;aa?*&y=3a?l_t|gjnrmM~UFf&>uh<HHv9Vu$r<EH5dZZW-aZQACk7W*dH
z((VVVPTewc%EgYUEMR{z&WkD^$JfRI8>O2^nSb8{p!oi+Ytz#|&C&UXZl2@Lfrs|F
z-=SFNKM!{{Z^7@BUapI0r0Mm%lY;Acv#yC%%}w7}UB0}OUa*Ufk)=CTCmjO9z~-(g
z=pWE2mJ`1Ytu!4gEjI0l)vRT;kYA=r6K0H&fL9i+wGmzs;Wu$j07hUityp_CRMTB@
zAV>8+fbtJpt=^1MPT_GpFD(*$zZlu4Z5DbxS>lOazxlR^6Ip=gTOcl*MvQfMKCBt-
zX{~^$aza#>V}gCByDaZxI5FxUhXl=Q->FuXK--c8FsE>^w(hT313Kf1Jwd3=;lfw!
zrgr%+0nI7Q0WBgvoafD3SozyM7Y`5bp9ot$fZUufz1#J5rM+HcL&1U3qq6<Z^<ncL
zCmi|&&#tBL#&Q}ixYx#_5(BTk6WNa&7CW<!SVBWA0td+(o~~f*FPs(?sRMqxv>MB-
zGXVZ=JZ2EOM%82Za4ghQOwxLt7sluGJrB2=5Bs>JQ`IAIx?*<dzw)}rn>Hh1NEF(_
zfU~~d)+$_Nd88|B5-?t`b_?dWiZr;t-R*fB!BWrxOn)Da$jD%iQ(W2&x&8sgp<$-t
zLSLI~$RM3(r=+>7jDAnOJO6Tb->D^654HGHZl|<_UnS*9su5T~tu?+l96x63Db`rA
zvaYH0@-ltnZsLdoTRS!7Wr&E0DzL|>3Lxi*Tn(ohU`pWLYg9u`7AEyG+i0-%;xb+&
zXls}6nWZdN>_?bMZIj!qc_wqL>x^iTE5bd_#eBQx&?VG6io6VeZ@6YD7~mC?=?~RW
zB3jbt<hbH0#ltISnDo0<W3NuW4|GZ6;=Vod*RNTf<vEo-X$;|c1qYqmz0tf101z%R
z^47DKoLr0hjSjJ7EGGW;v)G(Z=jO=D9L02Lf!bnaB-Yx^6YA2^%4=1W^y7{9N=KN)
zlLJ3MJEaGP4}_|@DsqiduDyWsK@jBhgR|L0R6|W4S3uC_7#%IlTiFKKq7ll~13$g^
z*2ldd)lKVY`zyA+`S`^a-zc&?0X%DA`DeFfloH8oeuZAYrXA9Dp>yfgj(r_=mM>XJ
z;k;tiD%<+AK2H~`+>?{f9|NsG7*L&NnH?N<s4GZG6+}!G!Us&2A8C+d3lw*jFrPto
zH8-+rdOAiotV$`9q#qLDuDes}sGdh_N4(;QH=Sbc@Z{{ZO2FHXf80P30@x3KX@YRG
zveCOyh3BVDkJ^0fbV4Xbilkx;s+myNne(>H`Oi=;jjH<7WGE)GTx}`{R14EkQq~y9
zJW`uwmgGC*LA&JFf);)__o;iGxo*6Cm1EYBhnB%fu&B+I9l=d*Hjnjh9fk!QYL}bp
zd3)H4gLX*Jy@qOYL(fmP0YCz!GwNZ|qG6#!ZJr`lv8;HDU|V9StAmo)^EzbV@N4HG
zg=e6nrB{X5NLWtDezc!bjU4Eca2R{+;;wR^NZ+HV3BKm(n(3kb15kQ__}j|iCGLve
z?>d#w@}f9d4f8SpkCi=@(l0q1sK03A?57$=a;xp;AI1tH`YP_Z0Kuu;BS<)?qF<<&
z`A%{EKfA715%0^7ApkzUF4ysSH0VfIl~<;54>MkTPZ&{P>$H#K3fqX<qZ@aWkfAz6
zb)kY+&TU$!!ZP;vF7HQfRz-G^u?q5fj#d1Afde%7m~v^*7t)OWTbyI1B)Sw&e8Y4j
zT1r;==&{L3#JNjHfHrPRaTxZ>?vF3F&WaMhr}Z|6>yFCFIbcgR(vR@A-|=8#r1r&B
z-3ztO$w56D9C&%Zn^Il6gpyE|1*#{tuOfURn(0K4!K;r+CDWYxBxQiypT2T+7{jFP
zsm)bN|M0D1BIg{Om&?PW2{ffmoa?rqQG1DCb%I}^uj(5q0O|7$L^64F;c$<}%UsU}
z59(YL)%Dk<dA&Cl?45I1Qch{?+5rIu7SbQ2zer*?5Mvk-?Qq0Xf>Q_Bxk}Xi<Ya})
zT;v?bn%aCwEv~cSS?Q5ktGNBRyomrLLB0c=q{k1lc~Sk+c)jYa3Tdy`OLcH7qlTE<
ze4)3t#^cDMfYTR#J2KKU%d!sL+Nz#W6Bld)$2~-FDJs4c>gYFGAewsg!CQG2w&Bsp
zuvQu*L-&y_wn6)D^Y6f=$F*T&w+U+I{mGAM|NBhHg*=|&gz?Whkny(ih#fu<)Bwl_
zweN3)c%$aXUVpUsC0GLeRnHHoonI{M1X1<h+|mPTGFgix#;Jw3FG7cGregogv;JR6
z$E>_;{~bTY{l8fDfljcXQ~-teZlqvgl+X{~XvPL@$D40i6bQ6n+4uoGQ)AKo4{n!}
zq;y)Uj5mu$d?$)sm33g6y&bshy7463PotA40<T9&9LT-t0C2Dcf*KHdP8Von^Dxh{
z+jZ}fzupq3u_zx@U0Tj(6TViZFg8&W$>Wf;u?4&3yl){rajQK!Wq<%XQ)@;zCR*T;
zR#}+j$x}o5aX>kHEvCzXzJus0g<b)9oh#4dvU;gwu^8Gt&qJ&V`fh(=&+#u2*8h2V
zp8twQX651ee}+7s|HY8U^B)!Df44N+|0IrMsMC#!2`JCQ*jfb7-T2=3jN>3#L(Wi<
z#850eXpGK`QEW2n{CBfu@2bni#dnv2)zG&f0%o4>%l`tpq79GD`;SY$WqN^~>%es&
zFTCxmZF^R4M}~g4rq9fzsBP^Dcb>%^B$sDxy-O`5Geq@`g_5CT<)E_XEWjZkqy0Ba
zOVjP2X`AO%+Fp+*gL+=zE%e~0AiSRysd3ruZZDEpqwQZ!M1{_q1OCj}42ICqo!fY}
zzf)OxU%8OJ&t_ES#%Ua9`4`;)*j&xny*;tjcZnG|(ro#ds)L0*)Pz7O{k>fewsiCU
zYSs2PFau}49|4UOgGA>2&47Wy^V<%3gaf?Q@KSgsHZ>mlxlrIu?c#+-Ow;pp-RS_W
z%DyUQ?G(-riG-T-9_^cpwC|WuqYTvpsOfsx&U;apkgA9)=bT#G_M)5@WANi>RerGq
z4PzCI5?XDYt{1tM-TM6n)kY-?SW9R7)geM&@qXO+QG_?J!=zI_D1as-<3=MQDQlQ&
zNrP!bJz8u**?FCD9CkLmUUjQPG%Gg&a{KyF5%$0+0+$vGk^RkLZM+PBPa&PGiVH`V
zK&e184Jz5BO`hL~%fF2}8k1P7V0P~xq9S^`g6dL|Vo%7TlWX$OP&(&UbJw+{E%;t0
zapR1^BJQ8W2aNDu!~pPl51hf+49}bIx7Np=g~xya;XW2)qn}a-X;Q3vK9~hpA-0s6
zLgHpDB^X5UZO2Z0dmZZzDLYN12v@qX$ZhDV-g_cwu02(~1Zpd<@IbsP9wM~NHd5l+
zK)mORK#&5svs6lmA>|OpS`LPf*xxE==;E28TB3(N+9uJqiU8UG>;jY2gI`^0-@Jdq
z20wngHCc-rjq!&|=}V=vm%;kO(8D{TS65;lm(4UpNuQ>eW-FVVPdU*ma0@`Mt|GYY
zS6d}Iizf1K;NXISa3!;qRrLZcGD$~<M^)+NCo6SVBay|*2xt74J;V>|`4=&O&*+pb
zu9n8mybOW$WPqS;mw2jgPNI@9vh(&-Xl&0v&0oU1rEu=$9YJHMY<nli*Wr;_dRx~9
zo-Yx%Z5WWPqPh9g)B*)H8_(nYdSX`-NIju7cn$q*(_$#$ZAg(P(HSy-`Xbm;u1W-0
z?Zf)YxTbv?5vRx}L<bs$VvXEeYiNVdy9#4bbTz;H?*U}3y!Ai?0WMtz5-RLO`K)zN
zSbBu}doT@kCOT{;VnwLoJ)A+3FT5{fDacxh<vw*uS54&fxqN)8BUBeiItu04$YBrX
zO;xQ0oYA9p!8Id}-*L#lAOjicd2<n#eO{M5IunudeL_pm|Nd5b7Rx=*Ay$eA1u5H%
zP=Z#Hyaqhsj&R_nnZ<%_JL5$8XSJBcGt|8IY?lbjN`^wEpOyRInZ;Z5+CRJJB|>M$
zCt>RQ>N%>uVzy=HTtHJ+95QVlZm6nK>Mb*?I>{Px(azSYSXukHY5G$kQ9Y%Vt7OT?
zxf!#!-#UAe7^oQm$@MfmX@3=Aqb&Ay+;>3)F#u4hQ3I0FA*121RgfnOVUi44Oi3&;
z^^r@E>)|JPy7QSfuh})E)3$u~`uQ-O`qGOA?r2e~p#p}S;>*=9*s$9K!`F0&Xw5vw
z5s}364lPd?!vv*>BmE^#LuN>>Z2cJX;pedO_Y}5qbCIe@XgMklpfI_()e|eQWc(+X
zMF6!{xkqM*Ry)iW<wAkr6utREZnds7i8!~otd?{zyRfFG<2Lx5tY+DX#l$_v7Oo2M
zcBTobI$)4mWi_NxP_iuls*VOjpe8Xr)*^wH`_*2cy#09Z-D@8tMzqB@Aq#;!20>lH
zD$kJ<74t{B0)_FH?V@iEHdipge6rT9Cm@yPQ8MWs_BIUQqb2ObyauUXPD~f+IVH`a
zlnk?>z61h`7PL5LRTuB#_#&1I5!O#}cPQPK)Z3X`j1fs-TUHCX65?-P8U}RyPSMJ7
zMH`=dPOoIbP@E*zM6@WzLuyDsGNN#QXx3hCBUfK~FaSR<C>Vx@BUBEa47;Xy1+1vv
z3K706HHT2Ri^>hChTSXJPUMoKp}sKwfqn9c5{Xf<DeE{ia~PR34pcqO(z6IY=V{`%
zlKhp}wugpSoWEF9gdSq;a5+97kQ6UC96NR9*FIsaJ-bzx2T@E1j-<xxnG!x4FXNmj
zK;TI>f=1+%5kbcPHfQd^_u1A-0!Sq54&K&SlpEzBrhY2{9c$O)cT9Apq?1}-tLZ7>
z+m9`9k#`S0;ro4_S=Uxc`EzZ}D(szVinm%^roMv*r~H>34HB%#524R;^MOS30OZ{e
zn@FQTCz11ge7POhri)rWyG)WRtU%J8el!ZrCrvApe|br$=;Dgdxm0CHGysh>zBKI=
z18X%?-Qus*EAgZc6E>5F(9&_Qy_OKW9@`cL2x_O2dFrIJ0~vHh+t`#78FseIXOEvR
zleM4;ZbFcTA}l##JdZD5%2Fi=KS)bTe6nvVAm<gfX#$bKl5ItspxZEOk)y2(!O)mw
z(`3p;m_Sy-JO~}1CL8{B`2ZK&QLPtr7RjsQi_~lRIiBn17UGTrmseWKR@cxsM_A|r
zNVTO96DxM$DE>C3osJ~r@6tUj@66gnXtG7qX8qPa@+{@P{Fgb($>JVaPqmCQVg^is
z6$<5s6HG#TtHmK_wsZp3aIhrd*kCGhI+^p42c!yo2CO|w*r`!14ZsdZ6=;n_5evo#
z-z*0c5;L>y1=-aYE@C~A25$cX?8RFx1G(|m?&0EbN1KwI;yj62dyNm7vxu38j6*Z@
zL=9VtfyC3&EF3IutI`G8N^Cvr6Y0So1&jqZu3}HVsI?Z6D?!KC`!jBGB-3n=g^NKR
zlmhNEKD3^Cu!#;V6d)L;ktdE_Agm1m%&<dkO8E7pr<YLY@P`!PxWEjVoFaqRGSbkS
zqpU0>LF}lZgNSc5{#Bc-m{UH6Tyy7kO9UZeSgdj?C2E$2^2XEjb$uM+r08pE<_u#k
z>oNg(2G9A0B(ZbAcez%=`D8ICXn$D+XN78K1zhgQ38pIPC%|_KRh>wDgtJuknH=fF
zZ&_n;o%#<^^d>B_{8T}Y%HhD$vMoyGU3n|_17NmiO5)S5B{3`q98`?9$@R29A42;(
z=xX`t^8B6HmE_UK<7tOCOaE)@`{jJg_SOB%;&0jd=0*MNQJvG`tokb^5(C)hyXhzG
zU-mx{$ixnLBY@P9@Ug>d&kg6eu)$&oQF^9(YQoG1kt}vJ_!lKBv$}h&y1IzKrp15q
z9cWU^e7S;OqN@bCPeh7OW{;3J?nFL${^^6%%zo()rn&<gUQR^6$zNQ>?~1F4^6o_2
zlOY%}91^G1_MkFJWW9F5NnKk}p>!jC)N&PBzOdUrwE=cof}vD2vXJ$tCnaxU^To!f
zV~J9?K0HU;r(_dx2sGazSIOquscN02<@zvQ!Bu*mg${fk?qC#F%k5!toYEd^YYApv
zuZaZ2e$PXi9AgeZ(>qp!uY*U5(^+8;a(aK{2=*P5%)Tmf@t5U?lkzv5<s*LyF<O$+
zl)XrZ6#%sXK4-B3c;e65x&iN%x4Jw8B#1k#o6b<h1HYS-zhk{a9;9E!k24bFSptb0
z|6!^0|54Edd>#LpGfNCI`xT!c;PfY<M^EXw-R}G;%c@KxfXRZW*>&}D7F%fbMSx>b
zhS63LA>gA)AL(gM${>3q<+|_l1cKL@?iCEto$Me)Xn>cv^(jC=eAyLB*GQ{2=sKTi
zBqzHF;a=z)`n=~IINt(+PXB+pX2*ZSLpC1v|Mm{?{4d@ip8x9|y3*2h+~mRtc&VG)
zL@ToJLUp8pV^9ER&{{RCFlg~%A;^eo-bf}N7i%;WQY|)PRrS+d?Li1&5mq^Q&$-Di
z8U+Ev5Pop|zH_<d@j_5`*Z3Zu+_mT6>69Q#6lR+mAn71p!&VNYfgpg+RtAwkVT7iJ
z8CX13`Vz(QVTM5h)Kk2dSaI>R|4YfE>geLcrUfOHni3GkNEbr@4U_H|yvRB|2UhLO
zR$ZXL4AlFg>FWbtt(Hk?zzd#O$zpp@e-Vr&LXcN~YrB8g@o;!1fymojR7V~?#_(g5
z^L|$6Mjtww6QLmCgg=Gc$zTC18Ai&EwIiFA_*kCTZ>O>WaTK6vg+`$yiESFJ^JvuY
zX@aQ_n#+vxAj4O3-6LC!zh7N3Q9xNvo}BHou+ZS>URo8T0~?BUn87y6B!^K;r<cCm
zx@kH|WmhNp(=`7<K82T#&0o?IQSwn%ExlV5EyFtLom^KlVo;z6=35vQuZDWwHrU(l
zDpq$BD)s6B9Ssa8m090B+S4`2<k29=8Q2NLnu~rNmp<jLdLpSoPDNZchpl!p3(Fms
z;}?rA6%#+Asvy|nbVdEv$thq+^e(OA6>aTNZD)KLe}k+s+jf)Mc81a*`*(hI3aUzJ
z0XtK#AbJjyM^?;2a1XFxhq+o^p4v1dDlC4Aw^LOBs0xV`b=Nkd7JmsGpuZl+g_vE*
zON9CEl~{pVsEy?Pc7K!NPE;|Rv)pK<$oVC+a)`@*{|7a)wX8Ps#HPidjpS(n$rWMB
zdb3IoTRqnUc6a}|HOtE7%M}=woI8hg!J{GJ+-soaCkC4TD7&2;1U~8;(schA5&dBX
zuQE6QSbBMN^Fy<=Rv}IL*O(@D(qA-56RDmQTWb8sJJ#nTwAnFqw_UQjxxnrSWbiMX
z)4KMa`<Q{6tkb)Ov2$5v=^ru=R3Qni{@9)qw)8tcMP?&8R2=A$Klrp>7F$zurBJ}W
ze$K)Ax?-4#vkULkTfFycPCt(<XExtT;jnrE(51IY4U!(2Sa;9IqCl&MMx<8G6E4(j
zU#Tcq*uW)Wt3$ikMnb(AYO}f0IC{PoMBh+NSS$>7U~FKHzc&yS>T4OMVRhkI$fGgi
zLQh85Fnl*5&t-RmSj})Yq~s8O<-B`F3c@*lfLwq`zhF+2CO+F*hgcEv7W$sQ^gXfz
z_P61VGTzUX<N1{xl-=yK{Sav!sZXS}cbci7&Q=_@wqbQnt>UUXZd9V@0UOm9xyzZ{
z)#b>m-1>=+6RI&ED%yxF$UiaMGb!pipZs*}^vaqqCT1GBh?@%<i_^Dx?c!lb1I1QK
zG`P85jaO+nuy9^+Q&+UBn6D-__<vRc{4$Cw`StnW$d>TYeCQ@?T*wulY$VqN<64??
z@YvAnHQs4uW^Jx-Q`QZayKN7*O-<{Be8?1BvSKW=vu8S51=^cH*9QkJEMA<J#A8As
zNcwyFf7oa!2Tc7q|7})(bSwlQ+S2p7QtH70z3aMYHu0#v(k=JXvG8uF$g-FRcvdy;
zQAB$>4##oeJM<R*!}WMPb)F5@5MVl>N{l{t;MW1pU|7W_q@IuAdl4OruNW$#)nlOe
z1v-BVwcm8}j;y;h&vDE{8p@Se%4WD<IHp-brM8q9*)V(_t6elkQQImI{_(rthi>{?
zA+mK?qK#$TJ;(7FaJ#*dY3>ebna|jG>7d=+csZ$xm2qYM*FVd;l`!*$dy4%$Q6Cw0
z>oKER+GJC6dT??>!Q>nG^g??vN%QJ%6z~mV@3~O+zYIA3ORvnz&i>zeW#Bv=C^{Gi
z?|<^dDFIhn`u{1q{{Oe=mdZpI(;$Gi_<&+n4=yaxunbA$E6Z0){KAN$%lvv*F^t8e
zYq(#o72Aa-Jv=(<J|QA9IGzXs;jMpfHf+eyQ>Z0SPjDx0aNcI3elQg!Abv$)-)ESm
zo(4O772F-V(}N@N{FOCMR0tCCb+m&%1qyg>D69FkXXfba^|;x87hz)(5c}Ffk1Z+;
z<A8`NUW58bSX+}mNneHgOgs0%!+v=-zwvy+FczX<er>Xge%&e<E$6MD;1g)F5y!Op
z8&90TsW`=2VOS^JoMF%=+KUf<)xJ!J+TS;cN;W`cc?iK9LO5p+L1g#9$A_;D$N>QK
zW?lL#7CC)Kz<Pl0Q6(;KbD)Thl&NOtgsUE|X6Rhi(d|fF;Tl8n9MyPdV9ZM_NJes&
zmuI0~kkl1;fQF2Gsh4xR`^ADuvMk(@f{Y*dna9-yfO+~xEglZE2*s#5YjcQ@UV{M(
z?B}8{rX?$Xpp`Km@;N2E5t5hw<OOJc2(?V|3Qw&v2ou5|FIMQ68PWxs6O~iRPJr}R
zS6%L34H%H7bfBnYF5!D;jz&K3cf~kloR3L5aeH7u&m*e+n7)N8Mx7Z7Y?Mf?F&EsO
zUV373M7+<D8oLpImucrsX}_WnsI!L^<|d7DOBq&`$pX{WHR)@(D^%T-`voWy#cIAo
zFjdg}0arAbz$F=iD<M-{Na9d~8@@GkLc(NTrkX1?H6EK>t^UxY{@%FZNF&9G`8a_Z
z<nOv?4b!0JHI%_)|MoX~AVqt?bl<l+QlRMel#T4UDIZA)3E~Om&7~l>=o)@Z(>I~3
z-tP({8+v?oX3pT~g7?VQ@($3`?iY8NMfdiu<DYWz@trnv_Dyayd9eET;%8rO@ApP=
zK@%iHd}{O&NNs!En6?|M_%sU~8op}MuT0bSobAf^Lu#v8ge&dMLM~l--u#{qfw3p1
zG>x}aYc}HVf1JZic}5G5G`jsRYbDgeV+;Z5Sz0KfQl+JbVdCd#1{45Lbv?qO8A#=#
zQLX0ML%Iq{;NG+8M*}v+jgN?K&<btgxhb}@CQUwcto$p?uFzDluc#=-d;xOo8r#?2
zyI|!d@=Jr^d>q$iE-bn7R2=HUjE9JvO(qj&{m89o$urOZ<LYZmQ{bRjX(<KkP;i-k
zQwj08hw6mqsLpduG!Kxe_RMyg6^j?#rxG`z17+;0A4@V8=e#rS?Hl%pYxl#BFt*0U
z3e_{ngSBvXx<^+T&Gly&LaHaFPgWy}Ch+(*TzT|br12^0npSX~aMT5+t$OtbnPy0!
zR0E5eZrc?PgVIP1w)wYWFCw8yAK|d_o%o@6uUb!#1ND`<lQBT<L#zeKyr7WclnCVu
zzw*i8`vWIgMfsF6#3lfZ@`0)PufL$yvBIsnFijBvDwJ7Tbdv)pfqOA@{tCMYY^u1g
z2NwJ@a|ktU)-DZ3MThoR`>dgyZVgNwp|H%17-31aW0ZmkT=7`(^*a;Z)wyh@i=HCc
zJ7qo03G#@|C}@`{_yv+&C8_O{n+rMxF~)!M>E!->>(qa=0=X{4SZ+M;sx}mamOJ?>
ze*c0WR9?9MpJk5szjo8C|B$HvZ;%UQ<pf0s=iuc^X#k}FENlPULyx0Qvo{d4j>%CN
zub+QFdPgzBYm?d59Z(WbO!lP{#t%pFvZL`n>VV$gRP?w=7UN9NLutX+2j=!<*Yden
zR=NX?#o6ot12=_4TXENH`y=~xg);_<Qox(Y83eXu*<1yo_)oB8)S#ro3==Tp9EFQ{
z-2O+ucV;a>-<wg8MkF3oOzFe?`m!hUwqo7RdQ>oJZ6pG5q_9V#2?YzQ@ohxw;`qh5
zkU`rSjy09_D_hRz?XeVqpr2~dDc5Wxm%CJwbWoeC^j5cH9UJID*FQFA_x^Qy>8d+D
z`^{1qC>-Opc6mw09PRQ}Ky!}luH9PovHo^BRZ9SHEiRs;!jBLz@|owlm=Rftq#GV&
z%CgYk;yC&fu!rG*bo^i#Ez#rh09|I_M|abUn1ah|l4ZX6=h6YZlVNhio})CKj0}Wc
zBwdJprPMx}tzbCapHioF7KPcgjODs;>g4ErbL&k>;*wi7G0H^RbUxzK%&t}cH-$ox
z(y%*V6Oq+=;pHQR6_aRD3$A!~r>?^gxbu%ncg3|yuL?`XVkEol=A5*5m+0M07gKAK
zwf;u@C0dvWf?z6JNTp|>$D=YQ?SS1=52jpuKLd_|=1fOE`R(__S3O5j(>5KWR1(rh
zGZw#HDYKc{xvI^);ox!2${KtaC<^G9*7OE+cVa`d5-xQiyLZrd&R0*GG$Sjl8Os-o
z5LA&PLw1h3n&a*GGEH@zVRdFT5pU_mvy?bjf8gz6+#@7aDqW8TDs4m0!7Ya5SCyVu
z`ki?wOREwH`9a+`RiUT{>JyvSkALKLw`98G`4WcYu!V34!TAc#c794<zWEufuiXR6
z;Db|lS;HR?^X)q-$F2}Q^o@rY4@8Z^O^GZFnCnPc%ESGH&scjr+I%grWfT-mpUtR&
zO*B-aI4>>y$%(C#1c%k13y}UGPf7P}=zkNI@beGh20|JR#|k_2Q>$JvA5-><^Ad9O
zY6izcZ+P3Oy)U|$z@`2}jK0K)#{i6G0wTX?pCbsG>F0!+v##?xIj7uqrVV=AHipqX
z2+<MeMW>U5pQE3Ze!AlBAv9ha$PolT;AD|B2e%HZFv+~}k{v~ft|~Niyr8mUa53A6
z{pzCoNEvP+soC_F??HQUgHnBsxZu{j`TN(yMo3QBCN;oIlo{+YSaa1u#0)@mBy6+s
z67I<SS4z{_wY&<1U@Cn_*6{Aq{QdBYJ#~QT`#CAMSl<<Q7gr}gz1^po-?+EZLr7of
z?n$7}u{2NG0{Lr5`N-n~7S3DgH9+(u?AzIpX-7l`xf7SP+&|8U;EfuZ48;lU5R|PH
zjbh;#v6!RR;dP2Felc+JU&?5Zx)`jIM0L4EBUH<4cZ#qvbLKmm^7e1~9Ljd_dQCrm
z?VSzQ5DYyQMdq0Etc4@vHrziyX5zfH$Qaxqwjk!zN&2nD(coYZRE&vA@A_TxEVo>d
z!FOO9rzLtYK#J(9$MS#7jR}KA)dy%FHe6kVrB-pHvW5;dKis>{xfKCYN`aFr+8{on
zMcR)ItxM_al7p3<mS@aN3W5CE(T^UDZgxc&Oy({AyFM|5qxkMM{4hTf%$pXu<8%WA
zrvLJFOr`_uLiF<4C+fklE!1)I(^_U-n5l~<$1kdN?I-4scG%cDK4<>E++SgSW_C>k
zaChXk`RCqyNcCT4Zny%P{0AEoJh!PE+4BzV*vvzPx*$rBnL+h9#04I?UIT@0Ti6ks
z$kC**HJIMS%B4$@9axxGhbub}_2Y_uNAGleo|v~wevmoJr`4|u;Im)n(wvaOSeNVi
zs_<ARXD!H4hALV)=f@4`j7Vp6ZQ$2I!At}-hIk>mg_DH}<~IVCMSk07`3bB3itMb#
zORPw&gOD3}T~Aw1>_?mVVA_yp6@$hGLsSz@$$<|d$B-kvW`-y=-hAzN88xDDvnuqD
zq@Yw)&^S~u0$nOUv$iLsmknMH5jH|$ixPXV+3M%4YOW$~ug9H3&^nMGwlk#OcNePF
z(Nq@295IjH>Vg4m$|bF}!Q54&LKzMRI&_u`M3iJ+Nk18WszJPl*yBgt=zn!?%fV9G
z$LGhR1wT^~Kw&7M8HlkPLZ6wFq1vlK_p+sY-dnFS6JhER>Y)(-n@D33)S&sIy{!H6
zZPdOJbIv2djU+`OBTGduRf9!aQbAc>$PFp~wjC(q-U0`th}2l_<q%Lg;T4xfEa3B5
z7)B|$8RR~yI29qK_cA>^Szw-HJD_`I5<;q0*{2W<=25sab^LySgPA&{C^;am@*%*(
zf`S`Rg;1aLYkpM!C5?tk>Nvc5I+V`$jn-z3vbit)hhx-P?dpgs$i*I*HSyS<0q~wW
z%MY44Ly-nhyYq!6h6Y2;ywN$hoVmP>8@osg=l>K)56X_m|I_1}l@2EyP6pa0^R#Hd
zi3}?RD|VoK<{D#GVa<HQMcOE=ZKqXi1OsM75{a{AbDJxms|1@h>}4i<HQTRDTx_%R
z;-stu7j$5+7iCG@!=iBGHc2-^JV^VO$g<o&M;Za3ulbEs!V*?XSyGj-=MQoz=V=PH
zD0Qx@pz8mzjh*6T{~NLc)>0&D!Y#DEj%VW}iYYzv+-)p3y7^H_bf~9n2>t$N^%Nw#
zbG>yZA+xZ4XGOQ*`iq%pggGgN7SZAG-6x8rk?vq}26AWI;$e%!yn_Q)fA#`QH|Jk}
zCv<9^io1#jE$i|jl<yOCY1Z^)@D*{|@T-4B;I|5gU;j%>@n3s!HWse`=G5~3&%HP&
z%m0b8{}<M(o3J^8dHp~oBzl_y?snF0Nc4`<$@E)#qxcz0BFMjhvKH7NPD^2KxhS;5
zp3Q41os`^ag#d04h=*i3bHu;nX%V2`5L~DA3jAB^so87r)v-Uw{@J))W3X+|?Nzii
zfxQh=q|y4Kc?a2Z-{WLsUc!{FyLDZg>#85Q56IdytPQ0P#m17{a;VMi?RY!uTy@+I
zCpPHXbNG>FR;?^s9F#rIGj@u361J)nDzb`p95P#78y2Q{Fn3FfDM_!(Gijc=f8-&=
z5Qw>e4<xD`B-h8;YnDwA43)Y?oMse!FR<BuL6)oP^5{_3dsyatssCgAcqPUu4?37W
z0?6@ry1A>MFW#pT*xEs!)iREKIn&NF;11J3!tSj_M*g`OMqJELy!1L~th+K@&y0k=
zNU-eazrk<-$KC0;xMK9Q80Fl>7PidyrH-8U5Vkb2Kji6oQ;2I!yy48sRYcbYT!@=~
zefM}$f+55;J=Vc=pe&gWbEQ8ZU^cQw0q8S3)*Afz^j~frJwG4r)%ZLg_T1|Q3Uvny
zaRc<f&d#5vS!P{e6a|7wX-b$O#ABRWSXg0NL-6wuB|}Si68IUj6gE=Kw{z_bwauN?
zIx8>Z?Kxw6ej)55{P94vz%j6z>sl!2erD|nJzCfBU-ld};Ru-(2u(Ii`Iot>1qf&q
z;>vPhC2`)RA=$b16qANkla^}dMx?c;EuOG<X&{O?FT<#q+HX_%`njwzSXx5U=Ema&
zLy6u}GLM9~(SNWxy2V23r>&OS8&g#M48~|+JY{n{r%!9^)em8=AcvI{qUkgdkT=3-
zdKoqwDuuN|Mj6lNv0N%`0e-PR2FU9q$2oO=MVlgJcz<G@nIK`fo&PKCYZgh_OVBCU
zAA*KKecOPeHh>NFC!96R$Ot~S-$-o>IBGA%ps3SFyrCVO8|WOLPmQP)ud#98FpWmz
zE2-5PK5C8C2P^1N3Hf4KW)l7iD;z7>n))~Juz&`KNaHW$B5^el2tkipBq04St9UMB
zS?(^V#xld()Q`7qjjy}gr9Yi<?I3~wkUgYi`k+5USPC4@dze})BxzW>q&k5Q^Q^AW
z*lz=L;j=fnJJgZT0J`wA*Z1W~<7&E4qfoOCg3N5Nqw6enpC3h5lcZx10$oB}7d_jf
zhn``JPzRmxEA75SmSE}AKLL;E1EO3Kyy7U(k4EZANcMV}aJO;3uUd|(T)}|UJs3!C
z0W4+uF_VjnbUBtKSef>wS|ooULjfbD+j=o4kBp2?i+u){eMz6hj}eSOlu}0(P+)BS
z=^z12<!GqrwhTK`NZ0~PHHyXo?bG$OAjvCUt<{9(xF#0d(wU38Bw&Ow2|E(YdOXb1
zB5ZGV!DtYMj%kH;*FY65)#AM<jVQ=ECR7~dMY^;V)bjS}8bxH-rDSe$xuXXl{|W;$
z0=BguB%XaF_YLR{GFmOuAZ%!o={EjT1ZvEg5Eaj>$j%TJ5Rx=Vd+7ra6Wj0w?sxVj
z7VJ~14Yd&lyH5o)0stX7Jn0#`;oMGR`kB<i2nE^0|8)7V!GLI`v0wz+aG)=d1tK8)
zKK_jVK@2xe+*WiZY9(iYwVm*c(O%oYR(8+J1tmiP(zaONYvdvuZ2T(`ZjEDB8j_>&
z3~kNYR!Mq57%DPZFpM;k!HZ37&Ta^$qsKuO!VPgq&xee44A2s|yf3S&f;TAAsu(8A
zo2-hweB2gi$J@4(*gqpy43ii)NY;-dO&yh9yF(4e6kH%6XlSzI>A4l5E{DS%N|lfV
zE?faUQU=usO@}s(-V4hD&UIXNp`5%Tg8Jh%9jpaVp7nCdpJDs(QCUVO3)$*;;jWYS
zQ=3<S3c^gj06+=H(N-q<alS_OVPPt<CglQmDZ#(sB2a_1%e2~4633|?z_>S&k@=@2
zFen?6Ribl)TFFLg$gP+*JO8|!$+x)smVk_jy3b)pkjiBb5%S}BE!Z2?J&b}X`jd9l
zX^e)BM1QNgO8s4*O2o8^N2oP=1-r(@6PSTx1zHeA25@**c(NlR7|Vomq)V5>=h)Z`
zduuG*rPxb=Wg!vdrS=s_ebBjeCLJXUQn~HO<+CkJsO*pmI0I>-bw&Yz2{chZ%7Bq9
zlvVAVgV4;YC<EgL?1N3wKiBMP<jl1?+Aj}m3bffws<#dtG>sh?(~y+q3vlRW{ftlz
zt8s#30F<qJ{1S<{os)f*xS%@?{Zn9$xKfX`(=!t`-AqaBHZp<)6)HX-Yo%rnC_h}L
z3Z5HEwP&MX18h`#d=x@!z(1-#Os8-m_s61OMY3n=F#_RjdUl8tZRlOkZIW;`x1_WX
zk`Z?V>M)^VK)5wh`SRl6X547N^Ub|Uunbi*0J10&$^$XCla_`1>__$MruwYKY8`}q
z_RG1b9UFt!pYo?0{XuF4@U&foevBdreUdDO6_7L(&TnmDC6bj%6rd>>Ik1*UPrpPi
zq4uf|3TI$X<`O5X$)N*(Vt`y!UZ72Q*;0%0xv@)ShjH<!*H^>0z@NYBC7^3uHj-4U
z02Fi-IUpc;LRU{9crZaHbi{dBJbvvgzi+M6aDg*wkQnyRv;>s}l7`)2{4mj7uHGCK
zOV}_J5e8q*XKNtcmSJ3h-@M&M9)AsM1%;?#IZ&{x9H$DWVzx60P172RKv6^6x7Z-h
zndlN{36}RH0N;0IM54Kll}2NGp4*`w0sPHq5dyIbkF@g<UbKDzzW-(7cxHJ|FpP`G
z!yrdmEnEnEmkSWsVGv{;q8jczflyEK1IYsAg;d8}pHj0OZ}~w|cCh4ko#-F!H|AWy
zdBJYFA(1>SES#9HIIV+zikOssFD5Hfk95WCQq{n4sagWz>GYi1tfgeTetB{+3D6R%
zOjT-HE^CR`<9~dQ%jJFvC3RaT{updfV%UUPV3GTA6|h6rfR$}?h0dKpW^=maY)cE$
z<8XdWdM1f(hLDuZ=l<JBKfK;t1#A`Z(zqQ$2i-^7L<4NA3u1dD5#(UbSVdyVLt~^V
z2$QAV35Vxu?1crI3?UIiYT?XJ7l7$|rC8}KWE3*R9P`uUQE;-Zc4PaS+K*F#;i($H
zVmwz6^W9*esX_yt*r?6{)T#BKhztyexZcVh;4UfzhU|Vh149{3o%hP|!`-0C!dc2?
zEFFVz;KfiEHH77|mO_#|ToS9{hAV*Y=ZNz<A$Jcqc@CrIG)u&E;(yKy0J)-(6GGvb
zikcB&k>L0UiG*YAG1a%DH^5*7vhj5WzZ+96n6t<<5Q<qf`?G2b(2|!c=q3AIBPpuj
zX!m?F(I+U9bRWcDpB~|!Y;$@xGyGpa&U%y>)oCUacU!ktdh_J?$1JhLpJ}cF^y(((
za{7w+2$Q3P8^w$6hKEAh0VU&!DN|?t+525bGtaJKBJ;dYtl(NJn}%vZ9_{PghNhm?
zANTrXhb;8Kw(N&@&~qt`G&kseXtqKn%^`M!`~_%avy!|l8s!UIe$YfOH(nbPB#>+r
zMJ*kAs6xnR=?RWnz#qjwb}egCFB50;NL-MR(ELZz%93nSI!&_afFQ-PKphLIJfpfa
z_RD3#R{gtTM3#X=DqU5p{CY|Gs>@2UG->9jRrFXoUcUB1b~<5FMjG-7X{P+K#iGG3
zoEzKA;d*(Ece;uISep$c^>5XZe2*EJf`cYClO@d?wHO#In@E3uA8A5`NXV3rzB~VE
z0hQhszNVi*BjUL=z#$UdfFMh4jD(GvySoh}^2vs{O>hEyAuNV!jEKwj#qBheLLr26
zT!fpMwb-}cglU;Vlm2>LQobDDw7+x@%vlyYWrQe|g|z9<T($>-oEqgXjat^}>O|_A
z!U9<SC^BfDY!XVB7pEK2vbVy>f-e<1g8_o}NZ#bTsWn*)0G+|zSzMMi_q*v~D++ut
z%wWs5a;!?Gv8bpli~qQh${Pmlcy<|jXzwr~E{W8BFlPU5=U~hGLp@6(?i&szmgz0i
z7>EPbwG#+>=A4>a*007CsOxbEQR+rIk<t--xxK_Rd6Ff+-Gxw~Jzu6%DwuG8Ibzrz
zTyhd0?VfrmK(4PE(tKngc{@!mf{2x?hN@Wvnopy1(c?zE_6H#>x2uqHu8f2?*9d>~
zTA=6I8cZz32u}yZ5q2}hOH+CE8AMXeT{i(G49-DGiqo&OI-R2|Tfxq&ik<jk-Xwuz
z_9x+k3P18fo6U3tFq&bGUGPG)=Zu043;I09VQZi~APGVTsPG#$Qi&v%=jKgLH~His
zR^PiXH_&5=dlcTcK)x*-SfmJ=*4tLVir${hDEk`YNA5pR#Y@)Vgb}X9?gz^n!5rX&
z{y6p3-}goutH{em9G}q)mm}Ns(Avk@@>34l!j&~EoH=rRZkA-pw*Cy`y4tK%!?>@(
z?_JCu;1Aq<FT3Ix9;doky2T`m7=059t5@LW&KcKVL~A8D5Q&Jvzjh<s-CRQhkG2`Z
zJd^%4TlZI<tMPSxp47OlQyiqV;$DFAnw{`;#oiy}N8ASfq2saS&ha%{vo8@VwDtZ|
zfRuRx+ridpATb6~@su5T5qQ9wbcCLv93QR#z#VJxuv(v2>W|c+|GLe|;#$H2P7!ss
zah0{HDOEo8+ebnk;MJHmb5OyJR8fZ_h5N!n?c~7<D;1c_&T;Wn{aZ(fKh8O*WzQfU
zI(4Q<wAa!1@;Ukr^$yX5`GrsHyk`);iyRX_R08N{7Kh%5<JK<e@$q4&a$d?Xu4Qu%
zfKwR0Au@BT+!*}w4}L<z&eC=B2D7#XJ68{?9Rp5W?|NTzY5k&q(o$s;s%<VJ$H(93
zX-gfJi~nBaouLTJhj?*UbNAdq5X93F+uH$vs?$5_{Eu%bC(C~+mf5*D{vTnDlZBlG
zm4)O#N{j!_W90<y3H{S+ck3uP{%7p1{Xre6w+}hs3;+<g)Dwcw8++#HlY)Zj)3}(i
zP9l3t*X~c}&0d^cpX1IX?r+TN1VT1hbW~MUZTtQd$fK&>N5=|SxOsa&UtBJObsW8~
zd-J(}K0bd+_@m%=6vtxY;tIet+(oa|HXk1P4^OyV+pv3I-XGxm;MkR~egkPqzej1%
zp{>{L^U}&q?6CcfL$vf;^;gy-bZr$2jaCWni}h^;GWY6^{`ZB#2TxTt2ie!r@q5G#
zAbL_}Q{REEy__c{rJ^3ko;ZL#Z?&o;<LW}fYdBIC-*Hj?W~V#u;qircT1mlJ6$dUx
zaH+GSdEsYtl^tMG5Mf-_*WL@y$7Z#n>led~AAYzI+GsC_8(?kfW%9}b`){#$2}ir>
zN)x;@_|Dspwpz<94{vQ&Qaw*^HSJn=qK+M|tIf*avSkf#cABm5us?B6e%~n}yR-i;
z({5UMH@Py_<UWh6PA=odvp=j(j*PTBV2Z<?9J^j2&o%{cr63n=Pi4&}%olXHOdP^G
z7&0C-b?j$9r_MOgg_Rc%YCEG6VwR0$kfbj(#_+X^`y>H3?H1Et%+4#fuN-<69Dc35
zcrN?8t#H)j@eoi-2$swmkCC^?5jfs#jyesDoHTSUM<zXRq0wEJOgX%JuTnw1q`7<V
zP@<qV{6YfM5Gz%h_@OBEt45dM-kY?>$P^@c<s=4JwL~N!U-7n0SSud5yR=Dl(Ytu1
zTVwvc|7&sYNfH%{!uB&Q%PA&OtO+j!m<n(7@ce%M^yHc1?^<4G@a;PA?_m6Vc^>5d
z?D%_eh^%>2x9J^#PNp4awr8AEFCSR!6W}>PGYc>Ssm11=n3UDpWUoX&XjvFY9n${i
z82FL%P+gz=O_YVQqK=>fNV0T>=uJ?$t-j#(P|0(;G@T?)Th0}B&Dw<!F{1r=c1KS^
zT<WJ$aWt8N2f<u?({gZh{o5hSpZidHST~XKx9h_+U<MED;L12<2G3&Q-FOT%A1;Z(
z6Ba-b_7ftzn_@{?)PNTol<`_!i|o%}rt-*9LuY{yS(7OlIgB~l|Hsxlc4rc`-P*Bj
z+eyc^opfy5b~?FY+qP}n>ezNVw)JMedp!64a6iAGR@E3)tIoORJf@YSAT5`1kFG$?
znUA&KJ|}uIpA%OOGKN(_s4Wg^K-q5n_%0m6WElEQ1x~R~jiA2+ZdbzT8{K8E_xqKM
zMeZp>p%3}*h90Z}*0NarkvApl?3t3f9<x_CfVmH$peXkBpB>1wRqfmz$r~`x%A)xn
zu4p^sam02?$trJ<h~YtjX&S*1fkM;~8Fj~|F|A$t^(f!*T!hgp9X~e}f`=@Rtw=~0
z78;k$YI&VJxmctaGC@5rgO#x_3KJh9*3-P1GzAfKhuYIo3cdoe;AD7YnWWKoTrxv1
z0CJQzX7O8CUF7|r!FFWksSo+y-<Wh=xA|m4{eF2#sneK$&~2ewz{`hK-YNOqVOiJ_
zo<?Q*`_8lH0f$#-ap|+r=@O}8>x3+5izV(!<@%FyaW7|SnZo59({cq)7c%Y8U#=o{
zcW1(O144}QGZ?Q#V0_-*-k-6{ryxg-0E!?|eJw!1rETgZtgpzT`3xP$<fl`MH1i0v
zX$R%cp)M#F*4eA?hD!UJu?y77yT%|V^_%ce{)ZxaW{MR_o0gJX(<U#$lcl*<ViOl{
zLX6{Do~`eewU-aSc6CZ-tZfP-+E9ZZz$pe+OvTNPB4>!ifd`zHI8Ei@h5O1MK<wRs
z9J<A?NPqiJ14_KbRY}^%Od@isQ90Zzn)K9(eH%XD+qp^1nIfiwwg{d9%)Lp>-ZIkI
zO&D~@L0L%saIa*WFa!RByCxe*ZQ63qit-oztUQMRe`R)+)Er?fJa`AnlLkmJU%Hdc
z?P*I}5hD++A08T#7$`K6xjZxxV3DE&Dz7bm7WvjCOaz!Lav(C@A5L|&d~W@MyYk9y
zvQrg|l#2Pc|H2$coHV~5eXvvv5Ts70<bGbvk`NCS<R`6OOAL5<uq(~jQi}WYUuvO2
zB<SO#Xq1~Aqy}r1-nQdo8I2ZcU|9T2!e2x&6-WCx4nc;+U2%rp+-4f0fEqkT8wQ1*
z9K&C@%vDJI0xPB(Lw1Zg?$D>-1C3YnI5%)JDWu#pjfEM**mtTBP;HfYAL09aTyqA>
zDj&H=I!Jgic{A-d#m5q3^R0<E@n%sjw&aK4MLfxVZ?nsjeG5mrLH>9*b{miQN4nrg
zwy~ZZDl<k=?)T2=?zR?XfIF7_bW=#?6O`j%X`{`xub|N;+$4BZ2}r`E0jhJOzybY{
zj=p{6s>nak_hoiHNonxl(8E6>hbo3^5YkR?u`?3LPxC>L4aOvwPLemmdfG*MX($eX
zg|WJk(_X0WPq}z*q)+u?p6f6h`1RJEF}JHW(EgLE66%zTq8@}Dpp;^a{pmWkJnvE@
z%w|j9DL+s1i6XZ91H&4Q7?3z(LOrN9`RSWn%$_iadHbXa0fKlK?@!lf+!9O<Dnh-`
z4yj3Jo{7f6o~Iv%s~O%?7Et3*SO7z8ZF_P@W?l?ZYr(~7pbrAL5T+E@Y=c$WqO+2*
zlP)~^`b{<qn+>4@D93b+L_wfkZPD-z3~0fJten5`Y1A!Mp?P7qI%N<2B{<_q<LoP<
zjW7!Kn(fo0ZFhY1Ap)A(cUv^SCocXvjQoBKew4~|6AyE)(!KomvhtsHFg|E7G#Co<
zc^%@!!&Jw}?BmX=sjhe1UP*%rMdwj1IGn|RFpq%|qqNy2V2O@~b{8jtVIb`Lq7p4g
zsiI3GKyWvMVapZel1VWc@!484jrW&&rA;KAx=rSi`98o+{(NXlO7Bn-Zr<Yo*fpLQ
zKTdCZR0FtfGGF7Ln$-sSsZjY?Na;`|mHv-WA<I5~zZgCW57WuxwbHZ{9&al&Z^&}(
zDS(GWCwUkbU_R=_rbC{6S24mmTuH{J5swoq*Img$J=|0r{xpst$RizKDVVHr87?D7
z-2t<tvAuU-BlI&;8cx-C;iLO*gf$f4wkS^zR3~0)k<VxyMdaC^v5|1#V@hM5P!*~@
z9v^%Wm$O3#uc(jjp==O7m+v(e{OxStr#pfv*K6AYXf9>ar7R<W6&xOB$I9`^1ktGy
z?HFM$&50wy+GH9D5mXA`D?vh+VXRl{8gCS!Ki=h8T#^qC7Yi=Bzd_j;m4&Wv+#ng5
zQKfq^3xKO|W})yvQK5W?#Q0W?yHOPUQ9#YEC1)RJIGT*m90|Rv9!lHQy-bZ&H1NC0
z>%BV%>@9@6p4E*xLb5Nop!6>PW%r5Bqb;OT&vCZ*wX2%PInRc0k>A9uv7Gq(HE1J=
zWUMN;S$9Fl7t%fFZHqX=i+TA-q9%poc>$|C<>WqRp+CPnW0}dREZh{dA!r-XG9xnC
z8rsxFkNYR<QhKEVO#VuJVqR!{skbN@-M#5AU{n1@2hX!mJDiM*V6j)#`0|){C-Yh0
zlLMSnP+K#*)#Hr^6U~EB>aikvA#=1)%qF_Lc+g7dR0#LwSH7XQqEzk|r?LXWJ8u{S
zis|?X7VSz(W7Y4UBIH#)%7OrjQi4nF+p?1)52*U|ynm3#s1=e49FpNLKEJ8XvA8~`
z08;x7T^(f#aKF5Lt0)Xk6jy5N9?{6Ds&2%R=JT<Vj0SQv+1_9qLgIL7a?<qol<K_u
zGu=q0{Hj$A_*v`-K@vTcP|aa{QH`QeFlk!!M*qb3@C-_NyD!R}z$)P-DilvonJQS2
zp#on$ZRL2LmXq-&mAI$-aAczDWRuoo0or^p73|z;x*hL$|0GJ|%2rU_!Kmyz{L?aT
z&jW$Qnbh);`k;Qv!0d{^zZMlFz-98`2$GgcZNy$1?NY_R+}u06ZwsHbi-if&gyWm#
zo^G%Oq|UQb7N}4LTmRcboCHp*rXF`@BkF6KQ3I`E-ipkAPz5OvWl_>HUh&&91F*0w
z)y(7)v{YWel3`|#4HxN>XEa6ecfTW{3cKSBHkLRqP`0(Hcs~vU3+n`{X{FML)5fix
zSz^5z|MmX}j#Vk*BI3g=A4$M4ACNJp>940&U+=u+)1BZd2&kVHRnC3Eq3RP-U`q9c
zf4J)8oFUf-Ek2e3ioeDEMY#SE2zYl??RYk~YZ@pO9>lHQ4O`&QT28^OZbKddH4prd
z?<STkn8!Vv_@1}E*zu!Yb@>B|VMhve0VKOnL=Z@y7+e$(vq4VABDRCB5qAXYF9}-q
z=-Cdu%8<F~p%4;qbxQ_CC>3i{iTuU6t>d`v#?m03H}(hh5c_EJdBaCs0iZGier#6k
zyKC;=Uiln4y4fOhY?<*!6(S0}hcLoaA<wRTme={iqCRSaW$swH{>^wI?B1y`#Vjtm
zp=|<seD)^~(+=Y9nX1e;Qn(aXe@6ZYlJ@hVQK>(r(?5(zsy>M!+5P^7|6j46TsP<8
zM%0Zi3$>pUQ9)B5x1&hkmlf9@C5w|rDPE#IilLg~fGdNh&UIq+5kIC$k7V>El1Q%6
zS@W;an|pzS@T8>wW#0Nv{RIo_f2bF1jQ?$6|2YQy|LZS?H8t%QH865c=0Bi%*}}`T
z-Srn4{-VGuF8E845HDI1A2=xy;C0sN5_PbB`%LRr(zr?HBS(`UbMo__yJHaYn_<Pn
zZRFl`wq^Td`Amfs4(kuwK0P?KaGvn8j7idXx_R>5GsI0{6?vAV32K<9wl+$L5{1Oj
zf3p<gD2f2k9dzl<WA(DLKORRC(nZmXamIerNs$;*?fE|}CqRiSDWXU+<mhy9w%0uj
zbIo;{DbUB~Q`{ia@uDhs$~r@|Nd9W%QWboRh%Bg@q$ivxX7L9J3?KPAU$a-9IF7fL
z@8`YJU{F`R?lOf^Mu+d&W*t^&j&@!p8Zmj8b`Au1M>*hIw3=>{VY4bh$|!}g5EtmK
z*q&@-gvlUVy!Ma=5EVDAxr1${K;S(OHBfgjoLdltf>oI4DF_ProA|fTk@ikj?izGP
z<>YX)KntZ6yHt0&*_9)?124zf$d`F5B>Ct+0ple^TFlkaWTOSAEz_l2T0&3@o5J-e
zxaI(q1O4g5t+Fv=#^U$GU;5Wz%!DKhhb$`hnFLi)CB1N)TGD3~4_z+}<>LG4M$W77
z@mP++5{fJ|j^xq7+mrq*P4?iipI1t#OCZqTN%fa9fjR9b&Zz40NI@8i6|BkefZb||
zCtv#@p)IPr6g{LH;yBn6u^1G{6L`T1IdKA{fVAC{CBR?C$YaFeYz1KsHXa0-^88G~
z98KidgyZL*m&RfMttmysuH50P58GVOw!jk5m0g<4(}d#4$xLrPdpn^ZGW|NqlXALj
z90<2qw?Rv`N@cQA=>yZ4qY&sc>6`n!yD<|%N57YtMHPif!sPQ{93i1KiX+NG_{RWj
zWWmc);EcEl8T;n?-jU8XC=WtY<>!(>N@1a6$4Ej~_ZGNysC~#Uxo`H$Z(p$R!o~z!
zGd_uiV5Mcg(ELI?k+&Z4&$Rljg(;FmPA$z-mKUKt1dJ%0kJad1ga*LZ={!IV0bEJw
zGQ|m@%%Luki>)@LfnW7ea>))U39EqSOx)4{p-R-%s0LVru+7I^ASb8vPuvjvdu2O>
zxqx0=qm#5*>D2~5&zA?67S7LKxE*p_+Fj#gHn#&`w-1jjFRpLA@1qxoi{t488Siru
zB8fsv*lDGCkeWoBb|S2%=z(8<zac6O!eIYF^Qirr?D<#mxQh!kr6r_7!!irdgUhUe
z8zVz<-B7WaX&TGJiAZ?Q$DO^>hX%LyIBScGcV`E>etN{V^A;RB(y#G@Y6-T5g&N#-
zN5mK%&DXacFz#o4wZ$fav?XeOItQ{FSeUN^oyMO&2v#nQ(q#xcPh2JK(m2xHP4$?x
zNB_Fm4o4(luD1$lu)gE&BU}UwnK{1wu`y$n6jTs8i@A|oQ0IuQjr8GKD9Pb}c9RxN
zR9t@_iE7`Ok35?J4Q#KnoA4zWG@M?qN$}V(qVjp)IDyYWSw*|tc8M!>J@<a^DP?cw
zTlHPpsXaMr(zFk0>!(2<zdmnyK^hY!a}vPLJiL~-dHPs#Ib;YGx)cY91gy8doy&f>
zh34vH5i`5JypF$uS)`h>sH~{21sjrRt{WGU&f0-fej|zsJzgh#Gx;m~_Tn;39-C=I
z-?9cTRNK#!0oP%*PPUQt!N`v3&g3N<IvL!`l|rGdnBG_WRfRAOIrS1aH=AbJnSRE-
zlP}SzNRMwxel<*Yez*bPCa5MtlqeJpJFYW1s$DHc6>IzAX=+7=1v!ZgY-YaoxmQCw
zDde3p+zQN3?Dh3~ydTdwr&VRI<*iRS?9|(~7Y!}^EZt<*Y3{J$zkN?LZs&fx<8^wu
z*!=3@?r`Gok?~)w^BHS;B-jX5mk_W&Nu)pwcywLSf*p;KFM0&zOtY*3?)#zBa5dlz
zX}2OTpQRr$43@oZ5a!Q#ihf{L>aOCc1R?58)1We8A`W_NuIY4ZBX08vZ}||7fqi=p
z>NNu<H#>gL1z3Ng8wfSg`K_MSht~t$b+FV9-He@sZ$0p8LEOF!qfP=thOQ#i*kVWF
z-RQ_|(>FrklpX-|Kt_-2Ge$4}0Cl7ykMta3T=HWs>(`nQyZ5eBn}c`SF@Xn^e%dHS
zuZF6h23*aVho#bY0LU{!<J6K$d=gbQPhL1E=$*4u6t<;Xg0Pn?BN*wwh;*gz6&7pk
zM?#H9x17^EI<#>CP)-r#N^g732L)BNCn8aW-9}Ddx`Tihk1R)qvx_BbN*RzO>`q#1
zNH`zXcEpWx6iXi6qg)D%$7j<un{w{G(wUu5>(wmez@q)m8vzIJx|CHofK{cb71NVo
zJ>l4Q2W6x)*2)tjQBdb4V@%uiz*UjFAh0?kwj^Ai=F1TNmI=wmV!GEgSZd6iMlqx9
zZ;G^%L@B^qMoOG{g?JUuO7f}pOi~GAbnYGqbadg=j9i|jc;T4CaM6TlM5ki^)$}}o
zY)B7=ariXmn`_&Ui+M`4_WM+mlHpezeie)GWoZ9%SCb@Jl4_tw$5#<4W1ei$yI04f
z6>dE1c-MEDA$qNG^#&4jW9wfRVLP5Aoo0b=P-+2Q>i=d}u`&K92EoPjAIJq8(|=>z
z*-{mhe?-&&!>l?SLH>JBL?}dtcuUWyvcoVI>E0Z`=TMbg%oIQd!@h}aHRKV3ciVuw
zCUAX5D;3|E5C{gsD%jZB(Q)<zt@@11L!%t~c-{GHcw6ToS%(iRkSTKK*3H>DLNiy6
zAzEkR)9L{G^Cgugmm)i&RvLe+dx0UnwfeNz=mV@;_$N@$p<z_FM%GUE`ZzcDw6UXd
z$)yhs0Qz{@0>O&$3@;&f^sCi(YQMfl<R!`r0$v!-m)<9FTeEkeN6L@0(k@fb646LA
z=)%D$18g%;STe^|oba+Vlg*~4V-Z?Bb<Mn4<k_;|qTbuDH|-8A=$fV3vPd+Ik~{t`
zKLf;!e+w%SlRZstVTn^G$OczmIrC5{PpPc-*7294DHg8{Q5GmsV`IMtVF$?u*T=G}
zQODnk##V2L_bK6*xXSfB>Pe$_+f-s95r3|>SgaRpx{5hpFZ8jJ>vIqI9G9R#br=w*
zy1TmG6b1w(sv6|A6q1Ogh5HA0Ntxfv5CINREXQi4Ux|8MGIrdD>Fu?65Fmo!Bs!>l
zr_CG7U1)&+4F2>nC-c(v{<yo?3=R>O*<~?k{(P8(DiJI4ny6u}jdrt%5^s_nH&e9^
zQ&``RbdGto{e^JLP3>F`NfE~Qd55nqbh1Fq9)^HOK8I@f+-x0!h?zm~v351UK>?~j
zC}^RC>rI~CG_)x5FvB0Lv^E*Zt?v_~Nmj^Kh6iq_qW4JIxm~{lq@Qf|Jti34O`)n-
z<+F*HT)*G`v4<MvNlxw^(+y|*3~Rrcx<yNakUs?^Yspwni>>&(b>tT&6=m%e-$aG?
zpm5G_*^3fD<FIp!P!bJk?DaKanE|Sjk3~sbox2PX7rb{It5B{zMG6aWWv0;l0mS#0
z8tOTjWC#5d6!tin@Pg2aj=TfEXQ6th=5}XKbZ^HO5=s2)om!KG@51oXah3m3VuFYw
zLm$(?GTO#S9n{z=Cf`GiuA0PY2f;3pX3gBhSUV&IT&~uuX`j#nCplx3cLQF!N&BFS
zm;%;EO==pkAhO*sqRqJ@ulA0*13r`0m>#xiSyZ1-5%iG92n#&?YX0_Y2=m;8E-TG4
zTzWd+4#r}po?x=SIdI1e^k3iGWUjQ<+SFl7VWSd5GYFXfGx8IJ;H3<OvZ?Ut0XzVi
z)4BC@Ry?5#OH##EUh`^{?*k0CU!!wNfVO=vVpkI(7XdeuY*^_|F(x<Xb94UX!f4iw
z)NZEBZja?7A@Fs4!3e+<$3Zf47;8N*Yx}Mk{D%E3-Bmy`%c@jtIKjiZ>UII96|yO7
z20dGAjX0oAXbh^LDq?JL$?T3Ah@LMRC!<wvDMCJ{8WqzLw#MkxE&%b$EE9ZyLl9{e
z0%OLd6F^wFu(uK9Omu>3jFQY}0aSD-Yus|WCd<CB62|&#s8#AMC<Fm$z^mmaAB8@1
zU-fTv)cp93+#I4~H)(hR4hf_fB_QY0T~)W~S#68SfFpRYbTBE5N1Z`I1ZNayg8hen
z<pLctLbUI3YMrw$3BZe;E(t)uD~ZM_on07#ZZMkXB=&UpBo=3hE6t7#PoL(PRlJ9J
zZp037c8u`qZ{G3B%oxTp@vapHqM^Hb;Cf6aV{U2S-|dsVJ4McWUeJr=@kk>vWNuSY
zt9~YkLtnQ@U81ievPDa*_qykOk(T^%FEHOb#OoyXd9;%X0f?!y-EOFeAU&X-I(@Y9
zy1hU&9#N<%V#7)cFqBGxS4c|e%ebvHIP;9;m)bwMuId*&q@Z0(-jrvkQ9>I$Np=VR
z{o;-9wGziuIqC}WAvU)E^y<qosb|YIvuWcch+v*jP-s+=_kL<zY0aq<f`imQ!+X;_
zeaY|#iM^V_0q{$;YkU9ZajaJW;v1oiUs@RJ0mfK6d9*(bxBrvD6zjLD5=xqO6OjY@
zg@lkcHGm*5;xNcwPweA=QG}cmzj$1^!}8Pm%_ViI=j-2f_z615Zq1U*CVO;fRBBRN
zr7vE=^BX13vB3D$-Mj6oNimz4pPdNe?d{&D{uUxA4A9CAFwS#0-6g}gA-;c%^fG+p
z{I$#t_!q(bTnah<veT7;*J!Iy2P884)$fIVh0=jIMHkoF+#4>bOl(-8JoS`OBCLTk
zy8^sI#ssoZMqc@Z7RP`DkwsdN;VDIK`3Jh)>dsF4(+U3QB<DBd5Wd~%*S)Fx&G2YB
z0UxkXHb9zS;lKy9IoMO<T~3diYK9gGq&jU-*WQvf2Inpw-8McpW_pm@i%PDsV9%K=
z9%I^ca_KktSXtpBK}puI!<9I_2$yk?a8U!dh24m;I}<o8_(5bkFtN<~PXBqu2G<&q
z0kYSd3yBih+oY#;|DSq!UkzTeMZS1?%?cDy5rFe4(Nr0tDS`4%4TgE;bz;la-SC<|
zY8U7G@`ty#D}q3!`}j2mCav{JYggL<KEy1I0ih9*Gb7xd0q;qYC{)to_YO7mwBW&c
z_WJSP68e}Nl6+OrbVL<3(0BW(Ut_7k$dI$OV60lkm}Y_Ly+NL}UnbisXs4MDov#Kl
zp8&(IXtR<B5#nzn_Yuig9^y^xtz+|A{ZPGF<1Ib2&{+jw%iGuU=|qMrLI4P(--(Nk
zudC0i+^z^(YA=5ye_E?FL>TT%UHi=0savhg&Hjv=+>60gL!SucC&GlO%^1tq*mZ2I
zZ5M(8f&RjAOxpK}#!@wEK%7zm=@P5$F@PXpRQyATNk>D_5*|@2DgSpJzt;2@<bgLp
z>;AQ!ZmUUiOTKjmWM!{C2yP!`OCJWRa^3@Lr*>~Wor?lL{}&oolohhvXW`j8Kwei<
z!UZmoH4F!;c2!N-I@E2=oL;9|SCs2_^dSM*v2|%{m4x`*D7~xiXKUqS=<|+TqmJ69
z9ETP6WQ6<Hwk_Dc-UPC^uF|jSv|fE+#};PU|5hoO{wM#$%*6GdpgkMYf3rE+nEr1V
zYFP9C587`x))VHpmWazn7I_TnEjI~aHn}p7iZQW@<gYpv_NU-WU9H2vU-O_zX*L{c
zSgxZ%7zGs|Aokv8SK9Lt8qTZ`zVqom*?G4T&@XSUxSVFodJQ@vdB9N1d+f>`^WB3y
zB?&X%fSHb^Zkw#}48Vc^J3Xu=hz|o$kr=F)Ec0}<@%p^)f9%{g&PCpHyw&eZI+b4>
z%x!Q`mKt{xNDj5lT)a&#%$>ey*2~8!IJ9WyX2mi*o;gIB%Keg!n`zq$_A%smok*;U
zR4#XiFRP8q^XDJ}QH$($OgQh>APEO`pITBBm>gv7_40CUl242!-0kJ1SwsZH{r+KL
zzrF1(E$BZa`Y#JHpTXC~qEY7{zJHe7m^W%VGfCgMG=CKkD)@8WZUz2PwLw5a2ow3$
z8=iqeKT?<)OrS(O!Bu&7d(JI8XiA(#gr0OW8m?!I1>K9rZ;7g>h&ZH#=74a=1j2Tm
z(i^sktOG@P>6-Ls%06R5{XPcZUR^l+CpRTTTkf7}rq4lLT$8%rpa~XhJw;x9{3>YB
zP!1^kayfwvRF+ez$u59(g2Qs2_2&MT5Hk_+q?T?i9K=lfL2Gx6eZexx^!~5WB-e07
z%Rj`()~Wtl`2JkhSNv%+Lb|AoqXpFj^q4%dI3cdz>tvcAOyOp7M<pBp!}Xv%Ldwy<
zOP@*@w1Hd~kSDcs$E#YB2^qmHHD#8QAZy1FNzkHg-2WmDsIq(<g{&uM>VQBLm)G_m
zpJj3%r7YXfVys}&N-Isrv8XjLOW)jhFH4#qy=ss=b)-`vv8At#o$?RV#m`VKx*t~U
z8@bI}9V05uWRKyXukPsqh8E4^_ytvH4+Lu8O%#JwtZSW_RM8oewp^r>>ebpC7A&y$
zH$8KxXifD!yTa{yk&o#5c9D-)o7~%tRFTT4yl1Q%5Z;AVKo^>&U57f7lduG5!jOIf
zhc8;zd6t;HIJPM(ie3`iRUS3|CG9KaEPY9&S^}#j2%tOX(wn}3d1@PN{lyxM=ob(x
zdMRBYjd9#$^>@MC1B#q%6bW!uk%0pWr|7Bv)1E0I1){_LDW>pw(<}{7e?OYE4xGcU
zHDe&8%b>2nDRA?%=}nmVX9GLE?gJneLMELVh1g6Wgk{!7RTMT<|MF0=%;tJTA~b#=
z_X6q5*5}icN1DHY%%>L^V?e3S>;!OFc00Ra7qcm+1n^!=*}dxepF%cbn`BCj_h}K7
zfp<>q4&24|Ij=y|mv*t-m)tUF$FwF^HOnMh3_qbgHsGYAE|*0&>g>!o5w{Wzp<jN4
z<b=&jc8XG(3$X^TppmV%N^1w5)`eGgcV+61-Wf5FWU<)*yu$_wAHeg45Qyk_|Dj{c
z2Xa3dee~aJyQhuGI`)X+N$z2bQizf)7z^EhTfjDsv3IxAT5dC@G_|9ul`1jo)GW}3
z>r&UrRlUX9qf%L;dmu(D4wzq~k2mk~c+28j>rKEggh#2(d+zD%U@wAmFE^H;$yB?c
zkbu-VqaT%u)cM})uSc7=2^e5y{=7|-5KFP}KGN*WCi$qwJn<JKYmh_fPLL*Q{P`GI
zfEQ8Du%<^hBLtWOHCC`YA*2O7>nMNqzNRIywxBA|N391lp7U{kfl<^yXr^H(Zb`X)
zqnv2h6Vf=eRoy>m^rZJjK0tgwG;i+n$%;bMvP>VqF=vhj@NR8ZlJVU+h>vKH6C}Da
zCNz5MZ=I+2cZwVgtN~~Te8{Rbsx%UW^ISP%7w%i%>n*Rvse4G^1cF<xK59NX|Cye}
z#P7t$?VF3})Y8l{jz1@R+czAaCx`o7f3mx8e9y9T(4E!+1gq(TnZF!jKvMmTL5c|J
zqB(Q{_~}^E{YgowD-oEm67Z5a&9r^0=op>AdO(+C)gI7RjpQ02|E7pk6fb0zG?F#G
zE7Q;?yeCDF!R+Qn)Idl;_c0i3=T?dQ3c{H3E5JP5jZfj<TksvyG<NnDcU)bGcn&7k
z95*U~*^=}js-{M?^C$dFSir@;T9)dIDwqcWtfCIg#aE>%V>-H|jn%NbXCvPa8VTTb
zco*Cd2)c>hfF6HAG|ff`yv|3t<EUa2Z15he<UcUb)fcE44kp&h(9ky*N;8(c9F1C%
zp%HBF=oZHl6TbNJw#W$E5@|HN`qCRe*x(8O1P}&;D=1}Rbo`i2r|ALsAc_g0_wqbN
zr2PTPqgl>q*G1vtlhc{+4#J$v|7BbIp9~HYJI8-AIBZP+O9qGe|7LKCHDsJO*pYfF
zUy(EPG6;f<Zb#;9`Kl4+lq5>!>7yi9Y{->}sX0z-uTdEI6D_Pxcd?-~E)L#%bYBKj
zP*&%^aK8xTGZ8ZpwH>T)XZD&t9eZE*2&R@%D$`IlJ_kn#f2jY`tQ%JJ&}<u@miH)S
zufE@y1V~0seHH_BqauL!KlgW~`u5uw_Sf&x38?u(!GwYdzVV7A)T?zbZ-2k8S~~^o
zHr=G*)agDNdc8l-s(a<fe*x7iHGFm8LyG&|UB+0tkgQ__J$D9EXbHO<+orN*b1=g@
zVLo5>Azejps+y{sjo$4HV1t0jN(gjHv_fV0G0weZzN_~>RAvDT3#y<iHIqB5Q=rUT
zHF!+{onl?GvmV>&i=xug2R-wi*1C1fRcvA@0H^W=Q7By0#iePZTv+s2^H32-HwsQ9
z8nmHI8hbTR8Sl;#e#l%u;ifZs6j6tXeH6`V5Y!YPNOf@15SlPkbi1v~mrC@BX*=@(
zN!!C0w=S^&3`4*v#Y{b&YqOSEB(Wy&0nNUzIcBs*#kc-P8_6l%3|0sBGz2G=(J2mI
zo3w*PXB92)-CR`((_%M=zspYnnt*^Aq&j~IR53LAH9j9>af(>uu<<c3k|-<zX70q>
zeA|Hrblh#l8?h+R0D>R=29Po%bO~bW8B*e3_&J?n=0m_R7n-7ok-g&4^jHi_jH;pr
z<gxt&`iTZUjTu*_!oR2wI>c1tWloVW>cZfh_rKAfG{`H8FpDVkhWY4D;q&j3jn+*@
zg!7?}pjMk&Z#VnIKIb3ys0}EfAunj!B$0(^lqS)xLg~fyW5BhaYOSd1OzCr5CH%oe
zRmjR!`450wYVxXLItVYjvmkzK@GpfXTg^{wykweU(=aIn8*Ifp81XC4fp|xMHXx%Y
z%uZegCzKjvsTv3)N7CFuqUuyQBdcg3()?Veu`^YOdTjqX`t_ne<WCwe%--wHQ~5}9
zOZy5voM5JG28IavQnejT#DS9(GU&$)?3ys3u8RO}*BVp#%}8i7c5-ttv65pZfV^q2
zre%l98t~&*@olmo<Bb@LdfJ0YtJdz96O3sb^QG3HB5EcE8*G<C%1wiC)if=Tu&N=r
zgbq2e2v(kS9X+WEn6^5eNEF`gF}Cz5iVj%wNIb$}-m>ZzxXrDLE)nFhZQpKUtY3^-
zAR}PFK``^)*HUFZ7jx8j7YDya<JaK(BnN-KPb+J<-!;RWn6+3JFM`axG=|TElvC2I
zJ_%q0oY{%kh<OsS)&=LBk8q4tvZN<Ns}u<uT$9IyWW;@<g2-`x)q|6YZeh?M3g#R&
zJW8Q&|5n7uX3%pIH7-DePbpEvT1-rsRR|!DEUt22pY_yceQ*IxO<j3#Az(^HB^)#A
z#A|ZIgwEPrSUG$lc3{0v0LARea?RMnlF~6_uGKBrpGX@}oEq@xtc$MR`sPa-k$)(1
zVE6OzjI&wbsLE)PH`SFud{Y8Uhu$>GRz`#`s%B30M(8_Ji>$X~A|9_yp##r5Faa^-
zHrw4^6}4!1r%V~2Zop9qRDZBV`Cw4<ok6mXH|do<RZ*2eu0?2OcBst4!!}}1kRmWh
z=$AROLi{0w0-(~IK(<;28UMIPU{viH85#n!DR8bbvw3!^)b9Y38NOnnGN3gEu8|<>
zpubdTO^0X6<zrBQOj<S}pT*iF{$x=8HquAhYMc%Ak5<7}L&8lRy*nqKjRlIJ@C~A9
z#Qsx7b)FV;nk=oyM6Q&$r7)F({vB9TQYh5godpw1^D*3zKe;zq@#oIz3c`#l-CjMX
zi!a(1#g6Q_^cu%JgEUGGWsIt+Y^Pi#3x=@XSbX2+B(r#E#+Auos8-Im#~XmDbXD@Q
z$h$se?`Gda_Gl{*wX)P|$hg~0BClP3>TLqo=2OKm%Igr>FvO|<QVtj;xtG4o@!<@L
z?i{10^*MyPQdyv<mp8k6jAs{LFlG~Trpr;n+?5KB1@0sHRo#s>dUFE$k^9XMzw!C>
zEcgA1sFo06`=5>DKj;TG=KrzDGO;mn{0|U<jrqUHzHH2?d10WGfFCvl7s{5oPw+N7
z@CaNa-8R7r0mH~DzU(roL0w-LmDA|59T`soujKK0tH*g{LQBVy>8K#sKj9qZDsEM}
z27wu_K(1%NscUn(PmWKHhzCP&75n|<@WobjP`jX6mH+Gh0o@nS@ibGUbF~E&lfI3a
zy<Lm@Qfh1D_bfvnU>e_9%i^I|@a_1|?aW#x;-pXU?WMl?O5|&=1vmCdyWksMkVwg;
zj<a1_Gr`=^-;1rkGxvj6?HS$gwg`>x0<YinJNk2ze`D`^r)um6ICny~z~c=A(PUw6
z?q{umeATN7`0N~HX-WTCNAi4MUEBKt-UGh{CCwBn9{g3m0Nt>KP!w&i;7}Bde-d8i
zN*Rz;mT5wcpyzp`HU#U|zjC4UzTUK7xETi(OKZO`eXz8d(YO(j#h2jvEYr6^kj2Fe
zgdJIWkupv>&z6o<v68F6=wol3MWbZ3F0F<Pb!MY*<44h%qbku*4-1g1U1|V_e~kw!
z(LymLV#3gw0Yf$TYJ>x=<B!>lryG?$u8=Uuy;s6QilY#deO4KvM$K*)TPvj^-BV@h
zmdpBJzq@B6fJ-Gke(~L17uaQ=BFjeE`8>DT>S&M@0-Y-<4|J|thkFX`qau+C-7y+>
z#b|TX_L<L%Fi4=bk^fCZ9rkh6_@1N7GRksxZ*oeI0xZ_XaItF1?<HY1F~@DVj}sq+
zjUGzo;RE=%<g~c`jY-xNBt|z0Q#wT`538muiOv~^vm81^?3z!DQQ$)(j_1M4p{A2c
zg;DU*Z7TjATv?+U#yDCw9+3}0IjcP6U6dpNn-ndWq}`bm8Rvm!iZt7&1iP$a*L3QP
znZjAD0rXNTd-Y2Wp>#|fv9sOcso_1GHs_>LX;Az-3hf959<=l(3_R&Q6(><uzy<H2
zjQB`~-`2<6jQ7cYAdwBh4kRM?i@`VJK@*mE!KC471K{=)M(g1A<*IWJjRggnV+vla
zFP|<_AP!lIWkl}6F+~M&m_J1}!A6>h)6qL;fJGn*$y4Kiwo=cu#XuHf@JJ<mihfM$
zQ5nkxcfz+u-Vhs-U|OBr^f)<-9G%?DiucDah0FE5L9uRt@YtTQ?0zcRo7Lxo!exLE
z7|XnAf`E8@lriunjO{YIq_&)vxG9f!+*kcm<<{HjO&jdsYY@Fo_h^$LrwsctLI|8Y
zKpinPjHb+WzwYCPx`fIw&CS&lh<*x0X947#xKYQR2O@4A@AkPpLD;cRLEzUjA~4FS
zACqTR<>+P3hmos>fZf4%CUX+os&0b<mjjzghJNMXz4C*tlW`Tt6LcK|^ra%#9LqdO
z3y37RhaN?R+VaLbCpROxDF*QD9A1$OKsa;yUu(JVtkx0d`}4b){*5GhfVd>prfh=>
z6qUg5>HL+})^ahDjFdr!R)Hdpe0Go_wtAJp1@>Z8@e@aI8XlPm&tsSvv5MXg(nci=
z(bSZZf&fCUv3+(f`sV;=x6DwI#T>lnD2mt?{9z4zx9)kmfa3lXJ5MSn;D`G~z^_=L
zqmo#kIMVU7dD|G#kwx1W;v<Tqi2BL`x|CnmD9CIj%e>Z7alUFzRZ_BL^Nd~&)u;DD
zl$VGGBr>fuD5z^qH1aDMUpo6`qb?cYRGZ~vvZ7Zif0Qlf>07leAuOb);@Jh|$;!`3
zN$|i*X?&*lfAffDoh)+6ASzKi01{A%rIxaT5au73jT?F>RjlXpJM5E(&~TKNUVjQ8
zPsp6*A-i$fU?$e3)cOe_$nAVWg(%hXS?9Z8eibcL2h1&01<a-6Lfhu{b0r695F~*m
zm}~<#zb<dj<RYB&=b<c-36ftbeEOS#y2P31aXrE9j_rq!D~$dO0mc?nfJJ`QjrTzj
zdq&|hPML#*uc4%K_8JzsD?dwu_cjsRnju#9=TXM^jRj`_V}}BIDg=3W=UxH4l?~&W
zRF#Cc>-uU1`)p%i{FCABA(5AO?gFg!AaTyXJUZ-)&Hjm{DqT;@_3vmq7z2Jb?)>$>
zFI+Eule^=f;<xplX<~RYfOlrwAY0OP`vU33FX<JE@$CZLOt^Y?LxbjST!X|_TxoUU
z@oj~ZxwA=SDsXE4=CRJg(Pg*6YdXP0wVaqsRWTkNL8bs~hHP<EmKc#UT7al70oszI
ztc%d)3PA1BSj!U3O|H_?86N0z>rv{w096bZu-3u)+v=m5<9B&Hz%1+35tp>r5%;|F
zj&u{E94tL3?I?WJ3>zf7<pm|v&NY`5m}?e{(FZXzpbq@L2q(XCiHZk<nsUf&RPex>
zC;GNouIdSKQrC5*@{^a~7Bhr=+-u-j2}eT(RHYgs%2aK+`piUE=3T*dR73sLvPwoP
zyZOX-L;o;jy`Gf{pnnLX)CI9P==43Sp~ifvf)Sl0Hg4Y^JzfyT8EuNJS$Ou&4qHL!
zk_rwTyx<k}FdojTYbFQSgHfdL@5#d!5tc35A%Q(0+(91MdOKLr17E?y>t$3pjh*_4
zuEzOSf1u6j_Gjm!&H%^yI`tFx#Ni#-({fn+I2*(>WhDLxQ0Uk`vd5nbZ%(0W*&H=B
zFx=gDaZq!nVuh1Oe=Ub#c?1__XedLgY-D)b#r>-mk#U_QN{digs~Uxc6vBiB>2_b%
zP$6Mc58J}ui@L1P^0YGJE1IdAzB+%r>CFb-l|nCywkkishSC)FACNPTSrC3<K1%7F
zLdHq*F+E%pfZZM5WvXOws9}{z<n+2_)`0!X=(X4#T(m8kDwxKr?@YZ<>gYrYvTCxk
zGt|m+<xJfRtf8IQ$Vs?m^<^H2;%j6IP4=TuUBoU_ltAT9VcW?#?54qdn++L3m!#Xf
z-y^?`mHw2W)X`!O2e-;sgq#AXBCB^|69k9QzKj75kVY4EYiHmVhE*(B51S{!8B}M7
z5}N1PAo8G(9-&ta_A415HD@5rQW9$rf^XT?&I5)o+Gw6vmxOYlk+lXd2fpU$elLH0
zncUm$ZP2Tk_rdM9Dnx2l3&1tnG8+@2xYG#1HbT3|x)ypY^=Em*)!N)Jy`E;L3yu3S
zeFUiwVA+81Hxa697DTE){41PuDN9pN|41U6>@woST;S}`<y=d+`OJIUzhcn==T}~r
zi{};VOx*-XqYE~kL{MsKjbKpaLU@rcr}8Q?T3>Q3%WwZ<>=f~7UD&##gI`GXgZAtp
z5~jA5pW4-LIjP7op<1vmr|Y83zdl$&tyM`&0Dk1f*A=H2HHz=e|5%%tmw}?{TWG39
z=hi3S==c(vVFxR!bq_K|)-|-~3!CfdA0Svg=Gfpxry#r4sCh!t=zbN%r%mC!DFHZi
z5fEcPqLp$6)CXC@-^^ZQ-0@_o`ej5C`ZP~!yuQIhP1FX8i*9}q4;L8vcV+~CzY{7a
z^IQBkJdut0f4qOpY^?16?<ewq@&2X8se=AQt#sC$a5*rt%~kmWV&#*;joViV4pzfe
z4{TMW%?R#<m2JaWFvvM9)jyt{>)jWu8nl_YYa%MfC>*AT`*rIcPQb}+gtmHL++CgT
zUJvgBUT5ZWm;Ua*4v#lFn_;AA45QQ0^XCK+)`2G`S@g^bqgY{Ja!~%pDiqNFzytsR
zW<UK6Uh*(r3L_^IDb4NmyFPw<RP9_@dR--1e=G`YR;gXhrD8?`h`EssvO$<&O9YYa
zFfy#9q8!0;a<h4Pyc<`W^)nL9zxC=8&1*Nmf8cxQ-&x%n9|wm=>GtL*GR5I8-AE&R
z<Bxx{1BcM&)HWo~TDCqP4{LLCJM1|DzNAQ+FXDmk7b=PY4-flEOrdUg9Hzx?E!C6o
z-o$vkt(iyPyc{B6v#bVxk)&m+Mbz<&(M4tc?LSZ{x&=7pDEQKX5<zLiSpo$S0{sn3
z65j{9sbA(WLO92b*RZWkwRPsQu>C=B`%P$(&^<V?Rkl#SVT54iC)^eGz&jZN&?wHd
z3+FvtVGm|u(bKAG*+tT#&=5RbWg#e2&+<F;>}n%jk--z!yvNA&6r$viYnz<Y)Ye6f
zR&03akpTJSXEI>^mZ!SA7AScqM8MqfFJ7_wmMet4@Y7OP#=l*&{=Jg@qo4Qro9Dc_
z5=EQ<yPX+t>%D>CIEU4W=7h`%C{c)q4Y4+;!Ci?|pT68p3PLil5)nQrF1|8azgmAh
zt~j|P>f{{>@ZVZJaL95>nNQAT54_Ue^WeN^Hmoe6%|I#i5#apDnY8k8-)c&SRcI23
zRN<6c3s)I&E7z&EgDBTHE0dhGR9z}uX(Xy6gxeB&oSYPT$2rgycU6D_K-g}8Hg{cc
z^V2igK%B!61O-U3?+#|Ca}IQbG<4iEYN>0lY)PIkLnK#e3s(1H92C5AviTg)$g@tD
z<Ee^ksHJ<-Mb42Yv~_K<4yOa{vCEK|l%nACE-(fMtK8QKT3AxCpUa1Fh~kdF1^S~C
z7xRzj6u1CgeX0ErIJANR%%$z^wldwj1yPJ00wkQ4?fW(pVNm>ti2Wq7oy(!}5TZQa
zC^xkkmn|0X*?fmIY)Z;7q<%S^l35WQj<gBJFQ#GIwvCr+_=0t0s*#_Tg>6?M)#_=O
zo}SVJP4dQGYc}eaZ+4gsgtGL>v()_?zXbkR1r#yiE^0y|2^TT|LPf{5uCI4n<2a2V
zeg?z_&CBK1Oxrjt8qmbyAU()%!?2QhH^_bN7GL{-5Mq2v-d&BA?3aJJNHkB0%dWm}
zi!SOMNiwvgsF}xn2PLv8Osr_Rp%4&I+-B>L6dA@PmkAw1hh|(F#clq5j-Yr$9kQ%y
zfPu%vG`LaJFy$-&F~?HofpHpC;h9(67}&j~uc#(cggD(qy;e)&NMNO>29bd;9iwpg
zHQvHq_(6Z&ZsnN^DQXl^0AVhvqio&HTu6TrQ~n<UiX=*k!T{1^ixvT;e?VnJDHL(2
zDbvCT?^1^dRV_u~g*tk0{OmY4J6*mf@FWfoE_ax{T}U4Q)e1+U^CaEIv{}cg0J527
zEUSH23t`j{Wsh3u2>-1!QaLKDV3L`fe6<lE>a_vfq`|uh1_xtJdDom4hGlh&y{<MR
z6)W0cyDDz9Ks)VLV({IJ`olprLWstSy0ppY>dYb9$UV3^!bF*PvnAh7+Wp%~Coao9
zVi*$c(?L%_%X8qWr7j1t{6!N9pA%>sW3Z|7?tU7g#)dzeqh>s86HhiUrSygov4S7L
zbeyp86xj5Le8>Zl>8?$V7&eULcv{GF{huBM{3KTyrw-V&U7e^Wc1f}R1Ij`)SJ*Za
zCsrf6-I3KU_6n2xfQmI)<~LGN1RH`#Q2bHbopu3008Z<@!k|gV@5?mnS~$A)rvU3$
zQ}-<!Bb*YA2_3idB`1y|-<mRg`RW+8{I}q%fvx8oh{l|2-mZcnjYo^vgBGuft6YhA
zMmefY?J(kmt_9?wSa5VK<A%4L&!<fRShDNfZYft#wZU@EHaJ>Q+5C1Vy>Vw-iQuEq
zjIMS-^jbwy621*{NrlF|GQAh+jpOR}ZX=IbT1B_^8C}4qfg2x1dX$7d<78e%QY2{_
z6%Qh+ih>byTLFru<O2iI>JV{!jZ3C~*y6Mvsc>IlDA*ydY+X@|Y)yu)`MreX0B5sz
zU_g0U&VX>3r-p$Vs;1359gr^iMPuKqiD3btfs@6R<=+?>?4}2dMXQbX<n89+(aSD$
zy7nA+cbs@fpnuNT%~^Qd;&sppe;?&$JHgMHY^%VUrk*em`Y|MVA5ZA8_^g83wD4ed
zfblbZj<goWZ`BL}&gVxm9PufU!LUDhPMj8jvU{`4Jkg<M_cyb2w=ew74OMj66-_RH
ziKgAeG|8WvvP4ZRe~(a*FBfWUz!E|@PXD+%MC$~cE{-+0RLsv)7uvPQJEMHu>PiBd
zn_hM7@1a>f@&|*2GaQ`4S9JR@Bao|;&nc_n2v>0;j&h0fxD!wNH#N4%Kc}LP$UjBi
z>EiKHUL!I_6AN8aA6U4gDKFJsD0KmwbuN^QwrjN>-!sHkSaSo|1j?y6ZI9rmZ&Hif
zxw)U%G9*?kt@@i1SS@tsQU#a{gR>o=%Hz&7@g~-3&8Qw$Y>2<BnP&uYdimekJbs*Z
z%2&?2V64CJt_Cc<BTTF0%t6&Qg!I-K93@rPO51GBj^CxaR(EaUX|l>H;Ku>krp>yN
zt&_)gP{}R)@ij3M4#He6iiUi66!qj4Xu7G{ta7^-7?xG4yhZ_xObWb87!3_P@(po+
zn&>J-A{waTM#c)*E65@PV65+`8{(cICqQT*8^~bu3QZO9m6F8#U0U&*5)mX`Dgy_2
z)h7tb%BM-PxFwKbE%)Lpc9Q|lenl{L;*|y5MP(5nmO(UDfzlOJc@%FEgcUGqT*lHB
z23AcpKUb=titAzKDucPf#aR-vlw*v%46uS2ou=vyR>4PI7Rz!a=A&EbAHZSjBcN8{
zR)&!sE$v$(7R$$wBn{HSRY9==cGW3sW)jPHBa(Y46Hq8KIFXvD&jr*AS0hqGHG`hE
zDO3hV2w(cG(}xD1rBYNH3+Lmk<93$QCz}^njMmWjrI*V0`HIsv|EzTJXQfKkfzr~y
z@?vP4*-MHR15OP!&terTGD_Y0eNi@q6v>L!LeY}7h<*v^);BOtZK_^3G1}Y>OUCWj
z1Itb;qZkMjM(g4$0a)GqgGP=;Mlhan-)EOGL1#d%%%jqP{T)7|R&kmA#e3LUb3)3p
ze~aRfgpPxzhJZwW%7_?S+^qLg%<ry+60HA)X@#4p&cEfguvJI%oV|!Z(8p%B+~Lv1
zCOH^~(tf5;Cn2@z7-#cDoi56@r{zu!8F64?MC1THe90zG1hDrEX6HAJF4x$n<Su{B
zR>!@7N}~SN*A)cUm`F5Z7;wvpE9l~~>eRNcX;?uUwubP*m2Wf2?w-7F?JXVD6F#CE
z4v3W_bjy80bWT+%y4>1J#e%B-*sk&GXvGVD(!_QXQEE6u(ro&rZmD<i6HCKk62UU%
zYXtG17K<-61VC<BR3<d0IR1_8z@6I<<I_8=oXIDLJKroBF|DJM4uYACX*w*BxNX;Y
zo|B~O1Xq_>xA;P+A_pGkVfgKhWBa4VWF#>~D-N|q?uBmPdr@m!tqizdcDQG)8DF;i
zy}PsA>}W}|zjj<slf}lG8);2LE%fsS?OY)m(Lawd1`yiK<_=Ag_TTO8O-t?qByiS>
z-)-^u8m7bjrXb^*PqQq2du@AkyjG~<f^bi6US6G?J<oUWclF|xxBuKdMSdd%W;e6?
zybw#ayJHppl`5B7_<S~7XqqI`z?ApkheOf@cIL|9IgbDRuj%iSSEqHzwjCMTBkWt&
zX~if7695XSze*qxVRWYlRiCVgk-|;>FzQJ7h*xLx@yVEhCemKULE;WP346}227(su
zYR7ogK}*$iFV>O@fC@F=zTdxUb3~U`r-M`xNi7dwW1BIx;}GCxjbLYzb3#Lo4+1)j
zrk&Xl8q!!T$IZ%n8k``EO~_R_C_0I4$isNO4!D}^@v>Kz8Cm}KEpz2~#lLuUEbe==
zb?)L8e!PlhPr!4oU5W6mB_uzUwAI;hq4x?kMPO~98e?XTh_4OQDzw@@=3@_AiFW2t
zXMhNtQIS}_^?ZN-kU$~+e)Fl&3HXK#{4M?TAGQ1cO(g%<-ArZ$!@|V&|DX^o|BJnu
z<^LexDFEs+_NYuq$6fmpFRRi+x2p#$&8!8;vBDiFcwW@wEzofi9Mo}unbl4`c2#AR
zB2n7mgv<2T<IGUXXITdWk{{@9mf7<fUtn8m%3f0Tk*2%f81J(<j>)U78Z^*-4v&eN
zB|Y9`>6+B{py&0Z<ySOWUo&}<%O;MD(km4YFu>2DJkgD3etyY=6$&y1mbSUlULOIj
z2WA6?6RSD_Mf21_hvr-Z(vRmkE5@)`)cG=dO(h@!7d9bj>=K8@v%G!oaFGIPy!ycw
z?&yvp>%r+MTv8Q16aO#<m<ru4UMS!S<l6kRY6CE%b|ez-D!?+<fw^~babT_Wc5)%M
z3^<qI`weNHc!q`tG+69!5K4<W$nv9hd)2Q)z;z!SL-jQs%6G8WT?3<-#-k`LPhp&&
zC!Q}vI1ML@=@Mc^CGns<DRB^Q_&Y?rD?+XCzp75Tk$lYdq3i+tFU8v4^ath$LLHjm
z_j)laPkEQQlAA2f{w%&g<dAxHpJqDZ0ixr)G3rS8Z=tRfCkHBe<?W4j%lOeF7NH_-
zIg>e<x)GuiJ4zw8MqXzggugkv%dq{P?Q$Oy&Nx3HyOQ-M$G2=~H=y>``xU9ZQiE&@
zadzlN;oJRjE%d58G`0G>6Wb8mfkufjiP~@P!;7dXThFVvP)R@`B_hW9U)ksJ0Z{I&
z6?ysN5CdUo@--2ABAScNaM4UXDOi6zlvTmI!L>xXE9I8bz|;pg96Ki%Ao<7{3j8Q=
z!=&<ZMCXr5!`+jEps)K1*C=gUy!6qS+iI}`y)!g_mkw8C!4)F?%|}U`-7xB|(x}Iq
zEByncUT@vrG9l)6-p=%mj!PO`0hnU~wBxN@h6rc;`+8%1WvYPWQen5uVNgqat!j`$
zH>;KeQ4-B00^``-U?(&)b>z^jiEy%xsCelsWbv2{MS^cN7>|irr4kEG9B!k^BopgL
zR)RBS^Wl+6%d(O%agVj&<+Pbw`v2(q>VPP=_ite(B&9=AN;-DwkdW?{4yC1$h82*I
z5TzE7MoOeRq>&Z@r8^|0JKtI0-mmxG-}}d)JM*09e4ajM=FA)l9fd2_6h;Aj%*pKw
zga<|q5jVj@Y-VEncl3b&S~~}9Yh6W_3Q`8aX7fS#Rc;v|Mg&-MBM1*xmI=az&DDdP
z7<jMufkYD#L1UM&w{tPGb8)7+-WXdAeh%Oc{{{;$H_WjMWQD*BYt8}T;ofYA{pWQU
zPBq900obM;xP0$=4@!7*m=YTj2~4FDWC}aV0udr`RAFU<h7e&hg&<5sFc0iF7eohp
zTnTc9y~_g;B7*s<a`Qk`2r$(W5I$`36M(bM0O|e>1D$*j5ds+Im=ChQZeMkf528kZ
z3q}B=DF6lCoNOrg`{YL9%}K1PkRmu!IAv8uG5k8vKStGB3FzU?e_>Q*px~R6b!8w@
z1ej<oKssLz;za;@<V*u_uvP+pwBFu;d4>q)y*`ZxhObBbQ&C(1!ml7FL@o$i2t0f)
zFnnppKPVtDze12ToFY9Hgh#*yfj`3gCk4;7w&5i2KVOr;Z_xaM1b8=7tP<#l8w{ha
z0pX*<6C<1e_P!2*0484vvV_&v02=468mIx?N4c^8?<Noj0s;@L8ITB{^KZM~+8E5q
z3rlYUtjKlkBKTlVcoP1zS1{ML%YeWDuxlP%a7X(m1@|=%SW^xN9}Ua}U+r=YYbO|y
z07g~~vH*brE<j^^Joxj>f3yXI;ccC70OI5Q2OpqxzzMApfX)FI#s`D{gAW47XLxN%
z5Eya`67nCAkXw+8UjYsAz|Ot`E_EFst{s251PIInzLpWz(h0%?x`g+P$OHI4pgTOC
zf14ffWx(vtKzzWhjt1uW%j&S1IY996LXi4(4{*nUTOA+F`){iQSJL3p^WNAT%=>Sf
zgZVhFb&JRc_+&4jz`tz%SCE4FZej8P-U$%k{s$%B4N72_6u57K`Tj!rHwS*WZyH`h
zh3WUf1Fp)Y50rcxCUpI`VFH410{)#2gv4+^pdH}5OoM>ma9&40K7{ixtN+Co!U<0g
zw|0SWalv-J1L*#3e+U<h>Kn)gk&Ea0`hV;X;o`mN2QUoW{t&Kz+aChH@lOc&1|9x&
zBK*_GAYg77^*6wW03JZ5!iRwWgB5(8%0LhR4qQTf$bWFcyBP#>R_G59!GBQ#kqOrZ
zJTkA_bN|~+5N^md21IVaTYw($xc_Y@z&`<Ry3rRRgy-5?co6P?TMI}e`5<RF!F3{m
z@ci4QAUr(RSYYoygYXF;JpcA62=6Uc-dn7^|G~-&gcMvF-dn7^|G^3b<^Qnq-D17o
zZ22FGhrKEU8QsJHgzpyc^|r+SpyK1XF%PhL8a(kqt~XZu2L(UJjq><!A@lzSGXE`P
z{#(fW|AEX8hwKEntqM?Q@FCY<!2Yunz=VH?0V43@TD|ZulKnGbadYs%ldvP4<QneH
zOZ5NX#Ce^k9f7{6%K#hPyrB0_3dl7RfTFn{Ky$Oi{ht(nXc$=BaUHuiO9uZz#`Py?
zu3OO8>qGuY_7`ZbThLtpb_;Is4QOI+@ZTc;Z*0H~=7gpF09g>;DE`(VZVk@I4<r8x
zVuPnS#h*a>;DVX`1i=_@QaRUc!sfco$Xt+{;N#-H2{GWA1dMJN<SM{<g9yxZ(*>C8
z#)4q3n+O2k!UBVD=^(dsK-~Ns22t|gbO+|S$q(S$(G2)@)B@zuYeNF*^7h|bI({w~
z>j<!L=B78u^`cBQG{~(Af%J1t4!NF$0OxOOKjgN;LvHIh<W?FW%x~zqZ`eb4Zt4&a
zlsD&jZ(u-f2VfB1TRJG;Eg|16A^$Dmty~cP8$xc58#=%ZuNiW4-q3O1R(9^&`ptb?
zrMYjbF<{<ndIKuJs4wkYs5m(}{}{?~R^^R=DiL5*%fP_OY78U*6J7<8!&rXY#elIa
zfiPfcD<DGH_9O@$cD@EwfRjq#0@*rn0dpTjfym1T6FUG1z8?VByx5U2VDbkbjQf1N
zXg9IUuEqyJgBPkvfax`7<OvWKIwuD|8gRgY!Nit9q%f*!5GJf@3PeoL&x^)?t$KDf
zU?-d#B>-Ih&G6MY(5h({gcSz|xjhYxC%HIaXHy^=I57Mhd5|Xoc@z#n=t$S?Vd=9V
zG8p9|hys>2`7acXqafm2s;!Oxum%b~ob~?*Xkn34p!@g!D+SQiwZL$E_t@1qfo~iF
z2W)K$!~?Tj24P_TOFY<hZ`ayyFhs(HAx(oG!1R_uB-sBF9;Uhgs90zh_=7Y9*VqJz
z_7Ab}Ie9qHfCH{lpj&QUG~j^YEQ4ra9y7on3P8b>*U)Y${=ekQGaxKj-#Uo!f71R-
z(=eu45b-s~{~G#laS(y=<>?gA^AsHS$}GUtdm1nmfSc%lxP@Vx(*Q53xxcl44Owdr
zApgT~X>%Y3c=LZ?GF||D=DPXLKbq6Q$man!fJ^-U$43YYoBy*<I@r=be<N~&Z`=vM
ze-G|XgfRC702RtKhzKqd0qpAni0@BOfRB@*aB^~^0SC-v3q%hSUIbxZH@Fq}+G(#@
z=|%#f0@#}5_KMs%h!zo;O~5sFdrD;tL;@SD1Z0GV)W10ZV^r!n00}(sKwQ91c<?a1
zB?5r3!#-65E&u2N&?`M`<`-arzs-RAM^tff^P>R=>_2gZ4$IyE5rDXOAaHeX+;&m2
z3q;a&Lg-xnKP-FA<uCgX!7x_-X-)tO9V}$!Z~X&tNe43;1EIlsR{mDWwfsl_`~6o6
z;kkwIm!}cJDpvpIq<R2EJjoh}j`Uw~cH{LoY2ZHrek~&*47LWS3>of^f7zS>hQ0p(
z6YtODLjVGE@ZGqJz&Hp!?l+Ku-mC+R;O0RDO6bn+pI%P}d%Oo?L<FWr)JuR3|G%C}
z2UJv?_5Ux$|J3H*3Ly7_d*=Vm3!eB;{z?khibZb&S`<wFjq3lS6JX^02Xugl4kpkJ
z_z=7_+}Z)o4iOlF!-4*B3YNEdqdCHBOyYm!9xyit8gSg0gog|5rc?r1>(89T&4b2$
zUFrUp%^c@}h*;kQ{`}uk{^h%vaL>et5pMw^!V?+n)+YC0f4k)Mgzvgqz|#}_=EUE*
z3K1C1h#vec3*4hXVE7%8X%IEMW9$cDpmtpkmHv;qG_V8WK;*p%$7`6kDgm(3!Weo0
zME{ItS`ZkRzx`c95yAY|o&SF%{3`~?<92Vg!2L%IgMr!!9Jj6xFGK%T@oiza_5o#}
zeEykbul09binew^lDEMBu9=ANdENhP4CqA=w$cyy!v9_I0bij7!DoMP+5Ve{ue}B+
zjDL97b=t}u09156@POO+7Q+oMz{mcw0p_DW#Qwvxc(~DSChLDY6AZ{y<jA*GcxoE-
z2m}HDIcD(~x-khR3~L|AKR{eE!Kx4bavV4YTnK~@4LJT#>-9k5|E{=jxj+zLHVBAK
z1m{TspZNXHzQFYD59fl544=`#Q~9l|aJ?e(Tssi=bxs69fcYB0fEvguz-EBJ)C~A>
za|sccTfw>AQ~?Md_e}}{20-Z7!yFI<7@_~|<-kUQ|0`+NyQg0J{B3aH!RIyC%-}-9
z4mNHFQSj5(mFD_1(K3hv#LaQb6=+Hg9~<6-QO<(UK-_<oOyE4_HFiX9&YQscUngAf
zP9DN#0p>tE3qX!^n+N3L=DLlU>w*SMMgG>AAhNu!+!J+q7|tOm7RBDqjNQe}9`@-F
zWC!I2UwgQSh_j0m{En!5QbnwnipB_e$CjDN7D4#dZ_8(!c7hNQVnarJNp%;Fco~hm
zp9$}K*m{&<6Fv{9o<-aE(r7SUWHz-_gIp5&kV%S~HpKMvfog&4!-AjX72|KRZJjm`
zzmJ!h3MMFJgD*16pi{|bg3IS3%V%d${lwk<G|NO^IsucRplZv;&c2dnlg-EY^ZDh~
zKP0>rqXKL$599J%)<*|*#L!hXy~|D5(2}HOEd`hasMWHDZOXu9E}={Bnem(RwSyUl
zmzgWZR`ZZT`|@g8%zQt+6<TDR*H|5sOBN9=5n)%xSucE~(Z+-xJ8o+BHB6BPs(G^Z
zFj*~s^mDh0HTt7a-Q&UrQGz@zYxI|6JCD1S(NWQS12WF@?piYwNSvrm<UV408=6z8
z{vlU|DSTX9Qq4K<<OiZPbw!AaB<ByMHJoH|qkYsP;^<>Jg%sZu-F|sPYD4Ldby={i
z$b=W>F$Ykkv&Tui%Qez%+9S=YyHLl$RKwVifLz0D7%6P4HO%2|F~Xor!)C6&P#?zA
z#4QH{B`eZYRI7I=jw;3`+`R{cGI7eO#!)@gp+g}Fy-Caa7R#w~Q#?EA(Us>44}Bj9
z#~mnPeJE%WNWc|ijuGWtY@%>GxEHO1B$Ydx{|O`h>r_|?Hff=CATkI0>Ke3i-$5z+
zoiYMzE;Ui;Bmt$EkER}*E+?x_Qur5c)h%&;OPl>eJNYsKtWp%r-(I2JM{7gDXh96f
zU!?{3oKm2Z>aWx_MptZ}J$eT8PHFHiLhGE=t4MJossV<VB3t5C0}HAd)kt{MaS>ix
z%al08Ash#urEN4>nd=(J%!k^bEImp&X+1u8Q1xI&cCmP;@r&%?MVp~rc^EYhX<=Fe
zGcG6YQs?)KS2-Wm1&m1$>Sy0mX5d_`+|zBEd!F=A-hcn-Wx%+}5MPp?dK`9gEBRw`
zAuc&Wk@VkPYs&s^s3#b{`2wmH%vn$FvDAp@t=FpM^z_TNl9v=q%x4%tZJxU}>+7(h
z27x9wi(mKXq4=W8JKV);^X0>|NE5BcEs(g39LNu`3L3wV;`mLpDE0X%VJM?<V{ogl
z-}pO%z?oyb-9%l#C9InEJKlK3ti~lh79sQGO8C}z0ULIohM93cezos5C$=>^Ra4IE
zc;$1tL9H7~_*!UZD)C)(Av9{nw79=fOnDhf(-2|$1>^H~e)syq!<9K4V|xQ&qc@fa
ztfwCm9Jd3!Pa4>AQ68)&*^L$OjH{{&j&CFGAUIX*y%*EcLnpK}ZydcOiSuRHcqv2#
zT`!q|b?)`Tk}+eODDS&VaBG)yig=-X6qSoSRhWLH{~G(LbKPfzlWC|h@b+2rm?iko
zW$S%5-zAq|W=IXa7_(~4M%VW(-?8sh@uYl@1kxB?G|H=7x$B{{RWyPREqt^B^+n6^
z%Vy$p%Rcsr5C=+ZCOsiF9#sT`(}yhav~{eAMVCOhE;<-jBbb}q4%urL1lenonO(n*
zUbRQ<+fMj5KHAKWftEsx@@v&+%vYHF6?iHfyo_b0e+GMgdyZ6w^E8uc<NY%uDSN`T
z_1<4!1qvJTzT`C2Ncbp#u{M^UQC?VU_*fd{3pGB@r>@{^IACQ~C{<eT=x_LB6lXKn
ztNBtKvsh8ZSw$qk?@5Al#!vG70M52Cx=v+%HVHHat+YN*#;p$o&~s1<tIw-QF1lC3
zI9@v|ZMK{KB5&WQZOO69Y#j?HJn8-^82Npl|E=MNhoW?kRFdLeu9DYg;C?CWG#s2-
zDt2>rC!D4q;#i2dYTktGi(_MmRednPFnUZyl-1jN=RUN=2jXNHTP>t-V>VQkwPg|k
zGZ+tQDe!r8XXCDC<}8%M55Z+)pDNml$*4UKGU)sZXU~HVo2G@|@8zd>&1}NbH7bz7
zck3cs$kBVbMeN^5wtPty@?GXRrn!SkFn@&)%ugPQ+^6hLtbLIKwWF6F+#xmnByK95
zJfT5DFHfi;UbFhDD+DSuRZpDr29%B5fVCD!CU7sg&9=rHmopuT9F_LnfD?iBXF-kS
z)y!)9OEdEZB;BSLd1X<=azaE%K8hxGVKrJfVG$cwn1^HW<u-LGcproEh`q=@2bQyX
z4UJtz{<vhgz>$6Tw9!Q3)57Lz36At<7uzTw0|e#Y3Nw8TABSr2il0jnhWTF|pZ=QS
zCpmHIQ6fn<diI;F9ttsBzH_*pD!;>%BwEYVD{q(F84DBaOqv*jl_X}E$oaPfKmX$O
zqTMT0zGD3C;J3F*dhEQ<=G8vfbfGIk?&B4SSDA4zp3@x+rA~&dP9eN0&XOTXXebo8
zGyVFhvkbJ&YNpOCz=6<?FNlJ&!O#oau7nS3CQdS7ccD~pi3mDZ#ewBECpYnN;j-HK
zU7M4_@269QHogyro9LfD3t{}~q97ZmH?aA;>o+F3z>rvG%>wSC18dAnv|n6oG>qo<
zWcL0{_uc(aC_>NXT2G^eH(aoz+aHM6oF{~*1UR#U6Z>E9(q^&~CEp+OvZT1TAgtkS
z@GvMtba$t4)EJ@x)z%`RNe@S*F%;l%U-)&A*Y)PZ$gDG=$C=R?+o8LcnS+#(rp?~m
z>9dQ(?9y&IzoK7cM+{1eh-b6n8Y-RNUY2}V<ijEISp9C4!2jCtHKtp|L(NS590;e<
z7ANJm3H72x;hte3ufwMk8`_W7QZdGC_2Ca0ZmYc+#m&>on^6G#xg{3|$KP+z0h4L5
zox2Rk8j>1Mp2$``xB}52fVjcjv0``ep%$cH`@5*SnkApiX?#AUE!ShWH4sy6lh-EA
zGKkSi7tPX56kk;0n8dFMh~K6c6K$F+MY!7{8O8BbL;p!}hF;M7!gg{M*SgKhRz&qW
z-7|{QnuVZ*!Gz?kqNB(yFX+~pcfW)>*2B<js~qejpK7-)%4v<e$R{j6oJ_b`KSOcu
z6>)U69q%dcA({4&cI~5K=)J9ro0B36O}Dyw)r$6VS61<bi^3=GFQx&LJtHI1o3Px$
zHYuj)MZfMJ#F`mgKMiR+1Ae|Q`Sc^YG5U-S_(5p*u`@t}kx8+Z$vQnpJUKoo?$cl=
z=%*@^BCe#W{6(eR-q_~)YK2FS=N1$b|A6TLw<5|ZM@yAmy(f<#hIvVfUyZEdwNs_C
zsB9kYDeI|n#)u>=-bW!4^!pu)>;2$RTihLV0sF(CJ#_OcK{n%d<NWQnZwSSIUDOO!
zjPK$(AeKw!D8E<l&zaogPQWp2l9I0rC-foOZ#qukGA<ZIt?1HE=Z(?oE}VmMagNhg
zb?Qo#l%R%c=Sff{M8+LHkisBb2{;@7ggcx_?Smc4wAaf*g8zvRSYc}Fq%?mnzUXx>
zCAAEtSTF?Fie%X9mY4=LE4JKs6V4&G_LDq%V{h{*G`wAa+_Jw@4NV+;E{d5R^y=4n
znZP3i9+X|Bu1;<%`o-atp$DI!%qP?7f&_%sm<5!nte+#9)tjkhUI)CvNnBA@Z=t?3
zU1lv+R{?zyq*ZzJRPycSGt`~LU2z5%iC_|azxe{?H}X%OrZD*%(c<&%1(3);z?^w@
z!4hB(+~dmb?x@>x!NeMuN+b6~Q|ux&@T8|LNvthDJoHqbU|nkR+|?_63$2cJSBv;o
zr~3L^f3_oCZQ%v4<0J{rsVr%vO{c*o$CHXIqi@#i8^IGBlLcqkg|10L!@Wi-tFf+!
zR4Vk+S#52ps3?a-Daa-(AFS~rih4Q3bGAX+I+)0oCbAK<xV!rUUyIcYYAWAG#J0WT
zbA+|2sPpUU>8Kvwx88W57zJ%(evGD|9Uc2znQaUaWlV@~+zqoZY1!-Jt90S3HFEtI
zKluAcgBv2A@e)5dXXhQ5nn8KCF*)wX8`3GiGyMMR=qW~n$d~h82L*@j)BEnRbQp3V
zRsTX|%7@&fFZWc4Qq^&ubr%}H>Bn%ZmzqN3IqWI2J)-~Ga%AWG8!uT2n#0aIPjETe
z=MGY!u<BZ?%5UEs^L@UaZP2Q|AYn9Fcbt!v494zjkrNzb8HV<wPHYQE?>|pi3n*8S
zkmiEs{TM}B9{tt(wXH3hM0U$JJ*joXq2i(~Jtc$!r-ScmewIpvhm8xZ{^|T_tCWlP
zcdrFGJY}InM^%T7`cvyqP)w0v>S`omTVWy=q6f&c0_7be6!w~=M`9TAhU0jy#yFiq
z{fSn`SgbRgEgtn92%%2&k-o7G+{G3Q#kA-$Vd4mFuXW;)ENdBPbe_K!MBAz|S1`kF
z#Sd>C*&azu59)d!B+r2gay$sOme@zzMt;2A!~bsX#7=iHW5bvr5n2HIUD|m0t{M8R
z&Y?iyOX3W)scf+fDa`PdDlu1Ce@~X<yRx_1lJaW@)xDMhSWN`uQg!H>gD)K}Gd5r&
z4b3$cLt3OMCUayo#2l}}Vl9Vuv41TRrT9K5{e6r=`&db@x9aR`aK|MEn1$_tn8B{C
zy~Arr`b&E((fHcu14(EcN5cZU+k>-LK0?J_!ER|#@AB{@dZZJiG|&N4^PV;g8i?T;
zuX_4CH)7M>e=U{xMYHr|Ti<<tM^!RG{F*H5r;O`h4TIOnmEbH!v4U^sFBXQ592vXK
zb10QJQmHcNFFQ6j&m4l2_sQrnOezC6!fk~HrcJE5s>~p?#O~0Zr4ptG#o7%Dds^m{
z!YNe1*N<KXSCD#n<HL$;#SIJ(`E$#PUNxjx(gX#i1}H!#E1;Vvh;Q${hhaw(Q$6r=
z_g4BrthD$-l3N32g(<njRf?9}vSZtHrzx9ZMTFZ>*Ba8IQz<}%b|U%admq#532xFP
z<JW|f-*oQL+?9O*O%q~0!g#*Cx46~+m_YhjY7vCc$!)u9AS&=<xj&|q%Z0#jBFhxQ
zPlHm%RXY>bBmF09AFnz>o81!Ze}9&&d8hZ{M;t-dWr<DPXJj>`Cj_EAc-9i;=Cb$j
z%MKxhpHoQMmom?n8Y`%gR!~>cpK#xk=3h@TNxb^<1~Ou-mL>E0QU1qay6DC^7~gSx
z5?LRCl2UYql04%Y^r^Zn>Yp|4uM!7;N(C=*oIHGde?4di?yz5%I9YK?Z8@<jA(Xq)
zh(L+sfd$>WO92&s=ow7^g$RLQmHcB6skkSitPJ^Jv}}R`KR9|?f<F2iEv?^uPgn*O
z^Ft=8hmULtBz1NskIhD|+@fEd8jVa@KzoFg-OYc+Z3!;>%<QE&cf4Jld{a_Zw%%ZQ
zSpPE2A|k2m#m{5ML6nPjU)TAb<TmZ+DQ)Lv*>qhEmrI;b;Qa!#FD1ncZ-2LUZfyKw
zALC<q#K+{4Uu5KdW#SxkMETfuJm#_t@ry*2XRZBKW3TXJzu<S_q=tJdjRKv{`EKq%
z;(^PEr$tfUP}du~1$zZuf~&MA6qoNJA?LSzkvL;V-`&NU`o^(_DQ_WZd!*m^!qw&7
zNKn=CT`zlms0eSHMSH!<Ozd9kxfUzxOs!|S^+cki;CV8U^xf(r16-1o61!iEI3V6H
zJf#ycs-Rl?6anB(iFmQ1$d?azeLMH>Nf^*$ec-e@Mi=%RADMV*YmE3H;kVa@;i%0>
zgozXwln~MDWX=YTAZf)g<>6$G_vl^keQM587M0Ln4{Z*AW@x6xi5|bxd*7V9>|H_=
zhS@MjSp1t_j;{$iy$Ys5V4DQG-sk3b%iijA*MALvJ`C=OAM3?8$1n5q_>j=5V1~@$
z6HgS6`b#mJeJJAIbFzd@1qO4$J;H^yePjQ4SbU0tMK<M7SVH^0IT>*r4lz<Ir(Ob4
z0-FLf$O2kB{<6Z$kIjRo@4<y9*tvr(Bl>f6&Wq{|m*tvd`3=Fb4@*9a?JwAQQt2jj
z3k&5_*=h`YS4qDg45Q1}DXzFSp4C#kz*g_i5^h}O&ePW2Li*C^6#rW#(_IqhWA#zS
zulB~hLZ8z^ouOq_Bi;_fx7ta&hHF=Y78i&0^-D`ohN9OEQH-eKuSz4iv^>fi4X&at
zJ5X52W_d)pRYV+Cn&QOpkWaA3dEF;xbG2uDxou=}sO5w7$<_q-H;O%4yMr#c&VPge
z`;0+L^nTT6NQViJejj>>##6`Ow&NP8Q14gcovVLgO}47|3z1iGGo$~rdT8C~l*)F6
zibeDpbnUAjihHxmHrN?qX@fg@TzgFS+v(a*`+Ft`^GY6(akQR4F?k%{w`1v=ceVMk
z%Afr3_A$q3d!-ajDlMef=o+rOMY8^47IBno!B-tLI{Ug|xM^$@Go2vT{Mp-qk3z3~
ze&Z}MbXjH&e?%xypS4CML>xul3ob@EY^9bcOM#Y2mh@1wsT*|Q<j1#W3fI^vYwS`q
zx~zFL5II(Do{MXYZOo!4@ZoIj#uB}K5cX=CPQP*LK9=gNsT#>D>5HHYOVq$80V3Qc
zsGNMbB)S#+rw|$EPcL5MHh&EwCS1*=CKihDqxWpVdE|%qm~6m$Ii8fVN)fL}7Y_ox
z_fZ_m_hhp?%S<OdBtM)5EmEZ&rIzQ6qON$WH^IrT(E6hX+31rq^Vpwrr-50pfiou~
zNpjZ~X(2{4gP+Ck?24z|CpC~_ArI@aLRd6f#pu|~u3VRr!-$-cweQhx8j;n!-E1xn
zYyHVGiJ&Jcp})h^BNva!W+&Fe*Zz}IhfCBJO4;NaA6u$Awm?*uNzL$+;OS9XNeh<U
zTrCP0ttsWSM9#g}?rhI3p1jP;avwnfA2vvOM$%!dN*bQq5j!2LvAXtj$=)@HGRz-9
zpXgvw+D5SZ-FCr8lH)z?&2{GATxB>G<WDF_dKRb2<%s%)qrv|}K}DU-7HRT}&#-1m
zN+?=N@jW5N@KO2zP044l+>xBzH%SU^v_b;weR(<%&^rs(Y5R{8dqaK5_NcGSq$m>u
za1S9dA7k#$shK*{s>@pIKbieSJ^KW~^aamPF`A?xWO8BKGR|5wSMf@IRxlAtMkI|A
zRTq7M4!Qt?jEZEP?4!@TMp<drn|Cy6F_)lk_sMw*JJ?HK=vkdfrD%jL@tWmYk$hv&
zdFfI?mO!DxX3y~IEhaLo*_M%C&fXA3`rtrK4!L!XDQndDx$54L((2BtEdOi_`mfLB
z`jB!LH%O)7dp8d0Y0Jwyhl3+VY46zt!+qpaC(`hH#*o!Fxzi`5vU?=%U@)rE<{s2T
zX#xjHmI-1kV4tf;er+!jruab49E}1)(oGpCFkd7y?iIiKvKYB$q*wQR0so=;wDLS<
ztbPM3rL)o7i==%VT|r?ZAO8H~9TGpIxXht1b<hi^afT;xIr>s|+aKNP(2VH{jT>z!
z${aRptpWt^+$ER~(-OR2*VzVZ(>~eIhjNIK!cs9*5o?&Vqq`0XcEc&<NK5b>9>Jo=
zhc{)dze{{l*Qci=oQ@(|a5_`*z+J6<hCXMhP}l7hBJeVh?;BIP(+F$AO5}vQx8sWX
zVDdhN*hVhb4)nnrgW|KJnGA6%>b5|)0M@MLU~%lGy6>VA?w`&@f2Ox)DLULa%!e{f
zF-;lMNxo(0%dgDUuX-_aM_-WOr<P{f%5%w7a}>{_D0v@(64Rog^M{1Nzs4s<J-QO4
zW9Mg{avk&A%G}B48!w(J7_6aO6>#92dow>_@~F|>!Ob=hS6&d$Ev`G%kes}_OLGai
za8{3`lHqykCdNj9)X+&{Kvt#j%bYYQMdCBt!kPgHuIi-or`ex^TssUq=nXql&Q=vs
zN=Pfhn9caR%!<@eO23&y!&PkND@f@Qq~y9D3PnXpfKoO!bl<za`xL`&7D80rYMv=*
z)~R#|>Qo~NOv64IfB)Hweqa}QFP10Gz-mF7?<|hZq6jy6Y<WFRCRK~Ibu{iC)LSj3
znOL@LS4%Xa{ys~PxJ1G?%U3dm6^qI^M!nfNq?lHujvDJU9UFHusqv~2J6TjirN@}~
z&R??)_ZO=+VpcXwMW>cmG0ftAev#Zf*sGu5sb^+GqFAx;hPYmSn5))Izz8G3x_}Tj
zDiE{Gn{=4+!9Att{0R#5xV-akilFazj(L<$2xB{!M9u3-A#ae)xJZ6LNlQSRwxzzj
z6dicgc1LxVZf;~GrmBhaqS|-#apL7;e_K-7*z$EV32+B%@#!~)OIDpS+0B#HcZ`rd
z)^#SU&fij^J^Xl9&sZk(h4suo)-lWYE_zkAv!_DYUJm{Y`}uFZMODsu!9l1;?HQrw
zYqgyfH5B*4=hl^v^e$5F9oa41Q>W8t-Z_k~kU#&h;jD_q(mrN;tX%u#O(19ePmHV?
z{>K@k%U`jwp+={UcS}bXsJi8xq7?IFJrzq0S9#rqXj_oCCkdvB-S4uAfh<^-zz)Ym
z1a*F1Q4*&fvU&&J{KT$dS7~!lf(Wi1(ViY}bG9j2dhL&XsOc{;vkF27dGLO_O||8@
z7%eOnC>793Vj|19hAIWCiMiy|SEx+W<C!g5mWDrk&cs?<%C_v4$E267C6h3*`($`N
z0^8k%hQ`XDFdFGOB;korh~Qi51qTtfukZPA43L~Yc(+H=vik%g#Rp4>K&ubvuoC4<
zyOegjV@d}7yR_G^jHhu3BFzq1!N-psD3TYC>CyNwv}c(Hu{)wk<aXz0&h~y|nJd>l
z6p3p@foXOuZyLQ9PVgjt7^c5j$NA9xXE(KNB2_|=D}H!xNU=<Y$`kZ`#gdUaA)RfD
zF1-HSr(2GPq0+!d|B0qoq@mS*G%}QfX9M>aMJB5nzkY%|yQ7R;JWEON5iKlo58D+1
z_*A2t6|T|o_Haikx3VrX<Jz&SmvO7C(Q}>OcKV*%Ss2S<0Uj|EGDM4uM&$fXP5P*e
zf#Uu=OcdfZ+ZiFB62;{`GL@&sJ&Fp*sqP>4y?U@XURJTmO~Ionfky@nqVGN+-(bnh
z{T?wa!`mVp>n;|`MB(+Y6}7&1!G+&d;@7VQ`(PhQL)EC9Mn;_e#mwn*PS#kjS-jk<
z3Z>QJ_>R&;;+fcmC&a}ANV!(=$LoFHCW`H<7Qwt)ow}!0C%r0M^xixPvI7f0R83iq
zMx|>mix`<5EONa|1&m)qIVjW@f47Ij7A$jh)t|)Z2MVET9u_R8vKQ_1V~Aw)l@G~D
z*0q`&czWg(%~O4=|F%G^+py`IXoVOc`<>(=F4b#vrihBo&z<=Nn7NK0e%F0xRZ`J!
zRbo-SWID-$QYffO3w1mE9Aodk-%U3Aq>X{^Ecz7Bhv2cvqi>50&CrEXrf0S$fn3Z*
zpKI?`vzu7D7dJoV(MU+TPqBD!vY5r!{=105JqK)dqlRJPA!6O^7o$_}8q}j)IUf8N
z*Wjjg7&y5n$xoMH)_$+T5JwL}vFY!XT&IIH8Go`jGj4iNIGP?F88MFRo0NfsxckKx
zrzi7bsww)z-W2JEpTQN>_1x2Ea_8V@%lKOCHcv&U-8<8L<q4AjU73JVQ}kf8UG&G#
zFL$DY4<QsB%>7+k#uo7#LT;@NW`b2+;|wt7;vCJ-=@?K2D}NM<p0*YRin^5g2zJD`
zi<fVH7xG0Zw6#~BhHsFjJ7_eI1~*-(_$zfdQ)wqZm&q0=aCF6nx`2pKr^sF3)2x?y
zSfH<Z6L2K9dT#(bYtVRmaCIf7h$3Uev*k|jJg!8nK0vUeXg+x_^#!-%*R~$bMFj+R
zJsO)}IA-{_u-Qwa1ZL`f_XZ-#X_E&O))Lc+Xk@h9{H*r71;Ljjg81VjRtA$OM-xm7
zJg)eQBg_L1!58$)P!jqaTDu2~3SYyq6kMYhP;;LeJh>YxizWn$wa-7+eFKUKq--WW
z1&q(;Ij1}Q=|Twkm&5vnP>%ABu(P1r_oWAexPD>5F^}jRpJ!6j@lIK?FybiCbNpuE
zpY{E&BG(QR-iJjhA#cics@vrsbUXFW<Bw=9v-LhcQ}bDBfC`Q>`gp&R<)AlH|Lkz`
z&M@OVC05St69w)(QZf&xZ2n&1;j5?JB^1->+Ghkvnt3r5)ISp==c|`5WIiC3*0EL4
za5;jr_ZojwW;ewxaW*6&G{UaFqE--I6^#?rhEA}f<bQ^!G8DM`CyohPik^`uH{@;P
zhkSJacE+YaH-naAb1cVOHz7_6Z+xaJ`iAY5jG->_c9}BP2uf7wJahkq=y|T_<t|Fb
zfmi<!wQhVf(_3n0_KdHMzUvf5*5!mPrrVRtU;2;A&50aF!X6iWd!=v95T*7=Vfj=t
zutiEngyM+f65Np+_F#QDMut_qDBwpCtq#Wz`UY#~w5%;?McrjZ6s+FOuV0(n;};?f
zQzuX^sc%zJ9-8V&N!d#3LuCs!1R0HA{wO`_wWeIc)pCq?p%49-*8cpN&j+J16}QWr
zvxP2|ux-6M|2G@<zu!R%_VP@AV0}?Eq`?ajEGUY8w4h~h@p*UBE-&|^cUE?sX)aR0
z3%;MGZf9H#Pz~x<9W@=2=QIHhR=JZLti@LjtU0xc)=vlbOvGDb*O-X{!Ra=mI)2k4
z=ySfDwuZmm-zaKmmYk^v|H|3RHSi7DYpe1YH1cmh8zW_k8@A{w<WAv=RnOF$N!gGb
z-~S@leq=RI(ZEv<c_d0ehWi4uL{mFv*mb}C$8JQvEA&<OyRhTt_6o?6_72Lxdj|IL
zI0DaP|1u@Y6wf1p1`|4U1MuBUWJnEpNJpRToD3&1uG-y3O+RjmGy3lio!JUx90!XV
z>&@Nzzjt0^XY#kVeu^<*{3((}&HuyA$(gq|q0~p}bfBW8TfH_c2w6gjYb9l8AS)s=
zK}y{&`wmp9tY-70?YiVlT}-5b$Qhxau;Km*zPwjt*w&bX+r;@|n?b_p!^<W&$P1^(
zQ!L{z-CKKS-pa`c@%!y;q*Cl{g|ZUP-%~qY?l{kGF0ps5o))nR!9Sat?I`0r_HdIx
zrzw5DQq*oIB4{<_Kc-$Dtc>bjxA0*-?L!(Z&FCtW155ggbK2<_()6kP`))P^+NMt*
zP|Y^Kp(Ik5IS&`XrInIpFzkto$#}e;2=S1$=35L#4YZ0w%$;Y-WDyfn#i3rGz9+EP
z<wdlG9y%PynQYV2U1g7rKGE<+=yP^<y?$-j4|J7YMdo&$2v-$99XHOf@nBBYp<}HW
z=}MBHP{bttr@=H<kw*9UPt|}Y)Jd6~lW2}0r2ac6B74{lAq^=_BBYecu2lFNailh%
zXpsbmobqU6zjq@APM~!zx)RLDkvn-wf1Qj?m+Q{sKMGP|Tv}I5WMy|RV>OE1z;u>w
za9QIGyw6C)Ye|3D5>cuDy4Zeg+*vFlt5(BX7P>p>$mNJTJy+HfdSt{Uk}4V4Y_4AZ
z1BIK^sg)WxYG1eDR5NNxM&MZieQI}ISDq95#>aUa%clj{S1$=)A`C)K5cuNLo=GJ!
za#QY7vkJ22w0;|$E#W2>|9KIG@u4_`H(m|ggkh!qZTYzY-}DQn*x_OWB5bj8F+=mv
z=wYaeX{V}$(33Vg+MIU?AA>WAzg?yuj;Km&fa=n^zJG*fUnq};<rHCB8e*y{y&o8t
z@zki;Ny@{wPW!4tL%sxJ+7@A~_!6`0Gm$%F8Z8ycDMZ3IAEC<j(FUmyw{7|=h;B-U
z>khwZFguOc7Ik+RQW;Wd`kU7L7vy9yo(e|LR{9IA?EppknPp-6h_ESb>(~PpS3<Y%
zuZ=Cpe5HeO9El&hwysqqA~_6e^S!UiFQx9p{WwlqWi}kU<OZ!ionxqxdq&vTYNw>%
zyvh6ueg9N%e;S!++(G%SeQh!Fp<c+5dSzxM&D7wXeWLoFEg|!sBA9qV#;R7cs{^+r
zR8HQS<7wuKAm)ntLdW|T9VSon`@k~7K0ghMzw5o={X7yZM)ktJ-<1Y`)p>r1yT&i!
zeYEVSg-7Kdf5}R~EIO((CD3gm8U}YdsFY#Lkywii9s7LFrLVEnr97LDMrV&fRtoC!
zl>AEpHRPPXac4|NuwWjnVJFb{htb(+xzIFL=)ztUyQ1yq0iJ#Kf?Bt>wL2p`!cB~@
zBCUPRw%na>Io^pDv1cZ;ax<*edEN{z+;v<UnbX<A@oZ`6^6OiMGg3ug9)$8B@Y*)?
zWQfYUm>np|n;BY9nP--My0o-ob&&3NS5!Iu9#vpi^dU!&l+W2_MPRh$%jKi}mMo}*
zVzB&c{G@JdGwHsuwc3Hq%hA<edVH)B?~Jv^xkTmK>2<=AkNJ(hKh@mxD|uFnD=sm?
zX~1vt2-D9&X4q<<wDjZ4U>Y6PL<o}Yk9>X*fh{QR1V89QQvtd1mi#kg`*7QfF-|a-
z0Svp{SWcOJc6`c7x?e88#n=%o65SE1r8V5Oz?-#W5%Mh+ca%u0dH8V0LW+-8Ou_Ww
z(gdAT3r^8FC371YA^*nfFc~W;HCG{8J|xe9X~RTkxz;_;(IKAY=gB70y0d;pSuG7d
zk3<6>`pr~W^bhRH>9sbrw5k=0@B7&{>)M3EDh)sNhXxbZE*@+2m9D-WYE+Jb(yNjv
zsXUFhwGx~zmZ1a*HnkJ8%xz0>kYcf4z1@Dx)+4r6YCY6Va7r%Pm<t&TkJTVcJXpew
z)A$wR{phZZ;#3{wPj|DtBfCzu<qj2JTDo>*`RH+juWkxj<33y58`d*oF^u(6p~oy%
z6sL6qo_c-xS4N5>S4Gb5UDDEC&<-Dd=8=OFh0EwGd-@r}vY&*G4ihT7r*teeKeZk4
zEkdU}&bQr2&x`%JNz2eaVL6A6Znylxq&)KCfs$U5zgKp1eiN#iD2o$G!6KQ*S!KB;
zm{Zn0M+JEu<E8BxukD9&yaKa#o5Gp>(x;QC5f{w;HFj{YI9jT#Y{R<<3p##IMt|mU
zC#&xp_{{lGPNGZH=at_Y4vSSzpAkl!ZMm_POIHjJjjk|R7cJ-XyX^in(#mxfjmiOY
zu?Im@3KWAR7HRmq-UWMPZ%SVhCa`?MG?$={ziJ;y71gy)!LBW@<V%e1eRCp8l8_J=
zIn?GN?fr#2^Fku$P+2fHrxI#P#B5lu|Lzjz4RR(yXQPq$&^R$~-q34|L6ot?Y0P2G
z#cT9bdlqSOR`pp3$nn^-H(FiVI?;{Mc{n*_5;Uoer0m<`&IL;Dd|vuGoC>dtz7!E@
zm#{XeI$p<JRVM-X9!+{kkE|at^&3MC?7Z3$p^n!P*}@~HgD4#fi2BfofNjmB(4tw4
z!8ev)v%`%RQ996L_po>FBaK&+>%|q0Jh{VbaY7!GzA>4cUm<O(#rtTFCXXRvKDYYQ
zr;?$n>K~y#_WVt5A6^i9R29uL43O~d9k-NsydGO5Tv%qF6&TLQlTUYgBmB5NH8ovc
znR7)9_9<LuoVes&CD{is)Ict}&$CvJ4JYbZ%;KX5NL@$?^v+U=@AQ7SuhA#H3hmQT
zl@y_8A8lgv%|3AUi1&(zDR-KqO=>b^_9s}i<en8W7d~Q-EF2|VhLw8kF5#5Fb9(F@
zfR=|pD_wrBlN&$UQ!HM-lUuJ5l^l1^L+NC#B_3b+Nf4@uY7bAa6qI0I?`_}?{|@Kc
z>*F@>hw&PSt1sEvw3Yd{@H5{=Xy?!oF)%weJ<QO@Pxz>qZkiqZP5|KyN+~~G8ri4Z
z%ii7B)Bi?V%%0%wiEpWZ0jv<bUTRqtqZgl=-xvBVDvp*(-tm`uoqYk{5L4^GJo%;f
zs2Fc!?(DmF^RvkEVoJcrq?i??GI99u+N>_rf3X;3E6Akz4LUNej_*(ErJ8CZj2xcW
zE7`CYv`y~s<<bjUMwt+D?kUpvQXJ&Iso#x!TFKfx-&Cr1^nr<Nmcmo`sdrIP1_AjF
zz0o&Q<U?yd!|Bgs)&!=)&D?21!@A|nURx)u(%Df&vX5J$?`O?JElkDiHYH+wF0?&U
zOj~%LR5n>$WTPS&QKfFnQ*YO2bF6WAOWpJRa=7y)L!!8seq-P7pgd>l?t=^;5X?TC
z?Mr~Ty8MnY9!2TsTo!!-A8Dq?=UAecSM9j>9Ocx)UhX13dK2=hlh5zRdjTFc+=mY>
zg*6`fFhmB(gdxeH`9k-;55>I@JG2Y<Iro)L|5S91;O!jicpyc0_>oFf>0>ZaMmQao
zEGP0QcG5oncgH41yZ42b>{pvgLtb^HxUH=I!G?HuIVUT-kE2RUGYpo8A^oHhhEJ6@
z?moPlQrVB(d^Ixeq{7qyeED;;W&)Hz%p$T>MrW_tjZ=`cf5!*fQ281?)}Dr<e4T^H
z%&4=!r?*;(oFF*G>1FSSHl+$%q1CF0M{}BTY$FoEv&L^7k^+Z*4e8_zcB5^QxfiuQ
z$64m#@Kt<Yofg7Nis>ltKRrF4@xyWjtHQRatIiQL7G`oLlxkA&h@FOcS%>m+-#m|4
z{@$TRkd3a?-pgh|sD!wGX5~FEJzkP$5nUd$F`!>A&p4}K;R{!}C7yBkKXiZCGVWyE
z^Ppw26u%Twn}7V&DB{a}cHF0&;YFiau`^aXsuDe6nUmCZ5+7TkF)8(<?I8(D3vDsA
zigzC)WMAJ8=?-Nbc4%Dars<A-!zwG}(Y`nESSn(>O?%N+-wL`a>*2(5en*P}_3^N_
zBW8|@!A!k;-Gk5?w;B5er-S)g{``6#)+4;nCFjx+(#lPAo6WDm3qcJcHVQFa6=RZ}
zik27!A;0k5wCz&sJxAq1zE6*7#-TpzImicMTjtcI5PAz)Jl-G4MQ=sO+-cJUb{(kd
z`}z`V?8X=Qx2B*1dR{w+CX7TqN!qi!W#wU`jIE^l-%{xWwdG`5SXN7Nwdk!m!>TH+
zHGkvVyKhS-@IB2qo<~`EsjTKeVmNo9gZtQWuiMgMXw!I3R7<gh^|J~AUi@Okc1(w@
z?vU4aijGt+vVzwa#x02vs)cs`!8X-`y^AtiMM2M&-Hy1SsjQhTCxn!s57fYF9~!cN
zOb0Y97>^eDM6{9e*-ULgd!fgrmAna<_vL!XoBsDduri{duW`FH-dAL~7vAfD%z3P$
zkQ;K9peDOxK<SZ7<mQ=kW+oOeJm#Ez;%OV-_DMzaN4nD2$d0WM8`SGE)GJMwFfd;p
zXwU6p5in{%Gm0jo!%G;zizWSmW>MY(Ry->&@1?y|vtU>vOxSboYf<#>pwK>_(_S<?
z53<*r2(8Q)p5Q`$xuLtU(?3B!a%GH5y%tilzx-28cAXiIsH%E<wcG{~kKs3!(ueq5
zyiTJlPC@RJVH=+bG_*k{r(SX~!oVE9uoRnEyPCuzXn5gnM2P$k%ew)FQ4l3;B&&)9
zN&|Q01crNW6M7UB<u#R)#cJ8u-KLBh%RZ^;`gM=bj~;4ptj8(1wB`$W$DJn3bbM$`
z&|1XmF>wv)Aig@u8=Aw6PvG&L3BM>Zig-u0ZMEuGWW%0g6#Rf}hfdpr{i!O>LBy$$
z&?{#L94MPvGE*~=NLS%2fognBE*1;!-d9=WGf&eDaRse4)0kxr1FR)8f8Wvk+CbT}
z?a&kE%^%+qXeLkZ-?%u>y06B-R5L8THjVog{Zh?nmku&80<-mb^H|UjHZi(GEM|sx
zHdZV%-kpLzT7=lI-J=_4>SlQKE6TQT7GwSG*%p-FrF1nwg7?snsi2X$0#C%#A|QyV
zFXqs7UPbb`rKxqOSdKop<)z=m__4TYa1oHIew<*7WNAFccedFq)v-aYw&=}ErFxPp
zG>Ld&z#Duw0L;6(mo+mbQq@?fT3vsx--~mM&z8hFHK+T<k&^N}VUuOFnmy5ay}y;}
zA_F?Y5EzJRXTPllYiYXZk@F`V=00W7sbHZ)t<IZ^RGONca#(xPk^NnE9+j@sQm2RP
zJRGVNIBf5WRB_C$)AM*)aoq^oUWq?%bG#5aquy~rV^_nT`OS`pl1Uj;VJwRHLsUJg
z#t$X7n8!Z;3o3k2Gz!6V?{kZfC?%=ft}W2DXU1%W{S(?GnyawSC;>{3ysk7BbY?fV
zpg!Xd9!%?(Daa1Lv$bB$Au>^V$h`Gx2`o=55qUL;E&Fwiq<SJ;vmN@z-um;Up00*b
zdf(<O*T(6EmxfNsp3URg2iWF9tNBzIn;n!V{rTT~Wty)}+T5hD5=y+k^4L6&=rb*V
z^8Z3C@&CP&b&foHn5-3{{JjWcECXY*T$9LJhUfLFI@Q=a(^pTF20m$7h?h8sUV1F}
z&n+&UOjK3(v4||^d{(Z|F~J_W|6+{d7iE>%WUHiQu<+*0)!bgz2udv4@3JF{T1TxQ
zqj&g*xDhL+gAd5h9qDE*o5s8xcn;g9PoU&pKN7j$ED+sqM>7##jS+ob?wph&Uz<vQ
zxGdW*80P${M+R&m7ky!)ZZ9u&hkfR%Y3&ZSTq;|k`;#+C|9h762;>w7c}1T~V|YZt
zZo_+|BuepS=!EvHVa(Cy%qUaTO2x@SdZP*#VdN~^x;S_Q1X=nJY3?{e0qt=D%U$R$
zwO3Bsu@_##Im%BlTqN%<`dU4*;>GbvW*>qX?F9&hJiTnARU+NSJE<auw1ftw$_PWj
zlz88hcuk>lOafljpPeDHgR;t;ohQQuhffEBR~B>e>PD~FT=+hGEhOm^(${`=#BJF~
z=B4EO7>6%HD?i;y4>#-Fb(Dk)CxjRJjzr`++o~kl{KWfDvP0&JlV^7bmR~Q7GGd!;
z2SPTVeivaWHmTi@C--3!K3AhJd{6PFn8%u#|740L82fTA`VhHsDqs7>&Tux`!~^Xd
z6cBHy!#e6-st4u%32)@DydvN3OyRSYy<bO>TGIaaGsE6Vm61NP)Qn=Ih@$eNfwG*f
zS7-KVJkDKra3F6ut=2uCfWG+r#pOXoSF!B+$76ramAs10qb;9<HqDe0RdM$(b!H%k
zOj#o9(yP`x$Cr9u)w!+YB9~5EHM^%j(wLg%Q}K~;(z?UO5>7wJ_S+ZOeDJy`G#iDk
z8QNbAfB6Qoh*h3_>yz&+{OW<yqK)0zRX^|Eius;VsN1?JQ{WRH8Qd2Eqv4h|rAmpV
z`TUcTi_pywtEE&EI?eWKVQnR$-KTmZJ?y9kg32W>>!y91!@o<j^xT3@pcTJ94*Xwh
zV&Jcb!Pms_@p1FPR9NnEA}i}E={$J?3ud{S4%@D}i%MZ`<!Z)mX9c`8^348)y&b!W
z3%eNm6LxiW4R#ZDQy8Zv5;;sD5(x|D#(Gy0c%S6@<*7g4C(*Xj(9o`Ifce+*;ylCs
zV#VFy#W__HAcYh0OkdT{RkR7!6hF3x7$5CXXhIapCu?n4F-|mYKYS#n&a@2iB!Bf6
z&rD;4QcuHIKW1{$CoeAPJGm#jb*JaRF87AlDK%|03(Ahhyr46ehaynO(wg`HMA+Bo
z>371%jXDi}&C`2HQ1=k_p?L_=&J69F>fM|l1Ey7lR(M#AAxuW1_R6A${pz@hh81kR
zymZ{s?}<~>_TBqNhFZP4q9iGpqs>Cw;vdyW8^>^o#gS#vK8_L+S2M*m>rUbaE=CFY
zCljtxG?%(0JX9w<TY;+0#4P^6$WoZYiN|GD?_><c)%w->OwCl?%s2FS|E`&7=hu(9
ziz@`^hDKZ#c_aF`^ap4JQUy8Zxm9^Hst<BCf8=YRRs@a96l94rLf0^@5eQ^XRK#M~
zxsyHLkSZ%?(W|hl_p7t3u&d!QVn^|}tBCHE$5J@IaXnF%tzU#Dt?Q3?^2Y904T1)@
z61XwU@kT2x457aw`|T)sZ6>8R)u;3(`>P`(jD#*%obCF}E)<GFm3%fWU=xLIO@0r_
zGg1Qyq1>cRnm=qlX`~@W)CytueBD&mlFa#7FjVUFtKJa%ES>zV#D}1l9I66=vFD!<
zzogGSO5`FT`Iu7ztxCTGNlS^UC&8~zvKpA7k{+L9D(6!?r$*7ZVBrbl!74dc=S^a#
z<E&1JXnRjM6!LT>?d1qv219Mn7(3-qg5PK-H`C}nxq0p<%Km)0d8)YV?TNdg8QLW#
zTybe%%pz#freZ4Dinp=o74eW6sc4X!l>$sS;&^GP`#E7<P@Ew#b=9a3NlfS{Jd6`}
z5nVK0E6jNp7tIN~%up7TQdTMJN9o_adp%IqOs!P*od%}TOZTQ4LDONIuAKR(%d1M0
zu0`P;D_fUo#f<Duxi~LBaAyUg&{Uw{PJJ9*Ke3-9GmOP|P_40!W-KZy){CwEO~3kk
zHGfD4($(T3Aynm6WdNYfTKmJUhYy@41<W!{?gq}pr9BQ)E2P5882aF>r`H?twx?0B
z0sk?0dE{79Xq8!cF^Jxc>L@W$O@+wjCz3UFD?5ZAe>5$NVPM^IHTg0<W$2`Yl~(XH
zg|niQ{#zNJuv@rH8)|ugMAEWbeEVjRvfJsIIbl?W1(eb|!f<g1i|kvwn0vH0$4gN!
zLM$=tq%AVb$KD_F&^_l=-U?Sb3*HqaqZKtCuZ$^}C^KskDKvR6xnG*rCbBG<9fs@T
z<idYc{?tk#o2HZ*^=a?rFrIP?-j>%x*n1j@Us5In0ofz9{P92Oeg^m-8--tua=(35
zsAcw%;Ykm)>duFtJl*nDYoAoxM&s3ubuxeS?*xV)v{U7c`#qfarx!&H2^}l@?wJmS
z+_l=q-Q>g<36~w9JQFDnIXOg_|K2uc^vv_J@)cTzLqfAZ-T-#K9L?(z^2U%Mr;<1j
zcx5e702#SYxXJJ_FHzmRWB!agv+T6-H{2N36GF=?D06t8`QlmbI2{q~{F9jev3=u9
zo_z|6$gDkRKx#+y6$DTAdo{uno&0X*9y!R;5-GLq0I3;%u_}0cK(4uWr8f!318Qy^
zOqq_RJVGb1cfK|+>kwYczjDUg25Wdn=0rH!qCaJT&k$Y#c3gXCBqIN|Av%M1Km&q@
zl%aAC<=SnLM>-#bHnvDwemX**r#5eFI7Ph**ylMH$%g)ZMcMm`7<J$qmSGKzwa@-T
zhD4Xk8bM`&`T0m*+P36SukT0g3{t|D%qLNy^;|M$ORRy4gz^DjXexxA(kGeg!bcvy
z!B@Tr#IhPm4Z<pJm5z*|4%->{@$zvx{oB%v@6e%C-S^XSl-2&;Mf+G$gJ~6$B_Bm{
zL5F)il-{Q7t7A3FE58Mik#k*qA(8}3k}92_tkDz0=>z&cS}VIVxLP!XD%;6gQoY_c
zEITcjEvz0lO{aP+ja5>dE^opz(_rHzRNq=yOB7C@=7_CqIHTw3>ch}jV~fu6it14y
znKM+?wuI#Kcm1FG6P+R~^S@fFSm{^nE78rRr3(l~`;CLRP%@m=17CPJsnQp_hF9x|
z1Z<HUd=a+wFDOA4xqHat6u>)e*wELLV76llvWf_#Cq-8I_Ui5w{>-9+@gt_LZ;#lP
zq7Ugcf7AMKiunHiDlW4kd;c(t?2)jpcWtp4^b2oK%*;Ck#upz=*Uu~Tyc)V@nHAE8
z)*!J2X~>oLyPfX}MRfV?>INuT*#5%&nKm=@qwF_61a#K=X6`|b>jrZn&b**{{_rq^
z_6ekgzjDZP-}#AlpX}gXZItyW<_mIS1t|0D|Hsxjc8A$UZMt#eG`4NqY;3EsZQilb
z*mh$(X>8lJ?PU7QteG_*-rsP2xYpk1KF(v3{F6ef<(uKVs$>QFhvaLE3%(Ga=?8%N
zZ)D~t)=<VXuMO^Uf|jk9oMv`_3@zrlc1Hb8v@jWy!=^rAy3vybm#m|l-O=*ZtNPg)
z6&+R0OYO?$y)ur%fHFudNpDS%{_Izy5#Zg=R7F=$Mn*@%!q&>x-Z(dJy2lh77$)AS
zuPlDt_Ehc6C%5}2(17#W{I@EmC&Ww=;GvT%GgR7~6=LA*q7h&?0I_};a!ur(^Km^s
z07yjIxEmOwRWtZStWubW?L?tiyFi>%AGm?rbk;QSgBJf9nf0i)wTa=xByk>aMFSG&
zR2{VzG+bp?uwaPJBV>Ie`@qf+LT_;7RCE?Dm$0S7=K1`2-hZsCa{KtO>02}a_^g*F
zF|Dc3RB;?j8BcLz9tVP_zC^Z!9rR6$WmsmWTH&S&Q0DU<%FNt8&Qu(ag6V;C8`iVp
ztkuOh6JRJkJ*Bm!E)coKL%1@;rMxfht<E{0Jozu3*L>$BE@5W8c{hH9+?dPd)fRtP
zPw_<2!#!lZNwSAl3*{sEPybo#OLu9+KU($of42Mn9u|Uv6MEC<yfs$PRH*W}s&o?N
z7Z9FF5w}LZAv50jF7Zn2iSiiCA^xqMlyF|(R;{stoum12NTh4p@wlZ7ak;?EWK$R}
zu(>>iA)tBL1W?KR`Vic5V9{@_Wcg&QS=<@?LYg!VV(d8~qsGcy?|VZ89JBd(i2L%}
zV+%%(D_?E-h+_KBhR}d|c+QMptfvI&znDZTry^B-kS$@KQ|O?+LMLC^iFh4<qzz+w
z-w_D5*cnkrUx*|v&^d&f00JmvIL%b~$Phl15}0|_R+bn1yO`ijd!e8m4zh|Wo*loF
zP!k#;go*NKmb%8I8d_EWkF!#u_-*z{Vo%O)iyER=WXp~q^MK8vUDwIt1*#X(lf}5d
z>8QT|J~wtO|0#g!?afI7(X|<dEhD6ESfO+68cDGfu38l3#<~N$JEZf5y#qwHZ*2PT
zAB1v<(+fi4cox7{Q44qb%xuAL5&n*RHN14|9qwJ#gPR_zR)7Ss;!OxfPNO#Tf>|9U
zO=u>l_|}MA3ycb}o2yEBh`MXB*3fXggUp2CfA%#74ly@5!$ha$23tQe!LnS0y}&_e
z|F-X(6wawB=*U23m3;rrQ*k;QpBA)UwP{;1k2%VUT}p{AJlp(d?iZbPy)llon^hP|
z6Zq&YIIk#oV?{Rb-N}b;YZIt&`7S4{oyyeArG_Eys)hw#5@gmtL`@u4`z1Iz1Sy-e
z_|3Y$^HI>tHG!C-lGAkuYErf5V#kN|N3_@74o%OGh(y*Mhmsuy8m$|@&v9a*D;0YT
zW-p_I6)cOg!>AZOmxT~&-zQtVW50#KKi;~luVEL$!CKM)sOcE|K}dR>RoG5W@tV__
zbR=g%QiyixZnCJekOZgBv()nIy=;3ss&`U@)|@T`l%{qU7abh~2c13TDZM91G=-R)
zIQzM$2fu6DNifCUh`uM_RCzStj*c&{H4Gtm+CFgDfqxr<>BnN<QMqN@%p=$1wY{uV
z-VoFyJZuJFjF?UU)Jurw?u0@hftk7%s>Ah(5&NAhbgmhV9}G|mGYKra{a-%cw_HBR
zM2_NX*It#s8x%hWh~8ttAHl)rLh-FBsHoOS>voi94&{8Ulz3whC7Md*)fQG6xY_6)
z%$;h8m+-G1Mj5+phVdV6yS_|3#~rVAH8C!K^SuRH2B<*9{Qam>H818amfGK?UZGoH
zMJRClHkKar`xqlhZrE%oo-^ux=(;0_4~N*pR<UK-biLai8Pxqkq?v%l4lux~2w|(~
zV5G!p2REkpi^7h~bn1j#J8eFT27O9!(1Jc~a&uCqz3U6MKQbq5eD93IV`{j&0CD$1
z+By$Z0fO1KZ#y(KC>}oz56jPTY_&yIfws_LQ0S-Wm^EakZ*+Uig{SNB(PAD&13kZG
zxTzE@?YO>twP`#g+%vgA5W_{sKZ1DCmlvw(mc7AUwbvfct)|#ZP*IA@J?@}NV)Q^C
zC!qzZgAHf`m*QT6ST<(G(mm+sxZBnv)*fYY6Sb&f{utp->0u8EoV5+_enu4yZhR;u
zytzlb63q8hH2hCv*nczAe`DCcsz=8EizfVo5dJrspeZA#si2Wk!3|ylY3^ZfZepAA
zD;=CA1-%fQI_1L;oGFDG8XPqRf)`xuAGyGpBFhVo4IBhXX@gp}IiM$niT@LG1?7u7
z^nyT%3L>GVL185-*0j61vB)zcQU^@KglX)G;<C6eU=}d6N=BupidGNe)JNjp-pcu#
zws2elTOZw@iHNV$NAr4C)t!q%J@@B5l&COc5A<V;)fyZIn@S}v33vxNa48|wg$8_u
z>WSrHfQ5#<h(w*(9OJ{0+Vh-X)Jd!|B%@TYq5s&RM-LH`!P@&f$@$<!eRBq{(V%mC
ztACflT9Z4(3f)7*^%MMkMD9OLkTzO}Nrs*1c)6>S+j)&s5<s#(xxlf`K|8us;<e_{
z<4+X#qszcmI?%_vF94I=A$e>)HJ460%P`OfSY*h+*lqXzTtu5R@P+OD(8Un9)^4P9
zeBe<8v2wk<)@mo^o?f$AJ@YB)-a+E%bGS`h8kB8pJ~uE0jir8Ni~?f`Souq9cF0oA
zO!ALWfEi5lNJ#6CGE`%R#gs5*{l_AVM;WLwMW)t{TOQ&avYF!6hx{WFOwQ99$5~AQ
z-o3#V#%h+c)S@U9maMel3bSOUyHt+Uo+vhy;bq3AC^D3BI0Hy#wWtWJ{(D34VvY@O
zb~?sBCh1hy;Dp}wzCRLKvwCT{9dk}1Q`+eM=<>^)k2sUjR{J*3q@R&`PM+FNF{dmY
z@^V{TKHX<W%M1&*F49hb>c1%%3i2MnQed%P|0@l~Q|YWGuW}Md4(BPaLCTBSG35E%
zC22x1Lnp&C!*y+-$y6J+&d2;JZ!NTo$GX2J2T&!g&@_0liY;DsL@IjA2gSnmPZ2c<
zWy42WUrB_hHHOjr{!V$qkASu^p_T6kUxPL1R~_yqQGCa5uwHbQc~C92g#-zR;*v;3
zj{VC-1gRigWYCbGC<JN2`!*B#nEIz*5Hsd=R})wMO0?EXz*9swPJh4Z{Xxgz*jA?S
zi}3&(E?s$f3Uq8m+Bj-Jv~BzzuR#!HJrJ_ZnpdJL2^8E|vJxWP^kjxFyNdAA^dzA4
z+kRra<SC6YT6*0k)N9&Ko1hPX8RQ?zH2SyQX;AIw^p))F8CwvEXMV3#q!V$wE{A4y
ziNrml=bYG;Q%i@Fd;j2YGzjcb;DzlpmXZwDNmB6iUjl^cRdig`i+Z{HF6X!2q&uj2
z=dWk4@cY`Frnj`pDx%2jVXbm4ZLyv#9`hDsUMYg>{L9>I42)cc(1>=x=4v5DVnQup
z6ymFkFz3xdc5fNlN_Q#vk7{$=&Tu9wtlOm&`m^~knwHT(b)T?OM&YOIy(Uy13WADZ
z39C?8_?(y!b9XDztDueUOKp45l#V3&WD(*B%9<U;Zu#>o(SALQn}|}B9!5?vg3AhK
zCxUxE2(H(z?%y6tR#YpX5dwQm-)r(M3&yNS{}^2fcJ;e)Y=b~8_YdNp<e-rjeM2Ip
zYQ)75E0+dW?^L*Xk5}5EZ8%ot+};+<Ft&coKp9UkmFsx(?V7ebhsnwJ2HqOFz;mAy
zE)9wwI3gIq8ucectaD4vzlytMF-JMXN%M3_NreqD<zLu}t~9lPV>K4^NVUY`MRx=V
zB!nTYa?*;V*Y6rpk*y_Uc6RBF4kzyLb+w?(MFctlYwsM&0%UXZS+H%-qknu8sm}U#
zGxXQJ-ai`33*}=>u|4z&>6as{R+y3UHt%XMDgs3LL52yLr8aau%;P=N(FnPyir8k&
ziFl^WgK)dNIr>Who+N9~G&7>Qv?<GpDZj6HGM6kFN8)3`752JsQVX-+n!x#J*H`wL
z9LB=nuje$RPe@>jN7o@t(GirSqA^Lge@n`bINyfsnHx$&uH!`7?X2nZ4SZV0%j$sV
zgBo{P2G0#Vq|cHJjjoyZ#15!Fr`QE9)Wqe$1QGqgXpmt8pd#XDqiEJD_wks`=NN}I
z$_<N#@@t$CSuG0*xOU%p2G%)Mwf8)m$1g-iQh!v(?ergJgmYfrj{G^*nt((|G1mG`
z_N+rlPR~E+#dcw62)%suD#_X0t*GoIGhP{dH;t<BqrW>bkRG3}$6z$(=ZQK|2_p`*
z%)lVB2-EceK-@0YEr|ig-!Q9PmTI5$@0y?D<S~GrE{T=`%4XP<*W{*X*wbn#5X#zr
zWLtiT?{Ip#tcH+>Dk^j3K2<FjqARq3*#@;Gq5gg4&<*s8ue{$0Z!W0cyOSsapY!l5
zwA~~#aq-2&Hb6)pya|f1M2Tc$H@Ei}r}-adtR2E@V1f9o+@&aX7s7U17EyB|NwBs{
zRK0-hm?-|LAqCAbxraqD(Kk71RA{z|il>g79Jc5;N<zilg`{G4z2Qlj7#XZZC{{RF
zErnh`?1?(-u4BXB&*7vCrv5<+kqW)~P&lHG<Y@mi#?H};y0@1g?dxxwY(#gPp#<K~
zs+(9+0P?e~D}-WNK75<h_7hIj8{0+&p_Le}Z8GYGc6#YArbJ}gqCrBd1v<E%Zde6N
zMpSfmww#fQZ=a{_V_|4mm*-9H%{-ZR)1>HrAW|<@4cetTbbDIwu@r1zv3r2KA9jPw
zdva8Iy{m*wkobe{+ST~&f;0A~>cz3<D`LJD5JDe%GjWOV^F@xzV-B)(I2f$4jAJQh
z)|#!FPE$}QgWCla>t_frR_vU;)Y#o_y!p?_g`$BX%Y61WNZMkWkh7V`hC_RKqk<ic
zmz@t;*%vmy&c8n^;6ItMIJQ2RZ#1CR=2c%>k8{t>d+os2g~XNNp-GrTMF!(4jbT^g
zfVdVEBgN=~8R?Cc1RZoWzd4~R`6hkIRuH!xpShHwuSM?{%Lg%cf+`4(PA6x{S6Yql
zlU^n6bl3KdF*;zkzIpO#TZbo%BiKXK4%VSk$JxnuoI0_4RJm(RK~WO^*3-`1t@WiB
z9SjO9IDJ0fb0nI%I4Z{UzE^`Pl2*W91IsPfjV&g(5;W{yp$b^u<c47@r;CUMajmf*
zm8!8dDU`JKW;k$_gDCci_;SfJWzTS2aRm`eS5%RF{3B(P!{2n1J=G1RSVix$;b-0u
z7m_##?yRyb<S`ix^YB@QK9Xfr%ZcPq=vO9|7s;CXh8a&`Pp5@8PcWNckH?kzftT1C
zj7Q8TG7sfBu8Sg^+==^CS7TV-%S*|SOZgoelwl<6zC7BP(3QKxK3ZlW(|rNi80P}W
zA5K%Q8L<}g-p?*+u|M+>vW1hC+$ju2c;0-fj&!2K9xl(<ji+u-7g8fpG&3RJvLb#8
z=o!2H`ZK@)^MaZ)r|hhu=#<-{3?vE(bbgblvP~KJ#HFh|`NhYPs%DDs)`?A*Q~L0l
z%K3e_^UQT|em;pKOILaCu*0NNI!J3F0v*@m4iP0a{#pK^2vm+e&0+V6V;pnF8e)sP
z0Qsl@`I2j^QSBo!Y~`4`15#aEd*`&%t7f<l4860MC|R;M{Ccj<a+R}S6}ZyD=tH=o
zp2el6<~YQ1wrDf{dC(VO^mxTUU->7>X1QTZ_pDnJFX2j+KSj-O{xofJ(`3`-NBXa?
z`3oe7_E`>Ai0eNH<a%eQ2h7I0Z@A79M?4tS1X3P$ik+SdJqL^+!UiaXSnOtG_`%4-
zvRf%>6Z%9};O7I2`4F@ZcYvk{WI`8?TxQEXKI&+xcY}OLw^DxuMyU+)4H`_8?9iI<
z5h8<?Oq?&wP#(Mj$dE~CsNn(C<y+>Ky;L4&<q%9mg2SK8#@PFOPDKrRRFlH=qC6Kh
z`|&eK^64*QjdumqCR4geu(<A9Bq=*Qc&)5F_H*XKBrtsltfX{#E<ls^>6CC)0#9o@
zrxoH^P?)FRQ(E(<W<~MHm-*?%M#pIv*Mr)71d$WD(Ejyw1|9TiLoe$xyf<f|xOrGW
zWXOIzEy+2Jy0Xib8FTh`PB4?dOS|QMMp~}y&jj<&^WeslwA=ct?HJ1UMLMn?9Ry^|
z&u&vqwncV@TCs>L0>HTPLcydmuygyl#s2#-TY@;j908?vF{*K6BXopw69KP_-=s1^
zgyoa?7v1BbeY(S8o$57YT3!#dBIs?X9Po|cR$eleVHn2c$Zrd~&g&<B0sP8EWlgej
zR{l1I(zRvt!ixwiXAe)!&TG?Nocg1Z&{x^EkRpUjq~dF#JJ3l!!AHrAlq_-^-C)$#
zk!bZAwXvkW<cU6Fwh-f$PWhTt5KH-hUTN%t7fZt4pjqzf0w+K-AEE;@0osKG^Jrl|
zS3-PLoh22zFGX!-wg1d$30H!Aaw)|BBd;A)3G5fPO!<oaKt10lq&NI>{dsR(Q?YV$
ztT&>-#~WwgH{de1e(t2VLx+Q#=fM~mOS<WIG-tX@Z%5x$l)9Xv6wRbexA@RRHSr|9
z@_SamvbKt0E~`#%cyLsY>ScxRd5FVaL&w(E2*~7R`7lmSLw0u=|5;azHYO5&2l8fh
zqRsaCbiJ<a7eBYwLO#g}9nPOnOrlD(u!N}hfvv*)MPS;L7cz9aVN%9Hf3z(7P)a>`
z&-Xzu`|~q98~&4SX#8PF-<|Cg_OpEeM$XzZXbFG9vQcd#aqy=yICGn;^yDAU7V9;~
z>(K=H99xn;>V=b?T(1@6mcsJyRGvOc`Kv~EqbQM1?6br&nH&cFyL}m>By2V~r%$=W
znd*EU7=Ug?W!P$SdHNraZYJlR;T2;;tksgz2eRKkUh4SJ-5MogW>S+X`5kuq;1QKG
zdeF^ugd$5yz3*6tlw?!7d&Pg;>Gu!BIt0}jA>!H1*DB)}BWB;5d=V4Id*3o0&bhS!
zJ|&SE>)i;j*8Q=Pd-|Pyoz9KEW>nu8`qY|>qJiJ&0O|PtG}oN)ep^N5AJzO9i;=6-
z&WMa!+sZjwn+Gm7-?tJsS0~pTu}`Bf3Hzg<)w+VTrnf9unAb3`<N6|nnaJZ*`gi8&
zXyUT@?W0_=OEXTG=d~=ius|NKNzsQ-VxJj?qkSjtpKkm+_N4n=Nz%)<tycK2%u2Nl
zDuBBTJsQoLme-%L409plp)gvy?`M;2b3^<>`mya5lm@MrQSHq-*n-go&TTxqrs&0P
z66=h*(*z{87SZfth_4N#@Dsk|*bYx$CjD7UD;xq9-(dbWVLHmT9(X^IZw&TEqd%>b
z+8Vy)CnzYVWofEuT&Z5UEYncrnNyg*>;sr#>g`UUQUBCUf8icpJ@FU@9kX*~V;P89
zW~Lya1n9=cM%rMSh%xfv3rHxz(Q!!NbosXmC*+7|!aJiIPGUg{?@(=!Ee&HZMGLTE
z{*F{lY7)N1g(X`xh-Evo$jxRZfepy_0*5_s4)gm|>_`x4B_d~T3$ydxg$JTB%Yf1*
zwLNT`ujGd;;L_{@_zOz3cDU&i6%g{h<wpqy(JK(h<xFm1QVHnFW$-Kh^Q>60k^Dq3
zxTzUvC&tNjn}e7Q^uXFXPLI@i@l1z%s8QE@V%M}`0lnKd+2pqC<T&@67_`wHo6f6u
zQ?vF|Vp~=d@w8RDaT;&-kh}f52UtFfXeFQ4(40l7nDUKkuS@Eb*#59&vW{*z3#)(S
z7xR&8;>M8>(+dP4nEu)5G~E%*q@HS`EPJvsfU<rqc_r0OMpR9@L8{g?&GjzZFFW7N
z`2wkRBTM$u_wqQf53`I^^kJ-@{Ehft30b|8ZlkhtWF@J_jKyaRiV)WN2$U^*R|w-p
zCIpAC2T9%-oHeoHmi&^V;x$on8yZNwMNp%^_ArrXxR3m;`8(SQ<yi@)+_!)}=um*;
zI?l;(5)kUuv%#)pyg6R~*(AAxzBRfmpG*1r_rB`)GkhppH)WmCtTIA?%@00zy(Hc$
zrOvMRk8EkGfuAhktB03pWI&z58v5K%DXc`uE=I)n{YscprcybY)r?=mGp=>}5%8Pu
zh=tZPPy0^y<f>R@xhzGigN5hd!1e(;@U3zhe5uX0E1;#Z!3H_vb2+eKhJosaptJ-Z
z9ts21)YONbBffi5Hb*?er;|yeSc_=??DpxrD5uNq${7mBYo9h<6ku1m%7^v)wtBvH
zl8=L%r9|JK9u*z^2*!<58p@WPr>hN*;cSu!qa))iUJL@KxsonX`WN50CODR-ean8u
z9rH9-)h)FujiGt_gpKCYedb`{V@hk`v0Km8XTi0o%kZe8yX*W_0At^2YLPA0(OJ8j
zN~QB|hctmf20}gd8-Stru%fRM-Pv+YnWFcSpn4|NRNJD9O}8B`U@<`wM?+0VPepy8
zN=LO~V|9rr_GYHbw78?qylUYyJ!vmXo+n9>#WQVRSDe-6B2D;_xnbZ^8cROxrEK_(
zGjOW4&<C|8d%^9fBloH%`^RX`l%(h|Ejy-_tjVAwWxNToC~#GMmpiVtI#FTC3C$L6
zEO$hWvrFrt;myFZoEO<+=f?C*zr>pfM<VcPceR_XkDBJteIjW3gIm(dX1dJjBFC3H
zG_gN<Y+fXWS>P{7!$fF@Lo)f)57ykD!7Y-4mlvVNI@4M<e(l&cErAvuZJw_cMqNUY
zr?k3y0m-8(`M@BXqs<?R@sP%%JgyP)P9fNL+n-T$ztv)50wO?-JYAF9Zu(nwPVuk$
ztn4gQ1bBKhW;xc$_Bv8ltt-j`Og}4*x~_F?N5=HJ@3;~Emc<g}7PXzZKaYDOL!H|d
zmMHHr<C=%|Rj6hi2W&wX;Sy?Z#y3_=@tSqX>`8YvF$28}bmZWmFE&X%(b1}Jv3fV2
z^7IQ)7NjDTuUMOt9_1eX|4_s0vwJSqtuMUL+>O+XLj8T})Qh5*xDJXIp`S)liaL1f
zLCE+}*(ht>fm}vIf7hA1w~qNy1jJRTCYDvGlXD+_df<P08(()HQ^GGtw)~N~Ui#hr
z(LO4L!U-@7B*p0Q9b1oRs4cvtzU|scbeB=dM^>v06^HcqqHmUv&wCdZx4n!XK1m`n
z`$gRnb<P`EAW%$|%FNv+N~du$cFXt&c;l>5^PxK4{rwKldt*%E7d5e*g`ZS4HFI!#
zSs^fzPfqrf5D?&Oq<3hhAS2C~5FH*B6A_*%=m|`ci1<hCWo-qI6Ep3JJU}DJrOTOy
zbE%Ipu(P^3iM>Yc+Ph8A(RMW+R%MQ{OYI2j$k{W^-z^asv-voTdhLWv+hhdJ5A_9|
z9j@-#`+xP+Ce?`Uy*~y`kkPxbm#aRN*lnD1yL~?i9q0DEEX&#G!ylHx;J{T$Sb+@=
z!33BJeTHsoNEH9g<d;ZCmRFvylUen2@FxFQUX6OtEc|~TCFKny8)58l@QouGqePc)
zXI`T1ub5w#9Xm^^*~yN$%cg@z%w8cYGe4Se_2WkPz^7p2a5>4UmmBF8hvtkx`u%d4
zYG}8d3z4*5Uc&<U`FHZVVCCCq=lL-y0KlIskxw1uP7)c5=~9+CsPu~o>Ww2zb1C*u
z_^fv7_vUQg5P6_Yqm`XXH=#QVGR>w#`uO-nmzG^x-%a0GY)rlN?S^D04qy2vwd6vA
z@tXrAa%fr0P*|<}JZW@T071o{u<kT($WQ2t>mS~~eaOE)AJ(Z)z0wP$IWX*kcK}8(
zHUB;Q=8fvMa|CcKJnjyqfxSeSz1mo0;8Xzy?Ke((X&~Rosb*CHA<T2urHS>A1|0h2
z+pJ*Gy-7R{zLFoE@Y!x=&OEK=f@9A3p#(|Q#1cE8Dl}#2LC}{Ku4cFK8(zrDM}oN5
ziM57%X~~Oy!@f6N-?wgtqu*2ED1Z;#WH~(tM|D+Q<$*F5J+b!L1vXWQyYatUe6{wI
zpj*L{cWlNeHxcr=<Ypx{QLN24CEU(}k%O_<Nd?R*2#Gk@tC!W&)d-8!e-;IHV|yEK
zGmduX0k222Hu;=1>CM{;c&=3~UAO(-^o~wQm%g68mBzn-tyUeMo_vKwF<{x@!tImJ
zFIg=eprW^shM53McDhGP{ns~(Ckh|yG}+g@;Lu*qg$*rt(QkD^?~~|^TtG`svi15f
zp?WRwayF{yax%1E<Fno>4HTcM=#y0GJ9o`<9R>o-M|F_hHvabO9A{d*Myp*;&o?Y@
zy?83JMJp@osC3SF$shf}yMP!ZJ~>}M2S4fhQlyms)Fj)1iTPYl?nwXwTK>L{Y48N+
z?^j`Nt{f?v8AW%}m=x0*C}*r5MbD2aaJHAcJ3Lr7>tg=K5^L(N%h$Ulb%xLPBF~?|
zk|N<>;%zT<fSZ$BKxuc$9GS9Xtv2-S=!)>joeldrk<`Wz`#55c6)+crTtG1+Oz^MJ
zmmpUjP`q3fL!*wCA73!VAmCBb$rqQ%R0*fQ&it}DAG72vE!2kp_{<IKeorEPRXlj*
zpnFG5y6ygADAL(aY_JJl-D@eA@$8Me`7F#iEV7njXI)A7J9Hkn=8}`FZsCTfU>7aF
z0y6X49EKZpOq=}BMV0d)ZXEZX(rl!dR_;97n!x2Mdv5IY(Q@>34PzzH=MC#si+TL(
zTSTq-@&A;E{MQuyUmn8F%)#~l@{oUymH*lZH6<m*<TX>Y)WE+$89Y-o)xnkiU7h`J
z5yt;_b(W>>rlYdd#J~49Q{+eVVX0^q*q~l5ue5Dc1Pr=DMX81<5_q8`&R=0W7Ar_x
zK?P3~p}}u31v8>QP!h}yS(DwaR12nVWtf;|%Fnh3Q`)C;nbf!18M@yecMvC6>c?KY
z9xCldFw1SDWXPQW4L;y=eV|-o;?Y@`%{SnFQ1hGt1<Dx(YE(Tw6GTlBk7_X#@_y#N
zcWUeJ1fRXIyf}SAtH<*=!WJ?C7Ag|v1*`Yt_mZ2rVp)fDv{M4C21UHX{jwN@dqh=<
zIY2lwIoJ;FHa3RfjFpD8-=ge3lCq@eQ}Htn8|bdGF$)DkZNtMKW1Vl|p6+7dj8Y37
z@auQ`*ge~9;h(fwy&}JMxiUHq#UWe7An09U5wzGDOkccZ?ZZ3`bV{q6KT>x{aNF3J
z^Cp;iLjLPv`d6`(#x<^SXfqgkV|d8Cm)bLqJQ(d@5W;vl?rut1AC)!)XOzrxmli&5
zZwgWGmj?7l{ZeE8>WMP$z(O2Ma4->PDNhp{w>G6l8RcYTkD}Av3?7WC%_k6upNPLW
zGu^5bo*Y>k6{x|sSg_?=TCK2G!$jMvv$f`WOVl<XS?*s!sF7{Pv38ryZq&DAa7Db_
zJlx){S<WjP>ctP|%YGR5F<QpC=oEk8UhxvYIsiJgH}|(X=vTSkS1Vs7Ajfxo>d%=T
z6Wr`I2FlSaY}batnGrcDZuq&=(X1L!evw&&=KC>%m3XduY-y7D_Hw^d>*u?Gvb3cR
zKpZeT_zbb~SE{tLzz_>%#G%XIXUV@7*?`%&s~M}2_kY8vRyt?%hH+7VP05uSOIyLb
z4h60Q&b=8i9an4Q1u7IWiRc%NR3aeze9S{2pCK%d`)6od$!z!HNaz-gLj&-=C2>R+
z)B735nFZ5yWYD~>2l==>%>1jc3n#$!mqE2Oq^8DBV}*s))Y|B!3E7P)JW$Rm*Crw;
zD|v!MFx`c~vz(K~rY4E7!g+d`k@48h0)dS~VRBO8_?g^lh9J{PRMj8Y$VJdvUK$@K
z4+$xVDKvQ86&Cx}vUPWqeGju(k2@BhUR#Kg%`4gdEP;vK=f#9`%9X0;N3GiwzhP~u
zn?~(_JkHFx_;A1(#<i}xHkA=uhQ!Zz@%y_V)z9J#bVc7MKOV<4IWi&HJol3R+ysi}
z$V@5ccALg=pl}@^aeek1@ZSu#*5_8?vgAq@pfxq2*NEbk36`~#XFA@FU3#(Ak(yhB
zNNBOHKR9ti_MS*m%AKDVEEDg>k9aw$`Qw|)hBkR6QMTmEeuBVr#uG-oaY6JSJO4<#
zS=G?xwV$CDOWLtZ-uv8eTsK#X@Bma?HDcrtlQNg9%xa78MkYy(9HBXr{T!AiK`X9~
z7v&ige=1tJgF_v=gE!s}P40dSnIiXF5<)1k;+mvfJ3yE$Nsw2>AFqIY!9ooqy0+X-
zVYNgISS($>Uw_Qs6?%2~1zJ7nh8C=MQmK!Sl4%Nc?bpH_)g#grS7)DbWB|+Gjlo|+
zhGM5f#WIk4E1tf4hSq?>GqOgwl4FI<?dOMb#!oSP1H){sGY(UZ|57B4OIxgj*?UR~
zRYX|Vg;?1dDJGrqD(3oUE^bw7P)^*&wrV6^;4;NJfyj&$or0Ex8@QlLfM^zONQrF3
zoHY7!5Qw`m9xZH^B$$2L!~}3-m2E$QIurW^ldlUAb0;1Ot`#*46g-Z9mSORS4APP9
z9Dr=Y^RKJq{=GrInw51n(Q#O>Yl%}rB=~9IF<Jj$Ewd8B%^?*bBtn5qar-ErFjM<s
zo_3PEJ&~U=vpVis+#@7}s!4p-F;<RIDfK<K-V5~cGyYO<h4x&)WfjnXptI-PY!DJA
z?zko6nT;KtS!YU<r=LDCI+-H=1ZR?|NL_ug5z5zV#=$M`(I5+3(kPujdpb<S9(^eK
ztD1&3vwFfR)VHG>Rt&8*u&AW*r~Z`rfjex6n?m}Pg*#l5wZM&wzEn_O5;{}Nr@Vut
z)d*Q1Vufimtv&@WLml9YoaIQ0A`=-V-;E?0{yv|NQ+MpwM0WCeF*5SI5JhR&yw@u>
z6oRqVc_r=dzncX?vUd&VljE{_b^LQ~NcC^+<!2+fB2xUQvtR*vTDcm(lT2|9<C#@v
zK}f`~w<rqSIdrN@!?|!@sO&kfM>sf9lZ>u@f9jPR26DhqXfOk39J<Hj|ALy0e)O&r
z4ecAD?Jmv>vDY}FdUZOLGV0in?}?gqVm2qyEfok`XT<8Ge61}oB+t|&^YbOTnr<oz
z&Gc)XLBxB^9^X&IGV$BCDREu)9VBO5e{L0zN&UniMju~#p2iY!Uj9l{Ff%cqA*e8?
zwQ}#Cg_9@DSw8#c@~!b&UrSqFpQ)cgUWPcPy(;as^ME6j!j&SH{4Z&U`-bc%*N@da
zy%RKvnM<0rkK6r?_wfxlccR+k@hqFFvup5ndF~xZpR<SOS6!&I(^5Ky?)&9FJHPNx
zr8}lNC$wt!k%__Dx4HW*{bGWl-UmB!%z;zYf1;GApca6-K@MB0@8YFXBw5k6Cn_Cj
zpKP{<N5T)AaJ~B5=zn%-gU>)mb7xz?hLDraG)mh3evIJg2!|GWUCM~k9vUH`kDdVo
z$6cw|%Ex6wW8M-Cf8#}i6N%6a-Z1Gv<OuXqg^nxflFQR^>gG`{%xJ49YstrR4i{#X
zlw+_NWdH~3?umoYXV)nBTguz|U7asTX)_!nta(n(OR}ggAr#X;hfqorjAI9y``>tD
z0xd4@3}CP*kU-W*p<B`7MKNsIjBc39xc68`&y$itD~U+hWhwp<^2?rDH+}S5Si&@m
z<!CGk3k8XK8d3BxxM0N)VnIh*Xa=d)8!w1$ZvdZ}YABnomaFSf@=@d2j0hF3FJ@nc
zqXY3Or5kCHO|bjqQbS|$pvtV{x>wFryO8ZEUPI;xn(=A*!TEyy&t8c|w(TG<b!^5R
zKe#HRd80iSuE!pT_u4RJ1yK~?mCq&Ep+0OBH)xlE1un9X3b<25WX_4~mQJsyL{*g`
z4xm)EE8RVMwt1BSK<g}aeDQJ;aeZlmgx22M1ta>VqMAY7Bv#}l-lsHq7U^;9f3?o(
zaqt-5HY{8u{~(<DlW!Puc)HvXB_j{+_FfF4ovVT6Hevf6is0{ycJp7G4Q~4k(oACh
z_aa#6O@DuB^Wq0s&IRvBI8@1SSIY*}FM#{ic>o}e?zS0n?z)pxr=<E_>PK!K$a789
z$?wqL=K2`g0biy2tEJc$vq(p-?79h*LOA*ie>N*Xr~s&l&V#vBVF;|YUsHFiZRZSR
z2wcB7(fYYkH9jsSH8u>xuxVVFk1Hh(dcyMEYw&yu$&y9pgv*}tK!LQh^+`vt9vCfn
z_HAMA)G675$%L%Shv=<y_^p;`<+tm2uvtgqPmza;yLJ;T?97X95J89LjR=mVey*ia
z)AB9GL4VyJCK2aI96Rwfh*xrvny_8U-N2?0`L3-UtIbrdR5X+Tty{fT{xh-tMfI}E
zT8h<TeA&2H+=+q8KYgav?&@M!50JEc<w&RRmAvf9#pzdGvG~x2<f}8D7HDJsp0T_s
zF)iot9UGa3<TS8!AyXps>LwS(f5|23?}w7Ro4ll@t8gYgoe+g_1;R{FpYTtf6i<du
zx(j9lnR$VvyM9QV6KYN}uk<Cy4boc-DNv95io1s1=hOi`-2;;V<AekU8sLj#M2K66
zkv8C^CJdd@8NXMl1htEanVpDK6JFZj8GlOJS0bOkfEpfAnjY8Uts53Pr1q=pSJs=C
zqIRS`;qzXp^)`%wIul=J#eyNT2FoO6if#d?i(QhDU!is2gfSz%GL3VePYB}FF1tR-
zo95Bk3<d)Mzl-Kd@uTTcC=e1%8{(uo|2k4kE_q9d|Ahsm%=g<!B{b7+rDJP~gLHTc
z02IcA=04HM(nJoGLmgh-%7E<EXCM2;_}A=R%H%rone`t0_#WL3XZ4uYd?<kq<}>2+
zotO-{t!}`I?nFCpe9^D!oNH=2GRZwBxky@0@z0{DS_MC6yxzwJfVCHHt+%(z#}kCI
z`8G=+CJ;t7uV(2=F(2GVEm!1`q9IEv%!eSWdMZW4^9b?O+166MbabVJj=FzURrX@M
z@c>>1+V1`GeB+kw7G5FlzGHeFh9ymBgQ%Cp7=3y?CcsY9OIZx!%<0m|U6`mdFgs-W
znDm4UzoH(58@sIvIPO0@S*IB7=^Y~TqhoxSE~(YBEHb3?v(y*sh6~j6UljF{*Y`~Z
z^ObeMEsaZk@W5m~%(iJtmhB-;i_YCYLSwN@a$FaDEY%xCXvE8WSn`kF+V1|^u5#HV
zFHngn4+)*O03g4h)yc}R$u_%2XQw=rZzY@QRsZBePAho>GZ9rGZ|1zyqZQw$5y05+
z`UnMyTUC#I42ukL;1P3^VxXoe=_v3dPKTMPMK@^+CQ`w2v=bBD#4QIw8&<bCj2e@$
zEV!plNTny1>3jD;%CI6ACySJOe}xxe@$~IxPU^ilghWx>(}wVh_;M{Z3aR5gaoG}`
z%Cg=ppQZEyx)3i%Ju~Ct=0+AN*dSxHA#rpSlTs5hQ}dP(b$)P-=&I*uo@5R!=#v6V
z<;}~xz4;qSMax+&_hYg}5{nKa|709xhUM`3v*AMqhz(LcXY66Yq#rTo<L8BZ>yfy~
zS8iD}4MreeuWI_*O|P#U2WRZZ<aA)i+K~yQBoq>WzNCq&dqDTmE0=?wxHU_0DbB9d
z*%@{E*sN4DI;HH(LPN5He&e$|3VU6HSWb)ou<q|jzON-jZNwDV48e!`+m?J{L~4t<
zCXwrD5hfJ}QP&6p7BYVK=<1WeFLBeaSRRYTv1aef`??#9z<xJ(nVyGs*xS3ypS3zN
zirR=k9wQ!ck%pRZqpclti4l*@h?rH!4HSzZ%iA^kYXYQ*njEAtH+iK$CiWO)Uvooa
zb?6ms?Q(CG-+0!Dmv3wh+!gV(Edd^^>(P-937$C?p8}Fe7));wSdyx7p~Xo78hJEk
z%toa)8A7WvLU1q4SX8y9Gm*4K1{<w|gw`scVy{x0gAG@c)0U*ROksdovXWK~<zt(D
z{jE|_?p3>7HNvuwi`w#`p;X%GP|8BhuIJICpgZqOe$yc#xzEd&B5Yy0@v>(vam}_3
zgDyyM`=ab-=kwPQL%Zv)jIzo2{Z}LVXE)077DvDlfr0<L=X0lUXO8wtd|iCq?(H5x
zvzCA$xp;O1j~f6sv`z-rxi|>%2E*g?{1lr-X;ZZ233|c@@X<!Ek_J6j$Ra?xEjwFF
zkU<PenVrQe%@~*^^KCGEjvggrM{yLc>&XgfN(ngxQ%VnRgy3;cn-+iH-<T}w*M+P7
z+^qP%7y|)(_m4}K<XA@U{q3Ix=THFTbSI#?ftx5YMl~^BKt@tcaqcaiH%Qr61fA;`
zF||dU`f|1_+pL><XhZTiIgW8gO7@gc(C7IC@1M=Y7H@(%aOFrs3jCtVZ)!(CV->dU
zWG3Yzf+22^ZB&GkdHa*TwgfOIQVt&z&gydA7u9~Hy!V%Irc^SWf<ibRJX8a_8jC^=
zeOyoGn@uA(u$g^ZBsP1?Rq-;8)Y<e5DIgbP){@kST))C-$kfb>dbtSs$_4sIRE#TO
zVIMq)cVJM6NW@^%zms9fXt?cy7~><w-u2@_{jjx*0&xXtu1A6i1~dtDuSRaLvE2m`
zIh-j1e@B+i3p3keh5t^4UabS%K`O(N(#AnfG&@6N$kqC}nG{O`W$0^>Tn}+_4Xcr%
zNZ!yqzfJDx)!^m$xI=p-@*|d`uEZDsjCH`x&+nRfDg=6<H}fsp3306Bz1`6DTRAXa
zEE%YuAYMnK{^exwtIt{{=A*9gvOcnUI-1B5{y%BY?deEcUt02Xgcb!4>P)p0SEy_%
zixbz@aEF_lB{Y+K+&VkK`rc6-HE8huryb9K8=L=jJgltj{|r~=|IkAzVQEnrjb<hb
za8nR~?f+<`|G$+^rG|%lf@+)m_XdJ7l{{a;pcj5o6@_h3W<qKb1)9313W)wo8jHCG
zXGG1_bB_d8?YT~iHjW}3I$gh6;z(;PBnXoq#*k1hhm*VolahR$OJ1|Rr3Ft|S!opV
zU*>N<6h|FbS08ktV^};PeZYa^$71!$_35DQ6omC^m+cMlmA<KmsXZUdkh||h<WR94
zuZYLqI*Zx9jL;ByL8-*_t^^k^{ZnJK9XM%ZoifVq?wsiad@6_4O$6GQS*2Wrq-<CO
z(&Q>?96CV)YMi*QWM(5B7c~(%o!3sqLU?$6ljqj5fR)wwXX<=ZDsVhw2mezJxu|5I
zaB?*f7cYT&-+up2-3+#Xy;3q}6PGXoIzl#jji8&2&OqBUgph^FP(*3pE?HKq#&9Px
z5}hHf-5I|*DWQL7{P27S+(GYvcAs|y`VidlGm<5=KKKsX?1veh8P1W*r0XR2<Xt9S
z=0j#tW>zNBr1&KLBtSliJ?TAZD)-Hd+6-H>KlYCE=*J}7r12zbjDQ($=%LIuEuqQo
zv!i7T&tMb*$#&(=22Q)<x%ytZ_u<R>qt8ThwwBmK>=w`GY0!H(70Q*o(g$^a>=DI3
zNkPH8glvMDtVcgk(S1<sH$*=}cmGjVrhK6+koq{<P%uX}2UOomKkNI9MRU~;U#&3#
z%Rk_38-^}CHb#Q;^lzqJSz{0YG98ragtG^(+>(Y6UJ2PiXiF>(Rtp?|W(=WV5fB)#
za^`-l9(Y%$yv~YK`-z>?KGe}$hi!}@lgpIgF_Yh9G~mkGq0p;o=;jOTU?x;Sx5N-(
zA`MMicsTs~K!Mwdtl@T~P=U%wndo>y`E|4d=itzl_9Y()ltd!j`mu}0A?HCARgqhe
znY5hT-4{0e!Yq^fz-i5fU?-6U2M!!$xxY&W>{)K&A5@+?lbJs@L|M>wJ})QwU+p0;
z3873HQKpPHcoFgAq(usOMvL1dd+*&y)CB<nW<iH800FPpwcZ4wRXHn$2*g736kZo2
z{*>wgx?k(?FWN~n>&vz&d9VX}bLGdQ2+|pAsb8a(-}92Q(X)?T)G^SQ3e%;N_2b)l
zVRdv^?d#rY5f5_zrIB?i>AGS=Jqn8oIvY+8*a{ni(^0Yp?)jt<N#y2tgn=;Su{@sL
zSQ9K50Oh~S-3<`<0;KRm8xU#{eI*@b1*>w?EU+wd+RS2G8@CJ18*zo?L`8gQbGT5>
zVHuQvM3H2mkVLfY@-{QeK?+SwtN$N}Je`V(*{~H=cfpd`a-p%5H3UxBu?jS`!6_7a
zx4g$QK6-i`@gHvP*^SxyGwrHKl8eYZ{i-etK-Htsjt$OrLF!=r&79Lz#T%aI`JO;Z
zDjGttc=ePjV>t%x%>K7VlE$NZ!436BiIv4jA3DBmKYU$D(t{^D`O7NsC#0o`U^~4-
zAC{H9JR4c|HIH2C3zA>M1~*3hC%F(F>|Fxhwy*3{7Fp6zZ~n0_{DxdYaq!gZF24&P
zfGlxge0=&u>&Up^(`T4gex9lPMt1g$zZ2|2k&ApVwZcV0gSKp^mU-YZzeX6uyyZWf
z1E*GYy0M)EH9_Br8MWyUrk;uDUs!w%pF4<!iZrDCjz9RJgf55zw3_g^8*KzNJ4;oC
z57BE@;D1dp7)aK?3ABocAK_te?`Q8i0H6FfZgcNfUglGbHg=7@Lb=o6IcpGBC@CM0
zROfxWC;UHuOOSN8A@chpmeKTJFsAfi_@276gzyZ$e31zWHL)1&Z@E&M%nb3Hv)_t!
z>HEHW+WBP-)L*+`3!El=CodmR`BhVsqIk#IFnZK=z(F<Dbx(>f(lq?xT5OIQ3lz2n
zr+DDQI?m-l>1(~#WH?RQy<+l3nAhF2z%~7%z{5N1npKZ<m!(*4s+Yh)1aYb0r{(1J
zi6IO_v)w{#gDSnMj5I`aGWdPO#nh0>o*Ko@sN|X?nK!X;);O*cEW@xQg08RkZ9pP=
zRHsr6#?urw8Q(tgl=!EchdXF?ERdtOh~wVa*nX=4b+$a0JOgT@psBn|Z^ytZyLg8X
zBvUP~&J=H>iG$)N<=<vVlc@1$W!q9KuH~iZLhwR0)8gEz;N~E7CB44WC+k-rwU39R
ze~aLE&D;emXX;a;mFRB{!xK1Cck6}H44JHKn3T$SdE>=QM`V|C0e)zL0RYtx%0|?>
zeb>&ci=`E2BCuO$sVvY~tW8EdD34K<B2N)WuD<>5=4nq*RL^M(C&~KIGtxDqBD+uG
zpxNx+lb?+5X)k_4>Tupr`#9rhn>PB4aE0xm=)Y~Y4&d<!v?OtE;n9anqCB;$<lt|4
zP4`Z(rM0Ep5-vmyLF9&*-+|t(Lqf=4Li$y=211N^YBI`(bNUWs`ORxkg|QrgaMPS}
zp-8)2rt@ur&*?WJ1^s6JW>zt}Z**s5KSD<olBc2`v9Fv9UPw4^D|}Pj5Cz0ftER=z
z%6Nrur0Q3-B<}OFGpjuIoka;?oP_FNX(7<9Y<#KKBC?wf=S3gEa)5I);`GSF54vNG
z>Fnzka3UHWJgwAM7ET!mLlb5%^5`bEoc2$21wIIEh#$nfiY@+0MIlg^pqA2?co`#+
z!mf!6qV)I3LZ4)Xwnsz|$aB%xRVU^H59BT1)&6iiPKT^KkCZrU?-q>le_2RrGXPf#
zUP7^rF^w(9^!L5`vH*mji%K|h_FtM`IVoVDOS)-#Jom!z7?&P~m)9ZKygjU*J7og9
zRGgp^J38Lq1fEuCSy3*;YANx`Qg_TkIA$Z8HiS{UB4;YbhGX%b&*z@5Kp$q32;ZOY
z98$ZTezfD?C4*OEr!|mWO5yJOY1tWZEPx<TjlWwLKeD}3C;-e5e8x&Dwn6->?x{Zi
zs^~ecEFNN-lO0#jqlG8T$AA2mEJ`^_UYzIDZX+%yJ}TNRgO(x(i^Xc5j9imp{@01Y
zmBZGzXOiJaqKf4$7Qjl1;7Bw^%3#5Yp&ppvXo3-@tjw|}($2ivbuL<4sm4HSi6eF^
z<$U4^{iD6ySOh?rm!!;vn#u9QI_;qfPqBi?EiQblSao!}$@_eW@u?oTki%fP^*@gA
z`O3Fs)55V9ueOZKNA-P98{0dYZ7u$5GqcV5RXtq-<~-=QVyi0d2r6J{hl=}+iZoz&
zrvXh(7)v!#JuW_rGCam|tm|W;(XC3AG3-n;M;}yt_y|xxOm#A`fXNHF`RWiN{)3p~
zKV+!Siy=^ZKD=5!)XohHyAoNNiZF177BE563<iW=rtg`PVC#DXRdUU2h?L&iyg3G^
zxJF(gd-A$~(czvuIS6ov7iaEz6nlDG_=^(-=t$X)l+l;dou5YYHXy{tdeiSWV~{;i
z7xOezU;wTPpfl1=v(2fok!gFToHCd-!di)O$(bl^FV5>;$1AS;OI~g!9)($wP5mpm
zk$<XiI~13aaV~y+`ll-Pgh6q=z_wuh`!&m#PVNMUQq~YvRM3;SWMq6LQPM3d2_Bdp
z)dFifMpousK5v2Ep$>e4oWx@nIfC%sIbBgXC_tw)XZR#CY|Yy)9l)kqW3;hpz^dGz
z14k3oeMX^Gut2|D?jeVEE2)GywIDzxC4yPxcE{K(sp@uwmN&Iu`68+KBD}rOvl_)G
zCI*f}iE|JK-wkK4W*x%z_O_f_^l=Gi4kepvZ#%J}jTOtMU?#V0-&ai+Gz*nFwTev~
zfhIEOFmqCivvf<@g<`Em6_d*lDNZcFUA@&Uo`ar%uyUte(Jw*!iyaXy4!Ubk`H;{!
z4a)G5EQg(yqdWE23~#`|{5qUchxz+^iwQp$qV8Y#oNw!SOXmHAJ6HUe3tuUFh*ET5
zK1~55z9g0lYPq5c%9g=OR(w2Cgau*Sz*gq0)9tYKkLKbRuW6fm(vMDbXtAj{bSl!2
zw$=PVF`J4r6|xspR-}0q1-pUye)^w(@8-AC4BmQH-$+a~vYPbiRZMGdMOzi($TuiR
z2qdFI7-7+L@m9W8gzl~R_r8)=6U3K{S4pw*$M;oA@|QLBXRiM;pqOZ@Oo=5x0gB6n
zcILf^3$m3<C@!!Y=pUEmAu{>4vA^hFZr~j*c<Bu3v{L?vI>|71e)-92Ctv*LoF$6U
zYPd}!D_3ju)ikMM;lgCZjsky<;Z+!M-Yf{&#>`TxCUeebwxa#_^nV9AVXQJ>B34~>
zIH%=x)=>LJVhgC?M<)}>*%#<ofQjlUW{TB?!Jzm|^5a5VpXWE8oP}!LtbBFLS*%Xu
z^``~L@q4I)Lp>tN;3KN*@!V*1uyFkOrviysZX9P1C115VMk=^cfCGSI<zQE1IpAqi
zK@%9`jTY=HkK2sy0-BylvA?{sDVA8mZR1*lEy^q`l*(uGjsGaifHKbmBVG>tj~hf+
zJnn5Lwi{@JI+j!~X&Ev)$ynfCWnvgXX47Mx$ABdPX-rRsSOIR5_s)105Ltj-`QS?8
zgd5yg#$fyxou5*uAPMO~4Y~MVinh9V!L70LOXp(XU+GyFO_;O#qLz|pT-B(iNhL?B
zrV|-v?srJAGxpW;2pSsTZ2iLw;o<SeWbG*Y>-QpVd{h$4!#@mm)f2V|8(8>1lKxuj
zQlJkVx!Y*P9SeyGaB4f>PHLhGTE0?xrm2yiu?Px}py)4SeJ4Q8D*gED6IrX43fRKC
z?WO$&CH`4MHh*a+bvcs^auX*OJtS?&BWkv7!@0ilthcvK)bNiWE6uSa6oocD5-kq>
zPP_$f+1zqhv!QTtY>HTrLRS@lknf{s4wFO-D%)+xwS|o_qASA6^l10hJ1B!sE~lLZ
z4fV{UZ4}$Yb7mQlT9>>Fi+Eb4=C3tIsq6$=PaN<6l@<FXq(EdrJjW7;Zz4Q876fV%
zpfzRe0xbn0_`#C~^uWGtOKA};-|xzsK>lg}7q6D6pQ#v2@Wya#M4JY?W=ovCz(=#^
zL#Uz!mTcBu+k}9EF`=qOYo^8h31%h7H<a1;QYnb*8Am^ZT_E&7&jd51`h<Cs>yD|4
z3eoH0xaUq3H<2ks&tIVoV-<_-dY)SNGY1~J979l^G_Yt4(3@#b<Mzk<g=Nq}2})qf
zAr+(`n+zvwyDX|9o2{jao6oX;Gig3ZL7Evc+Jj>*AHSG5j+7T@X}x|wKHSB`gr&iG
zZIjan{e$6(heQ?J#=EN+>Fb;^?VlXe)%P_c{naMh(mBw|Veh7)fn3mns`LX!sK)Gn
zvGq<dnuT4rc9(72wry8+*|u%hQ?_l}w#_cP%eJlE@B3x{`SWEb>)<|FM|ZL^*EQxC
zLw_*qr=Th>3=8m#irn)tHOKFszHIGGLKNEfdAsp4ufdAX7nOT=oS7aBD+FAG_gtj>
zqN;b*+Qv#qu%ZPwifk?-;qCk(Z<;obBv~i1L}5_{!?cPkN8jlb5(e+RT__75G$1%W
z0SUGNZJP2&O2umWhM&HnGFq!fyiU2PAfq7C0y5|n*bq=LS<GYw`EjPA^+xl$<kF*7
zcdHhrfmStd(!xBp<2NNIICmDk)1b@ALlOz+&BV!<y5!WP{3DT+8;z$hg9fK6XX&UF
zPOVX2YQ05q%2XJ^GWU65xSHCFl|d41N^rf#vibBD1CQ)aPmHo&w<QcQ^@mO8MocqY
z|1$8)v>KpmHcQI>Ipe|0!oqE8FZ#-!|6C-0TIs!f^O);MfX(TJuH&Gfj407l5UV0>
zv)(du^mOIh04GF)ZtqL&uNz8Ha&STvkBQUWUo|sMFe5(u9ML;^z#bNYViK(tk&yrR
z9X{rDFFqux()r^ikdOv$)H1hy<4M6F(4xB1E(1sh{J~tEt4Np<A=xPi#s#PGvB4W9
z)((4!Dts7^6U`yn$Xu%D4F~_)IohMn{Z)~!g%^{D$g~bKTJ!T~Fz3M&4&mrJ;U?i~
zk4Cwe=b+zvk&NyqtiGj<r|L+L!wZ{F_2%h`$sD~PKS@Ur9iKZS@DzH1RJmZ@$PuaR
z@CgtH3x793Dq~s9ox(kp)n%jbhu21FGloGYmy7Lhle)sUSgtt<w@4Xp0yb(Z9m!El
zylgxyl$zzxypJ+O!CxaWPif&+MmzJm)4v#P_PyT0Z!BJgm|(&jst~7KylC=6-yZC_
zI9fqt#5-+WJhAOqyuN&2)ZO}jx5LerUK#))wY38;{@i-+;vRyWQUiT{yP|v6PN4J%
zCAnp~`;#UEy~Vy%M_es4*FiDULlg@4tIFdd6X85FKY!%;&j4rS@8Pw`JV_|XU=fxj
z8Ba6U<S#=*ouQ>kEBb;Mvv<5-_+(oJ;>t{Tw+nigD8rYUn6V%RP$`h<VsU*BniK%9
zbK*tMK0LaBEYxcPwS_>36N$Fk!Xi5Lwbm*Mof#7att9qp_~DwphxNyvF82`LY&8e(
z#I5j)Loea5)39zs<)bPUuP-31hfS^k=>oN@qgY&NHOM!zF<LqaOkP8cazsiebzps_
zNN9*d_owvysH;#tTMonL`41GPs#`#UaIBD(Bu53T0xWvbR{T#q6}`4@`CJHmM>_}3
zJSm3PJs*DN575@j#7EAxQ}gY0*~zbY)O%e|BeL8s;IP`+=HM3{foSrUw38M|RjU?h
z2=1WRhVlCn!lK{?d7IRu%nJrRv4QcrhwxLd&!vSU=b#J)#o_Pp`2M4NL12JA!w@=l
z3@OUS`IL4<x}dL_tekBtPfw6SqCJDwfd`|c5gbiKwBMI2aE(P4r@$X{TX|5f!!s8z
zD^@~d<s**GY@O4C0;}p`s1B?YFdjRq>wZ%~mRS#<1mqA543vEqq#U-2!?hPNUT><P
zv0c{)51#2jgOAbsEw(y$TPgtfWMZDZA%UKnY9VIZ3AW~DQ|O6iwD4&{xP7733r@3C
zWil>Y(M-(1?76D76;H`vpoRo|aZogDoJw3}{26N}cqq~dkxEHK@-#m$7p%M&nli(|
zSSqMhvvdt1#BlN`b&IAnv@QIoU6b~#AQxwWm|k)1A6F`)yY4gWI!J(Zc{H=DkXS;|
z<Y03_8J!o7hQB_bp?s;DnsoV>EPYnZZ@h*oYy})Y4ctdNf?1Z4rmRpF&y%JPr5!i{
zIwC!xqC584%&A-rLv8Q?e{*nz4<j=8G|5M=Ii*RTnvnn>`@(g1ELQLu=c21yj>)*+
zqcrq7CxRa_{G5Y(7rE?=oCz6>ZXM1G9%;S{r0^#{zr0vS(ElGG^}n3-KOpsAi7#VX
zKHwinmD7~cQqpK!1%Rpp{ZBdoPr!e&*;twWF;}JkA5zWHbk{*WS;=)>&q3-kQ!&a0
zqj94}lHG5~U+XuJXrP4zUf_XT*t}jZdFfQ4vPKLTNu+EjNiUB$+7^xR6R(qE^{Ufz
z4(&cX_J&}cknME>yl_krTy}RmZ#(BcWS?M}L~9C&lPAGxx7j`cp5gv1UgD;4&E}%;
ztm?imNaK>A=wDF8rq~l@)MbRYP*88^q4<Oz%nmWSLH6<|Crp_<!_&I~1t<<|=js)t
zuDB`FnltEFSa&SVlB{{hRrQq=S(m4U<yljHjjTEu_v72g&6Q`Q%J}-yaYzD?j5-EL
zhDkX84)xqjxB>YA0t^fA2U25!uJH%HVNv>q4K0&@@W)I)K>oJXG{HQ2c)#hDp$+6d
z6Y1fog?icRptV}Mw#x_CU8J@o_}OXe=LyWY4Md-Yu#9a^=d!GN-E~t1eY7z8)ieUZ
zvIJp`*_dyerLwSO+(pA23|AX$8<;Vnq(4RT84vw7QDbfbWJpbmo1w8}tPfY49W$>?
zo0-9}#AOWH80wjqGHYW&jAl5Rq%yTmyO`lL#WonDGm>N|Mia1PHW+}j08Lj-BaTL6
zjl!CXGuAPFVabG=Ph0+yu`E4{F`f2qENKk-0)J*1=X!&GV`{1}Ba7sUgg+uRWv4OD
z(L~`0-W<yTT;#3);5g^JJpg%vm?K1EdU(aJ=Hmp}f{(%Tvkg0qM-=dcnIYgX(>k;p
zc}#?_N~m-*-=xTVdVMd9mypQEeLjp+6g|f*#BKAvlSCDuSJYMN#o!G6yW-<<>yHtj
zAi%Zy10M+aU4qmzuEbOqSM{-O%Ea@$3A`p)cF8LMlJ589RVG(G*fX$VU|+7Xz>TL#
z3Hoe95FoW~RU;6}_V<3KbVhrXH&LEW?F4jy!CW!91d{G7LQztY5K26L_P@5?ezA%a
z*LQ?`pz}Ry6>Clu9B_O@h4=&rFJCi^Slk%!qp@LeCXpJO6@frCi_kt1I$h2jGWQV+
ze69sREg?iQ>+O>+?7AVU0Mo=TQzs@V+(B~;^JBeVomFk*aDNFAS?dEvr_N(VY`nZ8
z*>%O<lW6au*{S8Sl8G`?5PyB|f(p6JgQ4Sjlb4R--O9%_LGBzG_W>^u!tXadb&d*K
z97Pj>3+%)@+~DQZ68!c0(K0V#Y}XcIF}F(w=!#=qCmL~vpS<1t-6s3G#O+D-fYG`v
zBaKQ#wR$eXbx=>3y<E0w`G&?VR^Pe1n$HqD7GDh+3XLBDuJ}0scB@a%T_BGA*G-KZ
zPBX7V?_~)12ZfOfTQ=HNh`5*?mT7mx(RLq;PFy*mC62OJi>+F;V$@P{@o_)~vM&k%
zUoD|4g$HerSv?tRb%eNv6V^L3gA<%xP#w62x3gx8)v4Y61CDnYkLlvL14$-#Iie!O
z!9iemrLKMD!HhNRlyuT41u?+%DmB$BfO(wjw4S}tMx{R@%%3bR+~xbji`?ke-hShe
zvvQOmQOx6iW~uu}ul<T#k%N<;-pw5V;d-<Ax!(;bucsXm9!-1kkP&;hVrl2q0fiTQ
zBx*9ZxPd<*brW$e3<vsza~UHc95;NQb_1r&l=2}c=Lp+@2Y*2}aZGXr*^}fwt4EhF
zm4^y#Y5rbG0?;yqd-w17TnrlkScYy~9(_U@XtIpW;ULk>h!~S%5RTM&>c6}I<Hyv<
zgi3@zDx*nc%_L2IRp+8y4lgOi6=AZ`WhcK|!^eZ9g>ds}hpwR2O%qku#F=q9aiDUY
z_p!9v)MI*FX@&!w8t_3pa9J*xGGuK|Vkk%^${|=B*f+L)qldr>DK0#jk?VhI4sP|t
zqADw|EIOe62+J5~3YJjVfMM7HfaV78kgt`ZUCjUbG`c_7K=b(!mmGopaceL{>%zID
zq8ydYl%bt?9ebGHf4qY}Kw4HqziL7wUtz+EEf-B7Ys~%VzTiI5kni-O+zppMTddMj
zl{Nokt}epkB97(m%<!Qj4B;0?a=4Yd#mrwv$#XN?ubQ3=lqtI_p*;Z)5H7K+3gIq~
zk&nfZWlvDsk0qeC%Sz_YjA&l$F+>JkU_;PcdZ9!m-H@JPKm7rsYhKI~WC05x6PM{m
zR(PVpR*s#TU*gM?r<^+{wn!KH0YZ$aPG5SE70Q;=21RF!*R4UeZ&WB*TsBR;pm9Cw
zSItT;$P{}-1-ezc;i_B*ctHncK8CX9pbxg^zA5P}9%OK$*wqZPfx9H7k4Z1Nj(4GS
zp4=_RBazcKY<d`}&M0lrOPP>oNIoNTWDA$(gI^_#3|Q!;7Dh=)`g_z+C;X=PTv@LN
zKTfs(T&r3>Va@-wlcvMxcRct+@kX)By-T<%-l&t84iUmCIJa63u(+B)N0DQdjwZa5
zV;4j36)C-YZkN);S;6`Qa^QRpt8+kxX1PgVlKX?i@2yg%(fEjge?IZWH?tOX^|^<l
zTO#5AaoCN5B}=}+Ri|2275h>7&+T;4sifs#4DwxpFdcz#SjYl?x4f>fneO9z;+SGR
zHd^@9%*_5kk+?SuxUYbd8?uzhOG_CRlx}9{V;4hfHgj!<(PdJMGX7JJJ^gsqNfMeG
zdF=kr%L8(l5YTChJdKNQGScFPV0$KeiQSy&u71G5>xBeFkzjx<JeoK$oa9kR)-WjO
zrCEsP1zjAbbGYg+k~F57R#maHAmW?u*!87!Vy<pAJ0$xG5ZtQ2xP2FvNQYgygK1rd
z@U~ZC06z2VO6?2Aibd2fx?Fgt>7q4pMA1@SSr6MY;f5!Yquzg9q|A*SuDH~Fo&LC8
z0dI@E67(SaGH&&{y4~oo+Oe_JUSFZ-R=$%!3B@#B&D|1_i}l+V#ZMt;-mSP_FDn@Z
z?omsk8zv<MT!%T>$vdm)s>(>2cbShl;Sj$NW-~fgykoyLw8^bnreL2^Sy5J>NMV{J
zGAwS%Xf;%E*zw9e1jBj6jtNlR&DdY_ikZFRH7YE#^xTk6f`1`24{2Ex;*e&V-l^Up
z#Wfl1O)eYAm{o*BcactZUf{@cTr(P;K}o^w3P)Z7=z0PPvwyF5h0`WUN8_EOAUtfL
zS8><Rt9FnMxMuDKmsk`HV;Sfu3wzXxoW(&!<^tx*1nQOCX--!fVIY9@rzg$jOI+HG
zG3}=ZI@a_#5%anU3OP9rzBjatH9sb5Aau9yTiy8t$IAYtwS4;deDmWW&nM>0aGnf2
znMLyfNQ1O7?|DB`aV7S#zeVS;C=1|-vcIRyDZaG#?^WSS*fLDtA5|(Pj5==j$2&Xs
zp+#g>nyNPFc&T+9svKvXOUF>zzbr%Sd$q&btN<p-7#@M0UUfv=q$5nI><)5y)xr=y
z2hSg?eR?~HI+X28)gc`!50{}TIouSrXw-xNb#*0$;XQvFKYSg2H(2_e9++ny_rNdS
zWvu-{{V!U#s<c(F4a*|F*=D_0OzC2A9v0n60La(l5rBTC&+~=2_e4*h+LA~SDy#tJ
zdZ6p^br={&t_i`}o#BFJw6S<=F<2HA`XGf9!zv9eNvIi<^@E}llbeYa$J7C;h+zUS
zBD8PR3+!a1#2SxDQd}}dQC13(d_7Yt(jWI5jM)hn9?n`?b-4^%nYn<jfeurrLttI7
zy-DP(=oe9mQq?Ac4rg&#CFGR2u#;3QzBElpXJnDyjR==U_NZZqg(LAereduV&tXmv
z7r=I46U-s-;}9QHA-9KEgW=T3nM@17A}HQ+UXq+BzCp0ORD3n{Mat<@_emF(^AWeS
zG<%;ixW{SS4uyczFv6;1m9N%}%|<L<om6i2JL(R)dzKH&J&O~XFH)cTRMQ^ftEevM
zmXT+l5?-NI$XQ2Kp@<`;wd(Z9ZQ&z%mChE;0l?6$ualaLgi|3KyIiT%_7)0&=+~0$
zO@AaTp?SkLj8>^ry)PDMoztCTH!fHtzv8_o2MgeJIWy%p)cL)C+k3|>k$42vp7$fH
zRGqpDa$&$$T?7JML*A&80d@%$8~!Bg5CUhQd+D+KWicL>T(W1mZZ6UF{UQ|jefh&z
zPw%I>uw2W1=*&(E(k?vCP%;3R;Pw)OvmP8tY0PSt3*tUJrDECyMal5T(M{2^#<0F{
zvD=Yd7}nZ??s2Mlm}V=Oa;53onB94?ZP$=3DYX&m7LD7V=-UIGgm8jAOMSTd$o#wI
z)5FJ`*}WNunY97dm|a~OdHiXw^~2l(2eBt?f58*Es1cdTsm!rS9`ph5c<RM<7KPaE
zr2c|Nb*6|pA>ixm3W{ci#M;ZR@d#jXF(Ug*QD*(`m;LG4V5pTu`D}iSAy?L<O3MwE
zKp|(ti}6VFG^t)#R@Fn%M&uW#^Z9LC__|J^)v%OQU@I;&v7XUR1;Pinu3oQ#LcF?)
zwzu6$jfN%grqBE5TU#vPC8ApGNoi(R5he9ygSMM!nYGv(_2+N#V;S31ahhpf3-Qq*
zc&Y$LL*Iv9Akha8@mP^Z5boE(i%p*Jq2Cpm4}I;27(RDXlzWYKGil9pvp<5S(GSfK
zd3_SY`;US%oLwg97LK&edzA`nl9qY>iQz`6eqQ39;Th=l(#;ouRTE1Hxt#xxh~_n3
z_OHJ)xpfn)E%%|{RI1MegL!+QqN<C-b@ug-Znd`fXRBk<%PJ1fmeMSpIQYeHf-Ff3
z$}CtqXKYx!Wbs)~yu@Z!tzti*+^0{VTE$nz4x|w2R*0TS(V2Y%K5|lK*JFuq4@(w)
z*5Bt<N=YsGva<1jX?^~^yLgjtVK$mmWPrww^*6tnqvz~xx1_HXn?|y5Eq`6&g}2}i
zt~=K{%o2~qq2ucg%md6leNadQ+=8frIxZ;AN3gx2te29Obf$O_vGq7<NV(b1xH@v^
z#oj$kuU85k9W7NQ^_bAGnTs4UoaPjnXg`q9%*v@i35+~In8`(wp9`CqP|ux^gpQ;)
z{Q{-X*Zjr}1LBU$6pQPmxaq^%h|26QVJnBH&2|@}%xrFIKDI<8WK>OL6LJ*id=bxL
zm~D~upC&9R&4!E!EUGu6c<9VW6We#AMn6`=e+m(vw5}7ODIUh{g>DRsSLl(bDY<%p
z7?5ew-^mkz2LC%3)eKCMUrTvl^kufwwP{*Z+&lBhYES5oF*E;-?C43KgL9vw`)R&#
zn^!i4lq^@Ll(S$=*(<~pKd~B4glA=qwX=$^aZo`Eafc5ez+k$nU@^68>AFFoC5+5@
z{O^{iU69W3QD67wyk^A)%y}OaMM|hnc_I6=|D+HAqC{Z^X&uWi)HZq6jpLx9k9hIX
zH+9b32^nq+#6qs86N|r#lH~{6!IZqDZWKPToIzt-{g|3N5Mi_oA5&JxyF0utJ^xkw
zo@24R?+(Zsvef#zY3+8=zdM}Qwj#L9XPiY+4CZtEe$}0>u<aE*E~34voRHxq7qqO6
z%E29=NYPU6j_{t1ZL14hX6ijXfd;ny%^_t-@bPH<NI3KUIISYt6utv*h$=VpZeKoT
z6>RUFgg0&%+FTvHzZ0kv`hw(fI9HfY$?!r$l^?@OXum;f1sM-q$yiKoeJW9u$uWWr
zLB*|CIE29dQu~@MhSM0py*c3sk(h+xACd|9608d&r(WaU%?CXgzpci_J9TnWl~)LG
zViw=4R9iV^P|~w6?iAN*5;n>l)w}KXXlv}ck=XVPqYi|)E(>2T#-s5q3_0bYky-f{
z)^d({J@}Qypl!k-@9Wb}Z8QHviSWGxc4^=9a%8SS*un6!WB6f@XQL^mDQ0;zL01Mi
z*d%>=`(&3JZeY1iYLMe0_Wi4(N&m@1A(!Gl=l##HtkDC*9(<|#)_Ey;8<0}}G8{my
zg~?LWAxnS@ut5eKJ5N5Xx0Rsph(|RBpqpX^KPLWJbr6KfY!*fHtTG4Dq<W|BP1@y5
z8l1-{eWvf6X+;T*zA_Bw>-nl-btwfXpuY7#>J@L9G2Kzndjmq3mYM^c8)Y0bPPwtK
zymXq1y!&eWtEaP}Yvt|6T6|-N976Bx%PFgqbGSo+kO8x(GH)VMPb&7S{hIA-+bWLd
zl(sFjl+lY;gls}<SUr4xByd|L1`?W${JMGYI=G~l>Irh(;s-PjPo1AS1@(aTk_UJP
z1cOm+H^yAp^$P``742o!CADQ_mA+Mb{iRq>{f+%!*>9)#@FN2-*NF|@I*C3@m1zY;
zOucc(5M(eDMHI2|2h5)o@^E_+5Ic3}oSug$lNfYoYy<d~^FWB>o-1MOt5{Rq0&5R@
zoXpX*TB4EaKvV;uxL;owOL_n;xgK$F(dv*lZ_wlfgx40tPd}||Ad<iSyzpTzIov;(
z+u1g7_OUnK1mOa?osl4Li8mtd(mwLTvOd@ux4|V29JBT`76IYn0~|!`pn>f@PeftS
z5LMdpH{2W%loKxY%#!JkRd*j4Zo>qQVA@$VPf7_FfNq*UK6}CYutor;%*D#Np{yyf
zqSyG@DF{A=fwPL=;LKz+as=5GRC9;UwUfS}r@N(^Kh@QQ3?DR;(YUp0$d$6jMZP)N
zkZGJat<F_)!gjWfigK|ED$-cJC=TLGnZ7<>7>waB7LE415FDh&hNFGz?#GNi1AIBl
zQYOPjZ~GNl7dySj^oakOP$a$ACXt>e#Hj<SZ?^MQNW8z=AA|y`y(T44K~)wh?LYJD
zdYz3{t=cG`LVbbHez<o~pD<jFlbIG!g-h15?7=rR?JwW&&*zOP&O-+Ff9ZVtqj$>0
z=IuIt1D$0)5hG|2_RR87V9Xi<*<W(C-I)4qSj~MlBmGeA8G{16_Gp|OQG18#e(ej|
z`0zQ)426W+1Oa7sr1o3o<@<iP*KuBbCe!D<p`q)5(h|>$rr(oe$*3Tt?e@pMNb}pH
zhdaU8!*TQhAl((+3cN&oN~w3`Zy-O~(Y{w&8ORt^yB;NC6V$zyYd`q)IXH@L67*U&
zB|J@{fa0>nHx~hGdQ?Hz^c}Bc)E?7H=<`|xuz{Fp5vsjWt<WwisY?R`?}FhawsoJt
zGL6y}DNpEPP$P;+mP`$ngFZ$oh$lZ^YN^cZh`=D{<xj&JM{Y({gt3$9gpiQcVZ>;?
zCB-@M*dk(qqr~h#f}W;kQi`Px5Lsxap90&&i+A)pIGcdh?Jd2-O-lZ2Z)+DpFEFiW
z_17?eD$-oiUsAc;aFV#A#@+D$dUqeElDZLsQN=I=t&3!U4t81E<Gm|i?^3d<Ekfgr
zB5f<U072M<$OO*)vkb(<j6|S%yYaD6u*wu*-zF;Kca9uW92Wf&8l9=*B|p5Pl{CpW
zg6eMCNUH#4F%_#;kskz3xw?~{_sD2pAVfjuZhv$NvIo-uIb{CF)1fZv#i67eBjm(H
z3?WztlhnqRw>khlmEfCtn%tlW{0yBynVlY!>(wJ&Y5I97`cMPBevp0XoLe=`qTpM#
zbHr95otvE%+8qfJR0ON1BKpS&SYQ7=BsAw|&L-ehS|X|%>Z73OQK<~mURetEK-Vn*
z&2UiN9M?%P<6b&5Kf(IN-og3l#XaZAgav*eMF0C~qHAC$LGx*F^@+d_RNra!il3a?
zsCDiv##W;60(-lHQ!U5ALLzo<-VdrVpbO&J&(D(Qj28MHe!;_HzZq$RRaTmtR0O+C
z00%%F!rvyr3@2b$sNqA1F(ZYHkdYrpOJQbFI(kIt+u9TLP~oSJihk}AKY=zXWK{@0
z7zD~3P)`#9f+$@EpEe<lE79J`$hR!4qeg@(?Zamjv4pA)rxErQCrQa9Fn<@qs#w(!
z8CEx|*Y3BZ;L?mw@4%Tz3n9<!RC7SxHVPOIJ$|noGMx}#)hYP8)#Q8H+%dacZ>6GV
zx9YQc{+$kqpN&u@PwB5S@ob8vLNQ^~J5%O4`)@IX&pXq1V<R(bGdQhY$n*wKcbi_!
zroL<QonTqnuA*5r0~@;__&Zw=|Ear1;lNOOo>|I{uhi%Qk@xy5Z$u?^eE3(cj~u}N
zD=m7j5yGiE!V7<H0AD@PaU4w5k`SnUi8EXVL{=;rdL}$00{{2B&8FNj3QJ*l)S{Io
z)IKy3jXXjqHxLD(Hx%A4bw>tQr0>UTRa~WSqftrYQt$gdF0*Zy@TV=>cDLFv%19%y
z3~BS&^PhCC>z{er_X+^<PjHX>*PKyIqnWHq&u$tfikz5{hn<NSuLKo$ZN0Z9(Zs~i
zR*G~ZOBh>5k&VBBotZXQ{ZB!60EnU*pF_Oeu0iOVy=V{~@&8MH_>ZRWU#~tBD|=dY
z1}GDvriQqfupEtutgr?XvmXmbnxPtKaN5}-D0y1HKPYTkQYNVWKQV&&e~A&MDV_={
z>gc08MOoJr#Nbac+~*hM(xNJ;9HgU)7A3<e<K>j}TLw|IGYf>{<WYpIVd(4X1(t}2
zS`Gy`iXi1!97@;B5uBq=v^CI?ROb7hOD+4nza?d7mcA~wxL>j#zOMOpil`dU#1@;s
z0B!<x%egq_H0&Pl9rT>dbG9Cf0eQj?$~CW+g*Bx1m7HFbTkn5Wj>kD+TgKRo9q-JO
z!%KTsK4^%E4_XF<K8z3LA~l`V-Q77l!o+Lf;8jAVILeKltJo?r_eg$U;~-&H$40m(
zcn60}a3JJ`r`oGYRJAmm_w=c%iCPdN0EWw3?%|NUmp2?D3op?UtggN>m-or+WVTMa
z=r!8I3(XYtmGzPtj$~~Mcq;@HQ7WXCOwMPM`PgFrwZP<SSY_u&A}ed6%0n#Zs<G6t
zs(}=e7>Q>SlCLzZ%#yN@jg`n0YkpdE#T9Z@s6>LbE$?c9fNNL?Lh!HBVoT#_0fw>n
zPJ!%724D6wxe?NT!=qsAOFk$3$`&&#fbUU=bhA)S$;e7h1+U<0bYTvw-_$Xrqvieg
z<^0K*qw&Y>uJG{Kv$EgW+>e@r;1qXFtX?R?5TarfpIe={46U9}gW=A6jj(;xEoLIH
z6<d=wYtnmFm--5Tzj8Hj*!U=W1%NrxGmN7W^tI0kYPKbN;I^ts+oSjEt%nISlq{74
ze#H!WL5kxYjI=eCF+8i}f*p5R^P3<$s=U@HQ(H3xPh9eA&Et48Z_c$r{TLyGZW_JQ
zAl-y1Rx=Tt%bWcJX@trdzEi#6q0{>NlA}m(U2mK?=6OFQmBdiYD9()t0Mp6B6|b>(
z7^GM(&ZEj|scQRKK5L6AJIk7ues4<R){afAt~eKaCsGX$92DOd{hN5CJw4w3OlSw9
z*!@Ih7G%O)C`PiS)vU^mu2!~p0NQ1V^s$oyDUr;Ng2c72(kg|8bs&X8nK5ltF>tHA
zr=!d&g;iGq`dy4i%oo)z0J-7aXpDNsA(tcZr}VMyr^MuL(11$mi?62)Zk~p7;r0he
zNhpXbWzy!L1YJi_L;%SuhAE0M+}*@6G-O&(KZSH`VrPOX3(8YCvjqMp-1D~l;GCpZ
zqDA(+1`1&lv@It4*Vlu&N+}cww!=K53lcc2d-bs0bIOVA{;rG-Ahx|iYad6B9qW&Z
zIj%hA-fuBi1-R)Px0Wti1!?s75btmcer8AazCM%d@`NjpqgkD_VTFIqL@tu4HM1eo
zjLgBklYd;J5VnvE&V3?O9<q#wmN6h_KmYnRk9Cyh&3873USAJGW|InI^d|DTwgXY;
z!}o@4Ud=3TorKVi0rFYNBp@Uf+I1s%lza_YUehkCC+EyBngXN(nnAJ7;_-u*GL3xg
z9EsGmwpZ?8)72SYXuy6`7{Amo{IF}RD7)3R(p4Jfk(2tJ6pq<(V(aSl_0P`PojEhp
z&HXr(E3q$NBQKgZTiT$^)nf)9h@D3CH98!e&Wuj|%N%Oj0YFi1G+s2HR}Vvmn*?GT
zY00Hma@Rs^zh<u`9ZgBSVH2XIhbC=*`a31_2oM(?tPCUy!dp7!=t68vX@*RY|J&#T
zAA5Gu#|buN$uU@eMB)VR#kB>c7xu(KvfqbTD>Rx5iXak7ge7c>EjexR>_paODoPAS
ztY?=2-Fm5%21MTHL9bywrXq%N;!49l+!6imq`5R$aS<}~_0$vsQdgsj_J-K~>x8;<
zZY<9FzyR9u<<X-*9Je=e$w5(@8%mJw{=f|>OJ1k7*Ii<`Sk!~tu<bVo)5;|JzJftf
zu=wC-60heoP?tbrz1`qQh9q7v_5I>?&=l3x1G1lz1rXt6wqn}E{pq<k=|0OR!~RS+
zooa@r*vTD3n042)c|G7;Dwsh-`R0c8<-Hz*BK9M0ZLA8Yrg#_%gr+g>DD?>f(n@cY
zG`3KY9L!x-|J;TupqFnrWH-Q)BK=!!YJ!~rS1qdjz=8In%}KmI$vu$70dk9brgw0>
z#H-mL4(J0CPG8=Wvm+^y{oJ)*Nuq7f5&Q<?`IRoEB!wLhd$KO5#E7Qs%w!pl!rrx}
z5KbS(VsU{&1Ejo*|A_9EhQLo*9)jMUp>nNu2%$eHPFNu|fi0_}W1_|SDW}O8QIrb5
zr)6H)0tpdTY?A~p%oXP<3JT%RRbHLiEG+-s0bo8Bp-Z4DG5hM<3#|78YGV90$$Wfa
zwFv6r?67`?V8ZeZRXk%#R+VZrX7Nc}fH$WNBOQP}k^0lz{pl_C4-Rji1p<NF9=?D*
zw7BVUm{*Zato=1RWevj`yl;2T;qwGH)Z<p8PPJDBr8E^4*<V-?g1AdUc`aE;z~PR<
z1;ko^AyK4no|-ie!krQhI(;UHG5vnofrAf@eB$?-)HkE5v<OZ5?d_rLPtB{tc5{V}
z8+9G`&)Z)76)|nS`@QaPK+bFSj@lL;9lqt;``3^CPE^_2wT$U%=@0OqzkU$+0iHm5
z*s?3NbH6lI9FpZ~WF{h}CKgQ1M8Hj$pa5?QLoo_s5h40C23NRl4a=vKy{()N_=)e?
zytdu&iAtRJ??dF)WVz(X!Zana??M(q%8Zb3z-s1H1#gh4e<=uCWT^1&Y01FE+RMa+
z-OwcI*d^nRZHDdGT8re+);EZ4oAHvYttAxy2}yJGLH~Pl!2Y+d@ZSmGKcfRPBjf*9
zd%()_KQTXIzvV=<WZGzoK(T=!7)<R<44o~~#ESnD_QT5Zzb1zk4NDK@<<4y)lctQx
zb}~gdB^46|3#4RCN-^-w1!j?fmDc9wxdke`vvkKBA0A8YHkaQJ(u+!=TH-+SA_-D-
zxTv6DSW8ud2?zCV8Xc=m3%|T_FZfRG#(eJ&CET7jF1~tSKDKXkwS}Lq03uSP$Z@M*
zX>Z^kJ*PPJ3xLSBi^#IqXi?lPiO(q3U)uP@Vd7>4e3d&6OZ>35n1Q9RCB?`S#6NJo
zcTiYTOj$+Cxd*-!9&#C6&YflQIwnfLMc3G8{TW?dOmxySKf|ANun3S)D*mKjo}u7e
zbPTo-uRDvGIGHF}9g@G)0($Qpp{UNsNoW0EWfP<}DI>9OZkp%~2D}1k9Sr9#qSR>h
zI!u-qmaRWmdhgF4v65P6vp=(6lGDm!^VkCl$rWdnSSlu#oR?@Pqr7r6Wj&RRE2x%W
zmN>1b*>W?*W%Kn4$d&4p7Aw-qv6hsVD5d47C=sZ0y)v<dpGra%0Yeo?OOllWBT69U
zP^5G!0@Pv)@=j&5^k+V2C%($2Bqp0C7-y!BEq)Wf362-P2mM1pBoL|z4w=gRZtDj)
zc%R`kc@D4V#6$$}-@h2w>lX|mLbXE$a2pJVDM(Nxa?SLOX#gpp)$sQY<Neq1Yh;Am
z3EU>-(XxfcOf6vlCMTGH43V)iksh$=RJ_VAqpoGU+E;i~+verojE6u61)D(6`gNlP
zr*(2TWqEzd<&txc7^$kv^Jc8p`;I2T1mTCbQeOT%Bx?(VFz`!@9$g(R3ZOCK3XNlp
zNvD?5z^iyL@gg^#Yq#$-UNTy4N2qr7Wf=P`o&tFKTe{LgfLe!{r;s{RI!&gk>j%zG
zg_R-V9M2tS019hARqLxz;sRXhkQ37L01&6m`F;qpOo_s@O_^^1!}5(;eV)d6?x4CU
z=SWOBho3}=N;Gnw(Y#J`L1*p5_>Pd!AZy5-wjdG^4$+{|?_>~)^vE~*95Sfpc<VXq
z`@1HO+E21(fUr8e86!=8W68U}LCX|}b8kHqa=-qX3A-gEDV?%dUXYWnE36kd$Alwk
z=v<3mrh-B{$rg!A#%2LZtRRI1u`H6&q#=ez@IoYYGo;vrqCmECIt*_*YJ6HUzLAqa
z%aBtBXeY{_%;$$=rGjalNt1<uc-7?PNsmuzx`tH&K;(^KJnGje<`_2iZ((3Y5B4vJ
zW?6TqQ4`zowXuBeV0TDLob02kQsFLMPo!>b6MCdbDYoVbQ0%XxKC)CDXFn`T>4N%U
zt!O_dk8v=s!Uuc#HICuy1|QfDp#}o};GVxE%u1F&*}_?3l%%trB&}MT(3AWiAu%ec
zu(Jh8fB{HP%h&8C?dv=1yuMm^VpZpX(C1CE{ellA)_JBlwqdozN0kgz_S(oW)YB39
zN;$jV$4&>ZXF9OO0Yqx_{31n;lJ^f^JkD}*G>TseA2VYPVQ)U$VQV50ERG19A=4|m
z!govx`9hB`s&%%x9dkG@>U(#u>>t`s1md#H08~MNazCy?>i~@Fs(0PJVHrH@5r(y)
zEee>IuJX7elHX8>5K}V|z(RA1DJi)%6N{EAoY0%M%BTLlz}1A5TCu`S3s!N*K7`1q
z4TyxI853XX1=H;$;61^83Fh8+ni+aN^l6E9l1%@C8r4O;B`t3#@}la)NV-OnR-{<U
z0O`&!`S_Ju^ENa@-y9Af#izMLQOnniP*#KQ)nnB+#RwuT4bcy7ZWA$58*>e}1ekqf
zYFe%<K2bsea@_W)rZ7HKl#@dBT2{SC@{=%`Q3yXEkhvDhjFuTD8fLL*j}7;s_!`E)
zayM(WPJLv>*Sa|m%p$j#A`H41T-R{z0rewZQQPBpxOIoJ*#Rf&5aTUcj2Zqupt_3V
zA2jE{Q1=eFp{x6_mtm+Lh+apF_#Zqs71w$UeF(tHl_;>;=&apJ7;RhTh6cNxXc^W4
z8G#Tzaj9y+nO|twmE2z6&lUCoLP2td&@wILPJPnj457jc?IQ{XL{|$GMlQgY0Q8?R
zvM>QDyjiYX!zpSV0JEu=q%ybq+yJN8is<G%3`SgG*~Cz{g?a5m0sD@Hzm8Zg+Ifl*
z<rh$8QisW7M>*A6o?xC_lH4W0%R;)zSUd^T4-w@?3NL0K6rFA~Xx`v5hUAv|UiIM3
z;un5oX#rw0JXjHIiSillRBV<j0K)T%UO34MvE==9APvvl|7|}^u=`*B89v%!$$b_l
zj}KD&?!l&~-8SA(UrHeqpj4I;yM~neAgr~Z;$RN(vStt{O4Hq(ac6M{&<5>oihY;Z
zVXU%O<+IxTYkGJG4x;geK8oXP!FT4A_G}>vkXGpS$P{I^cxuUduf22vaL%)S#X|eO
zi&Hsy85%^~G<*xD#7>BkDenIfq_>Ok#y@yZ>~-Tdv}4Ce>XS<0HkNAUkb1Uwhe}^`
zTk6ev?1!xws&j9w8Q>qNx<hqZRqg`;KrT<(%@ed9*Ge5Uw*OW|@kLxl1a8ugmd^p7
zR_R2+s<vGjBoQSJotNwY(7?(#5e_BGT+<3sF`rllYMB+yrd%j-?Rv(Xo1WDEuzk^Y
zIY5<#A?rw7p4P*xic(pLsITKZzODRi!O|g5yED0=y=fL@FeqKrEq}e+hMnImonzvP
z|K3~)``KEl)zNd6x&dm3`_M6JNXbpowrNVNuhPlh!p(^{BJtk_v=pE`?->od-wu@{
zSutVw4sADm`2h8rUdx>h6s5d&TW9@bF}IOY<ytJ<oDl<!i{lD^S&)J-)BwSHepCCB
z)`eV6)2O#T|F!Z`Fl0lwe30$bk;`aeCnpC_SGc~C#|Z(qP)P__OJ7RZM%7KznU1bA
zXb2{?kPzxo&{EF_P%^b4S@-LFgVm${^K}mgNhvH8goXF#+jMcR)G!HA2Gd>EYt06A
zrEeb&$z~DZBL{m(hRnpDBkS_`R%oRSI%E0tPNwI>9o;Waok)BDvp^wSi$}o#&HNz4
zspNFLJryuWZn6;Y%9{mu=EbXnip4!1Fj^(QSY=EkXO%qy^bt3)eAaMKJy85$>c%WR
zn2e<CXL}uOU+(xS8<ShZnHyngQ>oQYdM)nAD^ItGJJy3Dy^8l|BnHbl?mV$g$0L_o
zIbIS>4hC{(_XDVo>-h?(y;YjNz0O-y-a3W@OX4S{HTS<3U>0MEIt%l`CsRy^k&ZH8
zGqRb%!)~zwM!1|I+eVc1$iWLnM|*Zz@4KV=lBzLY{-K3HuAg_~LzV5m+EF0xqN$UM
z)!Nc7$8;$TU3;9)B`1?~q`v0c>A#h^Y}Ai~TK^iMO{14={>f=5+PaoHfJ6hBZ53rZ
z#@t)j^;$RD0`Ca0M<j5Hgv!T1FCdz0`fc(3{45p%1SrrU6kA~N%0wJz@-z-}l?*WM
z^pMlqRA>nuJFIJm{{piW|9Zcfz)kC?aE>TOveu0WKSk>)+WU1+y%kqF0B_+htjuSB
zH14y~soJJzw>Ehc4Md*kZ^29uOs?QVfg1{O%PuipN}K5C>fIpg5A2LJKo~(Zbeh1C
zM=!Pt7|xTln>pg}x4dNAb&lvGwakQ>k6T<41gJb~XJW%@KfW~yCH&pYSKos3LgVHv
zNEg)^EVtCxb?otOM<JJbi)oZ`^QCeHjZ$BuIN(j(v4{j>d(AlbcFkrOdr6FVOZnrM
z@M>JAMamE+EfaGt;y8FS{TD#Y(oc23ObBrgK=nBM!U`9XC&GpkwCSm8RXWEr)(Lq^
zT|yH2OsR2pf8g@iuWRjxc5a-~&nf>sJ$>S7n+kp7Q0f&qe3(V6kZ-{QBHQz9RRA;S
zrD3erW%m=Vpo|==al&vP$O_X2QrWMgux};28t!M41ur>5w-1XhR_K}5xr2cXIw%he
zz>tCMF=DAEr&=AG2>B|t#ai#s>Y0?<L!p>I`e~!K6RRTuI~Re6S5=cWWN*M`B8snN
z9bQR)5u~H^3P$G~ch5i#d5(#vB*jzp_}ozU>ikv&Cn%L6uo}6r@ihJls0#c@Mx3Z2
z0;hrgoWTmbFfc}y>`=?xUQMW6aNrICfS2)*9M(l-_+V*-Yi{|XyHRhYpv?5h8AS!O
z1uLYvxQSq?clQWt_kyw>CV>0m!#m57$t*^Qum(Nt(DEUmDWKlxJP<fJr)p{o`Dx13
zl#CN=9j#^?Nd5C<s<ksP;}fSX1it?j`DSN5k79Q6_wiTii!WrogYDvQr_etEG`h9j
zsHL8Q=AI0cE7r(tmT!s*!_vT3OtsvL0=4v8zg<4Prgy6&#=t7BH4+c#=oDX`a`!%v
zGD=(`)s<N~_E8F`?q>}sRvChUUjO-+o=i)x?(f!JR@6_k-t5HvY}Dg#dbMUnZYZ`G
z+k)xl_tTXeU7=KEkiOI0jH!D8pp?0zX+jPXx+Kwc)gN5zGqk$k@;C*gUx18O&Sduo
z;iub9oVOot&}KbRX8%~24oUN(L+on4zW!_fBvs1hSNpm4u5>o95(uz6w#V@s4nnup
zL8(>C9m#7z8ko`7-X*Z*tE`Ou6UUImrST@-&JBSe1*>xQP<T8Wu${dOh&riDPO^z0
zQo2(vG!`2P5mOj5z>5ikL2Icb^<sjj7+ii=jZm<&tG^6VOPo-6uX*BcDrBdBS?{DJ
zV?8XntcagAQ7LZ4rM_%NqpZ5Q67F5?b4=RD6c*-Nal~aKNG2xf91=I(XR`l=Kj5*W
z^Uaq*Kkdu9`~Kb&(K7i75O!@Twa}+a%ngQ^etMHAGd=^oaZFGpvLB;LIDu#H^;4Gd
zGIdc_f^%Uur|$t2ok;$3JyZqyaL}078sIQ@4PmorD{U?zPETiay4+`{Q1E{rPA_lf
zNXKojVo}~EgDOO!J`v`Qu(^CYVO17DNvqh9P%%o4&@WAL$FQaWh*4r(7(V&*cPtR|
z>=W1Q^8;y=9J$}aXAq|S-e$<O1A|1qh*Fp2JGX>SIY1Vhn`(X2I$2pLbozXR<liT<
zIJSSzL6$KrB#AO1C9qh{*3A!Y6?lPPhPJ0V8H2>L1-vdLn~;A-!r*>$dbIXH!`XXD
zsBX`B9^3bKuXgSMVy;H1sD!9p70Q2v(?ZhfMT7iO`x%rTk1bp2Dwx^GiRk5YYwWg6
z?YCtMli#c12d&Q)-6=BvM#yz-7o8RxQ7F|@X4F=ObauL|)eagyg0X6b9?vgd%VbdV
zMu-n7nj3;~-9kn>$vWn4_v6G!Uq&!Y-8KSV$};~<`!_cOu*=m79K4`%X@?$8qo>Ex
z$P=Uo?Ju1Bf02vnMU++-=C==4l8*Lmx|)3-2vE7?jR4stPkBYua~%d3O`Z10C^abR
zjBQH`l8k>Bf!ytevzo3|S@EK58+_8-fwG=$%!ri#Kpjc3)}zjZnt``*uQq6ZRx0j9
z<&>9RDKCEmx=yIwfSMkR=u_z+$8`3sD<NsU`8aypsKzaJtOX>U!uZo7jqyk{oS_U?
z2URQx)jQ_wp^3I^H?#IIv#oNEt5a}{-m<0oho38-=!|60avUz&46!9<XS|K7C&1O`
z<ORMA(sVwsdR*11$qT>^9|tZLJ{wtL#ET{j_IK$3^nuwT=nJ(8FS|;s+es2~d0};!
zq`q&%q`Y3}_`R%!LkcS!8}07q;;!AfxS=tV&kqEbSK!A<&nZzDHW?uj`$E*+VD{6q
z9EXCf!j~uXr}7D?d^`T&pAMx`_cL)8q+C&WqVDV576GHSY*b=*^(j~c(Gc?Cx!Qj8
zLY@kM)omc}^w8?j)99Et8NDx`nV0dAxXUsb>sk3KRpPjw8(#mU>2(gdn4uvbJt%1g
zdAplxTYGLqAg;-xGJcwJ;9~=c`^m#kG9+u2gp0yA1^OJ(@{=d>KagJJeUMhVaFty-
zVRTOj>WRaB5{!m;7hdM6`l)|Acj@z&Z}lPolp?^9^b9EBP)3o_=)T{f<tbIkvvF8)
zBtR5H3k&Mc({?Xs&vl@s_4)br9II}R&APD8Qh%u{%H2Hp&5}3`d~+v~bIM%co$Qtl
z9W~=i2%QX6PI^Z#Tq-u7g!+q7gkQA3&xxC1<Pb@oPsy~nduZF{)D&D-b!y+cE?SlV
zoLVH$<{;T$rs-urWSC2Wg>P!OlY>MD%k8ry1ho8F5YgNHXW^q5ma1u`H^aWaynm^M
z?nMRHi*a$0qc}v@`qNbN0w&Fr3r8r+LC$`8GU68_9k1X1v1+b~9^E_ox&-0JDaW02
z_u9(;ZcP*lqCC$t->{1KzXS`@(Dpya|2l5|OQQaBVrA!GOX^oeO_R9;#RrpCln~Wu
zb4LJ!0!HR!`yW{Kf8XI`OB>JwV*zGkO&dc3BLb}Gw)}gpH5IBs#1w@TpW%T9AxWkW
zgL{bL>rJReI?*UpgEp|ut*h`Nm*s4&cPO3<c3$|T{EO{<`)(Ew%U-rm_z$vwezJeK
z8Vaku71h+#Ky>gpYBf7-C!s0KPp}r@+{G^>w9X`+7W#-Jhm^hs)GutX#bsa3!u`Gt
z0L7T$X0U~zYHC%hR~ksT$Yl5bOuuot&HFX;EXT6|_s2#-`GlKoKB1zV=Wt(MkeBcY
zvHsJU0dHTv5yeGu1{g@po{3xWwNu$#!`wp1S>IAsbx?@V;3z(^qMX1N&&WW^NGHuU
zT55|M_Ohe-fsfWYeWd-f_kl@;I=CuPz&4J0*qhD2E8Y6^YtL&E3I0JJ8~5kaUX=#s
z(>eaV&E!7$$Gxn#!+Lwu_*fq2qIWmvr8F*1lhb&xFaxC|%3L<{3tg;7Hl{$Q0--!*
z$;S$tEp<c4HeXE<rrf>UaY@{Y?FpYP2V35@a7BTo9BRqz+}DbnEy1Z2w_I}xKxzeZ
zBso*MUD&E*UBR_vG8v*JF;h~iut`Z_#q~tbma-vNQ>LcyP;RKAZ$-qGeJ(*)cv=3f
z!eGT@Di4<rx&&!OXevurBCZrvuDE0nS?Z=_uOLE6G@{swD$=3I%a(jD+n_>Vg>#35
zb@^MjVZ+3=1!Jd5tzO(=+pGBrpm)K;E@Pv0%5lp3PEk;FOK3du%F?-Q|6+H}(mp%u
z%kuH9-uL<K`%Zw(=q|YJj{zbBeixJ+^zD5cJHRFaDzXs9+mvJPZG5_0U@G!sloa-a
z<L2>-GsLh)*VtvaGseIAy$9(Q{1d)`1c=RMX>>e{Q8X53i|Kq8AH-P(*z@j&I(@W@
zd}8ZyWD?+g9tUz5Z-3fNzcM`;e`97bKOeWh9V|SifIOz;FUz#3<y|O5%K58Z$T!%!
zO!!$?z=mkx&z2Yu5)#&fOTVScRiwR1@5J%PXYCBTLoVmvJq3(I+Of$YVV`{HM!6tV
z3*Jx&a({uSxk*;S`V)o&fHEkqcPbi^0x^{ip{S@L5XV4Q0wX_C=<CR3!~;3>pSs{O
zWz=I@?qW%0R7JRcXlg1$Lid*fUv2owSa6L32524)FDYJ?acm@#$Qnee1j<{K_>fQ2
zE-YIE=xd0YLWE%BycZjYAz{lynR{dP0(=j;l?oF<F40`9LVhO!beQ1CHkUtbJ!YYB
zELp+(CZ$2SC@+QRGYKf5ot{(2s0A}}AVz-6s&r72a#Op^4)oN_$`f`C(*E)ATB>zj
zfqxSZ%XS^I6_9{=6j>*y+?t{*GZr;D*P`5$-*t0;K+6<Miw9wk90&h9PrdOx{LmHl
zCzk>0+kYtGBY4yi@Bw$Q-HMAL)3@ekv-e@wiyUFNg-Z9XV-3cQx<WMPO+?d552<8?
ze3USuBb{w>!fbF{+y1t7#!V_p!bT7ft^TeeSrt&RQht6D4aU*^2*PWHe*N<0!3uf@
z0Z_Z+o1<Lnf|_%D1dFnXUn@<duelN)(@3(d%8%5Kpr928px7*_&aDwL^FfovSw-Mg
zSu7!h8GBbZLUCxnxG%CA5+3Ij*7WVxu<zgY2{2a^mdcXjRf)i9RXy02m&*Fbp4qN>
z*lQ|CBNpYO$j=Ci-DeM5AxQ?T+iWC&XTHi+%n1})kA{&WNcaoXA*e#bxa$u6(RB3O
zH=4aX%q}hj91>H8CU$oxPG{RI$jy6-uVYE~J)2h4OD(z%&NM?5OPLl#TZSQN9hTxb
ziG&%s@`Ud^S+E--WB&#ypB<j;-7sblNEFcxT((ReoaE<pG<_4HJ8%Z3Vppq(^mp_r
zOK<kVHVB3UinFV8UthTC=qn8H>=L7I7D5is@37JW+?}`D4B2;L*sGZFxC>EE+w#?`
z#cQTP(VQ7^NpbzeKgh`5?z)1JAqCc8vDwt4n1f%r?P9`Jiba}x?8#Id-UD1r;mZq>
zJ4mbjr3a6~CI6tPL(?g$iX6X)109Mk`VFkCd2Rfw-rf9WM0*nM@q0yr+q=c*4bwe#
zxmkAytk&&x`p!7MvzC=ic^shr(Q*-qvS}6>=j9q^Z#bQ0spgRUw_$(Uh;8&oA^zU(
z9k-LIr2plHHA8B%b>+h|`3gUxru6qntH)f@1fUsjOJ9GC1aOfuIAiyKUiZ1HHWtTG
zx6{4Sxt?(WM0Zchvn}Y8&(zcfQ<tJJ6E^?_SZIQo>lTgibuGba+A0thDUy0^gwvxz
ze*P=sJHrw&r`2g*abZgt*zc6|&5i>gWM=_QXFJZY;w~Y6SSCPMJ`GA?)mqKayHqYM
z2m1&uoEGWkFB4y5*_UO}w&Dk5@Ie&;O`u+u?0C42v{!CC?pFCix{bGm1ZAB*?|
zoV!)DCA^L!Q^fSgde9O76dH!VwH{0aFiOTp5J~=_=xZUI21!42{uWG{*N*!>ZFh29
z4MgT=;U*~s!UR!*%^f19^BUXbQRZZ6zXsCsSGhcrIjP(3Y4&+eR*kJff8*t!*@Ie<
zc*ad)0}874dk0!C3}6BHIfrSh_%ql8K9qa9hyM>-?-(5k*lyc)Y}>YN+v(W0?WCfP
zjgD>G>e#kz+sVzh&)(<WvB&*iqkg{Qsak8!b#JeCS^2Ke8_O<aw}8f)lzGQq-byyZ
zAex~m2i8dFbvf;UdBtN&j2{Nknd+}$;(jI-O*A1!RwR?~dSk0?(p!uAH#_|G?{7Ur
znJb-c4;09C(bxS{d~>wZnNUzHy*FbUA*usGAq;i=wAT8KiRAlI#V`Ulak3$RFf?g;
zYoOlGcCj*xvf2)JUXl4z;;Qcq89H8cX}|mm6)`A5zXTi62vk+YMr@4J3dnI?gJ5B}
z015ydzgNs66z2~`Bm)OJU$FNKEsZPvn$%Psex`wG-{0WLJS3K0AO8w&m1-27S(4`Q
zkRl(`64uPCHeq~L>@Un{apxJp1(yYL^Ko76J!(bD7o{k>Eh#)p>$A9#NWh=iYwQ+1
zvF58vg30tL^vlsd3*HNM#1{4V_6J+fiN9-bD74F2d7s>y2#37QR66D=kc>FmrgC~F
zZjTa6I9&C&c<NU2D46nlgVT&%1o)71aT7{se?>0v?4bI7D_iW$-957bDk{d#syiW=
zuIaYeGS<0glR)4^Jp$G#Qk7xK*-Ijzbjysg(2K0A>`vn{N7BF~?I8QY+U^fl8%z~y
z<A#my&*8G>1YtVrjz)nkyB6LM-iD1UTI@EvyrA>)E$<xYoR;B<5)qcOW-fo+qxTea
z)=Z(<*J@&XFB;K{!t3$?)R+($KEmQxLKQWK>2~~K4+jrUCyBc%7lex|$Y{gbhL%Bo
zOBlm|xAU1ZiGEuJLL{weKftTRLXL7s8L_p0nM%r~`Y=IOi>>VfxA~Tu`wT1El_|U+
zg2OxTJsLF=0TxV@H1!#@*3<1Ejm2^@k%N>GA`^k`numAmWe+kS4z<dp<$}xgYkz-u
zT9>ok`JCL{9m6jKA%jYQ)DG<EG;19XuKw+WTTfXfOSN(Ws!W>xm$<5`iawd;M#4_{
z&F0`R>YK_1@X=+m%<+}lYqGS5wk+AeNFRuVzd|^rfL|I;WdNwz)cB(XCH7nWXU5-B
zmh~rR$2M<j^Ir{s2>C!x$uUMo=5EqF(Yz4Ykul0qY6C@mpX47s@5=4nM=?2@zVcrL
zcmGpCcE(}f)2ndt%KLPHX8i--L_-mE=}7noV_t#+bqsf^j!$Q2C)c;o6xa)@Jo9&<
zgChzhOj~B_JqpX*-5yL{RGcy8+Q{2H3t>I|ZQup%hCd8o20RBNlfGM{%nuq*5kvPR
zwI>?a8pdE+($eE1M#8OL=?^n<DySAVSb~bFmzkA1`!kDA<<;2?B`_n9R^XWiYlI)2
zgE)~u(ku23EPMa0V9CNX@Xq{%jdNZ{!#iTVRVTY3&&CrNcjTRhqnb%EB@d;w9Fot#
z0z2E+jj9yDz=FIaYAVd`VhoNukLWVENGkC#vttO4bO8D~{Mftap82gTsl|6G{lRo&
z2}w`SZ{FRGzLQ~3X?z}9B!FoqAcr;z=(mVpT76NN^&>w+4GEXA*}QrQV7PKfpko|b
zyv@KgX$JTc*(HHZM)!xTLP(pT`qW=|_!g1LU_J*t(Vru<Rg1v4^KrA~xx=Q*lMdLv
zo!-Ln=xnmfAFI!dtmb?c774>hq}r$O4)}6*jxj4F+H5;Nx)1J1tY^0=s0)Iyf~kuO
za$W#QKvv$UgDnl>f*x5tQiP^UhRCCe<OV7vc#A>wkKU^jDX0w&E=RJ>2@kc(vC2fo
z;4lGntQUN;ZCsOoiy%Qivnjt*;>A|!y4!)7^&*Srg`Zq906MmPRHLZSa*(o6^w$q%
z25_>l;?s9<#$Q=4=r%<%SM71}!|`s~x9j-M-fw3^sM!eM<H;e@9h^npGuEKt7W2|T
zi-<)ibIg&(j`<3`_qKmFrB6OFOXijBJhlOC?>ib2Toyhbs7SM!eU>O(EDe}biw}}(
z5YwT#yVL3@2)rVfZ%CC?G0}BlAMCAo&n^F+ES*VlMAo}!#;eZzXo7<J`-6gL`p?g(
zY0g`(X!$^^3+m6am*Emy@;_~K$JFB)GaOgD3=M0om%h3-vOg^)&<>%K^EY~6npOZ)
zkn3Za3B^8F4!P_{*a39T?~cQ4*9EtOox{6v8)Ao1myuwH-VwYRyGfs`OY<#?Idd%_
zPOTF+eW<Q2O_#C@Qql0Td%Wo_sBK8rFn{SY-@l|nYx-Vj2Nm`bT*f2%BK&7VUsePD
z&D6^`-MGNH_4AKhUMqa-heZkgs2%{qSznh_n^l|Z-VvHmZw=w9Z`QfEm@=m^_}${|
z?+M&)LxCROe;jhdMO42{=%z|aPWrBJxs()_`yNqm2kvKP58qR~&hfXW3%wPCLtMM%
zL|8pS-hw^AfBkMm%t6W!g3f^*F+Ce7hjjFCnMugmg~a|QI&+V1SUd-K)8PVSBO(+>
z^+GQo<EAmK*gKX77UFAuhdyN~VZb0YUTg<it7F}%JvSzamGhYZ{m7{zs3Olr(Dy0(
zMJ<nK`0Ay6N4{q_{;9p-Hw!=8oat>(Tja(g3eeoC27zDD<U&IuF!Hrm)-06=Eii^k
z0Skh}&lIm3Va(Hd39@EKmaGACQ^-3w)0gcpliIZiM~N3(`Ez?ZW#;aAieqACgM26E
zAzT*O$Y=i=gjo*gz-`_TpEsaOLjn|H-5eZO&pfX5ao@UyB#S*aOZ6>yZ)SO>a|FC1
zz@7N+Q4Ffc?-gEKUhyXE`7biXr?YaXrPhF&gml#0)Yy}l7Ll7Iaq$7?Jy(fY(>(Y(
zFH?+$>ELwpL;<}FP{5z`LHe-K0gPe9Rv9tSEX`unFKS*q{MH4z^H%%vLj>XN>3Sz1
z;iUTH!6g*egF0HI1-ZI2ni*=!-!iZX*~@G*|MYwDH1{S}`V9b>%=hC>Y_Z8?X~|Iu
zQ*M^MT@48l`Qv$zT7-ZG+KM?HqTE683EwyOBTVOgMqu`(y|+9tm5@h9zmTW4JdN$m
zfJ{gjl83JJl`;SM2$6pau8U*d$PFxs9;k$!O^4RJcF!If_@&`x^i|{bzn$VrRLWVT
zlLq4uCd`k4)$W>0ZpvMF9p00WDr&gD*5<O;JtAZX_a1eLi0lCa-IUiB9Fo98qx(A&
zRol(Ex0)fmafM8c4}t{NzyqP_^zP9do-!blA4Wc0b`>U4cXlE?HC%FJ)@hY3E!JPd
zBM4F(mnvu;e}(u~u0x?m?CVNPATQ2mb7<2eGHs(Og5y%z$8V~os159O41=ht{}gQo
z8s=LXiL4K4cs&Ai_)5Hof=RsJu+E~z_hmD($*1||ossK2Jk_*fhzmmf4|2P~-@-LS
z3#8aX>9lIQIy%tbUrkZ|cGi|%Ua9YF9m(Mr|0dvtLg;h0c}l;|-`eb|`1PgDS_^{E
z2z7N;A8*cQebGeA$Zsd&3r8T*WM4!uJ%&R}1dR!3U~>d?%<$w}hYuH%i1~BGE<xIA
z^TcFwE2$!1ju@6H&Q&#EecH}^bCIf+f{RYWK7_4fObp_~(m(%1rb!`xSjdB|5SgD6
zyHBqu=w{aIMsC^q7(-)%A@j8t*fMR;vq^?c<Ve0}^Zu<@T|<7)&M^`r;?3nXfp1fS
zz8L`b_1OV}=o%$!8+pFiEq&`FiBtbE9<IqBl#j%#h6{<O;zNZ8pYq&JsZjK}jHs!Q
z>O0KFHrsG9u(nme-+7Yxb|`0ED$8-&<{(&6D*k9J1RXU)q4pa#=yxcKc-2*4+73L~
zOgP+6d&TL}MNZc0R6|h*um$qKyZFvQu14{9Vb=h`36pSSI#Tas;~$<nL{Y$w%ARU&
zLijB`r;@K^1~&TqymcG5UC9KUIGya*MvOUGSt&49#d<pENH~=19M|WnBiL|Xhfv6!
z8XqjbyG$-Aus<P*fsb{OPSj7Rnkid2F{o2%OSi{&g=m<ql5+(4xQ2lQ1a1<+sPLGD
zxnu#l$w%WvSQjMw`9@@as0K%Q>(~6t;BH49sSqu5z=cA&SWlXHRd#;~Ju%<#IQ)V?
zSf=5RUv|>cXLy|CdpBk#M8I@)^em(1*RMVhD`$fcmVsSLE%9Yrikk*|L(qFPpFDPB
z%zCeB>hsSW2*P!$h4fa|k7hF^T$qbFLJ<M@1r*}Z520TXKHzBwZhd_18goLLLamk^
zC_sxc86L(rv015#R6PF~^#FZcC+Ki&W^g2~*ZYF0e|xoFK$vadc3{9ru|VL68Sp2m
zB)PDTUKn#m<vPePEtyb17*mb2-u643Fh`i`>9L9FFGd3|;GfAA<CrxvT8`$BLX`k4
z(qfBXu!%S~APn4lz+%f_2sOkaybL&d(BhLsQG7pIh7jXN_Zpvi+*pza{ZJ;8^PR{Q
zP#z`FGc)SfwPj#Z<qihK#svil^~fyB9uJTD*7Yd&`82(Hy5-c<GBlFYOrl$$(cOav
zgR$Xw?<foVrXE=g@IV`p@qzjc(y9QBY10Dq2X?LMu1fmp5r5<%0~vULSV@u?mT((G
zu*?geu2orIX_Mq*^jmJPT8|z|?vX6}lBKz<kCu^_3biP6UD0fLu|7kt-kL8#+cg@*
zoA**A{J{Y=i&Hf9<?Ax`XT|~PG}uXdcNX7uJXxY=q3z@3(6vdcqcp-w$}S)ew(5`3
z3nKG9GrYNuqMo{*V)l4D<Z;?m{<5?HiV7?kdHc)RWVOnvL7qYJ7aO`lQ>z=JtDCIi
z=uEzD2<oYgMLHLbrg{YT>Y+Tv+Ei24*WTAKj}ALm8^duAq(RRHARmq241cOC_I=Oq
znqH^&^x%m>m}`CeuXyEVtqWk_z`S9`fc4;XKj(@|Pp^0veUIENTO>o?`}E9RK|rs?
zuc`mYGeqq7quk!uDe$KcFcb^E-7Mc12Q2Z)C{f7U?k)l_YGKciS@zvzB#9RZCDD8r
zX2&{}F$>9AE_nTTGPQ`q%4bh3Bc7Wdj};T{QW41DCWXXetVoj$F+QNtVh$DgpfefC
zRC9HeE7z#JU?DGm<V5iMF4=;zo<!J*(TQw8kV+#rBLWQN2&s4`);wSDc&aQWbLXa&
z)~$C*;hMjF(d}I$i?cqe=8<L%oQhC=ga}Qk!ANk3(|(n8It(}v?+z{Z{nAFppsJ^Y
zlJH*zQRAuN57u_u1`ddB3n$+YHHJ-fM?3M(b6=gFSa8f8p9RgBKf=j&fkHNG2}T<T
z^!-%`Mzv@B^ISUCbakxQ94VYq^7alb`s|Z%gChj9Dl+~in@t~@c*}>ahJ~wry<~g7
zWkgo;W0_){LUb*5<8eI$JWz45IGu2HY`x`#4yRP<n<KJ(J_77&!0X#grTuw}dDYOc
zvT<=zgje2{&kiub1QUE!EF0UITN*is151a*7QY>5;j)%&HqaHMY?P$iS+R_M0KJb}
z;QBAp+R=F)))fwo!}&F3XPk)2SV>+eW|yJmSc!f|1{=QF7nH#_{ac3x7)=2Q62w_h
ze$H6k14%bVD1h9|r_=M)WXp{x?<mr<rb+EkryFZAUQtUy-KE;h($*8iYr@056=Q~K
zT)f<vK>urB0@-aDZuO_Ns#ZQPTEZonDHGaa+u<Kg+_xk5r|RXy%k?gHTJ5F!-HEin
z<L+&%G^-w?U;D!}PZ(&b!L1!K!eJQAC)W+n&rO#OkARI<msyDng%<pFmuc4etC#q@
zkiES-K?HXxhfYUzEtjF2I$@cpIqgAYaJ;Dr8i5DS0<2VAS9vz5xZf4EsvDISdhx*P
zM5$>+p!Q*pF}E?B)rcU8$Z5#v8da1#)@UQte8w<A7?4DW8&hC-X!^4JaIj^F*ym!>
zSg{hO2>`+6kz6j}QYnGG4Tr|!2mkt^e@pDqTe`M^3*f%6+Ns)^5=u_Vg_PodtK+1&
zJ`k^yiw4L72JrXpkf9T1TUO?)MgNu&YIRlSmzD=^Odj4E9vB!ajes=vB<MVVb1gMh
z=VXvl-43*8JL@8o-eHObXX1*fWNT?Tk{-`ERs)=SUGm!2<4mU-<~tHD@aVA31V!Z6
zmu*L4UaoYNc-Yd1yXNtnRDDLId$@?S_gV4PNf<gkpi=T8X2pG)o!-$~!aJNftd|_6
zq;QtU&=P7f304MaxtjJGoF&rX*_=!hjMu~RUkks6PC@br5t2iT?<}tpS}|{crxWXm
z<p2$DCPHvQ%Xy<V7hHp$eGxKEP00`}TPa{-p7z@lVn){N9L0S#qB?C1+QrcKYiC*1
zU_*4bXJ7Mw#7d^HM5@LoL&5L3VIJg9xU^mTYnLNY;R_#<ypW#o8BGpSJgBwjgtK3;
zJU%J#t|hV?5lyY?tI9~}7NPjN2F4PUlmJ3wm}8*ud~Ap5Yt?o&q^bSPZ+EK%*LXZW
zO_v93F9|}Q<Qx4U4mp4BkG&SjN?BFQ+w&KUH0jm7?o{^04DkKBt(T~mqv5B9y7U%u
z;ijvyt-(&beWBmm)FVUnRV*~Zv^L^0s)AwZVN9qJ9?)RiZ>7q@%Yr9<Q(H<s5&*ba
zgT3L}85$HJD0I%;7plkafXLHFE@vWGm24fH0xbl<QFN~89tFs^E*Q3<EMfKNf(dVi
z_7BD55=qMOKXd&Q$7q~)U>BGaf<dQ>2>$wNcxh?c8p(*HGRGq*@9AOPH3Rw|$rF6;
zoMBr-_6qw3bUx_r8WWF7XiWbNNCNf-k)2Y)#`;%)677ZSkuLTkUg|$&P5q#jlY43~
z{i;G^5V#e?>}rSr=U^vD>raN8!wvy$9UscH1D|S_8kg!MsyH^<2}*I<qipP3%nOYi
zQyv{)LvO*s_g{I$Z7n{^TC{?Q#_t(IlnxZ9`cvIKj-N-a^Uw73ylB$FE&w}tq`6JG
z;4}eSQcuSh4uzb}HP6+&-rAhkbag|k0xQ>*K4D8IH5DZMhevu7gc0m)0%2b4TU|{<
zJM<)G&$6=_!cLs^U7wBTgQ%m+jn~6xc9eoevx@un_L3yE?F_{y(Tp8LX>(IYLJH_{
z27$JCk=0bEdJFJw`{FE=e85#k4LX+JvFz0SVc;pFr0Ree^Gla}h#2uh1>BeFN`v`<
z@UL5BB*EP7j_jArRWEZ(ZA`}eq>;jvzJm)F{K<Z`A`f`ZK2e5={rGufltd+>zfxo2
zm1Png;XfL0a8lH>-$YxP3j3uxdCjra49mmZ)UEpVwmp9BexFol0ES<Iz6!YilWqQg
zqfOTT=K468*;)Q?c=_Mud?7JW5qZs&KlEV7i2sf8{ojwI0DXdCrsUFr;{G)C|2zD2
zc5yQO`EHL)xddxjZBxwQ>D}6=N|KR@n4pn0znRKJK~a>JQ*<&@<smDVT=+~AG<Zez
zwK<p~XI*VOI$y862WBmHEwyU+q53Jge&!D&MrxUjhe*G)@Shq`s{Y^Sq!tl{c?YSj
z%mdG<*PP>Lz!!tm0pJ*kR0>@Uui|gdwj#Ou0-H*A`lVzWhEz3c?7D>I()se2T<ldU
z<>dFS=fQe3?R4G{v9M&qu!7&)D_5d!^`hoOd9z!A3b_Db6|c`rZew}SVnuo~cA2oH
zjX6(}c(<a=dE+GYl0{jZTG`^9vgRKluL!o<H~MBW4$bPz89-W8rC#|=bFEjj-f99`
zxn@wnB`ek9B(-lt`eK>fs?uVSN<+HYU&0IG`o~CipuBaFYxF1-Wp$`eR!7gj4;#c?
z?vjL%e2yV6Q5MAXD9VKypmQQ#;kuoU#IYV}Kbf5r_6Wp*mY(vKZ+T3+>I=arEk<5Q
z2`O)pBHtYo3m~LW+?dgVRjPkNmYIu${y=9XWk)M9lUhDM<x1HiK-+AGD2jrjTBj}j
zV^HAW_MJ#j!mGFWyJ`MTh^ZP)n9FCitVzqYJyE{BX8O_rl<?y3h8y2m;3umcYF}us
zmQ~m0t@E|Ipgy!P=>`IP?7@iQIR_t1HKfNbceEZ-AAoiP2UcIFEXyXGaF&<X-;x_*
zQlx5eP)hRm$zx+ecwg!&?55i7TZS-=%kVxU`lf-sf<yTL_&Wit55j%U1}Bd)4mU(&
zKhP8I`ZWkgy09%j53Ddx^y@61!`eA!*=yN-F<zvKBAga>4+SV!Dy&!Jpatg<t^-fj
zjKX?9BEau%xhqtUX)jA4WOnq_!o})LLV%C=0_r#_>#-}|pMsaC$+-<u$%6S$_u+F}
zLVl}LV_&Xy;0fly{-#0lj<tmvVi4%{uo2q6Coe^#ThJ;m_;0B6{zMP?T21GQb=Sa+
z>)BUSDBS!xh#60_d)K3LI;?NqMG1n+<zux}d4QtMXoD&^!Lf8!Z?7OhQtJ!d!^7AX
zRr7P}=0AxOcW@s)$dCaUj^D;doBoUEF@mF%9-sY8R})&Uw~7P%0YqQu!8YvbIaT_Z
z#=Y-KrNq6uvBzQXjsO-zzzhP3OCg1cJDhNjZssfeFfIt6e5(d<^UaT3nQm9Zv2Yv4
z50Fcer+A>0GmRc+G8AtPfiaQF!K)i*q6A#wIgTQ5Jp<a#6M#-3Il})cQl$B%MFK`I
z!mJa7rV%oJ163(#su5xp2Ry2X#ZBbbY#t1i4^1lUJv+-7jq#^5RY(F)GWZ$X5o{aj
z<klY6k0uHRaXymTvXN4-r+X%n#u4b~-4-5u6YYo)-D7&Szot1;dc2K9)`sQJVl=7|
z@>P!PEjvRj7)G;^7=gWvovXG}@$JL<KCliescbm@C355)!VrvGu@M*;=&gW<tAfP;
z-y8Lx=jA{33noSmjueE|ANE*7LP}Uw<bT-XA0g@wdmNgw1p$hcGTQ=*nv(7hs-M!s
z0}7d<um;MVLJ0+mp7M9?zvQUw|BEWh^7Pa}HE(unl5<Zk#bhhWt;2TTU`imA!bJmB
zM@Gd!O)*1>^F<PU%DNJ1xPB+EZxjN<P7w{aMn)-cY)dSiJ!dALJ&B6p64Nug>squ(
zU`T6o_j^{qkx=jYq(A1JcFtC&GnNHsVotLO2CUbkJ)Ps3adWPBOnUS64r#S>3E@(p
z=;QpX!`l<K)uf3&6j5^PqpXSVO_MO%adzKAlcbDhs&()L2M-0mzrTrTX>rN6WSX0s
zTep#pP;6|EldR0GlFUt0jF2SwK{mR;-QGQiN2M9JkuuIWRXs#QjyLfm@$dfT-vXiG
z0R)5oxr%szYH@+TeS$(TOD!a;NErb2ZsS_NhPw4zCR#Y|D&o<>?f1<h{#c@qd~nz8
zw%&{=^?#fVz{gR$gumN(85-aSU7ONk<XN(tB0cx4u}|w65nt*BW%^kHCvHgdjMW@l
zVRBBDisISt<79SD8=b%&3a>LOW*krT1Wc$5C2LN}8ZR-?q`pR>HDqg!t}xE0!A;;y
zz?zXXq<bbh8fRj85B*IWv@zN;#Z3j9upm#z62V|H4`D)&!b0hbG7VuNpMW$YWr?^o
z*E6NX%C0MkFXp&RLok&wc?XBXTOe|eYZ(WyuNvL8^-0`TIVIk)TK5CL<C#yZ0-X1D
z5{vg`6=3VIo$N}VXPWb-Lsiq$(md1fSiQM7TwnIpKO|tW>MRCAN&duV75t5De?L1@
zzrMNscrE~u00@|kr$XO59xWY>Pb#E+5ANNpgd2YjZ(+B1ZG0}fbuN*>GrfB%?jyir
z4oHBnI<uxcJFfhY#`Bp*qvs}E0EfSOB#n%e9M*cFaJ3*|$bqhzZ=T-;P*%6F)=v#S
z(L>0v7Pg4$OJf7JzHUBRP2>!~eL{)x=pyy+09J)aFgZyz4>j@&V0!VYjS3zJx*1sY
zT%mrf72O>WA~G(q-1)<&JqzbbWk2akw1&kow@ngG$RF{rMLvjm-9Zc{V4Osv9hFp1
zile(Yg-H8h&m0^pSC+mwqW|^dZlmvB(EM@PB#<IF5PWIwvwl^Ah=_(pH=~F+NDAK*
zO&g5@ZVYmg88X1YA%Kzlgg0{PQ<)igKZpgHF25O!lj}e0<VxN29Zjh4PH$oDx&Oi_
zzv=k!kL~<ino86d&y{BYBWY)*7{5c-3;8bk8$O=13F3s{r~D#6!RX+X68@Ayv%O0J
zc~p#$QLwG&cEG-$usQfpJebF~ZFzqQ>JAVGuzoxKvL-hxat|}+KA{TTV`fc`^y5rr
zkPAG}sA6XlkzB`X_n~(%0p6+XH*au+jiKVK7@e_d!mgsGp&^0?^l`<0dZ(Yk|HbQ)
zTKRY!7>#!bCadukz$n@6WIuooPDx90AiP4Q^VA9ZJ!sm-?He<=m8p}?XjdbIRpyxi
zPK#(ms1spD<@2j5+=SYZg<^hI`!-tWv?5Jz{|Z43QCfo6h$%CZLR(5#+DPrEP$$N@
zsSfFoXJs061<q#-!1-ulYO_IZ6>^~BHjLn+r{IbJQ+mt6oc~_nG$IGf7@dHM)E9g#
zeUXh2rHR>-N`LW_)`b=g0J|-j>C6q*)w0zviz3&;0nsUJTv8tj^RtbzAf@RgCZ^z2
z&wzW(^kB{yEdC<6Pq<60_?HiT7kMvT+hiZ-*&OU-+Hi#hxF}g>u_)HhCgk_BBmA;K
zEfkbSmFO?#)|G&|$-~DX1&15{9$G#KeY<$YAayjJy&CEY-DYT&3_&Y%aJui#a7gkt
z@Xq=fLg#zU90u3v<*(9i9i3edfK`h>J;1>i5Oqg~P)9ObxB6~@tjNdohj$Fq1JBRW
z(V?5#iIf%uK)mY6F<+pM2qa6H)a7fZef#<%j0JSmklKFQNF(!^r;E8DEkN%fnxfgM
zc~B}-TsV=D1T_4`eDFdR$zxNq4_2dsPmY|#?Avc`iyh@PvSta7A~(jL81l66K4ywR
z4U4JV9kuw^%Msfb%7$0|Hr2lf&IyN?r%Ke+U5m5<Xaf_h8<bg)T%J#J{B+zucum54
z5rrOyp|&x0U$n7z%x}%&bmgxjO~mgBN2iEgIzcF7uRlquVXU39bdV&AppAdrKIYqU
zmANS@&<DbO<kIc>$}PWKSp5J$3Cza)bfZEcdhE$3`7FhS^R>SlC0o0&cx$Tt24Q^o
z8AtyH*h(2SH^b6m6ZHs@Z5ib8^LX3aHC3~BV7G#YBg0UU3Gd*A75dv7WLRopH)t_8
zG}T6)1C$d+G^J$ofjE}-#<(An2CM>8H|efrt{Qf62+dP!S9%{;?uN)vyUR@A(}dj+
z6*A?ait=0xW?|(j<{I`B5{aZLq=_0JdmQlrmBFuz)j4l?u$)ko{}9mBW3sscmr}P(
zt>By!1<ACFMW{kln}jFWs;n3$K|m!ZWJvLa)H!B9>*y?=6gnj~Yl|p;@SM2c`y8BT
zf4H7UI5ApIelaXU{iS^sYkz|Q)X2&kVE}eC><@`{_<7ESCq_{rT2!rEKW7Ee#Qt6Y
zHn$$&U2J;=;QVP019V*a8M}!H(zWKRf4b;*CvJ4wA}q$AN2tsR8vIQ|X`J^r_vI0s
zlCg_sWQ7%dYSm#*B_zcbjvG{}k>S-e?~1w-a_{et;4erKBQqCrN^9x@BQm@z&(fhx
zwKR@_oi#u`hqJMeoXNq7kj&Y#B;5l547yQJ*rF6Nc|rYvheVhUX^qVz=e1AiA@>JG
zg5!;|xBTO|!{P=9kf}25W;_k$GuZim)Rw*EB@W-NXMYH*T5L~cQg<nD*~XrNdg?c0
z23;-0R1GM^<25-mTT8>n1%_@KBc=?l|B-!z;Arz&vxDpgz{aefv<%vx|L_QaLQ7K|
zZ%eG999Yb}6kT681THS{aAgk_?2)*VG4mYtGZ_~xxo*Ui%zB7?&YGvxu17pHKHct3
znX2%OP=~%Gva^Z<3ghhRS=y!<WmYAPbxBN<Ir_O(8hE1`$L;^jqif&5#sZY~*0;C(
zA|@)=2jmw8tanJq&^KdeglYf;d148C=))1Q9+@z1<7)nNX%)oO7s;dt@&?FRt?T~D
z!=xYqZm6p`QTW6WvfFiWD>76=R}EvKgV~WPn=5B|I++(t$_~BKjcR)~Gc}cjyvtRv
zLndP1+oxv;<fZSZE>^3rFEbd2kE_a5xLd7}%NRR8xU>TlMVA4XQ_6szk}@g%MOUAF
z{%7}(EZ#lK!DO1zz-{%7?NAY9{`w|7eSkw19?H}B4!Jn*bPv_=Y-@r5x*Ie#B~fr9
zpxcGFm84E%QE4?*yJ&nY7o9vHl6t$#-QH79*I2eAbd80YT>8f5f!?WL7<K7$l&N;5
zVO_t;+&zlmC9vI4LKk2o+U`tRd8os$9aC{zrA?sQ(NRp+sp4R-19o2~w+4^3dKNek
zqzLk76^+ak7k>2Ec4sf1#Nl@8=eI~ZTBeOkNf-~{P^nK`pocBV@~FE6KKmP$nlwKv
zoouk@&llVPfIqs&a$C6jdrOeglK3|iL@vfvFT{T&s@n2DJ`$Lgbp+CWe%E(dL%ctI
zq-0Z}<nK<*QRG45-x>@eXdCsa;Q9s^7*39<tzk6*fvqlZg#%D&no^cnnncMwcV(0i
z@mPZ53IpnHO{S&kEDxt`Gih^J@c0`!l|*B<u7?GPL|tkbT@bC5BM~Y{e>dSQ(ZIM%
zE76{oaG%~G%K^Q6q%o9Yk;aB^CsxVFe%~LDgB8+SGy%pN=FhqChp#ca+(bNiiV02J
zBbJI?F8WI0uLVFE?Vgr#prHgwJ*ssq-xMG}hf10Q;co)de;{5Lj8RFDE{GISSZEYi
z$%SS*p<m2C1AJ*7k(@A}5&D=96C=4j2#k;jwFU6|hyYWHMvA4-rZ;7d&P=`R;ZKE^
z&4ne9=a#wmL)9`asE#H}C@s~Y;(w)x8eo<fN(6<^#kyos*;<`i*|0<K+%RiLD{YnY
zYjG`9kO%QH^mEYrc8C)2Nh!-@6gg4eFEylz)=)q<^p*bZmH~ZG${J@$!kv8uD8Pw)
z26P(9JOKS$e%xCoRZ9;o*Hee<9tKj(iLYs}^S))YF5U7^pb`=%f0{pg((PQDEwd)I
z;5sTa9YXi4mD(}g3H5U9aib?^c?()?+M1@0Joa(yZhey@<Lch>x@cZ}?DaH(fgsyK
zFmMZ5W9X#+HIPmtU+hIV9LCSJ-PAC-&N8zN7%rLYIgjhEk|C5Cg+61P`U-i&uq>%V
zn8GQ$rd7gNEs<n>sLNt*ja9!IuM^an)Lt~#4RN|^{kkZSaBq%daut?GwXoLPfz{Q3
zdbZSDJ3tlc;_9@U&%=5+NkpF{sXxTi9@|%?V84<9pud`^mlgAu)8>(ZZg9FT@C=v$
z_<uL;EvN`-!*R_r)Lk?Ce_mYV8|4)imR6RXPAp|WDS<VAeZ1aZXI`UdCY}{#^!9^S
zvb&ji=#E*6ZexD631P`PpUE(c2iQfaB%W)0Zv6YY>IM~gau<#Xz2)Zm7=FL-H{SO<
zMCQlX{v51stBY*z>Tqy0o0kG2s2?~5sQ-~OE767gs=KA$V1!(?r*a&vS(+5hk4d`*
zlAiCNF!2!N4&bmw`eu^Dl1nJlrxVuPwatXxi2mv@Dc17TeNN)OjNR?oX(v@>8SGfr
zd~2O)4ui#3ECRRs6+MU{cVg2TI|L$E*ldjLF=LJWB2CC~3J{fDuz|QFY(ISjfN~d}
z7G6rq8H;C)%+ph-vhKrBJHZGfzlrHbAGLfMIs1yIqc>uWD)nf{dTcN}M#f`HaFb##
zVZIM4XzHv9)LXRB7XZ;x=P9bIjKk3~Dh_YP;ski%Jo3hTXj?i;&5G4B)*7Z;tVxCj
zRLnBg7e#B9rJbf>M@LkWDx>8C(mxCIq%iG5A{id6Xtg!9eyiz6_lGrk3Q=#?|CNae
z@erD1KjSX}i51~;k&#oS6%|o(^N}}`S86-ZSs0`b2mj5wCza_DOfGV<|DBbm`@#Ts
z3Hetxy*(rqIaC(cTO1MN17=~;IQ-R_8L}n+p3cfZ0vZJ0gYd#-($Gf;peo;sMRn1e
z4*DjhAjx<XP51T-*<ytyQ58iB%kVaLuaVS%p7qS`Av5D7wZTT-N>A8MTHebM)Wn~h
zMlPc%tdfZWc1f~;#8QDk8f+RbFsi`O?K><mb)(U%mNHLRP2(N6;`E9-(oKqh?u>|{
zCpX=jigB+Xpb+e_>fk#S5Xunk`Er+1&uFn{t3@)~fMrXXLL;G223mFt`u*<<g}FC5
z)ojJ9ahSEGc>%9ds$xr-_#_hBGVi$i<gQNHv+lr^8Nd^-O@iTjJ5Av7yio4u|5nrI
zXsS!JFdxIN*TjuOofkk-ul!-Np6WlD{YC;1D!vTu#DMdb*4;(~U@Q0VhfFh!({)4Z
zBnx4cI{K@m_ZERbR+KCP^p(Urxo%IMNdk=O_q2nU1zAvhEK)0@vOav#wZE7ODcdEr
zsf5}vBhE-WgZ+$N&ohW-^?f3TQ8(1olvF$vgzvnQSk?){h{=2mvcxa9OytL(G7`q2
zJ0A(oX62twbsvZTm+h4sup^C<Yp@-Z3G1%gb4NXB-7MfdNxBGWo}-67hbgevBsU{@
zVp5vFcRA)lbWTG)s00=fiGOO?^dxd3->lRbr)r$Cv!BR#LbY3*dot)%qgrbR@-k5h
zGTOh;t)4RFA#4|De)>n@LLCKn(Dg(exr&dVXp|KDsQ6X@(}F8tI;yG#B`ITEvUqE@
zz~jM;+)I$}yYBUcDBc@>A=zR(O>{(>fh|3?I%u;#@ncH&D*+!i(hkSHd635r^e-9n
zyB>H0z<P+jPY9XP{_!V|&398qRe4!?StVchu8C5KiBHaU9~GzHlP~j@>G;(z1=Vbx
z@2@(P#mxu6Dvh9c)e5*ZiCZb~W(z6AKjsxj+U{)fAyI29zF)&RYXdp2fmXU-bm4m$
z7D`KVg)1V#zpt-^JJDIwsHpGczqRURVO4w>dL7~a7!yt~!nY5)A%#R;n}?zJeq^a!
z7b~NJ{i7wBv#U$JL!bvJ#E4o+?*x8GH)8Nj%;s$aNCcKVTEOp|V60k!N^(|S$zuMk
zzV+niH>$bqL54^c8OLahUMtuZtMwqs_y4JGPDcr)TD;5sQ4R(~nHXAM9FeNGyFMq-
zsam$v>Y_V@$8}1Gd0Budl+!JlVqicQ9pdq|1bF{y*mm@nGI@zvJS_QC?J~`J#50`a
z33M9**wnqQp@;5dN<817v1&VnMm;+zz$wZsZO)P+407uT<H6-ls#}mq@Z2KTXtvI;
zx@t?8tHGq{NLxDjy>8p(4Ic9-wA&$Uo?fmWcsCZc=hrI!OPc*Yok?*N%>RazdzPwV
zj_u}@j(K`f$Y$@(xp*(_et*fEF6DGJVGDT&m<)voQXa44u6C>IFFH@1?}wX!YPQBD
zF+eB<j9Ps4t2ahBXF4XshU<aZdqGi>9KWa{e*HEx?8L7YK??2nR><^)wO42eY@vYb
zq#n$X*Xhl3RRTnAshH-3oxjL3ze35hnQCol&H>F<2^%;Gg9bbDq?0_IKeOTTwp~sD
zRPsq1K1LZ0&uZYVz9|M@P`K;mUbO_!+Mb3>_A)W>^o_DKVv13LA8v}BelzeNL`GP;
z77VSar-7Sz>E+Y&sw?MH9q}gdKq&?ZEBlm{7gB!XQ1|0jD<Yruq8Neb>OiJ2Bd|M<
z$BGy#{|L4M6xF20r4V*5oLFBU)*=G|!t9;0HBGo(RvxyJL%=-4jV{vRu*ThE_}hJT
z$3gN{??3BC&VbPrkJ#cf?(7cwCVldcP;Ui1|C-hkXYa5m4O(4RW8Zsk^)9gdmBw`_
zcBf$9J?ZHD#jJA`G*f$A*L8}xLxtCqgg9`op>u&VY&(MW<~|njF1Hdv@Sa{k%ixFR
zCU(KLZCGx|<7G=fUZswAPq)*{NS#@)EN-9-!Hn<o*e#3Bm;hmyv%V;jOkqo$`N19*
z?e62Jxm$OXojFN*_QJjZnM<^=fR8GDOz*R&1Yt$EYp%WFPXRSSUmfC7N5VoxaAk^b
z9Z#X1uSn$BCx{H=*SI7tQgIJJZU|+ue~`2By+49s9V~z2pLTCF0e&A|QkK0&Mp6Ye
z{2W)m{1ns5*psQT0qm^_*HyR81yrXyxR=)%2m+ROAdu@{X2%oKwd{dvEv$#fvB8?(
zy~f$~QN*VDm;+^!fp;K{s<{pIMhq9$@P9zd6~}67iE9FlM9qKy)xk#rWMQSmQFTf^
zK<_<W6C6^Z2otfIFxbv83ALrIP=_@z)58i2XXMHLxu&FwW!@{znbjag9adjHQcF67
zZmH7^u=~D4O8evPvA@NRW$uk+-}U0Lv#Hhju-A;saE|~qFNG`xp1^KQ9w#c>S7;OE
zO*@k@{Q4`5GO`-RKB5W~AR8>>(0%jM+8+mdoPp07NM1*8>(y?QBb9Qz6%v}A%^O9!
z5f-pC9cOw_T$2^~gG=yS=MxDI986Xbrt>Cc-qJ4q%KvcW{@3yIQMAac!xa!(@Ze?V
zl4tS(<Nqst&$E$}zNr-bgm_mZ6sR+lnTC3jjGl|lmS_M-;)ogn(ENSaLoKcNHHk62
zOB7oCS0C9qKef(k30y=+L|bAr{_0=*Kb^dLNqalI<gM&Mco+^&k8)MgFj0z<nVmt6
z3nYwM1~hbv0^dsp=yS@D+xD7=oJ?*VmDDV_Hl5!_j$R+A+D3K4Jy$9U4PS~99>afk
zQd<{Pqzu33^BA}s0FYp~uU~XNO&uajAwe^mUejtZEfy)ji5o4wpnalMBdgcd%&4l3
zLNv>08+)fnxED;%qh7c%Zu;McqY%5>iEWd8n@6z%0X1#b@Hxn6Om)tl*7JEQU3AyW
zxR#PzJw<{iS8u>~KZ;m+A)z#F%V_v}g!vZ><fhp*SvfCsK;dj)Ed_y9QFOExEz^NC
z-qm1lDCtNl{`r@*6EK{{bpPi3aSdKI4bKMbF&D1f-#`Yet})Lx^Yg2}Pe*Scs+L}{
z!g=TaEOq%Dwhw<sNmEi08zk85;bnmc==~STQUvoBsE!xQViLuC%mq7A)CK)h)V&4G
z&Aq)#ZjePv0jyu*VG^XV7h(4=5+PW7$fk+x9K7Nnj^V(b3*Xto(GaC;<D?lcsp$is
zH!Cj<<FG$gSHx@|DStK@+RFxp|9H^4)TElxYr&P1;E-hHY^+1!xAa+ED95lv;K%W;
zh8VvQdS`et{{Lc(pX34Rza6TatSKC~KND^WN=mZ7MN>HB!KzZ=??J^t*jPDI=oP?d
z0YQ%K;n4SBh!kMdgfnw<b6e=^>wlX!-Wwml-h^eSidxXPMdQPn!)`YzGu9L8OdP{U
zqeeGE$;SCNDmWrLS`mI6c8T|y-`Ac~-#Z$9_#yi*cOZv{?_+MZv{ZDP+MRK6_x3v<
zYrKA0qGS)e9rp{}7A}|h9QwQb-f8RgfCO&<8hP*SroKvY>AIw?vPgk^cisWsYv|yh
z*j-kYw5@WM@Q(}n1UtD3I;+((9#B?ot#mf>e88ivb#MrSc6sMy+M%?bR|z1}%D1zf
zKTp!~ENj;*Q#Hg?6I8Rnj#_Uv(m+#-N;dYcmA2t(MiwDvQuEgx9UsR@yomb%Wc09o
zzc_b3-1MSN-<n^;LqWUk-Ez==vquVi^nParn|qWk>_3AO`sY8jZV7Wo!DH<=FLFO7
z3%lltfU(+|Z$v1_{7UZY>K&h5rJ~O{!GnM3Crsz#(rc=d*RXGb=m;`YAUsQin^c(6
z0Zjtmw@l1vY(ZJ<qmBfQAriU+q;d=JWJ{5n{DnTNcpF=4Z*NA)4N=aUH=kMDDN-EU
zsIj+a#~0w<bhx&M|IX6p6|VH4=X#lji1Us(cG#Nkp*EdwIhwPf9555!?RX}qAOI)M
zu7%heS>BZ3%CK-4yNH6H5Dc6ZiJ0AC19H;xZxqL5m>rLr%LPiT&N2)J(Dgm_#kN|h
zLw4?Hf_%Nqs36=)@Phd2@`nmZ1O+hq2b}sV3yO3c$F<CCLKTt$$FKX1%}6-N{2^ro
zf=*?dp_BZx%)>(^U65b;`F?&Lk*OA9^e-y2yIOIl5(BuNf0}WC2q;L_h-ePP|AR?V
zv=Tqv!9%MnF2I8{9cSDGuwp}w5*~9z96w+{zK*lUm{&1lkHUoMkj7)x9zQ;odLiU)
z@3aCVMGPf1jTjZ~TbOq4lBdwgW(9UGq|RxHVIDT^dspB<I&AB8dw0_itbUVG*zI@Q
zi6Ca9w^nRp#X2%^tTjaa3rg}rjNAtO&X3y*a3*Z^!E0DnOU3;R(56nk@`bI}3MdRX
zQ`o!+K&>OhHqW2HA_t~KMEhfFP#$8C0|DHPX}B+V#tdxC&c3i<B@bNAtecjOw+lVT
zGO+AkJgorSPO!don4cBp9q=%{m};S9hcI4adW+K|>A}(?kKH0Fr5vhynQ%&xuG~bt
z=VVw^s~2bA-SylHIFxd8iK@kAzIKeGFV8!nV-#$Vz`?!1lk7#5PJ82VnKZFoggXb3
z=N1saNI7klF3T{nXsFAV-DM1uJ(xIzv7`q)pvS*H%`LFzwgp_erMofG$5Yw2AQY^u
zkW}COmd)HE*!Vz!Qn<w_r06I$I}si7L-8ihz|X11t>&Krcog<ivrJ_h!~!LxKvl58
z=oi!s6Wk!T^>k0m{lXr_tiZ7fj-?xhl#sDLB|>T;v4Ao895oyvT*728XI(2Uw+@MH
znVK>&W_G)_^+rbw-8|5fdG82fk8pHvhxC=wJp3(K-aH^%{_V95x+`PCHGvbAiPPm}
z+N-z8go6wLXuopFaPSCQ?=^fuQS0-?Pl<4&-)b8_MeRBe*A-GH{8+Eq*z0(cVUq)o
z*2-GQj2`^hjl1|ZLWCJ4+oi6Sl5nw+iIlHUg0psRGjtPe7S8c%=OZ)e-@TCuB-V-3
zX6{jGChehYvth!~Xol_o0x53xM*4qW&HtLf{6FwL$N!|i%v?-~0eb%h-{XO+%WM7C
z6idlg0qaKQ`d{!p*Z+a<e~Kxb|2ynW_EtfCMjJNAT){%UjgK1p`EQK?v;bLzt$S~l
z5;6ifpR#qt7!0(}+A~OSfUv#8T{EfFpCK2L5;8wh*hN((F0quUs*XLoIH7!aMPq(`
zZL61{>a(hJl!>c^kI(xkHjAal+q`>w`cv;OpsvMO<1ZdMaxRoshet%pcm51lGtPbz
zhsNNdyk{Z|v6=e&(N`=UZFLNUxZ#=P16Is+i~;B0N6q3}>BYk$ih)7%athC`s;5jA
z^S@q(PBvb`jqGBVHIq@Xa!Y1&0#awHWwTIqX`a`m802JS>TB{QrRqaw1I6aUL%io_
zfaLVb@v$g5_4ksYf#MQI*!#D;q?3izU%Hj<UOM7FX2MHnq_)ic9*hA|91Ve*6SBsE
zm;^)7nuD~4foVk(RztCx{Szi1X=1X!Nah%fJ-psIE6fsC?Jw^x<0ALuS7PgX4&#n)
zAQnMY%ga-qckf>*`l?GRe-CpCG<7_90+2M4`Dr3y+Z{jc_lcNPR4*FhKO$&BgsL8P
zanu&Q_#FLRbHR)tZq0;(CIkr#S)~aSXfDF4fM~wP`}9O4HvD5UouIr$anDo*f?$_D
z&~4(QVpUBH>w-eAKS7O5=JqRg?Ne#~0bka_*qwn@Fj#pu_H563S8~6DgkOBW0zjI@
z`@7Ah<*8#RGzBqqq6)Z*Ai*5%flv?qnQAn~pdux8fq=0PIO`gggGn4@Up@EL3WV%g
z#|SWN$3uk;eU-&!lx5_OLGnW|kuO9tp=882o%`Etm+&4b3a^$ToDI+|TK<XrZp=tL
z)NFxv*-e5;CEiQ51W??EKf|sw0hsr)dHnplTL|_Q!!L+r#F(-1zfaje{E1`0pEa+0
zIf=)Du#+_`m|!pb)a+a2$lt%j_F&}H?&BxVsrygXr_;H^!v+p}RWjdR)7sz6Jn3S;
zcyKFy4480Jl6!6k9CvV-X!vQ<-$cZJaqC_(WmVcIp3{}kXzju_nzIeg01$Sb#2ULC
znzdJFCk^ety^Ves0o9+j`DBD*sK%MH7N4;^fX@WP75~;{;^>n)@ds~}R#n({HSmXZ
zE?>0>)DkM&NxlT>+5Y^Er4lesw4zHxv+P;QmWDm)dZgqfS=v(m@lb{c7T>s|BrVOi
z{i{f^#C{<oDvk`c^Dz^%9xxP9KWJ7QoxZ7}$1AoWs;^Vsj_L>m@9&=t_+(MFy6D(W
zq;d{Ifp$Ke=e=$Etpewrrvwm05R0ROJ<<O&sLn-wRl{f62Hs~+|DqgZdfg-=QUKp{
zZX+)_mO@4`drUcn>#}r%AwO%Fub~VS-4w#(cYGMu{4WcedNxoq7(gU%GC|^=8S5<n
zVQlXTpLBpF4J~sp5%+7;3C9u~wd(Ho`<y~cfj@69NfOfWoJGdR5cbib!RVN1X5a3?
zSNz`24(JVLNH!;IB2#v20nI8Q!i%*EB#19DUR&7*U2FUn(nekR22L?lVgM*gTxL%F
zcH7geruT}R>b}M1GJtd8H|1^xI4XX6WJI%Fun$o^TS;A8+ta{m90?7`|DRC3k
zgHLq`2Z+p{a~wo>;WX`o@RoEV@G7=ilQFH_83WKdZm5)#3i+qDu0FTkgFr>Z^_4!c
zjIPC42I6sKe}kZ=@fd%!Iv%IIT!uy_dL5RmR&!?YU~%!w3vj*rmbv5*&0fH$K8Fv>
z&@y|8#JtYXN@fQL$joY^0!kn%C(k2y7kWCPl$O{@>2AgDy3%P~eVaAspHx!(#7+eb
z#K)RNp?7!bJM?}w&@=(1y-#9@x2S^xgOuGsl+_v4xJ=vUOEE-fO8vA|$G~e|j;VJ5
zY1!CGavbAz1PEMAt!C<Xaw$kxMo_&Y29q-5jjY^ql2<f|eih$XAyuMw@)FW4)ZF<+
zG`i-@$_|slNi!cf`rxCgrlbg~RxQ+Ct0-Zh^&T=#{qi}tk#^p~=i1ZQd-6;+%%R-|
z%M!kJSB!izrEw`rD65S?rov^ltw{tVBsRmoc&f<j0vf!0(}SOLSiUAo0~Ee{3QcM}
zDs$rm>h=Pyp4e^K9%w_cB53zeY0?5KgjL03T~Rh4gdc33;wZ``z;b+j-}cm%)K9dw
zc<34UAid6Q8tJ&Uo}!w0PAoxU`sv2}J>=IBF}@6Cqnb@cj+w@H=aFwInsLvm00B!F
zMajh|0E0i$`(i-`aEco*7*Jsc6gm8|P##zSn%8HMr5}L0s#&HFg7@}2e$gkpcKe9e
zrX9S8hsO6`!Sy)h0ARj7v#i-HQPq>PwI@j`rPZ(CPQ!;S>En?K5q>rfRK|}eDbwSw
z*c(wUf(+b+i-9V8MB~-t6I4S1u&-~^Im(L#h;$3?2ZimD8TMU}2~X<267s!!{~S>N
z>=3`K6SL~N?c9AO)@JnPSrncRyh2|JEO2a=i_zhw*}8oT>}*Krv`a;wP1szRQ(5-2
z*yr!kTvOFjUjpxYd}{S{B33v`@cbQ|5lrG-v(4*%pc0e`Zup&4Sq`G=P)kq1K0YoB
zNDAQ&;M7ALMgeO6V-@RyzxvG<a#46av5CF@xZf9p)7eVV{{y1m+NJUnxp*p7C%M{t
zX_C%-=HG585q{X?WOi(?dRLO0_cA!W>J#i_ai~5ploKBEFx6{`^^JR;Bf8*H!`0=e
zULIJio*o3pM9cTf%1^=G6JW+QK|`BT+L`=!BlZ7^eExF}{O77*W@KXhpDHWYf45y_
zWyGXpHCya%LGyqh{=4p)B8UKnngaU?2KPTzSFZncQB-+CX(%r*JwZ`%Nfc={mVjw1
zIAo(WO*xnCRSs&Rikc|)@s7ta{voA-GK6IT>O(bg_?3oheXe2K)C^x$)vQ&uq`kIv
zCBpH%Wltcu?)}}o{q6g0@1vM~oO$88<hAYIWsQgQn1Dux9Bu<xs?=+CntTeEx7Iy^
z?%}zy4}0OLdNJJV()g|@qnU00nvA~;dKGG>^g~SlfF?r^|68+mg^G!aS3f<>F=3cF
z?-6S0d_3i*adwSXKRr+K&#+1&wI-!U0`pbusFrEQIY(XN0X4LUIV~vCL83G$QoU4N
zGI&{USGGj(JNE{_Sc4ea6yV(@3`{9qXEZr?@@x7>R>Y6k>i*7MLRj;74eD*Lfxg$k
zyRbaSWwSkmw)@Ue6?GGt<Z1K&uyszsnT73|?%1~Nq=Sxa+qP{dU(m5_+qTuQZQFJ-
z`S;B1soFKC>wMi+?{nkQz&q?QJD-3e(KeH5OyjXw&KzY_D&~~U=yv+o+VT&fwjATp
zF871Vl8Gf?O`xh|EAL2AsWdK;rpaGZbh4mWv7poqP<EI|!jkTomsw`9fN4q66o4&d
zldr1y=Vt)O)DrCxoh5rsu&UTp5v8<h0oxL%DcLh4T}CFqS?T;|=Lh}~o5e4@5M91T
ziS>Y;>&(Ow>1W%g5V%ZWfhLiTB^6unvOu@!O@Ve%Zy`rhf=O<cw2)pTFTY3226;Uq
zLpS{npm-;>tubC1N2+`myCtS)D#|c3UB2DzoAabMyUj%C+1tX3MZezVZKglddnCXb
z7~NBUpX9pEX3f&<23~{rVJ`j}Tci8v_4vC2U~_*Ss0Y!(;yQhiB=nAu#n5;NH;RL1
z_XKcy&DgTz#UaP~2dBkJYrDeNnzSKt$~89)z}<5E6(Tl3_l;~b$_V?BqO#`*qTViy
zu5b*(_>DJa074ed=-|%a3VuX4D(fPel~|LHGarf2rWrA)b_khW3$qlEksX&b%jN=Y
zXW>S5S*1$5*Kh3IWW3Wes0yJ61moCrGet)1>$q&GnpQCu>5nO2QaGsJa~0xx_i4}#
zh+vM4<SnfED_R<&IO%2iPq4!rK|L3<-WfbA53bI2gpwnQqL|EFCAaZ;8?rAm(snlI
zuc|o^&xQ(PGRT9byfK+FV{0_Mu>!z*7@I~MQB}KFY-M0#yD@Z!hOr0JXY@!J6|bw1
zq~xW{7!kpra31_j9Jb2x#$Q>!ki3u_5Y-pv`a+hN6AuACv#Pe>AJ#C#wGfAmAny-z
zK_(~D!e6(B`M20@-ZeZo@ujfzh7M?|f)Et`pxilatz5d)h&ms-UohV&U?aU#PS@7=
zTbe`6Fg?UAFbFV7+wKA4v5k2Dt^f|>md9DkTRBGK#wG2)Ild2!HK_!JUsan7m{n_t
zcN2Gj>XHJY8BJ(84R5-ffp1G!60BFH&Q%FlodtY991I~ix>X+APvmH~MGY3$F@SuN
zaRR;|M9?hV)pf`Myhc9bQcGS8tc5L&aX}gS$l}n@iUr4mOhQa|)F?RhwI;rp@gK$J
zG#?z36@aM0N)Za}4aV8P?LbTcj~fZ*xQ?CkuD_ofISUouI`4o}Uo5!C^N~iX4(ITy
zpe`g}sqG*GyAX?9(BroXsi6HS#g)k@sBV6B_QE5GWT;q-!HTzpT;%Ve(}j7(SmIrP
zyU7n&$3F|ck&Gm!fabc@t-{mykLgsPTlV+rissA^1S_%&%R6hhZ|JlGTB%1uaD{@2
zK%&HWUCq%|jmcwc6jlSdKm1DkI?+F=fD4Rr1L?i=51@%GkOZR#UBqXHAz`*}+Asx{
z-C4_o3t)i3>0^^5JQ-^W1AASVM<20tvYP`BIQ5(~*}a(?)g)gvH7i8Y0rJ5wjlv`=
z$9_aKbTFqK))$S~=T|g<=~rTok{&@~nGhWNIAJ7Fdc|XA$ydd8g%qa*nuZ;)cu4W!
z19RLZpV4T-lZKKK$fn;J3M5e1QqGrQFXqdJPY9vxk^x)pACm<Tc0K_^qNfe<G4%a#
zN9SQVMqKbU18N$HlFO$|YwQo{2k!+i%k-Lc-u0+TFF@-9?#j`Cts*2R_m6gwbBvhy
zCt!&37k^VEzI1|7)5F-#BF0xJd%poaaa8wcmn71zhEgOAkU-t|oi|(ZIKQA;R&tnd
z_6KprQ0+<(GAMQ29=P>*=_eF%>h>N1g&{cx7=7zjilc%VUi2>BI|^<{1gw2Oy`g5l
zD51caSOQ=EKz3X}SWDe{-vF*Fd#ePAat+c{ddyNLd-nD(v)xj?(QYP$OV*oTcJ6G0
zJod}g;t2Yl79|Y#Mw25Q66_=1GLhBL8t41VyqalOu9ie$7O?~F6Nc+OQ34>m78a~%
z5^D42hS5zyuCfy+v3Gp4QXMsQh;ZdAkZJ4Hlybnb(|0?7;vLgR2zeNr(-P|F#3lTu
z%m8wBWQ9|cNFX?2#-3xax4rJxh@<OTvZmzVb>M$KDnPXe-bC6R3Ogb~4$`UGMbhz7
zw}#r`Y`Mva)=5CHPlr*OFwdFD9if<$r+I@MBU04R!U8X0cw2YCsy1)?gf}@K7ygTe
zDzbs7Hbnpc0kps~as(z-yJ@Y2DB5nm-xak4S8762uQS^RS+|pgufa2Ynj<pS3I@Mv
zU7}q9O<q^R-&PI03Wp#(#O-(CtQ~C9OI_)yX3y4-3VW$#W8%@Q&U(d-ra~)TEl7<!
z<0NXvp!Md#>Akxx%-UhC8(eObj$Iye{OoAfJP$rVzCo!TtMSl~kYm1R`d<ozjG_X+
zv>>%?K?nspO_#H)hMbfgjYCD9PSrFRX&_ALxvjN*I&|jIiI{R^<CceP%)^~k>l*i|
zBAS5nCxAEu*DnnoftrH8{qNv+yDj|gVJXkJfBT?F-O1VYT5Ff@A#?4aHOA*#d`fem
z6ID)tc}M{1)Ssg^50!-w$$cqEk#MldE{0pwS?z7d#!`sm@(M#=)NoTNIQ=(=eK*hp
z)&#LVwVQLk7!i=!-e|osro_`QsPY5lDCg~y(=&DZAf6-xmv=7a<J_>><OU7%vA_Uo
zc93K4#upVJy}3<gcbVlzYN9%Wti5XU2f7G=>wcN=%TmI$GB-|#k=ucIeOt6Q?yU2{
z)b907$^|CvC-xyB8n(y#sS>jzkm@cjZ5E@bypvX#5P|a5JxNYj%tzfE19D>`<tKY1
zP@6tgdhmAKUf#F;2^w;Do|>s|9Cwh@I<-%9SH?ByzCJ?aN~3i}gVJC+egJgWn@Ai$
zJX})3?%`m$jtIF1i_5OV_!U|DVK_hR#f7`j3HNN-nfP0}0k!8|E$S98kxHJ0g_Y8{
zC1e|2Ke_r9TZ80iZ8M`q^Vk}h*+#dAK%A?&nJ`Pk`F*XxZqOW#FI*%N41s?sJ_L_$
za&`4=!TL85izqyiw7o-PTYYKkUhFcUPX^}L7IWOd)Bl3?>%s%I#JOz^#U6Bw1w#Tg
z?qR(gH;+oQ>AE=7lubD=B4AYTm~)5{UB_V78_Myd^ZQ`6^j)2L=tacLBTiEy;)^HW
zvFZlD@nZ>3xztajsLR5KSilKLtF0}Lz<tXuBe(52ttN@cIwf~WX5s2m)?wLb!C
z9M4k+kJ?ulV3#<VsG670KPug3&CLczCgIu9FAwGTw|o+8#lI{bG~fRG>YRR$##iC3
zh7{zLQ4l&qn62jXt_hQlqLnv2@E<W$N!}uMe6u|Hh;#0Qa<ZP%x!!*B)_{=>X348W
zfY^tB&uar{{BQqf<$M;5YvrFAH%X+<5JS7AE(+1+ku;WJbwe%x*Q>Y1bv%EUTaP&s
zI2(P?B5Db!*+^oNa@rcgb!A+$TUdLgmlsEYBCmUKwbX-yPJOK?Ie|*$D)<L7&-R+$
z5++Zr$P%^-<1LS)09}zlUtX7c^99ChM_Z%M4hAUVK7@E@pi_k;;d2-O?5jqbv>7!Q
zUN?Q!!XjF-)V&n-eTARLFO>d%{eET(8r{LAe1UY2-w_++F?wsR#f0wzUj6&1dUm8_
zmJPW}*~pir$oF#X=(U^I-#J+1kgfb@08o5E9sxgs%T!D2MB+z~H;d@)%B`_U#TS{K
zVj>~ELvX1XV+K3gUfePOE|5oaN*FWWup&|>|1HJf2^C+Bm{XEv?68xii=kn-qAIo2
zwpgq|%lD;?uScKB?i}Z8-T_J&1v0cs5k!5$gu>3y1SW_>L0}Ij-Ldj&x-$oZLo6!Y
zP|X|!;cRO4B07eH#VJP{xX^sIYEqi`S?<xfnkF&Lz<A+1{F^a=b`plQGYiHnZLPjI
zBy=nlC4axsQJhFK3j%9sZhO@zPwqQRNEe99+XM#-&Xf35<rp8*1>@tpVMLWr45wd8
z!e2IZ7HWKF>b<n!{(WpYWbmFVwA5G4;~b=Qh<kt@5FPeQ`x|8L%k27+h;D9PXe~DC
zfOEmKsA$Puh_(|Tg#WK=vtsfc_u$vP$=BzdGebOhN@`&o_40_I38-Co{7><7Zm@!i
zP67kDM&E%aP~?@?RK6LM+F4`BLZe-i0mumf4v5>g_#OMBm~g{rghXAwGl*bu-ZG0I
zRyD%4R%{MdO&p*rV*P=>H)s|>Ux(QAK+?6L)gJs0<dzf=niIk1ocnLvP5J5>4{c~3
zuvqI>u=+yRczOF698GOuARlPQ%D@q;LRk6}FB0k8LWD_IB5ntOz*Qj^papD1H}A}v
z%j63GS$A6iMMH5UP@8`#njVnVDeG~L;=*Z7)1|(@)d14Nh(nTOru|(iW*-ZeA9@lx
z>)D-A1w{vVP6-ME1x*Z6w;UU{V&_J$A^W;gRE3_!n7@y2Igws7lIP#hfGC6QqF%ID
zAB#BEJwP(r6HlKedw3<=6Y4msCo^6VUot-!)%JFFz51$xkZi`!p~YNYjV{1wZo^KT
zLw_bF!$$l$UnIZn@KzO1;jl7HaV4|=?l;y?&lm()gf_%n?@AP++7*)!ji&zmy?<Ia
z^8daBQqWiSWX%Y;Gu_<xd^)o3shdYRKV!9Is=WS@cD<JhpzmWm8atKJBYrv<Wc0}7
zm8@WXk{^07oDsyJEv+so(I!Q^n*Q#6ih@ICTNKT==+NK49(KkJq0eW3qpx|rPDdCM
z!f*g=>FM3~JM=td{yX8ke(1NQFDS9oyJQwy^-dSkn{&_a-OI>L|2>3at`3G@)x8)e
zmJrh`aY9+aJ8XU|KGTYUk4x0v;_y82)J5qh76S<n{ARyHfPHqYhp#yw0Wyq_>%ByR
ztjI~|QrSR_8JVYT!>TO6nKmaC0Gv+}*xU^uaDRFl8sB#G_Rf(bBOHh#ULchZ@!KV6
zBt;HMAfiB+q$?9e$;B)u($YyRmm!?;GqxcZjNW+~BZc!c2Aez(`m!M8Se1(L``|Pv
z41~5(mC$UiMh^G$7Lee_&t9jQC0bcHZ}9aX6onAS!g2n`mAOj1THr`-3SeU&z*qd4
z=l2n#ct(;uC`g_@7Br48c&p$s(+Mg#C`I(_URxo&d{lx);Y*C%wJWewpAYji>SC~b
zsn{41e=@vQsQMilq%S^Gs)R;T*9R{pA4IK_1&{TF1}86_XxPFjy)SE;@ayKMQf_ll
zcHcFN8F?{h#H6AT3zpU%+0P3h#zYP%6X=uSsk9bEyLi@X!tXA>#&TFNCcO{Qzck(5
z@Qz}{G9;uX=VgRK7zVj`(SJi2`beFsv<WECUux_`yeBx3DnYoacBye`p@*DK6v9o&
zjUV?M(W&N<4p)R(1a5m4DqSkcI;AtUV`{ga^=W?im}O3gg_T2I@VyCOzd;3LS7{_*
z2y1!=aEc^xqn%&=%atVd^qg5&Q+Gxq#pqD>5}#p;hvD0O)1;g|7&M`B<Qb(bR;A|u
zgAuYWBiKgu+HY>H=g~?L*dY$iGs<E759NyZQq*Q6ME%2!D^NQpR?hUhF|+YP)_LYi
z%$tFZNG1;9={0v+cHA^OLMH`K%2s66u386JyVuNvgJ!{_pIczl%24>*_U6!~p?nWH
z+2fGK9u+n+7;n%vby@l>u>5h^JE412r)kP5ub`o=ID26`BThrJ)==)x;jm;C?97LC
zluW7i!tokx2PS8FHJ?l4hLBY@whxQH$UE7aN`JH+*NxE{rrPUDKwu7_-$`z6KuLb-
zxOT4L`r2KMnLTi>R;%il(HW3{QvZTkay~QH#p%TKaT6+Z4e^VBm$AU?GeYh&0^VA|
zvk7s#^Cb2>&26gT09qu?vMsj}uHz<DeUG*urie{QKaNP;)NwtndpiKmzkG8R(w!D&
zK6bN`5%WclSSl#O;A;is(k-lMo%~vK6-Pt|(`4KADrbJZHU1?_T+E2IJ#c(EBlaD`
z)Rs!#kjbJM6Y&R4qb|1=VFhLuxG;>v+#h=HL>7`#2gE_cx2gweWQ|zxy1<^51E%qy
zpyN@;w796c`lHit<(CR#UmOOOr6*!W&6EsrXq1F9rIIRrt=0>GmP4wFWCP47x=y-v
zOA4<N339uo=>yXFYzdCfaOpR<`}o*R?B%)60utd52dO@Uttnj-h>yrqg~%A?<oFOH
zNsHQYf~9461uZ0jUJ^(|(7Uvj+ltuOikzJfCM0P1hV%fw26?WV&T}*Zt|aD0ZKDX8
zcEhK1Z5vbJ%3=cmCR;l|VjuAVG9A3iK;UW}wK8Ph{Y^l}jpTCv()LHhE9J8->zzRR
zE#v<EGyCL-#kgAxJpG$+vw*t&wsYvyeaE5}(EX<t?-``oVe1qJm3pzpC`{DS3HnTv
z3mP8Dgcn(JSD{X;#oxUxi%KhiXW;W`q}dP0Jt>6sUz#`|EC{Yo3Vz@B<Z!s={#DD`
zSE}e0B+rj2i2(99gZz87-&{mG695vVh*Kpi60gJO;s#f@T0+SLv8^sMXbj)innJG|
zD&C+<{tiXHa*87sO|Kr9IadLxXn3FlV`X>Mn-+-;52=N(`<gb9zZ&E2<f{44AeLfe
zti)g5E=)SW!TjY+zOBz2kd7n%3Qph5IIDnFe?{zxSL0ZuZjTi$QdWH~=-kBC4t*_4
z7<!QiCPXzLAtNciSh+$VjdByKiDop=ew)ro%^^TQX3yv#)}B9n{lr}Uz~pScey%OO
z_~|a8_XF5HJO*|Nyj>!Yn>+uhA6$JF(^ClM^b8iDFInz{L%S;?faLEeH#}WT%;@<#
zd_7BZa+o$<JK`c18Dp1&oqt{kml!&uMG&fhl`~4be%c20mr-9YQ7Kl9l#LX#(EWvs
z`NOff&)kprom)hpQ4uQ45q_QXC~ve~`&`>&%Rh7w6O3`l!yUQ#lblyerrwmGDl{yD
zmAV0tq{!^eg5OOoKt*w1;-f7q9oP3uLll0MH*z3h@pkF<U#p;!ssMb+RMS;d1c9lb
zRA`KcrKqeaqvJu3Aw3wI$BQT!7#JGF;_*?j$)P=GmTCo<C<Ij)&F6Akdt94J5inVS
zwA|Fl*O`*>KwehOr=9J&%^&sckMmShB<2W!0`F48<i0Q7eI-`Riy7@_XM5*@_wzc5
zDH6BvSInR}<y(BvRAxgGg;ca_Cm`@wF-y}#$Zd2OH1zNA%5v)8<sQ@bi6o{HAp`+J
z4jkC6dyL56mq_(OLdCp&OXqIy)d-3CYBzLCU{5Wh6$P5iZh3xfh5`!-0r2Wt<7i%h
zK6rbw96W_BCXD9;!jp9u8J0Yy$rI+X!zfcmJ`9nDlUUMe(Be7D(6~LJliI>x;R7Uu
z#L)vGw+5WiA8ehN(1oEN<V0HqiQ1XZ>oizaF!es#B-Z{jzH^q>x8tjraIYYiQR(cU
z;0VI1@j3X*Idoi!$d*S>#l<81Q!gn10?G<zG_|bF1ttJ(^Xf&f!8u?Z@>9V~G$$|3
zS<CYSpX&E##kqUMaT(h!#ucI@(Ylx+Z}xYQ+pDc%t!w~9Ahnvx1gPYb5xt@8{20^r
zIE!iFb}+XfyPbr4Z*mcm{|n0n?Qlb1kb<9<6%OwBA*VUNkra~CnP<*qZ-y6u@g?<_
zy$X;N?)b)#Y?-7um<)odBX3XG8vu2q^_in{;`Mb6Fg*1qAd5pMj26G{eU)!Gay?2^
zJlm+mDpo^zF}i$hl+^EQ6rcY4fZcnFJKNiIEwoLl*z@o;5yC!5;k4}9Yx-uT7XFB7
z0HEtnIq3ZjmY@CG27zh^H4O+Lat8|@^O^ie4`1<D^yqFlgs;=X;J)7E+|47{A%eA5
zrY{IejeE>6=Dm;8w9k7P%&yC4_v&%~nAa9@ZzJA_--<r;mrD37QDbtKAI<U;8Kw!M
z^8KnIZ-z6qlbb8#rdikDRbU0f#!F@`JWKKf5%J!L(R@3)BDT-=y1yF$9>oc}OGlGO
zjdteUu260gMsgJ*xkLM7K8!Nt#j;pS0xRh$YVmQ#;>S%K+bisi2E?fjilfh23R-Q2
z&HK-V&)dB_Hv=A8c$b`$7Htj$^a1M4zeiv;4Yos#{U)sniw`!FNe^<n@PQ^TMoR>l
zclog{{Sfvsjr$e$>+Z#XgA6GV7kkLxqUds?tDrCjaFs!;P&mZ3#ukE*4^XWBJ_U!E
zeTy?0hR)4akXB14f~`#zCGpupp8SlNA@gX`Y*<gqcT|}<3~Sy(6E6zxGk;cIW|frx
z9iMZw266(<e(t~&2hUZh+kwe-{>U!gbHOjEiGzoOMGWq3gUWY+T@fSr^#8z9z_MWT
zDK`588M<a>9lRQtDjJJ(^T_j+i<SM!lW2Ne%bu7SvK|wXV|1B^T`Ev({&Au9;}kJ?
z`HB<NzOX@wC&xb&__xgPGnOCftc;aPZoj-N2!oZV!ho7C#AZJlOujy$m&uka2l_J>
z8k15?Xa?A*s<{K07ctaSp~qf(+AcZT?Gh+Om2-bcCH!My!s1I*qGcymPhWW^2{#o}
zyzBYon6|AFIEgBzrAF|<slb9CMm)uQn$ej3rx01sDch;$d-#h4@1VSfwo{yJjtBj4
z5zi^2Dry<hi;sD)@2%m*_hfjz8+7Vz^L#@rgHqH^_bLF0QXz2~nE+v#cyLr{Z*o+}
zE-UoPKc8oUbB+p;`1``>u+%=1;HC=SUFKkf6#Pn7GvLg)a57T!P%+7Q(o)HCPW}0l
zndgHu3VslNO6bX%eV=?kD4{MJQ1XG;<lD{#bmoPAFT{<7EyVl44)$hHru>5+-Y#(n
zy_=WTxIAD;Isj`3`L{NCTj_TyvpR_OwMP$@EIpEH`!gq9!D&(F-^*nE+;2M5#z;^f
z;G(*lAY2U_kv%x`nMApRUeeM8WyvgR5{<VnRpX#-P;bba5&esBv3<6M@&)C&1?Bca
z>;1rUap!a^fZ`VkAr8=)mI{2&`W=c7;3MkB)c}AR@upD=SD(ynZf7%#Lqzt?hw&N3
z>vA1@DS3N)Ks=EhgyWADb{a)e`0YmA^WEdY=ogcpqw&*Ew7;G)G0Gw@4wh05B1gO;
zJ0Te#k%kE?9MDh4$JAYGYDHB;&-cTH+A=Dn`?Q1IdFx^B7%a}=*!*`S>OVP-`lx3R
z>_fZ%{}M|7*FI!n{*NX2A5)QyfrIV;er052{NI3EWkn59Wz7`*dC;1aUO!Oq6k!%H
zWdI8c!~gIRdE!0fmDEuGZA%fhQ6}a4RH=H0p_jo3ZmL_K1EYn9Hv7Sgs{n^#5|Wbh
zM_@KH2HUHHgB7Amg8~T&R#MRgs>mY>lr6UZ++BuLtxY!mt!)i!<KdVM@=d349D8qH
zb1@$d7MQ2IMny-$g#ote8Q6*Eu2pz4G9;Yvxoy$Ef5Mx)#`yI1%^vJt(nIH)4!Jl_
z9vOS{&LizB`bE@IbaHEHzq2v8^*Y%ZX7oBmiIm1s$Sn3CCEjGy1mmwL6^9hYgxhF&
z#>G0xSyXUeEd@!U6D^F-q|+W2XZ4E&lj43WMUW&arg28)Qvy;BeZPPR=ydCyu|&G0
zy2NBkOy#c@lr6Cz;fLfCaO<gvO!Agz=(zcG>8|a3xxdTi-%=XOhL{h@=x2qJJR*hA
zFI=y4<9N-6i-)~C<IfE%!B~B0aD(w%^((5lx53Gkv-Ha8X@Pz4GYX?-s{`q3%M7(_
zeABvx5yW9URsqD0nyomF=hTwp@E2w=>T6mMKn84tFp7mi3Zqc@%BxEk?vVbm`{`Q=
zLx-;Hq3KLGiZG<_hCbiw;U#+-m^{5#>O1cU21`Sx<%%n8*qgM0MyfP$at;+j`Fvkl
zRJ<xo)?C}Z`}u7MXL&-~xf^-&mjTv|6~70pd7Vpt?%3yLZG$Q932DNz4=bxUaxHq)
ze9P0Cv`+*(a^{N&*6bbg^_xc!Rz&0yUts;&2TVeyAi6d^PESwfDI9-_1Quw6Y-+It
zVI4j4MdRY}AWoX7QI<K*dV{<0Z`!0bP>S=BC3CUjs0Dz{!;6ZvB%LCjS#t3LNb{Y)
zbmc9}xdCcQF1a7@3+%1N(07d){VWzRp;DA-AcHt){2S9he3En<bl_-PFZXhUuDb7j
z1D{_p4>ug(J^IyJUb6iv5B9Rl5Q84RrE0=j8!?v6ip#M|WiU$b!u}Y<zgIq`B5z<P
zaQZ*S<C}R{F4$b^CM86L`|%lr_fkzy_<J_$wE+a3SUsL5`~iyNzrQof=002MB&^0x
zRryKZ2HE<i&0f>u;_|X>_k~fD9kPRh8NEFtr?Yz1(yaV&!u&D)n8Cq77!5#Jf3fPA
z;7$690_TZN+Pl(o|GmGV+4y*xh?~V(WIgeVzzR`YwEhhrkc0@Y+fk4>9^e#DF%yvW
zXAQ89XWn&v!-(Z(G~p><Yq0A?1Qn~i0*R4VgT+ISL@pFffkThxoC3$`+XMlgrxkN?
zD=1gm9IktfJp?c~tIh(K-W{Xxo(g7T;sOP?@m<O8>}p5L1ruh4j$Zm+@@njEI=$kL
zShco2|4ReefpTnh;L}h0q=kB)P<=Ks+YT@aaiU#ceVh8)PXXdNe{~)*(*vu5!-(_F
zADO174p_j_F4ZS)f>93@QI+Q7vMHkb-qW5q-bZo&i^YM%k#f_&7oePd*tIVFRDX?~
z2i0VGmY@>88Sjyb5md745%UjUC!$?~JY!WW3IxO+2afKHq<YX~w7A#Zs=BVOYznXx
zuTVm5B<H*t2+f}blJ0l15JYe$tRX@z1ayFLh}MUnr~}q?0jhFgdu)iSUITmI=8N0A
z5(d*EppNjqs1e-10i4Y3+r6j}4#Df{H~DBbUkGe;`#I-o9`YXakJwla<!wNq!dx7)
z*MsqZ%mQ6@lsT$~DefP3WhE-2M3U$XuZ24k*XZc>$(iBm^%<x3`5U^(CqluCpV0qD
zVgE}k|D&*sOze#Rt*{L2|65_j<-`<Z<XU2E!IXhgVj)4%QmVK>aZ}zA!5C6_?7^s0
zq>#W^Qf#Hb#C~L#@qfr}kp_gal1586rlZs4BenX~5a(0fa~+{8qPzmC^@FV6-{cuV
z8Ck(=x;!-?5u}dD0(C=-^~fo{XrB)=(c{U?R``Y`E{Ry<FNZBpyDkxZhqjW-uAa|J
zI|6CQdEUQaVWYiK%{Uh})@GGWtAIMAvL^)ebVl;@Iv?hJ_Ap9Gr-OY}+szd!)dA*+
zkp9HJn{gu0;X&iiWF9M!SERnJY+c}pGOH4e37vN5x*=@9v%cMOAP_n$1eosC7X;W#
z-?X7uZbeH6p<(k7HXmPv%^DUF`uc{@MxfB<rgKI$+`};p*i|1otH1449{>nc;G$j^
z1!?EZ+z1Qnq}l6Sv-=%itAY@r!=*3#T&T0z2GQMaoAP0`j%s0<XySTjif;GocZVu{
z=2fG4@cqQCSIR_st@G31=Xf`Ft@o7iY<Qbeclxu)!q}^l8eOU=VnZm@Abx*xEpak(
zLs-~f6a%qJl4K-3<OE1BLjX@*W~z`hc{37DXxkvFAy-}8OTdbNHSrOO5)_2tpE|!(
z(F@XMM3}JC!QcJq>cZ^EtbfVsQd1=^$eWR^!pH{Q4M}Hn)CD4m!4dV4K*D$jCHpfm
zh3!LU2le|C)ny`yf)TAk>jvcmNHfD61{ngx7zXVFh@X&X83RtF)B%XhvoZFANc||T
zh|4m9(!LiB_0t~FFvrEGv`XElE!sF&aE^=`!{-BBy&e2fg@$D*KFd!$o70`!1z#C&
zd|0(Uy~F<b{xRT_cn{_`Uws%MwAk?+2kUuK!P!`>w(9e>dLdr$Jxqr4q34YVJ~oBJ
zBPj*&(QoF>y_HKBY=C>LBmAS1iEqqHPEM1DKt_0@zeZ-!O?W^2r4RP0R=oYO)FEk{
zaU(a4$U6JxR_^X^_tlqSln?UE40eFw*C4=Z4BTSOPm@GBgZnICRtLBBhs_0$L0|F<
z7Ue~(GpC|D0@2H%mLFtwgW-XbO9wJGa$O>NLaRYlc6axS1=ySNgdd$Qc@-?ds-*vl
z!hqPC<t{=w+pF&aLKE{0Y<&UcTd3(6r0uUoW+sBExb+p>87kkh-?dg`i8v<%<?UX~
zt$nsZ<dp#pliu~lh9j#W{4t?rxdcZgf(VBtviWzT6jC*n%2=tc_RLkS-e!h!!3$~X
zQNhx3BP}680dcUzqa*w~I9W(4sT0Lg6#_`1t_bVYj<DL8=UJ$tqa%OUYMlgHz_Or%
zh?b!R$VTK3O3aP|1k3#qh#T)kfO^@u<>Ipfj(^ZFzlQU+Cl2NsF$qDK`k)>BW>^SW
z)zdXB$!(yg!hR|13$t%Gef74j<Ei<Unz&r~r!0{30h|T6yk(_UWWPI0e9G>(#0lJr
zMO82QD~StkuzVVu3B>T;;pFU*G;(7iQa2HnW50c8oZp-ULh%9xy*(6Ow0T+96y~Eu
z<J@~lSvvDrfpliBS;Y2%WXzM;wJ`C({vwkL;Ck5O<)T;hJYHCT64(nn_`?>~NtXTa
zkPAK40K;fN<(g%c-F#T=1uR;#sjucUJth5p_J*I+LDuw+I}$Ic!Jr3D<FHy<C;M7Z
z$`|O&o_M&Ebk*Qd?9hg;+*C^$%7e*qv4Y;rz-abC;QSwXdgPdps{n!Xl#z6tzG3rH
zFtCejaC7L<Efi;GK@|#!?77H-0-XXK<WGB20E*TAnGp_~5Jf|)rbIJE?#1J}svl>w
z*2q0VAC2Wtqpimf^2UrM+fmn3+?C(8SLVPp89f0_8RCpzRYh}4<wPI+;LvTJhSH;j
z;&pXYP*+DJCg`aUL)0^quLyxn4-RjUyrn%iH^NB;<W%>*qCH3e+>9R!YE+7zK=-Z{
zz|s=$Bd_8Hm08^0%qxHk4);^lasC_VE|;kF$^D8`+@O~`z<e;k*h#^n`kuwzOn23%
z8nRYc3bSNneHjFp1A8UJIZ&hnM*Nq1T-ZXo72&cM1R@{>LrHH^u1||lHhWrXP6$+Y
zgn!6C+8gsW*d2+|flJX$nCT$4%56jnNZMQM$|HaanRvr;Kyq7BW(I}x;KEB6oNu|_
zK?HBh=V&at?82C?(P?veFQ4peYfetC^bNDJToG#t*Ny;8y0kO$uD{om=14$G>5RJp
zLpzvG@C(iEV9XQEZmDi;OuYGz7)^i}{Y-a|ScLeDtJbu1yk4}u{p*_g(}9Z#0Abg;
z`K`rRMl~9s$vq6|r-GRQ#M*2w-bq77wy$NgJL5N=SYD1%+{IBux-0y^f?)%>8y3KO
zJ4XmYAJhv6&Y*k!w+}P2gSq9jbRdr(l9C3bk)}O}NOVFBvnua4IRWfFJS#klD2mw>
z?2206|Gq}pH*s-<#=Q#!$)Gb6&=MJG8N-d{p%~Gm-UNQ4?R5tvhEnYzjuBv~XJ8oF
z5{i^~Rna^Ej~B*nPP-P$+Rtl_%N)3I{O#!#im(^|ArPAwB?dwvZUn^Qc1mE6ocUCP
zz?bMlFCZkj+PEVb3r0z2-e@4)XUTq#60^%LNRKLw6PNHu;~GG^$DT_FINsD^hkep}
zp<#02#l+efVihZa_#j)`lr)MyFA2+~*WvVeT`GcuIkMR@w>W&-<Pb%`eZ$5Lt?~kO
zs&yI9<*A|t2_b5Fr4TL<_(M_fWj<o3v<u1J{wWfayw6Y?gv@HZj*bX((YGgLU`O@J
z(*7{INV4s>zH_oQv8ZeZn7M1$M*|NJDNdTA0>vUMp)kolQ!-5=GT|iL$%EMJb1;mB
z-1AgCQu7)6Fc!y>Ql9t|9okIk(HFtYjjkDJ9V<gg(3EFH&D-d|WU_dJ8K^Cf-GvA_
zW+*q939=m^Ymc@uX*JEKmGKP84f@FV3g71Ck5&tY)BBd1<seH0=nv}E?``^>IzQBA
zJn_5S)}R!rqcz@sA;z9t`xgf7-}yL>2<eV>^Qap#g!tnb^GKL6e7IT$=xdhEQK_3z
zHw#QnJIz#reXZl-wV*s<+3YY6i=B$H*iNrIbpfD=jm*fi8A+jjj$P7E{_B<d#k(dg
zTV5{@F`sXNbxExw0E$5$5W5_O0jkM<IovyTJkBGJz*YxsjgjIjbsV&OkqQ``S~BqM
zm<dF;vD@@c*bC3-3%rXoV<Al?i#3l(PU?	LfT@TSqSFbptT@96P|^o2y2ztKKu}
ztwG%UM%ku?p?Ad2G&mlG-|}zq^=OM2+r`>py#YB_o7pWtfMugf%UfNo#P$^(8=hoS
zpcS9V&PyNZDmo1JDi|4}9zzzvgY)hD>Rs;LN}Z=!7pJxf{_x&&6d(Q{7j!Pm=Xn$X
zVPB!=0_g!rxweY7683zzafVB1Ac|JaHfS1l@+Z0rEgMt);11*9tY%PuO`l21v~D0*
zO&YURljHyz0REv<ayak@=t~VeN~l^9a3{bk4&rgTy13^l!IQh?y!l=ypopR|lzfOr
z4Sj$mQ2qk!ojDgDZfWo-+xIp23xTzEkZT!6zF|py>Urdu4$6Qmzm*UX6uul7Z4M4X
zi4}yA<=ah*9T)z+;9g9+Yl+Zr6~v=)-@iFJy1BUlV73m=&W_8zGcp#3_6eNsM^=3f
zFP&!U(O6Zqd$QV?EqPM>nYwWuK+*wkM4-`6jUD~rtt=|YmimxZ3QOdII3G}+r*&fG
z9^eEA@5HRAVVPQRWWHqn@4Qqk7BwNZzcu9wD2`okDf}4p${KDo!VDp3iPQ&Cg^Vv6
zyo0I-@T&$(OGhQ8KNZx((UvgRK5}4%gPU=O4HeyZ$(Yfs^EWWr(VPidO?2i{1p<|^
z4o%>^85;h?N+OJAX?bvZ3cXTSkfSJ)y3NEKXHgkla}HXDJ<PRTQj6Bh_i{#^WeEN@
zLdO;uT}QM_6gEB_AQ0okDaysHZ+QWMCMUle0K0Y*qjF21v>1i!d&jE*L~Yz8V8YJd
z3uX<*OV(Y~-IPzxuT$2&=1Peu&fw>5Y@NTLgbOR1-3`t}iYD!B#P8uq9Tdzwd!DyW
zcc)UZ+5KtT+@P^Z)dcHSn392)3$v;9Hv4P9LUZ&5O*a__sL68C?gobaayJA5k0MhQ
za8wUnN1R_byc&CWx|c->ANj9nslX5-`q@vy9Cq!mwXcwA?f1~q+nymSB}KC)1Ot!Z
z?=n7083v2qQ_LJey4OiI;-1&-I36m3f3$jrgdNv$shRG}=TitRoE_-_{FRi_XEa8I
zvekkc##KOgXkC&ww_Yf%p!8Ks+J#o2fJ1+OU;%yow%p?4&dy+gX7j>4b^hOH{DF}H
z+Xla0Kwn}P1cu~iYzO|W<3@c_gb{^3$?4;2UMdFGZIV~0(mIzuj)WP+T-8Xm5~L+K
zN+m*92PJU=+gUFAUs`EvH$=QlY^5I*)GKPlNuMqTdI+EM>m_ID{S1iSs0?Qh0dh;O
zzFzVL=FZ&yx^SIlo~NOu+iKuuHPbIQVBwa?=5TwU+(DZ`lrUO+4b|uO=<CsUFoJK|
zdso$gRx<2BXRK8mP{)!u21WyX-h2AV3EGK#AzwXY#C^jZ?A|OU_zGNjMuupNI@JQ!
zJi(Jcc}NtnInG6A28x#++F7j&0LU$w3xVGw>^|EOfpEG59PT7rW&=L_I9Iw{qONje
z{*bK@9^f7jJC))6mZG#6RK||6WL$d*cp#JpwIgna^touVys+<^#w^L5a)dKd@R=M!
zO$6}VAz3gXzQKHAKBByEm*||>vmuKBM2i^foLdWx{!*qUtVQ>Ht<a=ez;4^5Id0y4
z7qoA0$imHI3s9423ic=LeffxlI1f~Ln~LcDI~JM|GR&cwhx$>Op9fVbsK=yojqPrk
zjILoB0M>M_mXG<66-&T8+8|04c~Tgq?Z&K2jTOt4Z;{TKsoo$u&bVEUw=*Qck$Rb}
zu;e)i1a|!WG))zyA_313fa@%FL2HCF2|HAd-bF~EalO_y|F!`E-d%e5IZ(<*iv8w2
zRnx-@fC^y}#g9BR&#Z&6YP_t9P6NlD@($jJh;}eBc5FHk^v-(mc8r6#0Ub4r^QjbT
zbaG_48gv^l+V~^7g;y$90xdtFE6iuyp0c}Vx&^N26wWo?lR$F_087l2hNEpBMMPgO
z79|)8r3Xn1fm6h&UNR^saS)CWH&TX~6)!k869vLrO^9_`tZ`mJGc2k4JNZDeE;eF#
zjati@OPilx%Da!Ml%N^VVS088l~YBl`CG(vN*}xFEP1k{6JkdkLTPssh~f6RRfrTG
zEN%B9U5j}tUw)YZFg@a<j;rAMJF2P#zylgG(qv7lU~$%zjq1eAWuFOeQ3CEq=^B7f
zdboqw0pBEijXWjc$e0p0SO53lV7W%Rf@#Q@m*gC1*Er3MID0-9->?jnrJo0ytBh-d
z0*2qLIt1UGJ!j)_bE)SZi&{rSj2+&H!K`oMWY8)#2q<|1;CqIllg*C`HJVV5|2J*~
za$6k`&o#lB56!Qy;0%aN=sxB_!|Zj-gV(PdVBJyM%&sq%mV6BH&!}@+(Rb2~!O6pR
zY(~p(xen0U7@|i|g^k?UZ}*bTfuswb0k*8z1z+~`&l{_DSpInr2U-0V7!sMEEQDX+
z0SW<PqBagVfcV#8!FCTUb6siRve)rTzdaFDmHRdU&usZbOud0TsT}f*(1hEUoKU14
zuP5gbT29C73Ak};HdWFDpX-cy>*+D)fgGmPt~oHnKSxVXZ6nfqnvuX0+5YH35Gt=m
z%8q)1E9sF48YmEl7ntuz@yN{(+(IqIXwqhiZ1!IO05c7npMD!JH49-zQbJ3IlhS~q
zkd~hZYp}koh~<$6r8rmmks~<N+@2HYp?U~Dc$rB!vZUEN6btPDpEUn*59cm5E{-Tk
zaY2J%L!G{Qy9uu?@B60a+s=fXjr}9bFOd=GpR{rumS)USpT9XX?)Tn%gp149ODGi~
zXE+=Zz+JQ**s?$JI{^JALeKZBsETo<z^_TD<+Q6h<qF`|2?8-_`&j=8|C`6KMmyt$
zJW7WFzl0~^(`ZIR(k9N)%s~kaJRn_iZr-Urwf*QRU_KQ%x@NuJv1?OtSx3Z1Q1$op
zL>vvO$B`q4ydQHpwKNtgKIVS+MHrfFbY4#<z%TQeW-G6o_qRkp2yEjLs|CGs`mFl?
zWY45O#cobxzG5}_qB6Sq-5s#*t@o>`2*aOKN9ST?BA_D!Lj`wfPiYC<_xGpUbx_7u
z8*wHCdQ_^0c_pQJEOG4w@Nrg<ZV&DoOG{uGjYX!W#(1hIp1zvsN<^B*$|71?Y86ov
z09kQ;|3{M8{v6=@UnMsJsy}SGvNkHYgrtPTT)s)z+dd{8oFlUq-%}CHqg#Ul?V9wP
z_+Hm4AKR^WJ!uGLYZ`NB#+O56_eJm8xjj+#XV()sV&FZT4&-DGpO61@4X8-|;NL`b
z!aUHSfHg}Ki%qC)sf0RY{6LVizlKC+fJeKTgOn0`!h<O<e`z=NV6S!t4|8m|`UE8b
zsK-e*GXh^P+xxX5t>&sM!oMU3Yx}+x0pr&LXe$Y>&m1@0%CoUVP6&a?1Nel&BCy7z
z+V(30c<zG?p(3>O=-+2sz<0IGVzgK=8(KFz+*ya^F~FC66sC^3ufrP7iq(ar08n|P
zT|)tH%}(y1pzW_VUJ7P8Mc4@`Ntp45_y*&$b}1xPu=l=Qa%%P@5FAwJc!vH>M#XsK
zILN<=tql2%y8|BPp0fp$t8^>d!v*Qv@o7{kG|rx<pGrypfbHJ0L29h3XO0mHhos=i
zubrjE{-C->YLmKw5V!Sk=c6?O13c<JV)p_*;y(gDv^62v#axclzhovKMG>!hky;;S
z^Gh&oSru>Qzi|VLad_;O^hi%gQY(Wy7RbSL7zm~TAUSgw5q6D%S_=t7F|)sz^>4$A
z&h0L`C=FRdYF2@g73Os(haK>r&R#o8DmW{pQqkZZIM<tNrkyjrZ*m7b0MGF2Am{4N
ztIlbULFXwwr`}KdVCz*Gl`Zu1w%{tybuGvC%n=R?utXgKPr>3`CtPR~z3^|R9Xaf=
zHElv{U<YEN9+H`gY2F8wkW<lA5J!@+DHJuiJFF+Sd|k^ptv8&Ni+ZYn=~-#NLuY2}
zZo@5ZL^$9BgCL7ji__dx0Cfy4!cIug`?XDNASo^g#K5jSMx@B#Csiny2jdgy^Q*S`
znlJD7iUm3RRFMhP9cU0FY3jP2lXjbT%G=d*OLw=|{!Db%P$aQJHl^I$qG2TR$E1Hu
z%^aQYVmH1wpI(fouaK0BPar%z^~hGp{<RP+l=NSa6IZ4lFkD*)07P9Sg~qS<LIS9%
zD9|Hb!c{eN8d0A~Q}3r5E50^{oGxk6pYGqMaU+ENGdrx~DmfGMBZwklkzfSzIQCq5
z`h4m`@xoc7=~)TD*X3GCR-}QI^bI+>1TaU(EtK*6W0X3)@dYDk!7V>(*6e<4dOt*+
z9%~zlOHOvjfSgnUhzTLmls()HghNTWe}@Ugd^JX50AW3K<|=C|#_7aoRA-eCZ3}sE
zD^$r;7BP>+;;$!AgVZslX;VXBy;N{Y`5dduddh+qC&!NnDufP!GaJezjNcyRuQC0L
zU2b=($X(^jTyM`1lIj!!{v3j$+5<(b9)GEK!;AGw1H9w{DEMY*3VS~z7fMC00-{oN
zUe~y`s}go8jl)}&X3QJ0Y<yxw1(ZfU(V~Mhunq#}PHL=gkjVQ+*#PZc&qvO*f#mDC
z-Fg;0?FXE=K6u62Ax72vd#kgrTwg!W03Tf85)&FGPj6II0`!cD+%vvqNfaey|3U6X
zc14x6vO!)zfZW#nGdCBWo5!lAChK}O&+@|0TzhR?Gy*-JZ)YPnO@(qT0MJU9EdrnZ
z`>p$!jC<~%rAq@IzQ<v-YawZVeidHK#BV5$S~)JoVV;}TCnI1r%O-Z`A^|G)uC6OV
z5Oy$0s#d=cm_7q`NrA&tG)>_fQHvSdr7ePszHTAFix1>V%tVnguHMnH7Tvh%?g^?r
zBIx-R7}b;RqaB8Bit4ZOLTKhCh_PEBF&h3q)miTEPSjB$iU^`yGN4%rKUqj+<st?>
z+9<F(VsIXQTgKZuD8dQczi8t1@jFfjR>^7cK^<D<!W!z;kyFv*#%69)7nv?)Vmt|F
z&#mo%$bqAcleWds$P{4;Cf{@I*J>)mG<oQcvf7Q*@Ffyz6OQ@ML+*laup*qqlg@19
zGSvYC%LK11InG@~+&Ym~|MEW%mk}=ge+min)W?FY@AObxxym;R{#+b%LHxXPOwK%K
zy5OEV+@{vz>~!4y!jL`OMI&B#9c+6eG#$nOXJ0`}N5PgyvF}LVuKb&o-SfUbFCCDg
z4`J0a95i(JPQT~4lf8ctW6=xJ(5nM=jVD(2z{X0)G?wETz1SLlBY+kj5@DZH@2|3<
zF~8beKYls>wqf7Rm2{OQUv05bt}DI;(+}C`f7smxP8kkk9Tq0NTuftd4bp#1v0i`x
zlZ7zR`d4>@8$ry*l@#QGB&`~YTxcyNJ1i3?dmF8S!xW^XzZi?q@?k#|^dc<1uJnao
zVUgpH<@o21lMd-7-R%5ws8#@HB+Q_XI^EuJRzli&_2sRyXgO(#Q>X-dx-RJQ+pd>7
zty6tVi(+mo_tfUkTL)$nAa*QJ&MC`)+0X3!Uk3SmJEy3k@Q#O$X@cO$w-|iB4U2uP
zg{{Jf0wSmp5!7F;P+|-@eGk6a%6|JZ+5(5l<L5Xpj!?n+)a>BYE-%&b*|pW{YRwXP
zXb6~)zAW{$u!dAuzOS5!A%Q#?A1&{|CHTD%Aa2Z(l0zpr+3{mI;pKlWhB)m3*c20b
zj5Y`~C!LiW(i<2w1@-&$vrZ>g$+6h<DZ5qug8{YP60*SWYfn{|I9$%at7&8<gA{u@
z0ps~F^Yduou>V^BEq4b)t>kjM2Y=anXB9lMb_5Aj%*lGx@mI%!c!;vfQ#yL0+L)wL
zQwkG4Wq+IE;6jV>dc8h{O@f&L(44Ndk6bc65!7_Vw3*%Kv*Er>kdl(9O;lVZZ57Gq
z)vNwVOKsXd+e1aVI>49)5|bEDQQ6Kh*vy$Ph9C_aDQ+|-fQvX_#Y-DMO@J}&u-)(%
z{kF36v41-meVcfIz3i!ULQeATGkgbIPs@@bJ_e$xt<yhxOe<ODZT?w5Q+5ev3b{m5
zz1h}`&GNZ}VZEc2&J*z3dd=Zlqmk0&CrOG~=R5GHb+v2$c0SlUcsPJ9F8&J81}jau
z6xa&5VHaSIpjGt)>kYaCMiPqwR>4XLT>AV(mw`A(u!IY0%dbjs!UWbtj<T|#M2kgt
zN%g;zXci5(Dj?dm;d90U;4k$)ALPAQ)06wbf``?g$U{$FlUtm?Y}?P`WN)cy(Vq=%
zUbhDL;V9U#b!|F5S4<J|gONk+i*P`#hSC1)C89Fw6RV@OYqU<gEaGFB^}GxgveR~x
zVdX6zZtHow`g43YzHqb(!G%vQ_G&lsL<sL<al7<Xe@XMrhxP)|`z(ThJHug$BYwjL
z7J}mZ|E$LU7=-^7=J-#7<68!d30z!VLQGmNMUok8H3iE52QKpCCqk$2v4EkZ9Lj=;
z{+NpYr!4;8_@gRy4|gS#cDc|65J51OmG(>}fkwj8lhOiW!lW$0RTxNTz0>SwiFRW-
z*(tC3YnwIZ)9mU-RO$$2DpZA7k$*PY2B^--T%1!Wo}M+&Qs=J2X&$CmU2@qUarXz_
z$Ddo*EuB3B$D7Py!^igk5;clyjV9lHA&1*rD|8<0Ze*1941#tu#S>kD-)0}pPRbl@
zpV=MJ+rhHa!elM^$7VOgFCR(gZWKi(Lujay;SGNpgc<7`?hVm-J|C1Ar;m#;%u2|Q
zhX*Ml>gVp`MP7!#Qt80TR!@mX2N<WXw+R|Jyu~CYjvnG4_Ua!1jbRYOXa{J?;d2p2
zdoXiz5%+%*?(gDZ8tO5M3M1k@xL-Su$zIFCZpVwjEO7Rq=OdVqRZ-27jl=4toSrFa
zP>zc(+@I2p(dpB^b{Zvkyqi;|Z`>O^I^1zQ=x?%*cqTFi)+eQQs&;t#J91jWTH;&M
zTEbgGpMTlG*s<6FXzbwZaO~*pxa@f7vs*G-{8|!P{4s{#S?oBkRkvWby12uqZ~Uk4
zj`o9ZZI4*)o@K+c3z5|A#&W#h57<cXBU|ko(o+R9Gw((c|0p@x5!tpeRyn`n&Ev&c
zk;H7b8~iK8BAC?XxF28d?&^Av#^0?m-Q>2~uk6>jY-r^IEN{MQDtkWcZ{O~>kO@aq
z6NNs33ek9bH$rdHO6z2)HpL_}O8#QZW3;lN6Ci1f&zg~O`(@xD)TK09P8F9o2rjcz
z&u)WX5fQ|OBtWS2H*aEK69k&r4njw_$j`A21{MMVYnN~p)a;bJ(+|d57EF0KuqmpT
zHBxrzy_YlyZ~{G3#sVFH5>thgpLH?-e>E@~w|(2AzSv9l4p9yNA_VjK@vQ3>4JkM`
zBb_%20$z*kqVgmu5>%`xan@A+$r;uzu2V|2F<uotr$Sz(4kDcYVSg>PwcK8<*aRUX
zdxI3%*2RTkZ10o=4S|VUnYSd}ym4Z84cvbev|%U$h|`oV+M-y6rALm*n&jGCKD4nR
zt8g1}EwZH_lbzlMQK?;~ysQ9YbJvFN0C^6CL{CS}&kWb$LNM!mT2#x)8?7=va7#eW
zxlD>ti{iyB^U$$>Y>cg52<4X&=N`jW%bGMJ(+E5dEgD_3wQ6bB`atjD(7#(-Q&*C)
zKWU%`_+d7h9SmOYU6qRGClZT-JMIl#Rg$oI&VsOpAe)2DBx%-rt4t;9@QW`-^Cxu8
zUX`4MfX|R(l21`Q4%4kQ$&!*aQ78p?=_7>BqsE6{l!MM7p>&viqR)Aax-~*T<}`4Y
zL?)|U=h`oO>1mKZ7gSe#`toWEye@;~rOv<t48XR$R8&NYbfGQt3uSe;m*)N#Ti+O+
zS+}Jd+qP}nwo$QBF)GFzRBTji+qP}nuGr4a*L_a+9X-zfwbvYD|JZZS`Dg`jKDdS1
z(%x!mhv2rIry9{M;VkevWH$SQUAt4ikQj5=$vYOfw(ELjM0oqET|YmdznZ`ky=_OR
zu{bvLU7_a3J2RN%i?FX0il^8!+M4|OJ%wR@?_MP#6Za2DSp7b7P#*HIVADFRy{JKe
zkfkY>4uV6>541v882Lk<7P%_jd^4;l4$tLBOj?xFGiWH*9EWB%9Ac?Q5yDMYf1!|o
zMO7KsZeZ=)rlO_8Pu4y0Mz=?N8_Rb@1$49cdbkr|@}#2EgUEPbYGUVr(g))dXn6+;
zIMZ_2Gd&n3<#Me~<+W^AA9hbQw%a4XV0VrVkM=qaB3m@pW(7VI-wy}1<HMPn><PbL
zCKL=^IAe?EYhy~T6eS@bCGnc&iM!?*ne{e#*xLdauQHZb%v`>pVm$&1*wlmK;%LC2
zEH_wybMFP`-1=YNUO-5bo4CYDfj@%3j;l<tFxAVOXNVy2Mdw*AADLwnNz~H-Z*cOK
z<=A0!BI`VDQ8Usm!ibyDzgMG@lLOP%CdPb_fM~5bcxL%?{i!(i621<wP3b5c8&K&K
z>e<nFdGHO6jw1Ec3QpA{h_!KiYhWWQ?f15nAa{{`9CXRO705$bVRELxAe`|b77Mz^
zJbwI~dQm16_*=gWexi8=Ly18QDEM}b6U7gbAe}L>q)B@X8BbT3bW<@{{yK#57S`3e
z<Kc`ts1gsQ{QO~G0@;~dHouNtlC?sydkELJjAVVqfrTi{h9aSBE4A|Uj0)Q#6~5l5
zhpw>;x>y5~WZnxg<e-eHB#E|$c4PK&CtVved0Z462XI`=zrEuSbb7G`9KTS#itf@D
zucdhg^mK77%-;>Vd?_;_r+9g?S87^~c5IrVlPiJLrO8xt5j`9N)!Iz=n`!3{*>R@O
zLzI0Ms#d_`<mlroJ!taeVzVS<g`;YoZ;UhjJT2F-upLr^ah^42;-WXrY40oqCG;0v
zO}wHnFSi8Uiz%MDpf}G1XcaD4FR+now<~0T9un0iYSnN4DPrj;hf$it;(NCayoK)V
z&A9NCMH-Ws?5o!7s10q01(-Y6n@m@?MCZ+JhKeD^X2g^uQ(VAyc~xNF@aPvsceCow
z!wi%@ZsN|5Srk_n)^XTQZh^XQN{gBGJ-1Pr_#q~P5kH-%7-7u={=g=BQkV8c23mmx
zRv(oJR}!7xMrDZ1rEk|^f;z)+271MM8Sa)_Z$031>fz+tjBavE=Hi0*uOZmSyuo3G
zI#QebQfH&qqm`Bd&Wp8sWXGwXU~HTsU62tnpx$g|FU$i9%~Y>`#J>`1hS1LoD2DWU
z^LOvRYmmraX43WsxCe0W^+7*I&gE`H;eWXFK1Kar9b5`2pB&924jBukGntCHHOddh
zw!lsVsjN1&yez7fSJqW7(N`a?A<_NNLp~gX?ns>uh~K-!`I|<h(jYMvx@f-17<Qmk
z=VX;2d<ePyBo+?CE}qJk!$})!be=#}zEIK}h}vUW1<UyaI5!me>F~=acG{N$%S>_^
zI?A&=-W;nnL$_A!boCBb!H<@DSEiMuD&7l+7N3y*{r=)JIk@C6p}Qa`>8_F=L3yQ&
zBF&vRW5q^;)41m;0ujch8wfwohF{h@YMMx9>#zN1cA`&jPiV=4xgRLh;7hEWSZ5O}
zWzST>!?uWd0Py`2XxnZ&tOJsuGMi3MLL?SB2lOo~S)G)f%o%h7&>?nFV0GSJD>wL@
z;tKgh-fs54W<*H-=6R4aft(!KI&IEw=Gq8_?&PJ!CL2D9DAKME5;=fV0sR;nJ+W~Y
zl{1&tnYFn&ZOwUnn|e?G6Z;7nsgYf~qyp7dTGwM!08nkwt7rr;oWwGh0j~Q>Da^--
z7TnwT$U3zUu5wTfd=*wSr>+fWHUy$0*T;^GLJvP%c0{_D=MCYfzbJq4drAKwg!PmX
zMt2P&{c~9nb|@+R%c^sWfw0W87NZ5_$3h_!GK#392&%2}xT@-1q3J2@&&F0E2h~=c
z)*p74fR6bad;Bx&^V8f!E$)rY1{L+3Ia{MpD>@@1#n(az+8krf%i={t<`wE_ktZn5
zv#lEfTT$;TAoLC=;~hh+tLYMUomLQSNp%bxt!8pLrB8TC5Q6x#>R^~a%gaU{-Hqdu
z$!Tz6;S=9oN@RiIr^lPWP{-5~SA1qx*Sd8rfb)l~Gzcam>9XYWdFr~Hc%;SAv-I_M
zNc}ZbsZo8#ut`#OvxdCi?NL8o0(%!!k4ciEl;dCKB;AA>5W<CZpW<h?K-tBF_E0bn
zlZ&qSb)BvkKj$IOMxyJ1*)khZ;_~ZjZV4?VEST9ne!M8=!HP7HflNv)ET0s)E$QxF
z0t#B(K2yVt&cr_qF$B4$3Ymy-d!~07pC8~?5&%cM7=fvcN+(q_ISzfOp^T&gcr?1H
z8lPg?6phYT66g?|ZU$gSJH-(PEnRU$XXkq{6nQkcy*3TTW_@+U{dMKD3D&JEk&7ED
z-u<A+-E8rk%FYXfqyoWp#_S^t9*O$nfElbq?Svsa)--Fm1E#Vpo7uEQcV=w)B>F$0
z1i;2d15k4-?OO9jHkwc3IU|qn#j--xv;{)_B{vx*>}3}UODgt6J|`X~5g44jo)bvQ
zpPi78O#xz%o|RzJ;3kuT&HLBPK~|(7J#|ZKOhO7n6r;E^sn&LUky+iJZj#D@fKu2^
zld^i3CB24*l#NPBoDU9bojc;l7#wU^kF_}zDiWFuW4S3IMK?RIy)~b9n1KQ-ruzLs
zfd8i8R8qHi5LQK1jNna(`P)k|1FT4E?x_d{A!gQbCrgN$a>>*}T>MtWk=n);)HxCJ
z#z(CM3PZMl)4*xYkD_yCEtr#hfXmqV%9{`zw~c@2=B3S$iE(8|R}GtHeA=AOCwZF3
z%Vr#oN~9|kyLjH7iesv2HyNRq)M1$KL}@8KqbmI{!UH0Z<J4WGMg+eYCc{-FF&&kt
zrt-Ot<oo+JLcT|Tz|3ZDX&*>Y2bv6Y2Iu>yg#EVRTyLSS+R%p2v|gzVU_O=-jq;%8
z4;2dkpnSPDh$zXeUsEZ*c9>95c?DIq&DGKFg5peqkL9ajOpEjp39QcD<lA{_lNv1?
zifxod6$id%@#1fj{<@Vd!c7eD{!!oufPG8eA&n0*hb}j0d^Rovr`tLGCKp}4xIkrR
z)6yYx!h^lyLHJ3Sp;65WfJZB0mVoaY!>@*4G7-RYGPkgkJ$@#~rTQZkfq!!~7%_Iy
z%4qZ9(NV(B7Ha3OI)GaWI=*zZ)lEriL$vyYwwIS5NHsMq=&s?XQuCc}DC|MDu#e1d
z*|Z9obOTxhn?gsPI>ayFVT3hdoC@!~uo%i!rAax6yY5Q#@kbC55E7x}uP{2}M4!rL
z;U&$1WCr7QJYeWYm|D`oG+V5-{LC1Ghl8B6H9IO|pk7&0Q&XaJ9>)Q(26}NYSNl^$
z6BoiXV$$Mq=O-T?5N6R=KG2UMhIwi#^;!Ms5-All^<yFI8)MBS<&8hBkJ)V`TG{o)
zH*Zxx`21OSUtDV~0aBl;GU5iAXgsQI5eOgoM#WYU?&`M#S?^V(O?G2j`zN(eSk`!u
za_mQb`#_f(Tw7KVDK_ZT`du**3APr$N~akhjYEuUo=pFGO=41MzQv@!rmL;rpZafs
z3awbDZlHK{6~&K*(no~o4FtdrR%iUhzW3@kB;_-=$tLY~2FUlwyM8V_0R9miwU3LW
zT?A5X%`J!nlz^>;;CZxjlTZ6o*>eRS#Jpr}tFvu*&b=Q1_c`9JRLJEuEo-a$?BH^Z
ziK7wtqrmnR_Fi+?6@O2l*a+}FPiL5GfM6kp3Wwv%nVEX9?!UKLI3q*g&^j6h?Iq6k
zy#$N(j;5{vPi-qtvmXyfl)IqV=m^*FSaDMZb~181$Tde)<!V8kF6&tG;}2FPp<CWu
zf2AxEs)uEl@EtN=)1lQf{M4xtdHA9#R&@ylp0E|_--qK2WvEoRnBP&p-gcMmYq$|r
zr+@?deS6;8O1sQg)?gqq`1;PNOX=tfYl&MwD`(vSs_%%@>nP#qEE0MvZ7V!6^TB&F
zo64LF_o-`9O%5wnq;d`F>e_Om(5cWrcRR|GK4LXLJliqKgyJdZEQc@mg7dZ{HT$R^
z=tJ%LhHN#l*}xsy(3D=T1CS#s+g`tBXDczfYlCky91vR-b38&rt+t*aIIDl=mor6*
zlQ4z>l*bNHt2169BWDy}chT3rOnTH+sBIcM>v;KG1j`3W{&oe&_a}uG7v5#V&J>@h
z=N58bzlbx5lCr5`T8>BLn&KIKMz?*ULT8=JYpsj3)ID!-KyIyPOlH)$^R;8cyMiu0
zOtw<ckvwdU$-fnrv$kNBkqFRw5Lya>nO#x<>brs0g=I@CS*ly8+@^1C`;R>tv?B{>
z^C@k?LaT%0YN+8L3iXSZRJobUWv=N`HD+gn7I6cKZ`Y+!iC}#m0Pd-36%0y;%5`G4
zt=`onfwNT3zYfRFuQZ{x(|BwOj>(n)UfHw!zl(@Je@oja9FdGQtB#>$z8kQGy`q8w
zq=5SODQf8)w;$o+9q0AHqXywykBonSwJ%AFuk9W@b_&WNXe~km?43#~Usexh*t>U&
z@pu9blEI}OrVC^$Czg`p6rHa|UC(HUXgzzC-qG36H^Xb4zbw`n`PwPT0RRH6E-}lS
zz}`!~$00-agR7sTI!``3BU+u5tni_L^Nb|g2PFe94!MG@yxh6q**B)RCSQ_gSN#(g
zqxs#Tta@|azfj$OnNKUq;z4l2M{P#16w^|Gop?=haZ>Hj5Bzn@Rn#5*Yd1<FW7BR<
z)3=TDJ69<2oiviu<V0!61Hkev_sEf#D5s6eC2Vr&WVyzFczce3F+g=pO7La?u;y82
zLhPk;>xkw<Ka_cUo7VO#>UxCWqlq>8%J`6?O3iAQb4ZD;)vi){mCR?_h}PgSLRJZu
zq<2T)>~ui2AK|}XyMZoDf{w%A=A6bNU}1d3GZ~skFNvZclFa-KwTjMODx$c#(J0ag
z2(hMm%#Yu$a;Ogmc&_0IyO47Lm7;x3@k8(L@$v8PL-9>bLqi-aEMm?>!S>D1&o(Ct
z!j_vS5h8MOs5QS;e<qhNHUv|&3VvwvZT&__v24{l{e@ep538@mWM(R%Em|@@9D;-r
zDS$o)qlZzBow46M=c%NbV8ZB3u%Sagk|%6F&(lckO*~e~VVFsp;o3eADCHQZTSy_S
zO#rl#pulFDr(<(27qW~`nlO?osx_itAwjjOP-~{K6R@M-I-g^GYLqtOC`D^pviU9I
zbIgrO3LH7%idZn*&0eL0LB^p=j-(@JyX=X*$0kJRbO_U`C#x2Y-*JIV&pOqw9W}im
za*g&#MjNTl>~OTmUq%Z8x}uLBx-DE<-*=bgxR&Q}l;#hj!AlW~1bV<yo9BHEoG2bv
zWNa8%H636dY0r0{bYdNSL6f)rI5I@Kc?Uy|V$0S2k{o1zw^>QVtm<i3JEnXL0SQQ^
zx7LGCHnD0zSXke~d1BFv#B`=})J3MZ$E{CYtVlWXZ6_r-U~7W{EayhR)A4a*{FzSa
z!vn}SHbOA6bUv4jZ}&|^)So}7WJj=;EU$foUARLp-Jiy-g>)@fo6^%Kpj)LbcO7gM
z*{)kI;7_0hU#G5aNLiDZjw*8gcqxpW+~er#rQDl?TC>HQJJYu9BYD=D&xif~+tNYx
z3-fcLE76OqJg$uiFyjV2g=Bxu{l>)!E4ZV7IfaKZXbyvKUS11pb-mikj-pOo;-FwG
zWJRo0p!j2F1e_d+e4VKIgo({_t!GpCMZC#-BxvC_=tW0-Gz@po&z<gO<1MNP#|zQy
z3O+A2sRtP?#_k2^s@NyTNj@xczj9MtJn2<3`Lz|Jcpkr3f}GbLL7~$dmiwWo*n7T+
zO{++L|K=0-WzFd9KP`CwS=Rou;QdZoVEJDy3Cn+LNi@_++(r)0qMlJ(WWzw;Q_
zS(6Pi!LcCWVO^Xa5Eq-5Wx>Hg7$~I=@cz@~tpC28mHU70X6N|tyTw(NWYtxYPxZiu
zQ2vi$IWzme9n0C-{*OQ<Q^Ugn^=Va~7)}=CAcba-+f_b6Wo|CG;iqT<NG?)w<^Iab
z(2Cy;^}cG7i)@q2cD0>WvaMEpWq(Lylwu7x$cjIb4D?Sbu#rUR^#+5Nx%(Jz!JA6n
zQ<%BLhE#>3`g*|m)VclklSlTG2Y>*g=@;~nA(KX@Zc282`3~>8voqk+`*m<_!6b5F
zUsgqtX)^KRrtot8EV6f4v%f#|3CZ&ixZy@Pa@5fD_<VJ%@6YWS;sSKtl0AUu?<(Qf
z^Gk*8q>a9h3ppiivx?HNT@~64qP$iR{o;d-|Gk&idRkf?%$&h>J<N(X2S9P4s`YO9
zf__pr*Kcxs%(m3%jteWewn>^>@K57{!)j#*=)0$pNkW0g6D-yvybWSf2!Ghc;B9Sk
zZRQUS4L@{a!T#_X1H-|U@*fNu;hn*@eFQxOx#|5$CV`QlvRV30!KH@!S}@qWEJMlY
zjBl2$pavn+6+0VG^KTTF)c~E<CadYPXhrPS_FGNB*hYI3h=lU2rIk*of7y(T#%9&f
zl6T-39VF8Jm_i_FQiEs)R<LwG(M~i&=<^{4XlX58jR>B17J+1OKff2XBbMa;_-iR9
z9F3lifGG`+kY!EjJ81GblMqDiG~VwVZW|boOSje!Js8XNpH5G>qX5E!Pjk3*U6heT
zKZVN69_qn842&}IW%E*N>~cZ9I-f7`GLpD=2bMSz)W}htz$+%z>SB%BbKsf)RK&&?
zQ<*URJhDh0`Fwr4wFZe{`#b^;nn|V44f7rY|GVA<pJRyX*e;_GM9=HivRb{rkE$`_
z2f#JpbO_Z^p<ROf0svt57@bkfk|0m+)@1F<vLL6}-maUW+$CxsJPN}GT5c*v6%CCf
zr}Q%1aADXtp+vsZ-`q7j{dmRU%R~&cspXyb%$_?mo|d6G<${gKs+-h&LER=k$zdAV
zCfEl&1XzwnN{jgCk8V6rlEq#t$gcOEF<kjmp{#o+cM95@pn!z1uvOG#V1t@OsaqN<
za~<+h8|D(>V9e=nF3~s~N!z;<lWU5L3@EXCZC)9ULmV;ErSo%Oi1hZ%0i^>@cVl6(
zyQ-123u|s?3Snsg3=-QYc;8wy$jrVQaLu5e*fMUX<S=kd>u=q#HjQ!eMqTwk`l0i1
z)Y~})*mbc&qJaEJwKEe6nwBw@<#aY3pyW~Eh08#q)Yn&*d(;7ualy9xh<fWzGHvvi
zXHEyyugN3>l^CRm6_zl(-}nMhTAsaVWc?K7&}xPtow@iis@h9hroRxiY*b^zIOyK2
zx2IPaZM=g$6AR8t(km$H3+F))yf8hG2U(Ri>ja~YE&;mVPOA$v@k4GG;BqeD`0af{
zf-ipP5#U~cw{nN+LsrnRdJ6=6NW#m6Kw(?9pZ8*_sU?|+FqX}1hzl`LdLTUp8xOkm
zYbL*5Dmbb$&w1R}*5G}R=D{P2(HKHSXf<gzYh0Wek|~jo51q$^qiEj^pMF%@K_UyX
zEpUPeoB&vcJwzvSAB}pxu0XWe_f)li!6fMaBqA?-dFLkr$_hNDyR#IMaoa%PVU0SA
zC-lzg7>9KyoZL1nLMcfON=e`HOw(30Qzm;DX!iX;G0vf!Rkeio49^*&hAnUS_1rnS
z^@X2JS-h<qiVyLA5VvOQJ@|T?EbZ#6Z$e%0o!7>N*5%ApmS)o9Vt%IC%vnRHk)B;t
z(mzv*WIvbU{(ES{2m*Nv8E6~Nl3hDts(=E9DvU~ta2+;vVYx)Iq;WxYTOix#?qFl)
z8EiGZIVZfAN{qBOcccYCaQ>`!iQS?tQmYwn0PSARfpXR8y7qq1M3B@ZPK6<}kaji%
z(*v+Z9AM}a@JqUvkCm*#zmfs^biL9j>@8r&ooDrah{00l3t!saMBQ>ZGP7d$@sk!s
z)!qWmn^q6S^A`;!+sV||vCjcT6JdD9tHP3p-~Q{LutlBiUUCGtW6ACr*_9<htIw5`
zsiV8vM{af(^l4rK>}!pysk@y7+2%FcJp=GMXT7DBcdC!>ptGRY<z5n3{N?@oPUg>b
z`XsOPRu;dPEYLP_=U%Oj9)?$&gYnNU8h<O)6D`kZ&Y2N5ROr~>fBc>*D806$z>f@(
z1l1EKiZoONJ%iWUE;pPl!PnlmB!P?9%4bvMaNuiSu&u!5;rOaO_dJ0_x>O5zd(!}7
z+hTHr@beQXu^+ZptZD^cuH9b`fWAb6O4i0Wvs#^uot{jHW^Hw?Z7K@2++b2}zir;W
zm(|%VsGl5jWtOonXsMH}=6sdYJRw5~c=i2IQGXMSP9j>?dd^OW%|?di#(T)@%c<9g
zD_?Gv?UYaDdFqMv_WLJOXd<J1v2p;AsW%oBDmfo?5%pJ38j$ps!@+Nzm+qE0d`Rpe
z2T@kyuu_gjie3f=b#7;3$}Of(zREwjiTU5sLJ%8!P#YSdtaw~~l}o1{r+mXy*i{U4
zoMUQSgLp*k`p)jBxbjacpY3+BY)PgN?Z{Lr!1fQ=&8>+3^wzog2W~}#F3bZcVx`C+
zL@=reH{=7KkRDvll+Q+sw|p;#;!?YE15MY<vud00%nFmns~D>*fd~@)Hz*n<eX4w+
zc0N$LTY^Xpzd_k-iD~^74niU>OTzIP1d7y_Dkpnd+-sE2`><3lZJc!C;;k(BsDd~z
zX)}-n<y48w+6Ltb@6fCcjx>N_2LQpg5VC{6F@CYk8g*8I4yyDcOLS`gxLHy^pQA}>
zJl(4Q-7g?CEHF4Cyk?gkJTX9SwCZ3H>S=~X6COM>z;uovOavrG#)kw!QYq_6<AVPF
z49e5}z2Bu*8#A}*_MFGMQWhr|>K=SQPN?HJrxCKxp%1IH*wN&d?-gKAkKO1a&hc|@
zhF9*_p({kW4)V`kCv9$)ZYlvJ#R2Ft<5}UiG=1Up`7Y?kQUGi5ElnD)ai`$i@!3UW
zY*q{BWt7Wf%xCXqy@!p!^-ld_Ncd8+PwyWSP78@)psULT2k<smeLI|@&!ptbv!m>7
zv!ZXJvhnGlRnsWl&oaQ)A6R#eiwAo$26A8dHqj}DlOe^#m_%>u@AbjDpyEY0Gb{6F
z>aw*M4RC7&i65x$+TZaZ9LVSWv_J<035odrxC~ed!bl;y?-+_mNQ|D~H(mkEPM`P=
z-n?bZzm73&#s##OslUWteVd1{AEst#QxPZ{wH5Ly@IlA!EY$%Ls`vT@F4!JbS*?R&
z-S1;_a+P{~#fs}8)b*Q`5d$B&p$Ro>#j^-rJMpgiK<&bao(bU;83c*X(LqD4I)Rpf
zhnG<IDEzr4JC`e<T$-p+PkxKor1TtKi0->?3u8iswnSV>=chaZZZ?l>7nZ*HI_kOV
z%c5_YhmnX9Me%_5?`(oi^*5Q&v9sVJ8m%<khgAgiy~l9w;6oNv{P#NjhU}-k&f;W9
z%teVmTF_+^881bxpTbYOSjYsh9XE)I%%=qqBKkC=xtW3GQIGR^rguda_U`HBGIHO_
zjk#Np=9#Y<5R;GJg=O|D>L3!95Xy#g_PB+jMq*3kmb-v!Ygt9uXo6I{lyH=f!Qz5n
zeWK&jc_Ap-y?IQrdFLIQL4KMMdm+Xj04X90>^3K^w1R{~q~E-s;<*aP_iD)+oHaqe
zf7RK<enx7iiSo~66eVpNKk<&7EIQ9i0xJ#`dJTrFxbW+--6ga_UZFfbMw|krjCExd
z+3;8X{9*<GDFm{!v3cLGysP&pu8%!`*#iBxODV&Tec|@^xu!!q<kYb8ZO?B9;}ABI
zc7EtgMfxhsy*4O#q_y~wrM#sqC0cj?=3=sUeIY4{{Y9wIISMn>ck_9o>{Yb9S1$zR
zcB+d5JPhQWhd^@<@Ar3Ihzc>~!gL^GK^T_mk4hjQiKpd9XAzazq!ir`?@u5xI&(n!
zZ$(;QVvgp3lxV#dSDwAo_0yeG$gc*`^13*T%*MejF>(yqCA8uLLr#yLc<yV8mU+sR
zC<1Pa5MVAbP_?ymV9ioE7M?BF>40bpQbsyoV|1Mc;gNG-&Eolpsp1Z61$v$el8`Ri
zkGWOA>22Xt-u1DTUlQv{df32S#q1GOv;VNI025UtW&Vw@@i*Dd%Q`gNldsE6Ey&{K
z+GqKS@>1v3+ww5n=xyu|)}vb&1`pML8cqHgEdH5$Secnv|7SK~`#0T%kB?E!!y#GW
z1`G#6LRmpVO)}Zr8oUve?O#46|N8_}a<4u(>-S*9{@;U<Gwi)HtmATXsttHLF!mvH
zecyko&Ymo92hIl}EGwm|tdLCA43?EV+YC0AoaXRfvi$F8JR%hVf&XRDXhEx~4L5bl
zTW{mC!@Syonb_qsD~Hw3av>>api815VS|}w9ZOr9x4p5+vre<A&ildd`B6o4S<Bsv
zqZV5(SQyJKq?DA(hQGhJMTvfTjlNw~KWO?_>8ow(G)@b=ovYI4y{0OW#97V+0RD`h
zFIRpV?v_2&|DH~IUnlV`fc}bJ!7K;xFC{E>+ZG(!i_Y4cQ`teKS;~Zo=aJKL(8Iw;
z#9Ti;MAYFmJ9Hc_tkw(G=^~xu?_M1u8@G;;j!pBfkcN9h)ioeK+&)EzXPdSXQH?lt
z){x9Ob-ER}iA6qX>}JA>2KMLW13F0QG=uCOqM>q2&~)0tZ;163%56|Zn(eeZnI_gf
zCi5J!8zV@)lf_;uV{V&cwrcn&9K>y6L;A;B3>Am5^DPk4n5>QW&ZV6x6jOO7&0a$S
z<z1C}dBs7gtw_G(5{j0TB1%>l$j<bvSR0eH<tB3}R82};7Er7h*n>P{0NRT5g+(e?
zs*ejSR&?KS3kveZ94fRWh}4i)5N6`sDy|EViKva?b%g?X6iVqOiwh!F7!Mfevhc+L
zrJU5TR!rzJQ8~d%_NqmR*zAco5-+NN{2z5;L0}f)6zk90Xmo8Bby9K>f8RRi8Jo73
zKlEM!jL`8Lxy^GH*s>JSfY!I6BF<=p6t*05!)|{AIBl+zVNOtp7+gG-=YiNAVoJH<
zbn_IFdX#z#(Z3;E1V`-WbK7&PhjhNQR?iK)%M+OC+clx}Cs@pY-}9k0$nWd+-51ZU
zy(77#n-cn-!$+B_8@zMC-4T41RuEryD)FNJ{$G<so=yf6U(qtF0HUz-O<Q*;edr0Y
zuyT@a^|9r7Tct<8b-UP>QQKbdB!3X|vQ$6qS1X0^n1<%?N9BTv{XEd;&iLN$i0v*X
zWVn&h9>%%w=T`pll?oLPBaneWK7Lwg$;T~bMfiwS7Tgpd&-Pa;wO&`t;6SG#q4x5=
z#u>1e*nH|!5%Z%GfUpx@%=`!uE*eH}G}0LOO!FeQ16*{18Rcj^*cyTgtl2vDMsISB
zB~;feA?WJw(Zqxz_lT^o4Wa;EV_*2TL5>VdMwXHho%aKnYoeH6en?JGZPLm~P|C5T
z6C?3jdvwkdIk%BcBmTM(uNdm|7CD;-Iz%|ehOA&Pu+c)PfV??e`Tp*-_9z(r4y=^W
z0hHLI;{|k4)chFgnCK`O1gGu4^FCKSjN+|$tCMGD7hq<pohM`HXx`!zlsWt7%UhfI
z!>#m@-=RN*WY3+6pTPG)0dN-7RXLlcHSu^Z)orLa&;<B3nnD(ZaF5cnPOqy`ffiGV
z_O<&C@7?L#fM>VaMXhF4otY{7G957o#20>~yN_pO8%u3hw2_pWvmc#RMP)DNb4Ou6
zc#tD*g!s-+x!BO6tVBU&Wa5Rh;tJ*dIAb&CE}8giv0nh;gbaDl`m|nC4Kzy|NN5uw
z+V_7&kpo;VUJuI35a_^SIZ>22MQ|!GnEtAvg$Sb*0LJE7=W3{%IEM3QBs}a~2`uSk
z%F10)6D{IuDgqZ{;r@<<%e=BB7ORJlVpebt%Q`lV%UGj;L;$tP`+!*OASL!;?^dKc
z&*|hqEhwp}_*0NDI-5o%z^ForA7aGfC7%?MRd<_^O%l(DHpj7*6PGeI#Su$#eU*HG
zf9bsB12_k%x-Ib1tJKRx{d<>y8{-9ni|2Q1UVK3A1za#sMot2J`o_0IKzXREi`8ig
zP6s_kTdB<qm0{9Q<e_O!kkiW(KfI>9CJ;tl>LOT84|-hcxYDwUsqB(()qi;@+^APA
z`3WZd_7}-Qj%j}IHCFg>XX*|kUBK$OAk*ZA3-I|+^3E9!{zzy@ClcPs2Y7!icKltb
zkP8=cITi?lo#?FPyoN&H-I@N8DBOH>aCIE3cI&>~(I~q-(T_rnvFlaA+#iS0I*+L6
zZNqP|y7#1y1gY&V!3g4;n36rEQ}+_Y&8^g<HbNBFzb$R*Zuf;Dy*0nav4Dt07Pr&c
z3829K2?JiBMTRCy9+D+fHZ$}o9IrMp(7HzqHsvp(kC3id*mRwL4?_I3iF)UBFild=
z9NKrZ;tf|+gU#_~#`lVAoGmC~j+e9xe=c!7Bi<~29!E$<ya8RT^LVz#)1c=7_9(IN
z!tPnZ5rEl3!|~hmw@2$>JLr6}W2vWp89;I?v#(s6F=AF8xC4{>NcQdG*DO!GUaC<o
zy7^5k;kKx#BK|@%c7ZEfn$p6y5TpFGAk`rt&(>4WB+S#yJ_7#1De4!n=5<+&4dVJA
zm)Myd)7`ALrq@TG*M0{e1ThX?7Qh7T{RO`x;_$ZNxOF<OJ?tJTom&7GRDhua2H@5>
zq>j(uTVYCSQm#M3@ejAFSf<ts8RISe*<(PC0IQV#N<T#C@2H^;E|@hrTc+@S#EF|=
z%?%XO8#3?Pa2-O?FyZiw6T!=1C2x;%EVCy$Bh|6QvL8;bt-zkr=xBZ#xe4WoNW=F@
zUpi&S^Y43G!$Ea;9>_n`M3ny|ZUZF$?)0GM%e4t{VKeMd;9Wr5AS6Go#p0*DUoH`t
zoM6i~JX2?H(_A{9r}k?IDLVzLq-G3p(_e2kzVAR9`s>xQX9<70h&tcE9Yj~eLDvZd
zM&vLti)Z~QODx)#Uir04WoW+lAgKgfCO)nJ_yS@czxK{l`%^VW1zLo1TMj7nf$Kql
zxcAQ@TqQZN8|P;(>tS6Hz|NF+<HlFmR%qdcOXVZ+X7&1#d_P)pDUDW`t7ju%9Jx78
zlSBMj{gfSE0dFw9bRn?di;z-&Y!R=PhdGtDf2{3Gr9@K>hOWk1eZMRlVvhZi1rVN4
z6nC_-C0N*W_KlV_QY~i|g9m7dMUmI>p3gA4wBF_&povQqiJV!pixME(?P#NR2)YY~
z*|6r%)dr2+y87_ua1vq0sE9+$X;u^(LVnRA?^^R8*$6`)1O%7L1i4pnCLa8x8=VJX
zyWI0NRY2g?oa3#0@@RvrBN`{ELMr1HNF}qPmtOcq7nK#djI2V3Q3iO%%cdtY-`Dw_
zVkU_Gbddi>=QKD!OP5ELey#Q$w6H^eLdpkTDT#0*$_C%+_{`nai^3$~6XB%H<M}l-
z9V(J9NTQVyGb~3)zYvL7zz9Fg@4JS2^C_swrV6bcyd|n(iM|%PEtznmLQU|2yG*J1
z{)lNMAzRh^(laHWy#nwf=L$rPY}VO1Zgu+0mJbGnv4ai_^}a5>8+D*rn~Rc-2pVl?
z*GL-4+D{?!nEt_s0pHpHaC7cNV|;ZJU&KJKkNpk_>GRRxwYh^duiE5y5*x)d(EB>;
z$$$@VWtf9S7dI7x={z|){059jy?ogsAh55I77U!8cDkm*`v5j(44BzTe}G2i++8xN
zYRj~nm-9!BJ{zKv@Gd!dcPP5voiN)MhI0rM;syj1U6EziX~Ny0?ms(XcS4&u^I1U>
zPsUW4f#3NeG^A#b*sfpeCG#(LndkIx%5gLv1RM6)u(=)HT=3)bSulRS`T5WYbNGqd
zUHZw_O#W@oWCG+I;SW%gWMeo^v*c^R4QnvpU9<G1-T2rctMe5QCW8a0Y=zf|Mnj}~
z_qk{jNlsx`ETPjt*{#d2p^C&&0*v3DwtO19Z#8=XBF~g%9G&up1w7)K45ZA`dc5&m
z*JiMJz9XX(3i2UT6eR-EItHq<3m7GC2D_Iwg#Fan(tzs|L1q;|5HYpHN<K6_FQ5{-
zkS%NnO{ROxQzjBa*EDbeIjRQq><;D*mY2lUY!USC`F7Bn7qv<9tiX&sI4!Wu#zO;x
zjOC_qRNd@PkjtOZ%1h|<dVby3(6Y)u3_X$cdbhO^Q`Hn2IQVe{QuphsxN7M;DF?0S
zx~V~e>i|+`(_lFSgDZq{sFH)FCa!*W!&`t6WiMjm1&&^;hPGBQ<4>?7-e;mUN?LDR
z4<$=O2|gx0cY*cL;Qo!MJKf=^#?@^-RmZa;ha80YMl!ifh=ye>iYJV{Q?H8EE!nT|
zx;XG`WS4H6g(o3TlEg-7<t4ZK{P-MfpV@S3SODI%ya+dAo&~Wmp>U%fIe|i+q==ee
zU*f__Ej-DI1oo!!z+HW0T^4!BfSAI!jb%b$JXY<*#=u^zF=rq0I8pj!`kLs1)9K|-
z+xfJq-cQX0L+X0=4VT+D;^k-x=hZ?P<EK<Hsh9*~RUTv&**mqeGa7|_YKBG2M-Nx(
zUw{B}H~r6hp^@#I9_^o=(LTx?V2AAsJ$6N{P5WL8imbeBA*zMP<9Gh0?t1W%2)fsx
zU#5M<?Q4)j&NBBxbChoqxA#e(fL4c_baYIUdu)hbLNRS{qS94a9<L^M*G8k>P_NOQ
zMIXCh8%6~CMh3e#cwL{Er=D{oTY?3&AOO!Fm^d^qAaDXNr}F*-VszlVD|5T`%g62-
zs7%cboauKtY|PLqEQxb;yxk{C#>1>n!}&(olq!tI2^tXd=mXC=e9$LqgAZpSi>@;u
zckt9`?sOQ_59s&WYV1BR%r^EoGjx?F>9m%n5m=QN_ck5CF_NyrD2Hg%&<O`}CjibL
z-xi!*VcTD;m-7Zr!+{*%hWp+f$-S8{b3kE3(ah}TtT?|1$npnA;;zin^Kd{#`tm_O
z(u{xEvdi-z=<F^I<oT$iNY^#rx;zquI2k`Filzho4Y!$OpjMpq5hiCJE7Jlyp2>GM
zP8>+M)xUJYnqtb%<a5KMFX?CPWC!Rfgwy2TgQJI%qfn()#TJ`7_&%mbSJG_@o%Qsb
zs&3b>{#C}O+}yR6l2jYWTybjct)?pMCCo@AM`%I~Ly?Il`AJbsHZAQbtt?3@4y(p3
z{-SHAZ<pJ(pYee?S_~~d+2#8_zWMO9Ri51ClrO5Ug1C8TYoMj9;~AX4`3}Hd^+I$!
z!HA-SLhAsz{i$Lj&iGsUq#u%(0o{sg5f2*YYb+_xg3%jY_#t_d<kvx0%W$a$#v3kW
z7<<w?%e|u>Xd2Yw3<!AmnT<M)7*pq;212sVaSuqTwZ+hYPSe=0HRy`1`*xAfyFY9T
z!qW0~Mhd7}vII()%E5w{<4=GC2zi53Utfbrm6zdj1(#Wusx6{aS-LZ07Br@0u5QoQ
zHl9Tt!<uHk#k2^x*bO4MPu}kjT3`oFd{YwUMdG9S$pVfqS1p6}jHb=U&C=XsGJG55
zDV`pY6jQuyc%P+|pPIOaE6z_Owj+0-vT3>?zL8qX6=6?!(9WPA(=C8y{8#K5)1)_2
z+V>ScfDQq3kXfuj4z-67%x~6TIMORoI4kRz0{nBiKb7LL*j2K`w*JCN(>&qbCR&-<
zv6za;*@$>j5Cmd73q*dZ2CWoc2Ft|rNE$AecL1aePBa3is!68u_=-rHNSf%HDDaw?
zp&gx4m1!R1$azOeNWZNBhy<3KWmmRK3MiSsW5|BTP}rreY-1NlruBUdT+;e0jtFNS
z<Q8B%K;mALLE07)mY9jrW}J-Ta&p@^E;flddaAQ}FwJ8W!AIRFuGQ__u0cL!XGl=!
z5*oZ-Ut)*Y)fSk#WT9Lm5V_m?3qk!Ajk!PDE!d75WkttEb%+MMU=@thki)xH1=+QK
z69|pVH-J@$(+tr!LR=Lz8v9M*j=lqYSvcEMCTupK)rVSI;#vk!EzCQtxWU9%2XigK
ze9g0(<uf&eiALy`5(OkHkER{VgBzy*7%Bs|ink6<(9XIe)4pY)pBv-=HbQ-$2xkDZ
zmS@Uh`MX`wDOZ4Ws)I2z6?lu>{_}k3kfI4~q!zvw3jN~hC5|Qg^2jBJ3;0c;v%#Bv
z9ShmO6PH`F+d<;_PShn~Al7~9=fUx}$MdQ~wk@731;cQ=V_#Z+j0XS5jU=pn(6<Qg
z^!|#)a|cGrrzX(stWLio%a*Po+M=QmQU`#LcF&OFbSWUT1Lp+E1Qtv3RmvoLL5mPS
zsVdQ;P^#A19`EspeN{YMH^69K*^&rrifq=AXaWI((&+VPNf3;E!KL^SxFh(jaS4cv
zuzu={>(o}q;e%cl{1<UV#!P^sBEI?}^!b)d*1i-8amZnxbHi8}TWHWP4<}uaPn;`G
z$?UF<&{zOewXW!pf$rT$tG}4@&jAu>r-8M+gATS>t>3S46a`m9mq^r+!*4B@u%AeE
zZ!QesQt93h<n^!L>IL(_+)8;j1){<lJ<hqJiVIYKEAcA0cw%l@3fVdxL%R<l4T=p^
zZ6RNMk3gnvSvy2(i85?y4`8)1(sCXCH9j5w03Sf0PvAR=h!3AF+JWN5nYT(_P<hHl
zpKrXg$}M!LI=PvZyr{EDeN`#55a9||P87-UwBLPXfz&RH^vH@8%M}wFY`KPT8AXS<
z5I>LmXL)-k(yru&s%*xfrY~iUWnH<R6bUBaXQwOp5C6aM2TVs_o~v#jJFRzv3b>z`
z={JDv>G$Gx<h?2#aJLV|)dySH&V8FsK=KoKjr%GwBK{o~Vw39@N;Z*twJ9_f_o2G{
zg&zAG*e>iGgl6!c7k_%OUJ?UL1J2|FAQA2A;A_3QGt3VM!S(IFSCl<X&QBhlrP&q3
zg>0c#K``tPhkju<&Y%!8e-c`)@Zu*=V{3qb|A-<&3B7i-(0s&i2N3(~lkx0)rCcfn
zI=L!s*@+?+Ui3tF?<*4LI)>R6hT*)!635NRuhvU4ZsAhS+tZIh-GoHhffBe|7-!j8
zlCB;+`m@Pt`O!b>ScfG_qy@=2RLqmp1o`Bi16vHU;ce0pk}$dCfN=WBt;{uIv=0F7
z7Zu}_k_9zd>>rBFwn_D-IHZ+Uz7jI^e4=%ecw%z>@TYk(eOj1>R&boE0`KG9buvyI
zJ=lF3A7@=7+Gi@x;I?6KFL3T2m>;c_XC2z9l0>HWjq3Cl#D%pt{-rua`so3drjPH$
zEaDTAg8RVV0Q*O$0TiMAY|s!&{sTZNCh2T&Bmgkd=Wd|shB#L<BHUYmZf-SZXCMix
zAWrZLIy4#zp$gjGnvQO2d_Q(s=j(JKIrbXkwfgdEDQt&$%!fz<?=>w*=Ox)K<EOwc
z_i66DiMK-+U%PM{fRs_dUzD@*v~ag9S6(i3*&8aG=s*X4oVN2_f6_v)Cr3cLTcc}_
z9t1q08({>douf<i9#TZNDLzq-Pr86r_8v&7ZA^Q2i)RV<Ms-^G4KdEHSg==xeM|ZF
z-}de<1n+Cn%$dM^2NglzgX9`&nLb)_Y#}&2U)V6Rm~Lyq^^FYV<sRy$A}@$D6zlQt
zxIH`<J|<^A-*K%LGWM5ZyLW&=1bkcM(LDYO3nF#Zr`w%7@}}lOjVQdfP~RPY*kqbh
z64jecy0{Z}u0;{@)tt`qOpZydBnPBeNC=esa?+oY#p>_RtWb@BzXAbD{`v{$qx*i4
zs6*7tR+-ma33d~zkIV<INXuA??%-<W$}iCr`W4m{u&|3*D0mO=zb^ppujm08hFp=-
zwAsm>QN)$lu@MSOlPSH8kC#S8JdA2*XMNnh)e2+hZ<%)sOCiaH6j6oI(c~(hSK4H1
zx&eWpi(~uF34f*4%-G#PenXftruJyour2LL7d=UogX0F(5pG=Y;uA;k9Aop=?R8NW
zp>)$1&`)2aJJMNTjBx<-el5e0@+QiV%TXD;(g2&Jy2MaOfjcArr3YbW;FbufG7!z+
z{U2uco{~{_E^|T!u@AxR_A3Ye5J@^SJ>mk2HvTev1SA&$aQrAQ99NrV*SO23pRGLQ
zLs}2a11w8A6mnjxVMynr)mW{BCOZ9Aq96JFA|JT<50#Bkugd_{*r)QJ?>&Ib5XPss
zgvKFSaF@yIN9}+fH0G=M`mjYPO($--pH|9F#!YfbgGTQL&h@Wd3o;Bc^pzv@)UzFt
zRb3W-H&r#!&s}7{!h#G`rXaodK4Z8Wae)xQm&2rUyPCos3*s3yy8(umpWp@q_~gf3
zs=g<VZ{!dBT+@IZD(|d^5OQ?pX%&SYP?9Ok-K)W2E8jMa1)xd?W?|k!Q_u;@i#_cW
zn)(>*PBLmB{S#d2^owAHN+{{-h*=AMbDMk-^dS#VZZQR<t}1IXZ-Ld3dyH8Dr&X{i
zMxi=MAIQfzN6bg0thZUz1M&+-u~7Fa!fbvLhDYr1SA9U_+6+chUPr%@vg_kOsmV2c
zAVhR$_~bRwU+Vb`H?zdWhQuqrI%ref`NL@(1dzK;;J-0jjg7sa*Xb&JXx-$fU2|bI
zJB9HS4Gn-;F@p3iX^iAlJJ2w)<YXy*8bas{df;xwm!-Q}I=;2q?t0ODVg!y5YPs=o
znY5o#kQIPRw@a1<4mQr=llQ(k6&BX0v8QBJowL7iZO;@}U8Rht-l-in$J3N9c}Ll?
z$EwU@qHe2yLzbe3%p<(<I3|_}9uh7sOIU4U%3$GO<*(DO=V|t0=(^g!_A3uHx61$M
zFK4#_ai-v^Dt1_NTVzHlisn^`>#Q#j{J^N(<B107scQn~x5o>ZJBCWC<gsymXDjpY
zDx_BZHl-+yz2|2%2@b|}=R|3UW*p>OzT+ql3P>?6WTF1kpX}NB3YpWSMP@kACjOw+
zjB0wX)lB7?mGPrlXBs~L<i#7%)GRnvY~Yb5NM-q3S<GweRWQ8dEuL+8an5~nspzoh
zhtVTIP;(*li*xd#lhPzE)c4)?t@Y^W{@Jr`6fUMDz91Z~kJgiknT&(|hi0@$1ldY{
z3I|*ZODyip73oC|=Y5)RV3iu2XF}d5?uRT<(tkpK{(*P?!JatSS-Jj=B(eUFZ+^1W
z4HyxGu$cT0aq;Bx2=EjXwtsTEzww~|J)4YN1djDz8QkB<6K8T{Bsl)Ro@lO)1os4H
z0Flj_`A?-e|5cie>3;&hS=j&O9IYTFCn~Oz{5u+a5QY7pga2Pi7WQO+S#Y-RYFx?j
zG2mnXjZ_T+WeBzfm?3f{=-yBz+Hiz+t-AJ6fw~y7_Eofawx28YxL|eAWa*HrY~vhp
zp?=R$MKF!z58A>P0Zm+s+QZPQHnPXMNBJi99Axc3#|blApQbXdvaZ~wuG|RVlr4~g
zjgD-dcRlrbhl1Mj<kN2{5E^d1CA#=UyF?cOVjs6R<uMjR_QwR>;PR^_=^?G0sObF_
z)EjyAyd4V8rK6P}RhM3CZ<-bEO6m6OJd?q;9JaF@&7+o^M;eh%7YVL`t0#{Pvq#Cv
z)|?6(4nMzpsDwpfEg80&MKcedUB0T0DI+tF?eAEf4v6;tQ<m1rq`F&MjgR=NW0X2T
zPzA-{0rV}|su%%j`Y4Zz)KUV;E!C>fFH?e4MLP;^81g(~$rO(Xb8|Wq<ss=s(6Wy*
zTC4h3!c>n`%9Y|3&XtHXd+V%c3esa_7S5MK_4o}+=1k~69TMixP;fn2O6!*nw7(oh
zIj*7A248Iqe<El|;tX_7ejxedV?3P!(keeIvxadpb^UAwW>yL%RrtRN9{h8_J~hpS
zjpTU2BXE92-`=wMEf$(`z(Vw$PCBxpHQ27g&V!;4`q{00ot>?XZ%sWp#r@zJ`D51X
zZ~}s_HzzMouLGlU>15uT#zg)}vNWp!zXeaMD=R9&-8y%Cwrc9pS~>!@eIAbhJA%x|
zN~W4S;I-sPa6&#KOMm}DGHm%c?7X`f((0+o1wmRaJ%e<hU*X`zyi<Bs=l#YX_sD2}
zwjNWqy8+=zHjiNx!&tp>oWMA7O&k9kKJ{@}Ut8;ZJha5vUTxWU$phme)1uTjk8<}D
zL=+l5tt8<J&o7r4av{`nqwlj1@LG2T=1|i1j()V0Q3xnJvv?5jDs^7~{Uaivvkw$u
z2E;RHvfOr04Qnx~|EYNu`F?cHYn{B^+*CsZcpFUUGgXRpP%~zt^>1TT{}C3%$AZbA
ziy}f^8?3PN>eY_$;1$E4(f%T-P>i+Q@nhKvnW}$D8~vOM59!-TSbeMyz~RcX%e#ub
zC$&ORdH|v|?j|&`XSX)HLU+;*w*wJfb<bz1?NoSlr+riTddF)Bt7+B1K+AIf*`{K7
z_O8_q&qd1Bxu+6EcrLnImE``zeclPi6OCGf;Qg%7vcKjg)-p8toZ8Z0y@?pEUsv(h
z$t@<m*;Wn`&EF7?ooJy3fKEn{x3&lcwR5dXO{052_xpW0?QJ&m!Xk8wUHkzYyWXi4
zgV}ueEflY>@AH8*ewML+8y!x!-c7i0Na$0MM`0ot{YPg=ZwA;_`9iaHDz@&B>j0V{
z@3VN@IcgJb-Vk(MpQr~;_XW>NaYI@mnUTO-5ZhyK1V>5riq<h40IL1I5P{U;<=Qnn
zMPm{%j;Ter7hvF<9@CzuQ9f?gD4}=b&W3|&i9ETRFftmz{3~(FSoQJmxqnN1G`iIw
z__G%WwfJj|qF+DP5l!3VXZE#@MURDnPLBvY7Of2JgvPZHsC(~s_|HmveJ6(sH1G~z
zG|nC3C&ch|)&7VtfNZRs?Wb_U@7O;ng4xQuP?txb#1kSeM@lk!ZCvW<ShAS2ysS5K
zWD-W<E9J|&(}lCT1Fm>&3U{rDtFVNI6rGgyeasJD8ZcW!3T7njiNYQ~W*-vY83ehZ
zWLJNcF{EXh12SN8GZg2wp4S-@%JWo|l|n*ZBK`{Gx$${%0xEv}^4i-3z33+fegqGE
z6SeJyY5;v2)@-szX}qVV%uN3B-CfSkh-|*Z^cs)h>;~TGnNG-5wXU#V)uXK985bpQ
zku8(oitkbMqg^8OJxxwQmSjlTBA6&;9Z}$;Sq-(n@$ox*qxbA?6)7QTx@x9IN*Z#K
zG?{?+-5Fak1xQL7DHY_Wu`E9XzkApH)Kj9!Q*gfdvmE^xyeWuLqNvKbSbzM<n0yM%
z&B~sN3hS_#IKvvu+(X0vOAPyjVK*2yZmX<owy*ys^0w?+@#;o$+?XP;bHWs>flvSk
zmoLMq_i*0sc@pq8i~In8dGw&~^2AiPduHQnZ-Hb;Xp32ScFlw9&6^JP8Uo;dolgT2
z>TlNN|E&7-iEG0A-Rfe5-T!M}AW7qDR*I9{9G0`R^RYtfn=VUYjX?Ybk=AxG|DXEP
zKb`KM*2v7k{67tfnLSzP28;?qNm@=@N+wx62|O41|8&IfBmaL#<o*{){rW!a_Ij>a
zJ{epRn88sl2<$(V{C8f>cL)A=gJomm{D-7Y1+FHlCMBPIl>%OX%Jwf(#{Zt-_!sqq
zgXzD^g~2!?+*~gvzomi)6S1+F8zLDanIi$W$N6UxNA9ATYygIEF%X|WSu0a&a+A5z
z!Mgznwe`Qo{jWN<4>bVqQ?1UV`)yY?+mt@Xrk}o7Z$7iflmTpNJ|a;#zRqq}F|pe$
zj<02xgLt^Nm=<QoN#rzu<M2<0yUo4*c22iUhEH=Hnx{;Q`Ln;9A>5Z`S<m$M=?0`5
zOy(vZ9q8kj6$WbEd_H*_O__?X7{8o#SF-^}1SwWI3pCl=i(Bd|i$K3O+40m>+mFX?
z{xH1%?7n`g<KDh2s{K$%o9fE^3*C%|8S&yxFvULa?w&QVyK80$1oS)hLHs|wRgQm%
zGXJG3_+ME8EBC*DeEyqWW5$@QbOVM3AuO#RrXZc{odKQ(!Tn!SfaI+SP|W0UeQ;_}
zb`Iu$5o_-6op0_Inte0D4S-3J*J6GDQ`vtLcv$~mTjw8Y*>%-%?tR&hFb_r3q$Eo1
z>on;PTb*<E-se|MgPnOV;mu6mG%qQgH;6FAsT8$=G$4p_sfhW*)`CMl`i~<K1S^p=
z8g2wpp-@4IW?}<k0}Vu|wXr`Ur6#e|&pP+l+21`A9!%Ek_1$Z)z4rRG_kFhs{k13D
z`?nWghtYrLb@HXJKjD66{_^W?I_de9K=0}Q_6>Jif9*{d`rm!S-P~V#)1B`>_NIHk
z{lm@ke}B{6HR*4@=H9ve(EdYvdk6FKn)}tQ{+1Wr$rA^s_dj~}L+?9t|55*)=iFQ7
zAO2JKsjZ#G@5X_8|G_}+zxikGgFO9pe>9nPVg3_8aKAO_FFfh)++KdN;`$Trj{f(a
zM6A31#JxK0|K}-pa{I!i!{fcZ`Hz3Wy>)U+SMEmpX}iTwSN3O~cBdx3|K!uInUwvX
zKkfct66Sk<>3(UleeTlPy$8?DpZP0y+hm(Ph}h=y&$u6(R_*-NXWY+CcP<<qoqu3&
zA>z@q?r{FT&$~OfCY_~sxA&iY$(<-adU)x9<9&vlzS!9_s4J)LedH65ojSbyD_2e(
zb<Oa9dsjaB@S}Xr{*gy_ySo3v-??|spL^2XWkB!v8f!RzZvWu?aew%%d+V)T%veHy
z{Y$X?@w4va)}-Ccy>sd81NZG+WbTI^8Z>xoo6Xk_^S!HQBY%7T#lLZXIGx65$N!|i
zG@MtskE%@Y7+V#?jya;gYktoc-OrjFCi>2Y_V>;l9s}~=@lu3L{x;0v`_ZjwSnBOx
zUU55aVaBgM=kB;I*Am7*sHwl@y8A%?^7HPd`Rt$Fk8EvUyzk)jN6z%0yY3!mQ{VQ2
z`_vDYyP@HyEO)EgpXi@@!QI*a{R{4<{@vemZ|lGFg8L~(zWra_U-uvUihGg2|HYTx
z!_$hVX#eHj;TM$y^51`uYavvHY9Yk_Dcir#yy$*$Yy0r{;L_2>`5XV{?wd}EzW87F
ze1FSJ?iZ$2H^6T%tAuMWx!Z56It8<0Vo>R8FS*lO+s7C0-9LRe|G>-c*SDtFA_AUt
z3pf7NSKRHl)|oVT@<AH^ALw^y|NP;ZOXqAa&M(f{<*&J)oKC9wr@!vvWMemB@oA!A
z(M`7XWtACG$;Xfe6TJHy?ksYiKRo{M#rdbd>D**mcKy|FxpR}yfAw4L3KqTpZTCBq
zc7FZa%sGku<og)-@>SqZzs7DyuWBe`xlqGzzUCeV{@`H$!twkY-*xv)w_?}!_k6{D
z`S)LUkMAsA03!EM+h2X%-QR!jOYXC*@9}?dSEv0C{?FaHv-rw18&dbh_Zf2aAKiaW
z3qSvje{%cN&pomI&YiQT&+VNbPR+vaJoC!-)vcKsPqF^9Tl3+qYWHKi11%Iq;|Zen
zXZI5eT8vd=Rp^-JyRPYEobfie@?>1=JCMe-{<}AA-!W@bV!?Y$U*P1&%%SMID75IS
z5czOgGR{YDwQx!cUF36SV;ZBPU(7pOuMVkOoy2I3OdQJC>FS_`PBasJS>u?KiG3Ri
zi+melX2ahz=AtOejwh&_fd!iJb)hRReJCl#$KzO9Q!8)ino>0rx=_z#pCWG13k@xF
zIdg0*T#qLXA;wx&jWi+Gf-jZ=&Q`|7ihU_k+nO!lCzJTL$hO2cb)#B{MHvOp7Sf~|
zoE7XzP@`dDb}yZ{C@P34EmQ<hSur#pMAb30zSV^kSb9B60TCv4se~*(w{%WeD=R4i
zfO?w1t5ple+pUD2EzdTZ>6973GN=kGUwX0hP?fD}Ffwl=T0of0W@ZS@)~8x1N~YF{
zV^yuCUJ4yzRo1%iA@X_Z6fe{raYt!w%eck)TNz;tzR6aH7FuCuC7nI>9vh|!jsFx{
z%V$+n8cXvV1D-8ht8ZhG?R(jl>S*wdxkF-R`=Yk7FyP_iQkwDVku7E%I<;0)zPexl
zgKD9GSJhhhP^-{J338gC1#`=T{x|AJ39^z<5n*y#Xm#I-FY4!QA!?W`q#AAAY!LyG
zx)Z>{6YO;F+M>vUPSaJH*W-)#N<Ae_6Gsy-qHHt6Ez88wH>C!S&{Q1wbU&dDU(h$+
z_vmZ>OUFfAT(vsyt5A;X8N$2if31Fx@6t)Srm)I(JPE04quw!kUn?!N-3>I@w&Q$Z
z*#B5|*uPAIofj$$K2P^EnqA7cShTrTEhkaUL_h1&c#P*SO1ye13`SF{^T9swKIu4^
z+d^pIHJVp|xAd5-f2Dq7)|86?i1$e+0kHLQwgK$aSdBM`5f%Ymk57~7-vDcw1d}Q4
zdnCvE4zn-Ckc!Y0+3_rh+M)$BLG>xdJImA>x-xSX=DK8J0HggT*;K%;%p4MysYg4K
z+h+M+EN}sG-eW9_MkWrpJvAhRsnu9<6l5<VU~FPNR)6skQ@{6lsH`$;EnrqH6qul<
z<lyy}x3}Lit2#{$ZMg1M!6(SF+?B1-HAbSF25PciPZgSMLM)qR&{^VI%4YcD=kadE
z(4gLw8QCkP`4-*kPTS_o#04rFrz?YN0kBRrUf>REpY06HYO_U+HOaXEkL9I8gU3=*
z8oaYwS5mN7d5rRHaw1U?fR&~p##@Vd7Ij_e79(J{$RtLt1;8vS8*}C!8j_RD-b0}#
z241UKeF1Oc=LY>ZA=p*nc;88rGVcsv*NV&F<dH9?yrljZd`bh4S}>*gwkc;ph{l{x
z!bq6}KwNPK=+zc12e(fIju%JdAu12FacPO$m4Qe|=*pSZxQdoAD7*+5bsTurIItE&
zY6WxVVB5B=Mb!XSG!T=O0GP$C0^UpuUD0J_X%XsbCe{j|wg9L)$oOPGp=8N50ycWy
z*$-S|Dzx#g9M{jU18Wyaxzm9Ln6J3aitYklwSH*SbA9`s?UOTvU~f}w{vBtjw3?JW
zr6EJxi30?WbDoYXy1G@Pr(82{Je;w02EjokKTVkd#7U$yW7cC{k_6~N3{Sfd;Eht8
zW%**vngf@3jgYOF=pdQ_uu~6hy!NYo#wUwNoMjbZMwC^l&7W#wX3QF6sg^mc=_ITe
z=akaG^ZDY~ceZKJ|H{rt)v_$W09OXN8V6t&_>5Oweu?F&9f3#CT?@D<UjVE$HW;&)
z)s<z#lGn^b2@;8MIu2T;1{VW<O|~QyGb-?0UClDNS{o)4XDgxIlUEi{>doo~0a;vD
z@*3}uv6}u@Y9(@IaR7BSnmbq{GRUzrUQPaJw~>sb+5!*z-_VBr2e8!cjxnpH^L6YT
z?hUh9H-MR?gBP?MGF}Y>G-BxCW`Gs(HJ!vtW37>3uGIPP+ag-cpUK(_4VvK93ungq
z*XoB^J4iGpIz5U2QV?YVaz0a<@oHzH3^f173pV`&nC%l1;^Gvr#ZL*1a!8#IcwuzJ
z7Dk9m(FC6!emB#EoD`_ifCga9RcIEX!f?XG_j8J~z6*G(qqxa2e1|-$LefpmLCcE6
zDB}RE)h~co>B%wPv{XR<5VIx=fH$})D6>q<c-4TZzOyXN@HCG>z_yu*A;C<kC~76O
zS4#&Fubz(cohNrrY3QISWgJfr=vgktt=rcCcC8EqkeDifFl&2~bd0hm9cT9hYFpr`
zVbVT@S+k(hQgIOmz)Uj$Vj=0o#;d-+<SIxF7`zaIwy%kl>fvDSvMnL^RiO<qH7*LF
z&SxECoX5syR_$vmFV*@1q}7+M4#2DeGv3V65Gd6z5EXG<Dc+3iu+^?_3?ZvI5r$Me
zW%eBxTWYLKtovS4YvnDG+B7}HpS24HFpGf3tUev9^y(cEu+bHRM=LEA+ITnadzJsS
zbRs3M12Ahl0=TM<)<P3<?B3CW;fO})l@JYHr_PM_9X%wmbi4;0R0Zs^t0@E2+XDn_
zwO%br*Rt?VZe^XwLI0}=7$||Y+i#^z=0IR>WOa1RxLr+!2CvkJ3f}n2W0C(Ea}pL&
zB`wt(7)|4=%m}&kPz}PH*^ISlg_r!V!QxV>k#KW9m+fZj?`q2B(M#TYZD_=2c(q1U
z;~l)M>3^ku?i4F+z7nFTY*Rq%fNFY0*57Cs2KC20Dw0o*1RVC?Cf3F+cd%Yp3}B^M
z4%*_7r2-nS9#3dl_YJ&Ry*Z1^n<VPOOlp{Qk3ChTW;p<6x5T80K3`n7ba1SHt$vbn
zl^VcNvA7nHn+sVnyxBrX4m5){yd+?m{*jR0vI17w%`xI-NeO`2?Gkv|ZL;y|ktMiS
zGj)%40TARI1DH4LVa|l6E174@+$5=ekhw37aFqYStWk`<a(-ovb>yj3on7=AulA>)
z@xFhoY4p#EvlgE<VKO6xd3<!(IW7xvn3C~=hszvKVq08OMhnf7!dW7X0n(8cZ$>&9
z)$2i{JD&nZ8mC%Cn=slpKp3i;1@Ailvx)V>l}p7e+5uQ+6*FN-^M2#iG#wf~JrR0l
z>gOsoA)2~2H~dQ%Y|NRX;jTsNLhu^Rq_{w#6C`t>=%Um74;^aCWq`?<9gZxefcgM<
z_2$?UwDT4X8PaNtSNR{T+)jvuFlR^6svjALfCPBq<tj+8t0*!{tr=$ITQ{gytizB2
zlBf%f2PNu1z>B$n)Z3$=Gn^dSSrnv0{Moo*m{*p$cFSB&YeSK=ldC}y2A84*sizB+
z87mjjn`Y`V|1&^UjVFoFgn_&#>wu7vuqUZ7;8B^RH1Lo|Xm-b?QH+ad-UFor0VLf^
zX#nP3d3ZG?_hjzsf(_3C)}a5jsynU$brP5}&qXU(9TI>syTqXJl{LNL9eLJe|IhB|
z<v0PD-H@@gRyE_{RUg137!rn5Ti{W;rZoCbw5pT{a~8|FNzj!TpqAx$;OsO}ZBU=d
z#FQ$7Gc*0K)DK{jMkfm#9aU=1oEZ{VIjR}()ZH2$4ZscFu>aiNW^W)#PYcaj4N!A@
zi#gfq;LYLzPXjc1f`|S^{k#&y2X7=aXJOA1HJAi%cegT*bE5@}J?hgAJFyO`@g9uS
zPb)aN|Fend4ri|kY0+d^4v&W~zn3fP8{{iBT}5%6_VPtLH7u~q&Hy(Cne3dYOe7-8
zu=|NQk>hII;weq7ZiK6zs8yQ1CD7B%ql4_W(7Fd>M?9F5b>Gz_Xl_&+ue*GXi*B_b
zw%SIoGog|4ZFc&xM=yW;m#;i};_kb5Pd)hYU%O(D$aha2J@Uw7yZwK^cl+%>Wbb@C
NKA?El{)Kx_{69p2CZzxX
delta 333438
zcmZUaQ*fXSuwY}`n%J0$F|jeRZQGh8Uu@g9Cbn(cw(abHtM0z+RzG!BKlVeP)7^RZ
z_-P9`vEqQjxNJWoO2<3hlRA0b<C~3a=rAHIDAqH(H;PF5QLkV3@D^nfa<ZAJnb|V0
z1bOV?gxhAgZsj&2f%q&qQ=_&EJTgtft0W<&2KXuQPZtO&Tykhtu}DxwI@Mp3?3;yl
zd2EW#Ocisom2FQBFWhoLrHSIlyvpH>zfJk!Wzm2tMBAS$$VT&7aJKZCPHgcwMuJYn
zh>1TcRVd_5NNLR&l*NqnX@+mi8^+=(pxnY&nbvUMca)9mYBk#UFXbjj464L&vjXCO
z<4~4V|0vN>*x<<cWgCxJq>TX7ZrR)1l)`J9IC+$rv<l~+m_4#)T`!&Im}c0V*O6TW
z8!50rDhr-%aOSGgdsmg%j<-`ZjLo~K@c4=ye=z%oHzPnHB=Va=6|q8k%id6qy+Vig
zxQ`@Qf#QO*Fmfh@faZY3F4R+l)q(<nLX&yww_6a$QFiTl&rCrBs++%Wu4Qf;iPpg<
z*D=sQ@F>REMZq1$7H&^dgLyou#U#C&$tg<x9tGd$qCR((q^&s*%|#Vn-fi*Pr)#Y;
z@zk49X%X}5gbFCq2QvgQ1LP(~{lNw3O_@rlO|@SfCK7($NZRMublNBp;y(#YS7KCu
zo?sKL!u|n`uEPvlscj#e_Qt~uwF~Dha+<WeYX>vc;cmg8A#9e_XiV-LsH;L2S7Upv
zh27Sx^#>di(jW-nnc+-qjqMCA;aFHw6so|`6Xqc(0Ifex>+C39=V~XZ1d)56oF>*(
zHoP(yth21V2SVcwgF|ST;px%u=j|Xcv56?$cP-Tz7G5_KXb`F^$lF~#|AZq)P}aMT
zzTJPn{1@c1SYJ^k{Ry)>CCHHoG~!Zp%mg~fAMnQJ2y<T4Wg^nZ;`6-`^NvrB56iw*
zg-j^`qp35SyTY;T2y4D}4Y9U5u5@KE6mF{jdRR<@P%1tPPyB?ejW`;2ti3S;%*VKy
zt&l$|nL%5*GpQf-VFRiz!?4RPTfP{{l+3-rYh&0|)g-m3*!(W4LFijioYuw|6YMV_
z-MBG<);M)8s=>Y+x)@zMDDIKmO^QaO1&JT{uyNpW{AW~Hg!ETgR<5Gm<8zD;6~ZS4
zCV`kvQ397tLytTu?xR;B#^;ts+@>DQ(HrA5JXB0yaW!ZPwI8Ppv(UYg(Z3<@Ot+HU
z!9hz~Rm0`@C^wXbfH2eBIe^BTqz_@)<dN1_g1UD8y}L?^Tp)KzP+$NK?&Lmi=c5l`
z2@_Bh=?a~R4XqY5(wmT65+8MOf{J@ODnyX%^E@h~d9x!xR3oR~zbJ|`=4{K}qs37>
zA?B$k4P#B{r3chRvpCo>q{Ynket>fFG9;~8{2@qeIUWpQvY-*G)Mq|4-%3K%PfZ3b
zQyX8ev@8{H_^L^HA$fL}OIo2XXJP=r@wSBVwaj{&2RU;X2yB?5OM5*_+|F_bn&=$l
z$d|y>4CcUp>Oo)qy#|7I=|T9d;+0ZWsL_|IKiAY74HnN0nYtLT$H#UF(X>fYHv&5O
zsc(NwwF&3s=OBl=U_?`{UPM%2*@xFGg{ixQxE|&XsM5@qNI}tKmc{GSX;lC%Oi&xJ
zlBcM-YE~R`CcK~F>myVZjKMUxraalxb`cI(mey#biktB^DqG5{&YBapnVzw&eV`VE
zlyL4IE?H6D@_E)1_*kzWdoQ1>$0@cve(r(6kTAF1W{u&{T-aACx8~*H$80ka!oNE;
zMT}wo%!$p`hK>-=Qf|k^TrvS)NK%EHLEK@22XXKcixRypKNZm-L)=zdXtTO&W}7HO
z%-?edz7K`W;k6e_Rz$L2>M=o0nDc}nt+||x&t?%SC(Q-!w?%m^ienXn67E9o=}>Bw
z&{!wSN!vRfqy0%mjb^^sb2eYNdI~JixMi@%J-eJyd52-(>r0}N-d})HwhC6>3d;D>
zs7lR{F%FTw^uR|`51&O5^ukLR(=8GfVMCqA&yah)jl#J%?@nmdwLT#QBHBt55Ft->
z$->`qzDbAqm+=EjqYf%u4f2sN5f(358Hpg+4ya899j?s&rIFCzhT6wnp9pcqOBZD@
z2G6xMBsQG%<mhm@_7VWK*Y{S`nHf6Kb@6;hb$D%mh*;{-((tIw>WUT$s;c8YXQ@O!
z{)?d~lt8Jw`(s0@+@0mFLFt7_KyK+xI3+WrdndSI@)(BfIPC$S=79e@_{>p_5<|l?
z0?Xg>fdHA|uTxZpgs0y;^hppO$=hs!B{(s|r7u*^_QyRQwFp4Yq}TN<v8>UFYgZ;a
zI!-`8L<->m++M|vqb^$@>@jU-4n~*{bxM7O=zb<m+;j%!^$&Grc&rP$NOcZ#Ns+BQ
z&49QbQuU$vf_j{R74l%EfA@nev_~$dW#}jBieJhTjqky0a1`tab3B@*s84vhF`DY-
z9$vaj+2TD;PSwDR&(*D9n7CttZEINyU!C&X3i2nhPswez`5jUKv?>2b%vb0sdufjN
zr2P#4zdBoiVm6<0Zj^Wbz{xRT4Dl@msfW1Oy{v?ZJYNA2)Xv$Ij4?5+DPtT32BZ{x
zK%JrsSqkrFE<|xJ{P47pekhNcx>lngT=pdWC`}An_yj0ed;4oWWaB2E=vp(NS~IXz
z>&%|DeWV2Z3Y_2SjII341`#rUBNCHpw=1lYH>~eTbA7`XdWwxNwe3oay5zt|5{P9r
zz@%Gc0yX1gUc0T!W+m#AUyxN?hiaQ%5-_T|?wnbL5XN&T%jOVX_a?ViT`%0r$cvN+
zVz!I^b_UoFMi{*TfpcRx1yN*<b^w8b-C3NWft8AGMk<gUyMzi!^JYdQycJrL8MXgn
zC73YLo!qKbna6wZ&rmReUGBWai1x%?fgF-2m{$Ufud59E4!427Wi^~ltZ7zLgp2=E
z^|IGqy{8F3bd=I}Is>K50K^-FjLtj69pBI%HXytC1dHnX^zwu1{YmCmpYt)qt?>6z
z?f}ay=ehQt<r{~LWOfN2=Pgc;gW@gHuH~f;x#e|xcP%spA#APe?>>>3V>Fo@yGOU*
zBLN_!Skk^HXXTyiw6FqpY-KCh_0~aX8Aaul^L&)WAyFcWpB<IL9ur$6n8;QQliV)y
zh6ELf?iluA5NP#<rWT|8HFq2ZyVv0F&%aC_l7$m25%57d6M_*$fJ`kXJPwTE?a!I%
z9%;QfXywgcF-XM@R7x3mZ=f*N)_ArW#0d}cY8C6c@?c^6BB?+4-Nj%W1o*S=muF|Y
zt_6I5*St7=Q$<8PV_$QRG`s={qQ{3Pd(YhD+;G&<T$hnsx+@&HNQNjd8>oR`6x;=a
zgYa+bCwiM%bCz!O0Hi>r`@Fg5ZNA%Imb2~1;3g{6#cZAJ#)u$Wwoi>&R0ZOoLfg>p
zx=B;79L!(xP&iaR7vq~xBwARPA|Mh;_Lu9c#vNHz6Lc7$l0ih}&5r%(6rolbrug&J
z<hc^9Vx*P5k9zrkVnNhvWU*0wt2#k2d6}T#g5C7KT`cfm0Thg2y*@8Eh{#tt!h?z`
zCYW<Q3}`Z{idG8|U&*s=#BfT`K*h|3j28J!pAua;9<MR6n@`FI2D^pM)ZfKw)|G2i
zmP0u3@>-;9erPbAk>wD3-e7h={4fM42F+jzu9mExO{3Udt17&#JRN<>6_3M&%f)zb
zZJN}KD`66R0QY<;O0H@q$)_{|h<~BfPkNVDX$znMP10W?WTc>{qvqUG$4hC2)U<3c
zB)&@3MNp6<LSxTGL;4Aq#T8eZ?p!(y;VBg0@z7hguJFeyX$KQ*T{P*OD4}Hh(#hQI
zoWonMU1P}_d|TCy73}2D7=K%6UOU!uRrIEfEDM^)0G8$&a`>EQ@!0_oD*DR2O-IEM
zQX`PXAtw6igkADT2_F(%>UQ;03IT~9LJ=ghYnqTdS9OD&fZ47PNCH{+WPQf+e^rD(
zHU0kJwn#`~Z<SPhJ9MZ|v&dm%9&`OG!@D(JA)s==w@)MYPbexsY9-Yw>fM~A>&J%z
zqa#8E{?$#A=Tv!jm<A!`%HjM>NE=;J^M<0@uh7?t+Epi}_hp_zK~j$m3)ncyPF;$g
zar<P<FjWdDYyu-qJ3*i@5V=denL9_(?kBIqCFE6~taj^)^&kjdH8yMPpbSUd<K{*V
zdK~euWl23(j*_5#7cx0bsVTLhMst$Z8`S0j=)YR&*9x~-SWacuO<&h<$>FnhIf6!w
zk2o1<jF_!wt;K5pT^m}qrES>rCOL3)IQs>K$EM<3Y)zP<vnb)=T}$ek<w&c+p&(FE
zyizgvT;1Qk<+(>C^eKMlpGI>+%ezOW{%IFc#DT~U=fJ4N5W}FuW`y-Mfii8&cuDvH
zd?Iq9?K$^YMoG*?X*zD&`l)S}hT3B5wl|8A--k7B%}8<&3K_nu8DocimD)qB=*fng
z9D<m7(ohS^c~Y)BwH<L~^^b~}Tq0CN|7z1}X)Lgm3XI7}`SiOVZb2wc&q^vlWj-Cv
zm`Z*wR(Ut9M3S4q4M=$V%7a6qM6@RbaBGcvTgM1EVeE1Fs=$!qXcxKu^o1Vu_F~5L
z<L$(H+Y_Sq@}2Pd2f&hPhgs>}$)L>`c`1z{kpD82f(j%>L<K*I@!j#wnLRth;hz_}
zF^7qa4{{Mlp&NFG09C7hUv;$}TX>Mg7^_Jln7T^Yzx+AvwM2mCf<$3GIvjcjFshaQ
z#+}7@vOh^?7W#tb+&NGY@h#>tD#MFYek=2jDr_KBm5@#x>fu7c31?nD#>UaaexOK}
zAp70O{3wkf#fA_E1zsh^iwtFbDkoi}*!-K0c9F;kLye|`t@)hMGW9aQsZMcygwc9h
z5{N||H8ZAbG<|eZl+l*{>>`i@GP!Ax`L;KYD>mmAEahRStqJ>czF3PbMKt~0bBfT4
zLJ5CvVh?W-0vm9C#Jwf0clH2lAjm;o)s!rYZ_=Z_&@L1>Dha+(?)U5vBPcmC1$ISI
z=Va+<&mqI`CB44FhJpMG=R(d8tkG+`aufeLKT(l&!b?27k|9m@+M_bSfqR$#Z=Zsa
zTFt)chi3;9BzvkwEo!+2o`rIi;(|t@LPAP>@eqqoE5e<8v<ck(*`c~xy<Xjw3wzG5
zAyZuVPPL$3;_fS0`8ott)u6FG#^rA><o%*f*qB6!33!O3@&Uu=;qp~o+=|ZMg{~3n
zSmGF2lm(bm3!w*{CWqAkV?|NCN##U&=Yo5@SfMOQh{;5?j%DKQS>;=iSYO|YYUF8i
zMV;vr(RV7EKj<!};dh#1oTvJ+$!XG8AQWb;&gZhcg6bx^hU(@ovnv{C1cBbp@v#qK
zB=VGP_#ESwKeTcEbQ<OpXS>vj^bYObH7ReCKM2kO<dha~_moM2Ol5*_Rh${BC{-I6
zPS*QULNL-}WVK~eh)+B!pK|HAqNVF_H2%`X8L2-mc!b`MQ?mTzj65g3Rdz5qpT%aW
z<n_tZ3!(G+++F+>hb|;!gXiz_UtWA#c9)yPaG-^LPg_5~^_L(a%LBRVJIEk}`R+pL
zgoQBWbnl0lt*o7aWhpv%rN;FoGb@ohy7D`Ezqclp|4EGoBo!nqtC>hu-#fFNRuV&O
zMhZkDwqSqM7V#Q|DzcH5^(*OmNP(%a#gm<JOWmDc%$q*t@Z!xXio!h@#fZsTziHXE
z4d=H0+$M7Q>Z1Pog68sB<oOR&otzy_3~c@vS&`sanTQ#Q{|8=~IJuY;mN0|>EiF5I
z4y-M+Jbs~*u0mu}_imo0Xb!6e*@mW?2r!Sd5p)k%7YDHd*UoMq<WUkcv3$&N8F(5z
zoEi|MQ7%$`pJVP2@thExIFcsd@z|K}h3AEbyqdvF`l$c@cIOfCSU4cEFdlh02g(No
z7cYR7h;}G$w*S`a=4|h?{q_)Ozr94>2l|Qg*8_0oB@7V3hus3y`rHi4HxKC_xC-Dj
zb;SK`<iP$hG9&mXNk`CTtU@FFHbf)bz?v6Tts39pLxZr0l>9syUUk;MTKwGL%V*?Y
zuJa+68QWqJ!ywf}n1+!qv@$}u-H&6hB=l*lk-@W|aCX;H`I)tfU?2%dZ@M>UD-X^+
znu1B@D}RElQU+moi7wg1kNL9cl`IqSc-sxAF$vi|lU`E#CZZI>>-f@U;^%>sv+g9?
z?mm=!%r+W8P_eH(v+Et0VCmCP=PRD0s~>HJ{s2e!Rf6qNXzh)<@JM|xv5A+!krGnU
z#oCr3Mc}F_c(c54H;w?d@oy1uXgB-~LY`l+pbDtfxvc$66@m$-X&=N0B3M)lK`9=r
z{1mPI?kvA{D1Dz93FSNK>6WPl-NY7C8LqSo1QEnP^u9O{mgCc+cHv+NLWqw0p2a>0
zVJP=#p^$Jk*eKWyol2c~+Z`5dAoa(`xWyCw$to?}>wN5e3%~%HNfT^)4F8&;cDf@O
z2@$1*VAoycSP|;Sqq|}scq}HKi0fh)%Dhdt{z@@B|4-$bS$tHe_)FcafO-ch0+H$e
zXn?f=^^|F}veaa<Og(wf@Ql#D5F?D>%hv04iA>e^1(Uv}UYN3DHq?Bj;MmHav7^!U
z-hZIc!eL<?C<VkW6k`#g63?KRv7nvtp*cKUvF&p~ITgtr1Xkf4dU{j%!J$Jsw#1!p
zb_v|%_|~^>sW@Dde-$rwI!QrE<|7-@c#^pycolQ>l*7YyA%>qnR?-rh{v4cO>WeS_
z?2Yj7C0V`i=@Pr3N%%}|mzcEi$oObxDIr@oL|4rW!UgIU&p0^#`T6i%EY&^KrbqRN
zoOote-L<FF!4&M$=_bY?FFI<PB1cOE3dHX*&KlX&lcW+pb`g}Lw!ipt$ojh-kjRYo
z&&oAEn`#Djw%K#&L%;-yy1rEW0aG79{m6fqkE^-~!>cVJwx}uQS|!g<guC1@a)j(R
zw`aM=o&snTd`Znd1eQxU_JV#^1Yt<ERVKz(bL%sIRZ-H<kvnR`iw(r`vG@dvT^Od8
z&@xzy$+tx6mp0_G{nW(mJvU?<HLJId`?X9L!yII8?<Dows#L}|m!!fPcUj*j;TeRO
zt`>GP_!B$9WD_?c)gPg@nJqPArg=2l3D4-A!vo+26;vEf3PopxX_({)@e5!y#76m{
zo_Um9o&;SC+soVaoQ<IM<A>|xX^)liQGy}n&lm$zX)w$9L9SQUUsiG!<`XR6+Ftba
zb2N6Qo3(KBfV&HC+uMz>Or2usuk9*=JHkt;@UjzQjLRzpskdzGh#Gwis6dm~3>!cD
z;4nb7$)~GaE%OgSq^6G}B}(iRCBoND?{=h4bjUZ37a_A=i0e=sp&~2~XrQ5)fckoP
z<9$W%dBwSbO7(s3Ie<92^SFK4eLoB7rQM19Wn%AfcqEz9=n_Vk*r-5*3JP}sM(C)v
zqPoD?r*Bcy^|qyfY$a@>-XmfmtctZdtO0nxBHZ-y?7nnwD*eM3acJE|iwAR4#=5sw
zRet1R4TnbIedE=Kn)ltU)w83-K`K6~phfA7YJN@GKSn<~4^ZnovUoH+=gai;vtI)Z
zw>eKyuwbFT_lSZKMYSWnYd+umnS&Y8QA`=F9J#~hp}2;!iMXIHw6<}S&<2Ou!vLsv
z<P%lhJ!Z{QMhbHyZr?*WPs~}kK>f3d7r9=#Uqi)1x417jR)eHR?<#pV(@)%Ea#2rt
zV)z4O!5jF0J;h6Mmx^;7;>;-^Bfck%+$6pJdlXXY1tWGEeuJW!WAq}&KA|aKm%NeJ
z_|Sa8GlA=p53ONHG10Jt1y8HwKnI{o`oN(L27HVcpb|-J1Z=SRwhrbERStLeaAb)@
z)(x)onpFB6FXd_&PQudmaR%Pet#!7GpLo7_Ibq12#@8DCau<VHR(=XdWA$!feOG)U
zm10Cc`u&u)8xX{;r83|WKXwY1ZiJ1Xg4ZEDzVD!o2s6SDt;vu-%y(~@E&!I}g))!s
zh{{p9h2GeqLQf2dT{>$td7A`4_L7FT0~!R0QQ3K6qK6D-PiinWZ`9TsNB7^Er?oXP
z{V{9|JJ)TVXr3W+K;Vlw`W&m8!lUI(SUkyePjb!_ca@!|Eskyb%F1o6fm&@Z4jt$q
z2AcR42<fF|uqP<NIQ7ulpMdEun(rTxC|D&GzU_-}E<+<aBI&|Q!pdqpWyLbkRh58_
z?^biW0g@k_voC&6)1n@v6mwh*E2f=>V(Z|kxM+3}b`_O(@qT>^v|sr}F2S6l7!~N7
z#lmccDfSQQ4rzaleydADA}<$I;0Z|$8?OeH{8B?6_Sc4}ySHG{7YC%fyl@>y&fW6G
zE=GUX8DvFq6K6|gU5fKOYn)cl39`!PE2gyS=U#*zQ|}5{WVkmeSvkdoJ~dwK4`3~=
zJq=(ogDxBYi!LL7i0Kf5sttxnxFJMHbyFKjkW)GUn2Cu?iyv6?X7Fz@IU5Q#6mS3L
zdlpA0dp$-9OkkNWVp#vCfd}+)#I)!5-CUvpGUUEc-r0o(Lz*EDp1KV%WyN)hF^T&N
z{x2zEvS^tcgtI7jC`zM_S!Fm2+BF0!rQ4y&%NQg}1h&XWAEtW_o1XAIJ-p&-84_Ff
z9Az$QvZn*4A1>LS@BD*_19=Jm2=T$0SXmM#2?YU}2yUbRMij_*-a)!NjgIKs5*ZPA
zxK(^#>R9cUFGL3zv~<J55)a5=$l|-__%eCFkETC=hLp-OC`cXdmbg#Ejs=N3clA*T
zqm=?pExjt<Ioz(Y*KyR}Jm-?qms!sk&q|U5_GFU4(H?#z|G$$E99zOCB@8$d6H@{#
zl^_tM`JcZZLG7Z`dPQs-)H3N!<v2=oY{36VdmcqfGdhSJ8YnVAE&!g}@b-M#EA0kO
zPH%IXTfS>woTCS9_S+qMP)^<7q<sBzHQS!*%8GD6{H}662HLsb?Ts#4Cs?eCc)R~{
zM(Cj&Z<z)0HA@+b<!oP0ZRyyKeagG=Zvmgz6US+EcVJJORnuExH4nRDVNPWRn_>17
zkXNmY9;OE^x8<<hMWZ4lGH-V?jRp!DD~RiRdv7&(XH8+pnjSx$i&;OAk2T{w&IvNL
zjGIEij7hT;B;wDyGaO+m){H$!v^A^VYbfbM<*6|Yl%gD4C+Lpn_x?S8Zn~F_IRbVz
znl^4Jo8vw&R*BLW$Ap1#sxk4f`z)a0Iuc2vhOTfc%{7CwGzHGg_ll>j&iaf63Ng&|
zn7FAbxgJjjqsCM2VeM<S)Yr`ggi>a|IZ8K%w{8E)b9Wp$c8D6c_UTj*%e}88y~}jM
z<!B~h>h7Mdzje{Ir`$TDtQ=amnFGc&y}4kI=g9Bgb8EO1>H~aLme=-;z^YE*B0Qv-
zI@#1Off`axJ2gZd4Cs7$&WLS|#dn#-$LrZsuz)g~@`z&$qd6-sHj=<%Y%rM{v?@!H
zpSKG#t9IqirBDhIH{N<bmM%rr*w0-#@Sr=QiP&ec=R6ul4K~OyIOBvazJLWIrUd`G
zCV^L?isG}eJefA!nYNM9^N@F&hTy<=@93p3yy+>GpC=b7=87;|J4x^)F`Ya<;(eQ~
zIhqju#)fgfuCvc(UHbxfsbOtx`MbVPQ)Y`%gj?qib_(O>u`s`1@9z5Ly1iZ<HV{kj
zdGI5-u6`2JcV_$^i;5=Qw*x8+=3V!x;N}FZHa7SQjc;3@?L@a)7LAKhS{kj8g*TPG
zlQC|SJ6zbv?{NhJHAIFW9@Eg*@(9k${}E+aDvN{f{Jxu*iH~5o(rs+_&O%!>Rm7>=
zB7r+)9u&CsO{0|@3{)irIkLK4%!c~BW;!VvABCHKtdWGREUN#vc?+C210@TNNZ?P*
ztpf57dSaiyAvi>D-w!uS#>a7BK}aD%H|B*tT)q9j;US@JV~KJ4?F&a2s3qdK{-8WU
zlF|D9qj*_ghylSoRYlCrolpSrl+OgSH$<|>P2a!21cpTI3!U#IT!h_fNfooH(F$G2
zt3>4(OP6Kt*iHtvEPx*6f*%kIM&Q{H+{QoC_kMc7&Jc5y_F|NipyQT<ZYg^Cd0ag2
z7ni3u$eBYuES8_WhxEI?$H(^5{@hjJAGm?0fd564p8*lrcii%HDUV#cb~e%CKeNMn
zOH^()1}zkYMOyzyp;V*mvx$Ik&6dNml+8E3nDtkNI6Wf>TsSaWV@r4omNQ?a6X=eM
z6T&A2ja`!tcRp$6_B?-F+oDNrQD^TYCnUyoXI#GLlfP5qsJ2PPFSF-JVy8!XA~97I
zb6!Fomo#8AW}37C!Xu*LD3>unL!LLI)G^SO*`ea<@)rlO)Uk)6yllC^KkZg?^*Z8(
zz|Et8dZ+x#a{@qxHU5LkI?!b``-9|)0GkSik=hFextvo*IY}vBRc@A2-a@`SykDjb
zeHvCK``ydMJ0o8ORrQ(-8M644wMaZMtXFKBmuFn1i#El1@v%v|gx0kASF>=~gR0;i
zn&yBqw47fF(+@jjKv#uEs$s$1o>%0vlj&|?mXu2TnFhGYB_G!)`X#h5P6me{3z~TA
zs(GhsL+jC6T&Srwx*#RdfSD|2#~OEXjlKwD>AQ#&tq#IAvZ(#jKYhYckSRDt$hplw
zFk^9lBR1w;l6MF_9fsxp9j*5Rg=RP8JY$=W!W8L7meoy#RPndWNLOGf>IUl!Q~2p)
zI?BA9qdlMx6;$UO5{xd!Ssf_cS)tgg1i45%g*Cm}S9{8dSiXJkBSBm$(4kGn?A_6o
z?-|lw@`%YCST5DLNkv%lLxa*m3l>MpVj{#*#*>rPs9+ggP&pay!l`r9Fi7<d@jlpI
z6#{YvZg3oCh>4%zcsS2&oU=O?v6doEyw<Q~X9%!APt%u|;YPSbLi1KJT%;HJ6vVB^
z!EC+9f(%@_rX_`6=!%S%Dqda~cwBtiHB4$~$UZqK)}$EOeS1k_(Iv>p4#o4hCPDQ$
zv4qhocT7^;!mFF7B(%chCNq_#6`Ii*@lf}d6egYEbdjhl)G>fHOwLqc`^*z&Y#6e4
zR|2rpwU|h1f1PUUCzp;S0s)VRx7ULMWj_B@LqJ#CZi2i;I|k|T+t~%;V8khF;MgKE
z3uUKFFP~u@f|iWGRX)M{Ku*BT<TnYdB(05d1<?+e#T4tMk^Kgk;*-}yqd{RHU5?>F
zbX^7-gaG3o>y{wUi*l#vWhda|Zkf67bpZHNLa}7*lPq=dgbr=1A4&c)>Ao*}fUhgl
z6nbXV$Y6P#SyVRTXXsD;X|NYVrl^tO(gBII0d3fG^)S&cKu$<O(DLs^apaw=pv>JJ
z(u>%ux`8a5Y0z|rgq^SS;lXav-P$u-k{akm-%xVi%>FR{v-fYR4XLbmc`~uyS70nn
zNp`;#IWrjLL6bn}kG9dM7;hbcq(-azY++B@#*fDVze9Psjxc&UXg;B=A@m`Ci01pA
zav8>Cr$4&aPwST0m-)h%6tXNLL5^&L=|Q^szhnKQF<+c)V@RUK|A^h1mst_+%Ok8Y
z?}e1GTOsT8ywe{hD?N;I>Sm%}rvSXmnZ6F%yn3@3RcylWrO`9@Md8K`Bq-iav8=z?
z|7_HVv|X*5C1UKe%Kwq1hJNVirK!T;dFFgD2%e|9NeH$)b;2_ao=u{NmBak=+ZNST
z1vf&UTK!19Lqnny0sr6+SE4rQgEHU<vkmEKPLa1nG>J+M9m!4y^6IJMG6L8{f)?B>
z!#GhS_MkJv*l<mAmh%^RtgN60G`Ers-8x-G4^Pia4jM%ir$Lx67_`}Bv1aAYn|CvX
z@^1(LaIk1^DGu&P_GUV%_YnR>y;8;&HOP6iEt9>ye1S~{TT#MZ#Qo9sHef0Sv;z4$
zo0I~<iZNF5i(M>B%{|dxH2@mKh=NH_wQXyiRDUeXPr(R7b6?(Zd3;?E`S7l@ntHWD
zF(GNtWe2rLYPiYl^mi#7*FNu6@qf|ah~dV??lW__@Kp6ledm%!1cK<&R*;Y26|U<g
zA80)9M~ZZC)41%aY!eEitN5WJTq0+Vd5*cDQc8?pykdze!N2{n)&V#g1~(=Xkj7^i
zi;V$;2yN=<ET4J8rgM?j38K@rV#x3J$7Ie^i+U!Dp^!VPJ|1@2wjlupcNcR9r}sEZ
zk}W?n>xRl=R1D;VDjwQQ(ggICm4%bRQF{}#G2i!eIxkxL85Qio%ATZm-dpJF4&FJ4
zRAei#zwNHuizWw)VnC2Xh-N5eD725@s_^*4WI5Z{Vo2byr3ChIvgzODZ;1_S=7`n~
z84nP_zC1)!l@!h#&`{!Zv<Qa6IvUvz(uZ0-#v0)f#<8uXc26zWSzVO6F@>3pt*>yl
z@wiYs3gSe~Ll3q=4)WSr<%2HlZLGS05;PJbqXICPV%|ZU2mpLi=#XIh-PpkGLmL&Y
zzt3s#V9;gVaN&3$KId1HLn$=H1eYyg6H^3c6v11{4}Jup>s)xW@OC+U1JKRYvxRHZ
z7dAQKQFmKhKEicoW+Dlkydyj?*Z=y?m_c->Yv9S4nE-G8+x+59LZ*QEUSsX0S|}(L
zM3lwpFz?W~82DEH=kSu(kjePpYEnSIXKRm5u5cXm&0Z}CF)s1Jlz^AzFQ`VNj*DUa
zY9VNypdi(WS&Sw8`~sRJ`Sf@@*2-4w3bwNt&y%kENZHsIh2$QUof&-Y1bVLI_!CIr
z4-r`#Wh5Fs`tFXCLlTqJlbnVn(0mMjuWrTD;bRCE7hrhSoL6S3uQ2tdQzV)AArsZt
z6rBahA{$>?;1}EazgkTwCmQauX_^j*#!}GJb5<uDLCBrNxa%}Z^%)}ANr+Y<J8Hs<
zf9prTg!d@3L&jxPb}M1Rv+j9rM6T2Nx*)CnY8`jKj`<dKV4N&ZGS20eY0`ZSb4#xa
z8k0c5UI5EY_Z(7Uw}(_s#0rG|93-!z^qZC(=96*_8)OT10^MbbQ7zYpF5=RjxrhyQ
zphbMEgwfGwPAf__A{R;=I~?Oc4@+bv^FilhAM8p-cP90N)OkRpgMzY8Isv#>Vlx7V
zog2vEg7A^qaMzjShZuzL#(^?Dj1BhHgzPR@2j=al=Gw!9!xdf%PWQc<nmN15fY92k
zEh--3f-JwqAG@W<9&{;)J1=ZEGTo9_%Ud4?$hlx|_k0Q+q!X}*qbC01GXL?EDBmfi
z_|uOllj3d_+!|6GC;yCu2`%ebqqA4Z^Y2EBgm0O+`I{=qOaZz*me0Vt**_wc%`^V1
z?6<>G*t>4L`_MltzrEbP{?*?+1B077F#kU`as979W?^CGOxR}@1d9F>$opc+TV`bZ
zLL+<+5V-Xk99UL*SXtTnL#bH<^G~_8zIx_iO{vKuL5XV)-*3Ewzp)kbH+j_|LP6Po
zsT|*BU3<Aaypv8Zkj8xPZXZ7FJx6R~TegS+$?Jo1&DeJQrH-g|@+W;iZHa!)fm`Nj
zXM1$s44LL>Z`l6&0+he(-|;tWFAtvdnG5!Wn=2ytJHOZ4&)0MK2k^5-E7c&s0><{(
z4tF%KZr2unHTP$&nfz9dQUgB6ySKJ=Ki~emtvK7Hv^}KNAMPpsZTY>iO;o;Fex~Z}
zDX=aY2WcmTO;q!nWw5VD>`uERXrgo3RP5K!;bz3~AZ)G{XaL)_y*kICwbcpqpQ;Y;
zMWt_qpR1M)d%tKxS*%uvyWZoYrMutsojhL0#?_Qvm4VW8MzLNAbPswlF*<T{z@S$y
z2SM`-)bUHz^XboP|DUHtoAw!FiIDq+Rv|8%uKm^0*{ywZo%(aTN6d6C!~jG4@n@d*
zMfs<vd;8QFDL}=I@T)eBt(7vsWON}&t4BP*$<scsmUi5QsbvNOhk$mz|Ncf!Y<`cg
zx}v{^H3u_@#$+@ARi-$LD!?ZFy;=&tmVF$PVfV~*1qw$Sy6tKFUvs~fLG9X1GvV4*
zw;7o%WR3<VR*F8n_7y`lamXh(&;?dN0^)Qh!U9n|2K2I8Z|VFMxVMyHsxN;(a!4Vt
z-CZOp0k|6aCx1Jc?CRaxbwJoX49z4=BIPKTANX$WdPeTK|Mls6Z(wh@qUBnEF1lD5
zrto52o=?$uq3y0*z2bOm+R78|JY*m&7f$HY38{3xIC%mkn_ovMwuM^8OfPslIs$@A
zNc0m60Ja8UZ9P1DbLsIvNz5<Hyk?@ZtxDI`-=4fJFw$n6^0-3GkygJPWTt`#59_C(
zQk_bsf*)IP&7ir@t&>(+%)m>Jws$U223E(h5Vpx<QbADqpLh#1lAJmMN{(uVSp9Qp
zbt4cPY$GfEtKKb^NpsudK|d`*<WB-9BLoZ)ftx~-O*n2B_ec)cm-h3DUB0ZtptKgO
z$T(~-n{82;HQS8MecxH%o9K^rTg#jAc+v^ayPG!zR=vK8*jAJmBQ@v;GlPcoH_mDQ
z^joHb6HY&&;@)KE^{<UM8#nz>#a+zzj*|=!sGUG-5<5mBkerUN*W9|g%wB2}PHWgJ
zfW#6m`29%W$$m}tiIDkU<ulb^XwKu#YmP-f9%Ow}Cm*ZsV-EH3Y0p)!<^f^{5Ki}3
zB&-kETgWpm8wVI~5EG+`(ny1Ypv>MqqQK7}h>`b<^L8TUNMw`M9gaj75Uh@6X#aLc
zLp$nkO0|pb{fq&S;Kq7Tb{kI|+rtY>fZt%^42(Hjfz8CL@0S&4zp76AaNtc*Q4ndq
zxUYf8_4?%m+*OQT7tijp)T+>W)eL=`{Wi=G(MV8nZdq0kF5xsMB<TV=H3FRwwqj`!
z0oZ@pedBNQtl<#_jl9G#E9y4WA3dY%ge>8GJ?_7fG&Qy^%(GG`gRvkss3n(FfN9v#
z=?N11a(nw6Lv`RRy`Mw}+K%?0c|EdDyQmr5_<4$si#lmh0~bpsTTrwYLWTcWrZOam
z5N+4q==5ZGleN?nsr+;>+Jr<hAA#GrdRz!1xXM!atEXrXLMY1XEzO{iy>p&edWGMj
z)%RFJyQ`a|sB2C8PaRb}*e92JAhZRN$pjR9MD6j|$yCuURUvIY%XqX(z7oM1<Kay!
zQedTP=?h{6Q=|tsR-BxNZgi^d_8qRb7t2$~FYf|JY#*Fiy|m8v>Vr?D0*#imU@=iK
z@hnp@QdI*rnD(mU>S_rD{8{Jo;S;4I){26I27~se5?9EW-Q!&>i9ldHV70*QTpnVs
zW(K)_T!MfICj%0ibs+!UvAGoTb1*ZChrdK#oBi*Na}4!v6nB+i96F0cL;KquEQ|31
zS=WG!w{?DtyfEcIrqe{?6V?-hQCV1ot5S2pX#*!9*=MH3{_ThOk90QFLfo5NpuZER
z|L?08lID(IQ$Z@^^?<DaV3>@COThJd5`Q<qV)em#e`OY_dE$74PWWY!c=O}d#>9VS
zp&B<C@c}y&w2Jf+R~M1z8etcqa#=RHT~YyYgWBvO<96rRx$K5(KB|0GfJoa(lIdW;
z#>KZt1)pABJ}5ka(VtLOVwhZ6oPA5RB`&wc^kc~t@$d8zdKV5CVDB?Fm+Qu0x|XcH
zmTVI7ny!V^4>2FN2Inkwdi%64CD+@jq6XNWCDQt6C(WwKyJhlu9Ma%JLDP&9LU0~p
zxXs7>Ajx~)@Z?7=1NEAS+GDV5PHpZo1_<2{od)&$9`@y%TdnlxX-{F))Zz092UE4|
z(Ej*y1kcs@_)9(lPXV_Hwp->evbc|A*c3VL*TZaldf}Rb5?8}P2D-!`PT<t#g2Xkj
zUtcK_30NS!duyF2($QTTP7k{&m(&xwS6>}0Vq-sR|A4nzwz~6H6^Ue|@H-~$%tO!m
zs!m!yANi^mAObvozlp0*hvp1LpZaXqvYA1(-BqRX+UCXpqM#v0_c&knTD8BK7Ilhk
z;8K>S+Hd<lF>0L&x{k%O>7gMh0_QA<n-_&9Z-H7)>@8)l!;{aA%t5a#X#D8v`t4ub
zS4Imx9VJ5|5r2${g7|`}XcXKvn_*GOl4*(uGO!{%tg+2iNOeK53!7bC7O60YL|hiK
zP!SmvzTayBu7wd)Yib&)cftKUwZuvpLX;DX8s#U=wgZ3rBnH%tc+uAVc<QKJgF9H|
zJ?7BLdPpe&dK$A2&q`$8OXbmMi7&W0`Y@R&hUqk$FSb`JG3L+?0n4LdHg=Gn9)^-*
z%sh);Opq7UvtEI5DVD}v`DQNB^255Tzg|`fT~p*hh`b2#Og2Z?S$PP!4-&#yikYID
zhsf*C@(WdSMAI+_jW~F>lyEHxxG9YWaXW#hxki;vVX_`W15oErq{Waz`ecGulo*{&
zGQs<x^qDZ2P{qn8m2GsFhOyACy0&+}1ff8~{1|^AmMY^2z8a~Cl$WX2Q@u{5z}Q=i
z21E#83BC8>reud{Ma<0g@)&#`?pn>u0gdQ+dJR<h1`^k^r}PSGI?6;@<1GEOz}qW`
zMeuG}(<ABZ4C8KE7Nrx*%0jLp{<hGjEk(KFJwhqt`?9$UFUJjF7xX<W*z=>|FnC5r
zkLJOO-;MB;O0=nWPvIj9K&q0t`b(k<c?tpLZU{<)VIuj6N=<1$wl@{ZUioIdf8>&D
zaTmXHLulHGw=J<a(wQ90P&S5@#mguNi$|r6>oXM74T?guD($wC-p(JwIC;`68n-b7
z@94LoqbmMc=O%MnV!%RJA=*)T9TPv|=&W?b6{GB-_0~#P$;~#KERQ#B%#UYKDdh*M
zRVx=c$KS9<RRpm7ir2#Ye>?8ih@Xs!+GnDRqnklit1zmRwjWcO`<)wbH-%E^7I=0F
zkK7$r>>a7g_)#ul1pU?!<&x^%&;G;h6oA<v?@R!j0eJVefSA2>Woz!q-@#hE`|e?L
z(xl#zw*_mR-YWEu=~X|QKa~pno{9wii6~WbrmLPJ#$M@44ppxdmmjb*#T8MT!|31?
z<&Ntm;T5so?p{rhrj(8&#bZ$ohh(@Fwj~<wS3u{dO?eyPMX~d(cgSfl28sU(nW=G!
zj=6<3;(C8c6aj|@`4|aG5{#s5LsoT--$M7a$wLw*;hS{y6&$SXst)~wbGii_TmR)G
zZ)MEZ8$D`Tq@r}2;I^ct?OWR2U&s==CH-rsrFs_-S{U}1?KvZTs{WDm&O@v4-WpMl
z4y++jAn5W2g3uJ)?1n2Rs)*eQMu<ajs+8{_8&*M>OT%(&3DfM?v7B<cm9)>V5RplE
z8QL3Jb9&$UL9}euSIva8g=SWujBEgC6=y4;v<Sv%YA<EFBn(*^1#30+cXo4&SZAkz
z2QHtcaT26t(R3{w#Q%tlBSraekr4bcZbr52UE(X#Jr*@_=0uAa+Sm<+YWjI+``bCQ
zZl(`A-^|80r23>mC~q#j+{0zc{YV1-zXM75+_15(5+_C&iMB^0<_rfQ{8ebOo?h&9
zeu#|F$6f}HEqMl211bvo<mj)nmd1*O8~cA>CL&T(T=5X7F}W>6laPv@X-{Oyu$Wi1
z|1G?~|Mhx}3DcLAe))ybsI(&3r})W^bT(KnV!`W^NZuI!!#C0eGgR{Spu}N&vd+<j
zS$2yNA0UEJptu(lpJU(wphbCZ!LgBo{aBajYZf!QeCEmKFrtw+wsrJOU{dmof9ZB=
z7<5A1Nj1A-{vbIICC<xqNb#Xq2_%st!1+rzjNl;#Du7voQ?dsFCrs9lQuik<mRmi;
zK9F3Z5S$#_qBc1SSxX@;o$InGzmec?nEC8y-VZ5fox@t?6Tw4a0A$grR`_5I`ctaL
zk*@ME@&c)x;_0_TlSSotVKCe1!a=e4m8<N<AthIhl<E)g`${|+Qrpa~9qSFZ#k(1L
zD^}14%iqnyZ!f3h3nF@!sxG2QIxI>#N+~UI(Ixp8dvs$5^&b&4ldl|ZipxZ8M=Ybc
zOrx8y{b`xIE{{G+0D~1=dL{!O|L?$l@c{W<QQ6q%x&7-9yqo=)0FFE9I~$%d;|K>m
zCLS<0FqSrD#}NUgzeUaxj|OSGTj0yh6&%KevmM|K;RhPj!LnHm5&c@z)S~1x*%2Gm
zDpVbZ%3Azf_>y_%LKa-eu1*WaoMz4}hb++Ae+`;;tP<#~03LMeA^JKWPTM)jg&D(p
zrr}~4C_E_BJ(20q`RwHuK$u3F3U8tv+4+JiNM(rwL`@yK?CHH)mmO1)r=}~#A<j-)
zb=|wKqfx%?Q)KZ=VqULynt*L9wU8uy^FAPoeWWW5CsN-+l0Y+RVRfD>K%aB<`b2;e
zRp10bh)}o%KANs1m7$-6nl{|p#UTbqSdGgs=>kKA{mhe@s8o3o&kWFls<gjB-8r!b
zdM11sBZJ-E!o?kP`FF}nt9i*6!o{yL4W<{ejy*jG7&#NU*2}+amql18cR_k)FbkF*
zal5f2Cn%?*NbJ_aqw$F0jbjr;nE2Bdf5&pjsD_FHYKwV7M9}@4O2TKxIFspU_lf=(
z$SV$&*dvwW|9Qw~LK>+NQIkx&ZB&W8K&@$2z&m;&%u{IJVl;lH4oi?etbmjf4b+zY
z+*17QZ&{0-EScf0eL-fnY1fQmkEp3-JLq|^8`wYkwDKrQ7N^O2BYvBc#LAh8+?=j+
zaf=CnBFxk=DTA<CZt>{+{27NyOvD-sI%;D1>HMih(umtZOc0kNI9`R}9psEerKYGK
z`&XROY@;H=t++;RK&8ZmHAGTteAG>mEcA?mq!|flJe=pfjhtgTQU`t^75J=Cq&gT9
z8?TIopb9})>8OhV>xI|{Q!*4NA4c~W&bJvr0`_7nHV5ZG;M=5q5m_H}Mpqw%bEL3@
zX}`LlBF?Nuh@-RQ^u{q*A_1ZO)|lu++KtZe?b9F9*w@B+aG_3z*IJR7>K(>4U}Vbl
z*3wmKt=yw4Tj-uUtd*G~!ngh0ZAGXwl{yS_-(E&|b|r2|o=!neX)Q*39@22RF)jk^
zz6;%H$PmhWFs2mvWwfmu5d@3}#ug6_7lcZds0g@9N*)}#OHR@kEJ6B4)TYC{g_=*z
zgnQQK365(|DT@X6jl481<jktu{E;%_#HWZz*grJ4EG~eh2KY`wl>1(94a~(q*xbz4
z%tfG<#8TJ-3X|r~t4V30VkN$`7e9eIE8nDiCr4i}Hj?Yx=HI9CiYX{P^u>`=u#M8+
z40L!~e)+wv$%dcO{2Ar!;<L6@kxWyg=l@{y#71|VMQO?dwGj6oVWOiOKhNCF^Xxgs
z;WV5<Bka9kn&gx$lu)mfJpW$6>n=Jvptd3WqYh$zIB;}bP2~}C0b7pr0gVS<$V^J@
zdD9w4ioUzQZpQUa^)-rV<H18(#Vzn-Fu1oy|HY@<SSFA_D32DNBnuH|3x+tcqpnr}
zNnFk+;tVsOo4rsU0^LOpJ06%1lJ0|gwrO^=cLn7trRZav3z;~w1&rca-7==$+_5*H
z{<((XTbO@9rBwALPs+HiLLz~zXhfBE@zbT=<>Nw|h5ZNpNQxh&Eq(W+I~UHIJCQkd
z*x!--e_07jM@he`Z|6)+J}k)S5x<5){kq352j$eT?f!k$ayk#c?OhHBwYk4HzjWtR
zZ};a^bkl$B?;Te>RIld9`}g<4ZGqe2d<WLaE6^y^%3}A+QQt0y)VKmf02!1jzK?e)
zc1nLtbnb-gjPhXi%>uRSM?~pcj7evS1db^wr}P>$Ez0XEGQ~wIBGBSNMIbI$sVU}l
zFwmPeSh@?Nq-At8%xLJ-MR|jE$~Sw)X*5Dx`a#P4gk2OmuUtof{jeIeZ?E#<fp0{P
zq}B`1EBpe`dbuWE&m(MmA^M?xzw-wMy&fm5iQ$p3a<Vf1-xom+&i~bAJUqXoO>E7a
z&51d<5_)gQfhsMnnDvobzUhEZRH5t+0g>m<RgdsX7e|B(O1>u$kF*f`!faHdvpVv_
z)m1&9d{t+$P{e{#qNWEgccg3Ku;Sm(`*VLxuiif3bbImXXgNa<+si%pyRs?bxtYVR
zo4V0Hh^4P|@Uma#!}nJvom69uB4+h}%FJ%-MhJ@^*!nsb8xg{(-Yr^xoXp7K_kMY4
z{zuf0Y}b9`*b#rwCO=k)t>ZO#0(l%XuNkP8te6~Ra%f0H@5R|M0<Um$Q@01X494+h
zLX_>Gwla73VC`*P?rM8pWDt~4vlE{Z6nVa7%TtxhK-k^Y{p06g_*|m<(&v-#yVuD)
zNo6c8@M&MF+K*RWBb9u*+q~P^r%rj(dB${Q5<X|4?V{w;FRaBVh+I+J9|0?l-HsgN
zY|x0_67kIahR5$?dEON>Ehx9)*r7_ad=O+hq^rTg;}2Pt*mCgS31xybj8}!XY|3ua
zfLyZ!w1)X4<yk2E9vm6QPsTVNTj%YG%9`+e;NT~bdF+)wl|T0k)vq0d{`N<M{q?Ju
z{!7G<@Z`Gf*TZ>xI7H?mC1nSjb53zK-r;xdDTryQwHHCTcx>r}ql!&WPFoGmL;1px
zDWc_f6L|is=3TS>or}|9oy5W#*<z|;hRv2lwT3y$LkE?;EW*#JW|eNckOCU5ME|@%
z;A+e3>#n(b>ywiJFVpu*vC%w8dOoe9SP~6$Czx0sb$aR5<?d=O_6OhMXL0lsh5zQR
z!&{+(e0Xj}$NPtcx*$fpq-X6W5fMi}oQVOa@ae{8m3On{IrzpYasYz0K|=vz`8#Df
zsC3yv;XsK@r&N=1q}U<CdH-K#c+_iK03P3-ShDFnzqtoDjs3+#FF+nj3k7Pb^fppw
zn^0|>nxUnfIe1`^Xx*7-CW~SR=1xj6v1qU)#OcR%fpRZaD#iJ=xAHGv)D&a3(G<wi
zOt0777OlrepJl|Y;vQ-Wanw&EB@RAGB>Ayu8}GA~cOx*CN!&3*mCKPS*xj}+AX*h&
zHhB_AvbK1;%d>p<3>v8v$d6x;I*t}HVLoxaSU7Kctl*;s&rDA$ENtgMJqgMhz>)tg
z82*b89t<z+?wlR7$Hx8Z*7X)Zf$XgvL^((<r^fDZ_T4<}qn3yIfX}=8EXioj@zL;o
z`kY(`=wBw+zY)Lxe!qf$+@F>JgWnroAFP$EL~<om1MXv4AnVLE$brQqxr9)lf*(qn
zd9W8`5*CxNQ)raTbeSWrUeA=jKP(Q=?YX8Duy3<`Z_+FAc-sCb8U{P3buwAV{Ek=`
z)ne#%6;NGOB`Qyno9Tfh8@58LITxapjh>}YGRntrMhT=Eh7no%`s+ClB!R_TWPFl%
z)YHMn!%_v2WJXSb?LaXH-WRl2N9%NNFLl2=b5ZJGh5TDTsNeZn8fuhc$ccj9J1Y8&
z+;Hq3<je_T-65{D-K>I;36>jxPKt!pcHkRaGy?tc=RuZ?O_J9V>_e9}fara@{4(zr
zke(R8t^35}ROyT+^=r%mNGhxI?|SmxksL4IXm+#ev3|wx2Ti4Vn3sPUY$N5tOE=Sx
z8pB+O>=+;2xo(o|)gMajmVLkpU}Mx3mx`_h>nBeQQ3&#^h<4tIf*HY5vh+rEZ|C%%
zK6?TeXo<dDFj0yS{sKq>HEbi`19?t2YeX3?ZMjCquQI&yXj5=N70e3HmgZO)jsI6B
z>Bd!sFxUi&^o&<|_8ukIgs>w2%9+MOqhG}y2|tyCWG?2=u8r%~zjos;StedZjqu|h
ztMPNX7-<}lYB18+&M$m(o&f}*eVfOsEndnj^@?Iuqh9NouWm1I@xZ{qw@Lo#JYC|0
z_=}gTVNwqo5khU?N+(>U7=%jA>>2Bb-=CNa#-DleSN&fxBM?^@uS{t?*qZTO4ndaC
z37R@-{Z~E*L<Siy%rxiK*(rey3I7BU{S-8MQi$`odt;iKi6g=fbTsOs(S(=~;kmNK
zz@+ykxzKBjS-l-^@6JEUc!tn)v#^@q=cs)jzdsdetK=eq|3lVW1?3TK(Ym<1yL)hV
zch}(V1cv~@8h3a2ad(H{?ykYz-6cTC$v##4-a574y1Hw<^ut_Z&iclf!m^*6oHF5r
z1>mdQluX?|r$zEGdTHshBqI{CjkJg=1E}>K!luE_lKpT`fgjn0pN9{Ufns9;M+}{a
zjSPtJ_~a;U;t-G(aBhPAXly+B$2RQ)X^WI>`Tg$29r4mM7RsRD(O?>kJdEu7O0`O@
zq@!z+WL5C!0G_fF;|m91Ye|c+L9^nP(6POS<N~g&zAL2I%s$71jD3HqkStMjBeS5S
z$1X7+Y<P5#+Q~F@YWu!f!GpFq!P;9b)2{g)p@x($g0frCL0uRuSE}G_YqX9+tgJOm
z^vH6EP|7|^U&X}d(}#0Hb&f0->cm&M_OQB3{JD~*fu(=^1w;pMRpC33qyh*rI760j
z*A&Ddx7TElIb?BPQnV}#+(MjcS?dSeaygQ>>(HM}#jv)^a#Lj1Y@Z|5n2uZ%#pA@k
zwHTGzV~b16Y2j9SXUzW?BZ?t+<Bhi0i@9SJqc#w;YUPkm*fV3H9$Vg<TdIn3B}Sep
zNG0$~{ly-Xv3LXYY|&EmMO01w(mf}YR*-lui_L~1@XAZKX3wy=5XR;d^;=s~R_?}%
zgDe~Wbd8{eN{l4h=vgU8hAiB(hG7o)#K@j?ow6maau1oWCmkVVwTT*rkL<f^VNxrX
zt?u_0RrlK8NV$S4IPMrRya1|hz?Udk#VgIG<<!PH46pzK+e~PFe*zFpb!LH*Xk!eG
z&CZ)$ICU(#zSvS4f6=pjmzN=U{H43AX(O*Jf#&gfr<-C<`zHg=&wbn5h?gfv)|698
zq#hHGOGzw_NuqodCds6pPvt0@c*PIh7-n^@c%S;{X>PstFB3>3THM=-;nx^k;R@%C
zhw15Y43$7+whmiR*yN>u*U%2?iT|0WaqnmLBT6GJG-cT$U)I&LP&-w-;}ysC+)9e{
zs=-98RuYtPL3QcacB04dKmzlGqB8SI2F7K&>y-D()3Re~lHyo-V|Q6$YCyhrhc?1M
zTy5js{5zy-Oax=<xx7-s?cSeotPBMiZ?6g~!3tn3ye-AS3rEK9-@PCQkGYPZriSjI
zbm&gMr>=L=P%|0=zCFV$sLy#r_GDXM*+*nclh&9xW2a!d$;7UWUAg0)j-HT`HT1r&
z@%Z#B&%FQWjcf=*<`%4g2fx<x@Q06LFegW*oJ`^%v%E&2dz@4@$F?L1cu$0&G<t~w
z;vf*A*@~VWMlmF(2WvkIj&W$>jGo0}EQ~dNb`LryVqw`C%f*Ex10Og2?Ik-a$xK#P
zMe?1pL_kR+P}0J)wquD8AqTy2M+^B28IO8)+q^<12rZ?(M!nW9voHZ<04?5*U0lMv
z1CPq3A$6yuQM?Gb*jJY4F}6&lHjfK(K?AI@3>dz+w>sVxngp#RnAC1^TO2?B`SSYL
zPGh-Kb4!)Xno>n48!n;P7PA_&?GhAHpSEE@Rv1)M!poITHzep%%1!YAql4}tSO$h4
zAO*8aR6zCQtWx>F3>&L<xo|1yk!l?x_*RO|LEKFtWhwR@JV=a~U)QF~ttBb*`~YAs
z&2eU@EWZ&5#MH*fK70;muOl;Z<faddZdfd~pgYLLa2>Oo(A|dfKOPHQcrKFOck7}q
z2E49ow@C;-(vI}bsRweau}*{Gu}nt_>}xFnP+*%i1<F65c!w0Vff$j09OLzM&o9c<
z(h;-z4??$I7-a&rrQL~Zz+ESB0$d5>x&#RB#<_`h%a^dTG7e8@pr}&8Sa7r+LM+bF
zQ~7;`&l}38#h~RLqv7fy?J+jVAm1OqfF>A7C$}yDa|zuFIaNyVQ%}Ln+_D%<KgY(d
zR9)k%Qw^P%u?;;x`Z`W+Y=5!J8wZKG#1*v>FQCVf^Cy$nz2Yw_x}^n%6cD0Hi384)
zDre4s1cBYgLWkFnFhG)J-g=&Qk-9TIc#E-PAZ`y^%C4iqj*1puDnZ>2?_7Z29=mVw
zQ>3*55>}kKV)OTU#4(`%`%ohQKZfe#{MX<hiH{#9<PUio1Qb-VsN+}2=ZEkCRpzwb
zTs0-k`Y)910e_DSY{6YgX8@HEQ)M+SO_jB_FtPp#MFHjIh8;<<(9g2s5oBy|skpd{
zKPcm{Uc|HHprByhIvpinC>MiZEws45U#J5m{^sm&xumcE^UD9Y&eNtFn5sY>eW!`j
zfci)N<Xd#_eC3L=4`Ekoz7|2IKyR>P=e9PoNDIcW*Dl0s)!Bcr3;>Syc-S8NwS`1!
zuzH;XeN=wFo;<7KR+*YWu~SdV=D4B6f25qioRf%_Z11&&2h|Y6``a`0T^Mm<3xLUZ
z-z#J(z$<H5bv+}8(%KPBAMP<}=}61+2oOA;R_NwL<9M2io4>rCz<hdEclPLLJM=<V
z?_l}+#iTgVV<iMc!UH>`k^4vRpv|7fC`M$Al?YCX0E$lO7~k4+b-}0bQa!aQZ3M1G
zaTu@Rm!I>Rqsu4Ohu`^%dQ+G_)Q7nO1KkwlrV;;mp`TVy37%d%vKnx5QZF}WL1N7w
zdH?ncmEs{x+S;_1PNIU}ES#mTgi+IMhzwRfSbTZ4Vb|5+F$Fjo3WR5svZ{3T>D^N4
zc?QW&IB0)18t7`GSb+tWsH@f9Y!F=17-@_3X<ILQf+8J5Ir$dvGEM1rKXhb}7;{c4
zI47>P+E(C2(+WUAjs7uO!{jStmUM?be73P-O`><v1{ggGa~!7zfyr={E`~7a1vAQl
zP8i>^{rG;JssX7_3b9Qkl$9hjTuERdWZj=BlQTaAak52X0nr4S(RN76)oYgsB^>+p
zb3EZUx2@&Sm(UxYUYXMtm_`<aEl>m*nLg{=14cE*P?x}sc{`4;qAG)&T3oLc!E#)f
z2&rCt5kXh+YX}szCe!VwsF((1J`xu+j~&=+2u9YK8eqKFvWF!!c(yr%@O|nXYEW8L
zS_D$P#z`;;@^tu6Eyh9=GuK&&Y*s_#Iv^4vFH2S9yRwo9ZD9%5vPq>ywP}-YyKpDl
zNJ!qf<ML&vxxlRbB&!pa`fs8#we$X1*>lPXsEqO-%r%>(gLke_hw#4HMJdPM@&rT1
z6Im|LnE~Wpao%)Igz^f(qnU|o(|c?7dMpE%5H+gIIi^ygiukwGqH9|TKS$~L-Lp(i
z1!%JP>iVf*3Sw%9%si7CYm;%xpL(WMQkASaCdxN-m&*ciBl|HkJuc($5<I*DraRtd
zbp%-10-O<n%(REGKn(Il!u3N8&V^t-Iv&_wAK(!3m5-!TJbY4-OQOe8Tc%6^N!J8K
z%i&{+cEMPX#fW#+L}^@tGW?TxAe0&3C4HpsAi^Z0d$vfsN#Vv*$&M%3U^6Amu&H(K
zW#$)*jd)f<s0pROX<Y7cw*~j`T^H^@k9T%P&Px_fzU%C-!?)c_4CDRGOl<dK)GSFE
z0w6P%*lj24v1VfZGWVxGDiu|ljQ9;`x+OdTTMA}4rx;oqP)*pdN?s@;o<`X+!zG0C
zspUPig9nrV526L59bDa_HM_(E(|rkNDG%zVPLW@>?&wLJjw<X?5AyrG7P0b?1wORw
z{ZRds?F~sZUfzl?5*tbN!qY^7Kk!@}0rrG7<#Rsvm|{G;um8AbA^Pbt!LM4x0|BD?
zWu=iQ!HbL_HwJg)0g7B1Y>$e_ovp1sW2=}EnY@a_2)6^5DW41iR7e@<p|2=WOiO^d
z-AAzvsj+SdBdEO|d1%DcPB4xg7bJqzS}8#yE1}JI9!2!srI=|-^>i_@HN8p^80TPp
zw#iZ)*I+Lafgb~en~;D{>`xdQ1CC6{q>I~8nSPHUm`u|Z1ZG@2vh>zM@j#MTYqhLm
zq*-@C^i=JXs?z06MEvHzS7_4Yi0n<bJAWY~CxxK@2Uz0yFR;YP$;$KJu?#Oe=KsuP
zcsc&>T&6@@=|4$M-9B%W?%!O|qK0|A-Le&vTa$|;*Nt2Ys8^Ge61nC04nE(Q!5Qgd
zR}bgz#B!<Iyx#A&nMrZ8`-9?v-=5vQUR_=WqRsQO-o0Ke9j|AYZK2lNa78#(py)>k
zMo~Ab;Q{&KF8%6fT$X@dgRQ+ECCW2C<5ak>z>J;S-TwL2(daTr<v@%nv(e-p(xeEP
zbG>c4)$>OCu6Rz-ONv>z>+`|x>3Z<peT}}Yq&^7$3ilON@8I_`w<K*J<H{lbTT6_7
z0kIe+dZ6hD-B@eo+K?yT;wErm`2ExIZ`V$E!A8xf%ml}`wwd@}o#76rZ+C%9F~Mo>
zfH7`EkmXlzd8I{^`O^$-3jt2hoRm$jTzEh2g9KLyO&0dSHu^rf5p)pzIQ;z+`Hv^X
zi=>UUchqTDPG;)u;bk-UzU*ifb{N6hcIr_HZHIxL^K0|XIQ&U^YQr|6rRDl>AmKFq
zZ^w*fyV@Iu{~-B;fdzqgRW5psY`%J70F-y|9%KFu{q-5GzkFU6URPUbCdVTQjpU6L
z(nkP4C!0RS%tWD}^rGMI;H^_a<Pc_m;5YnIyo56SF@_MMSn-EbE<1Ab7f!gXdWDEk
z(+NafG;N7%`zwURPXV?hUE>6`668gV5}vEt_E=^nNTc-@CtV5<I%13p!w2y=022W#
z%EF3t4i|!vY?)wB9kASLcm1y0v(SH(0hg+icM82tCx5jvZ;`Rm$f@8{j>!eBF_7G{
zJzNWUSalC20&~tvsh(tO!$F?H7IN?Lk`k-jcUM(T<@{&|4^!0I2&HRar){7tL~VFh
z0cx$?*i2DR4d_unr#`Qs0z<6;vcCF=jl*3@5H~XNJB@uD4cCr$9~4tGD}g{5N8T9l
z_T^j{Y)RVqH1^|K8{}oZT~of8$){V*hUYqw)FU&6aa&<;<diaDIu<s24%aM8a#1dr
zx$HzYPz~fuR}#l?FtzgMNqG6frhemR5-Z1ef#1&8JL_|yFzDQP3_E9m-`V1*TG}Gk
zew?+Bej6V|!I0lFhOCAZx_L<ybZqG+e$&hGOOq>tH`H_}^`Q8G%%b-y)gYwEjgrSt
z3;NbW>>*j`mUgNtFAk&z*oLLr>69QfO=qyO1F-+1UT&x&Z;*=bFJp{$s*=V3nZ*B_
z?x|H9LFfID4QE~2@Rv{k(9WOSsGYbE^^=~nDmPk2Pmn^ENfj6<vbya$_n;r7GhI)E
ze^oGacs}b_H?=?!_#8{ly?gvkuK=$Yn-o2onH|MbybsP%QX&%0Z(#lX-gp0N@%X~7
zyViNJtJU#mRmVhXQ)NtTwjOeq&C+s#KZAmNg;>^<LM-NBwt=NJQ2W+$t}jpEK_>OA
zZz%Lg-^FGt&F^wKKJDebWrS-B(rli^{|EQ7f69NCHVlr$FBf`GNIV#!>K3d>%ImDR
z^C0JjLr8{r+UmK{Kz62w=7oo?${JpW%a{KY%0i0_YoybRT>K>=_PH6-XsM`F?-(9f
zPL(ROjGfVb*|_EokYkAI#gvR4pJ!vvepgNg*HrQ$h{(A6^ZPUN5X;y0?mNQlJ{4`L
z{o=pLwWufYIiQYbmR&%L1jXmJyxh9+Bq89aJdax`gm*sa`JV74KVz`vXqC|M-1bYq
z6sCo){Lf{+v)q}V*@9K*Ka0JMXBB5f5y_qTpS@O*In}Uv0bb_EF|Ld-c?K1GC#4aO
zvBZ6TDtF!aUXG3$rlQWmC!(K;jVReGf=gVM8!Gy{qx_n-0z|kLM$gBOYk`=S@}t~n
zwE6j6Dq?zu&2JXA=+@g4FUZ$oKjjDyBgPc<?YFiUE_q76O!$ZVC^Nc{;1zlOzH!_D
z)>REza2;vZ2IMIDUUO(xA&jrcO(=iI>>a!frX8B6ap4SPx>#+d&0sGMH`Fs$?R633
z+<`L{#IL%yYI!{{`*_E7>`r|8pYqSk@!z}yPHwjUul#fWZ}sQ-_ez~bI+2b9NY!zO
z-xxukvHpXwESl(Ma^<qq&UWA5Q+i4+=O#pihK1&wPn|m~jb)i6?+X96Bk;~Hp}vHV
zj8Y$SbbWcr@h~Oal$VBoFgf+NWJjs{wfVLA&=d*ae!BlNxc_DZDjCaQ8(<{O#c=^Q
z<{x!!;Z$eMWFb8tUY@SyeYSiD-u6Tg)7e1Qd{aKF%(Wq;9X;v3^jI<a*VEO`GxC82
ztT(3GZ<*_?)=GNs*It|2pu)PW;J>Z%q}mWT!&;sW4-HJ`9sItJ9Bo`N3b|=JVOruG
zxrjL<eWPV&n5}w|F&yK|uG9xVpO!m2H=Zs|>(LczGc<1zQNB$wew_FKyr>6ty#}&_
zu42|Pg#GT*d~r_>m>%Iw#TvHGKI^-twKt}f<|qML;22*r0)@WTL*x@@Vl$=_O#3sU
zTIyf^frWpE=eH-lJ4icYOo!Xua&Q&LC#vdTWqFX1sp^F~)urJeUr=2Wru8v6=0^6=
z^4kpeqssom(flJ>P-|ot*zBkVwY~{WeKiq~L5mvXp7Kc0Lb1;4NTSxxX~e4`&8k&l
zTUyxPJf^QcnSwj98cpXT{(I&Q=M|1AkwQ&|xOYt9>oEDb1QS6`)z)NFS>2}tTKE-b
zPUT9IJ+CnrL*)sw^Pz7R42MGy^mm)*G@%_rE80yn7q3JbeN!j}ur<`>p=ik9;Pdx<
z2;KzvE0|DX#nkX8oAa}`u>BB%rg<Bk`_49P`;_ztuKs!uv>g^pKJ<QlPnZcvTHIH;
z{^3TNW~XB}x7&L|^0E69brKNMf=oLsu&Ma~QqY94)8$<cfP%;FUPFVO&-%*^jrO)r
z+i~2Lzqfz8dOHJwyp3L_UL9W_LPo>dcxzL|C$)a=UtxZDns~<Kz{fSk74?+6s-$+p
zY(=>id9Rz*cjbcN4{lW+>)*t#yw(%=ijBs9&@>g8=&_{Ib<D%{=5n|}jTgDf<PZpG
z>H~`ROFou1{%)day3}mnFo-#h8}W&0uYV1bL+hPrV&okFx_)N`6N@9=djn&0yQPui
zmK-I{_WB;SnC1MZ)6}<>!py%COxkWV)UGC(6dtw1C?lOFT3O7P>!`93T#>(w6z9^x
zb4ALEFQFq%>}T^Qz-9^;MTtCtNs^9#W1M@*CP1<Ak0f9QshT&A;<Bi*6p2ruGtA8M
zYq^5dsOwMweE>0?e!8ufqamd%TBSoVb`bYl`_3vkj&r}KB>|3JWD^m|vW*bUARMHO
zk$;5Nw4F>#RgCrcm8$N<PM2@_+aI?HM`m_~-<m6yF-WV4S&ogaAlDSsmD96~ax#16
zN8TY0t9r|@Dqua;tKc?fp)O*LR)$q21Ccg)Xwv~mUbT=(@W4tjFqUU(Bifn-l~B+J
z(!5p6ivI=|gIpTKB28AYg}A`@ouoEiVL>*V{fnxNThg1n+@cGs_iTFZ=WxLWE<F{(
z1U}v;Q826L9!-u3s?P>^T&+{GLCgzZV$BZq*KxVfW93H0)%>Yy*#M$K);o3^*~#hJ
zh*f+b&n{v~8+>uJ=LeC;3^pcye?w2D`rJQne@M8n%jA){V~ufdw^zI~a^T^-0_N}z
zxt7d$Wc`s7G(B&d)7cD_9JF)cjsTk7`ytC|$mY?h6GBDy;c3ZGMMoWrgk7HzjC^j<
z$6spOGJ1DIjr3fGi(4W22W(}0>`0L$gn9{pLK|IVx2$Q%+xgxh>C?rFnrgl66Cu{Z
zy<7=BdUmM_BA9Da7xesl_5JH%TNO8XGP(6-iI1M{9C5bm0e{<|*hf`BIG&-IhVidk
z*w3=+;E<8-f2IW+rGLeWq(~*c{)aQ%026gXW8DJE2s;0Kzb#H}9Uf@bf(^@B!?+A!
z0Dpo)+&AvYBt1MPiJCo#-x>a$&?>(0A!6pv33u<}8{Y@|wDo&B-}03cv<etzt$Af6
zFSFqSO;<4ebUJQ${r1y{)TsMM|3cr+({grygK@_Gzk8Hbson>a5(;Ie5cOJeDIi|A
z-u(R*OZH0kYfL;hg9zq;cnfC}=VA|lzSMjMsO=pUv_O;g2-1qWomLH2WP=pP*)#p<
z9Z;uzFCPlzPNw;CaJM}3iDEN5M837UmotPJVe4TLFC?AjljwXq4@@q?WYQq6>|uCb
zzIlWxa62t2?`fHa-;F%d4BVyl7ovWuUOPQA<%zIP!g)WJ&>#A$FJ4p!+pY{4vX9xl
zTTlO5<sEz~IL+DDX{JnMD1{M40JC=ucxn3C(=d=5Tv1HGKi<mNN<Y+|tT`85wsi7E
z_LPV(n*`{}VE3kzQEU4VnuJPxgqXIGloAAG>3E7>ao&;9J0Nm0)lDK4JoNG8C$8*~
zSEPwA63bbZLeCnJ>3YtJAiWCs;$+Q(6t$P;iIMk%4=r8{>SPn}DMyy;m<z7$lWM2<
zx;yMEDT`k~DFPFGo1WV4ViRyI26P@vbN#iaQ+JQ1q)Oqt)~7SG4;tySRN`_4-~H?m
z!Swsjf;Msd5-G~sq&$l(9tZ}Hc$;#o+7^52R0}P7kmr-fJQ;1R=uZLN^E_4Rz0x>#
z(xBN{Qcm%7WOkc26SlWZV(ft2h!EJWVs~+IwiJpHL<LSlPA<4wwT-R(+9O{uvnCNK
z8nMb_@tIC5A=Tfj+<uRWuMjcY!saST@ZoT&tNRl2dD;}agsCx4Z|~=W67u3`zC&$q
zBgUoGUf2V5eaJ$7NgV)P+aC!c`0Hq2Tg-X`HAsxK$^b+mz1`HpYP_6nkz4gCxjoGx
z-08O5@_zFvr~q{NvNkY&te_ZC<GKs11ACjp+~7)+PB19<xU}p|ZIOem0+?O4F^Pu-
zE@RrV0&3V7!L319l8)<J{-eL2uyM_q%KwjSVfs%z6YqcY$bTN#**JOst6TW~SGVvb
zl2Zdm`tMGJqv+SOcAs!GQjh|0+VB2{&|`5Jhz*olUkR~HP3D&5%oOiZ4(8MJ9)X+7
zhct@#($i!RKaL56k54DZ&Xlh}=g$XyRLX_HXO@pRW>5c(-!(D@`XBg)&m=jQmn4{5
z9AmN!KW+}~M|(xRB~6NLRM_HTu5%2o1<8QNz45xayob<FJX1ORE;rYXhuyp6?xN&B
z<{N6NlGurR;8Lxz&QJ&Ea~}5=JKXAFSR53b*Tlp^LS9|gq|R|zY*f#}ydU%5S0d;p
zBrXy`(X1Br2uk5Qq&Gr79=8WC&yk$62-w2{ujnD~Gp!t<DTfVPN@ZwlDH-LF$+3W}
zWOGz9vS>$ezXWQqDIb!bG}Z#y*E|NB?^}P_bK__p76;BK3b>Fzmyf2)JK8Jfhk2e&
zMTD;~gPJ`IM;6y@qZ4uDS|<0r_`PmBi1NJYL&PCyZ~tD61aYGvyug2t)l!?Ss?gA-
z=$Bi91~R=hY^JO}<5zCd^qt?^Q1=1Vor}XlxO;r2LSNkB+vf633oMu9>c8{Fa5e~u
zL&QkT!B_PI^AqUlDnvFAiWtx&%2t*ciS*d-uo2dd%CQy)EW!QN!o=yUODFwc8JMX;
z)gy}!k4t3K#pA{~F~%ches<Mr-yy!UmXD@Od1sQ3e|JslFOTycm#+J=B8>)=jxR^&
zmkuUS3ze1CR)G&@NN-P8xtyZdVf-rpoj=3aUx>gmdNOk=Nm+my<`&QE)iKA}9GJUY
z-vKXejv(`{dDKOs61}!deosPfi@F)$^4db8k|{bhXOtKCNj_%l%o&<ID@+(y>DoF`
z_SRsYryi25uVq9GXE0EdAh83$CApawY9l)&iw%7uDp?PM@>@!SsOqu}LceaaCcS7t
z_%pP~-eFrpuP0~Aa9*(MYH~NcG9XQO4NS?wCt!~3XY>n_b<FcW6Q&w@go5Oh`$=<-
zvBnrPFDn@!-58h)FN@5$5xKP)hsA?s3Rlw)_@PLw1%Gcjb2BqwEe!z%!=@67FZihu
z>}kmZGRutj=ws;9>|Z`^2h>U1Ex$y%n^#q4AYBan;BG^7I!2n)<DjykJz@<47na5|
zRcIi$jEdDY{Mzu7kRM^-wD#~17&uhLyzSQ$YSE4$>c!OMicu{0Quw|*&Y>E%_2P(%
z3%LeF@?#j7I#?vi*2P8O&iPyo3Iq>EmNcTPYl!j<iy{PL3fC0Y1{%k14I6)f_Xm9b
zd#J;f$k`v{G<Pdjv89?dzkHic`!9qFL2Ich8>xTi`)98En~V&nqjR?Mye+I>BLCdX
z&zryUy|%uT<@|x<N%Px5hC&HxBaYf2H=(l)@0wI)%7hsaLcU`GGL00uu*%8Gk@eDT
z1x5G-x2+$~cKcf>b!=^uWs)~vTUfxH6>OaKgS>u<H))A$fJnh@t<7f3I7|$04mUAM
z9EsN7PcWd+E`sLql#Moy=*8Gnzqoo`FjB5S`N_GCMw_;{8YzS(Ns7N-mJ+Kfi;cu}
zi`GJ<AeyF^5Y1fxbe-eI0aHwqi^6e!IIz_9xzTtgJYU!XhSF}amP8IxA;skTz4XF*
zZsE)=7gimVzLW+F)5ol_TqPjJg&u7=kU1SeG87XxAqwXQ^`Hs|U}KUg`I7w>xDyK(
zuRDgcN>D21XxN#7t$*sL3jNEUwrc^IhPDsPU=R;%&R{SCGQS~d;9KD3>;t{N$cYYY
zVauTrqQ1yuc+k#c;(45Iqvw)@DXQ-^oA11HD^QB^Noa8{S~brX5M0?powSpXdJxQ$
z=U+jY(%OL;Vy@YOo~{#f3Oyc<fXEgT30bf8GKT@Z6++e_oP?k3P_1jaJV=2RUZhCi
z+|qirrV)%l!)h2gzh;q8L%!h3L41aeJDi(<6J!2|Kr!-@u&p`b(1y(*3G@z^oNWOz
zUeqRsgY5fW@HZIYEK(Ukxee4PuuU(=W^@I2`lqY|xWwo`VkhW^5FN+71BU^%YqrHV
zY8OE)Kc;Ag2DZO6>>_&*Y=~~l!x8NKSXq#Uo3J4S%wCk?5UA3A{}>WL7Y|pj<BLaY
zUj_P_3luU|vSk>(Mtw@)pWcfinaG?<;48jsbCPrQT4%9F^m|AQh*z(W$Wm<wh>~$a
z4_I~m`zha0s3dDg!*gWa;ZCz4;gcad=G6{5pvVU1a7GAaJSd<(Y6YUl^aw8*TLZgN
z$wNAT2j-Gk@(>EoKNcO>63(x>qiDKT4agGi<s<*jCtlpiOfm9@{Fn}e8aLgJ;Q3_<
z_4lN!0s63}3;g&xibu5e{RkPJ1dN_W<Bs9D=tQJFe*kXL{hPxLoQ^qV*s1F7GLk7A
zd&(ikPL#S11ot?(EAuKD)y)Q4ww;AjrIj}z^zt$dhf&;K=yr5{wW^@4DV-Iy($|-a
zul)1TcMgBmj3%zmT%-U~+7i1~OWh}$-Y}eD)<8Rd@K|`6Yn?2i6|9mgA;4K+BJb;t
zL>feYmhCL+pOS>*uzYEGrY*D-*(mpmn0c>1-x?lHtvK;Jj{+IsYL3(NbWtx{_;Nyl
zcyOH(#MD7uol1Hofj`(k$D+omdUK@$_i$7f4fqgEUbnLR=~^M-aVPPHx>R1tQ~2<V
zhcsL~cL*5k$|G=DQ5Ih??Jli&#eb#M2E3+7Xm6FgD%N1+4eZ<2L0Ka(vL<%_0x>gN
zDK-Z{A4N2}Q?k-f|D>U+mj#vo?wn}=`2T`!lA*|sTG6^=JNH$L8J$f9xFOlY*SC+n
zEo(E=aY9MS=dN3(;|XMKi$AyWn!(_?TzreuC1R7f{xE%TbO|xlE5*mCF?A;zj4+jK
z@Zb1T${5p;?5~8^Z?`n|S4>hZT-q2@igDCI3eE392~+aErZAjrUHb7C*#fH-K%3r*
z^99N=6@yJI(S=O)5QPWl0;=a>%w{cxW~!{HnLr^9>XPhWLZFsq0F9tbF9Ha0A4|}@
z<ES1POz(MvDxI|x%*9!B6A24oG|GG(*z4-aTB*veQX$7Ks9p)5`t|H<p!wvSE&t6T
z>wz(S11CJfVr6a9k{F7hB+CCBC=S3f#v=f!x0-rQaKk*qw0~<|*>R~fZzC}>QbJI{
zU<KK9*|3&d4NfKFImV#cf?Dz6%ss8=I?+fm(d@9q!JbLB--e&G#+>_A3i&1~Nd)l(
zKd3Cw4a(N5AMP#!LQCi83Z{Y>M%39NddpFb77VIcl9}*>PvzzG{Ma4=IdbT)3O2FC
z$9{MiyVSL>;L?pMM(>=44B05R9KB{_x^5IAF8<ijUo_e8BWJO7ja<;$^DB(oE2CBd
zk&zbVwklrGq-@q{m;AxWrHi2tk3MEi)4|4TaVYX&Bm->=6C6<jSqE(aEzMw6+rmUe
ztPd+3)e?58qv`v}BS9~q#kQ~aaosd6m2}#SD~i2>{oIaMU&~W1Tn7f)mR-NP7~FOh
zV%u~XOMYjauzv)J*5O=p2Le6BVV=+#+HlD61<xLduiH$oje1z!iqV;($_t#gc_m(G
zyLvl^vk-GTVzrI-(wN?H%z+&~ZH|$<=drvhh6>>ZqR)^X!JY|FbcqU@yeN%175Lj>
zL1E~`U=FU?S_E%_q2f<gG1=PhR}YObl148c@;0Ya?h;a9q8rt|cSSII%Lys8#H%L+
zuj234Ig+?qRK;ue?>o1>!faMUz?o4OgD*a)(Prc>e?Fam<e0G@mpumhOlGebZ7lIy
z;`7BrQ&ZtvCK!PFu@4(cE!N*_kn}9pG&pBJckwIn>%N9&DnQOX=#BM7*;52@51{}*
zTn3H__1^xq5-v$Ln<~?osh32^bMNWk#Ah-V{Lk=+?hjpq6sNT5`?Xr_f!d2p2Y$sU
z?^Z@;Myh&yNrY1GnlZAilgZUlh}O{Bm0X8*yR36p2@AmL0KlGHgks-E`*UGzoDa2_
zeeOM~|CK9WHdb;srTxZWw73xe<HEALy6tF<EJnm@)hlh8!*jUF63nE(bsKLrj^X>a
zLSIM1+-)Nlc57sZ-iTtZD~;YSIw6Or;kYsY@c6iUcQR>zORw|&cJ5(_!h{s)X1qB#
z07!DWc!3Y{V)^ISD5hV^8^H>bv-na5T4<pGbF}Z{8(55->_;^LqPl(!_F26%Fu@fp
zXhvAm-M59z#;+I_;RRY0Ca7ny=7^k`sm?4&OSHyT<HV-&)%^LC^*h&A$&g>d147jz
z^~)Ba=;0TebQ00O%29jQ+iKt?5x%T}Z7y2v!T>mEU;cc4Hw4q@(1dc8z~ctT(x8r$
zipzB4TqQuvIyc#x+?^N9JSfBq4K-H4fA2<kDyY@ralrK*C__gVBz{nu<mW|UyrJjF
z9vQR!`dBsYtQpc3im?o3R~-?`v}eX{?p9E$D9Cg#`c6eHaVFX}{%_yL(7H>kptYMb
z1`B}pGg1?w%S;`~x<GWhR6}XY9$%f2F;$QJj6WmHh%V9apLgY~x>!)lD10fIBdebG
zNe&Sbc@e5?nDx+-z@@Lyi3g1D#tf?SP4mD|nZ`0e`PAZ-$KSgK&r!av%GKW=odPzw
z<chLklz=_)Ly9e$CY2`h(H8|m*`C_ht(nE~?<Zmg!V>rY)5iU$dE@(U7stWL!S~-T
zjxF6(@88y#gl}|!u7lIR)VXWxClxrDD4G?H?i-fVvP0%G{L`b_$c=Z3{CrD(E6PX&
zxnY;U&zG5=sRS%bTDUn1QKagxolP9Gf)7)t2T9nz;{&}Pp52DN2EGROZDGK#jibq`
z;bHxfw4PgOyq2yG!(x`(l9x~og)drrTlaRIUNi_=g1v9RiuivJaMQ)*>HW2f-rnDP
z=lAJ6Hv=-#IP!ELk&d@Bsm)o${+glT`XOCYo1^I}ZILjkal{ko+;@tbCZpS~$BPXf
z0KN*>sU4(a-_N-@WVsE2!@p`?jOa5%tsR=|`-7RWdZgy>_^*DBy3Y<TkGri05oQxy
z?SYfQ^9{ge*rMiY0{EKuqO?($Ta!Dg{Sfry;{N2t61VpdVYI)=wn3nJMQde?gnN%;
z8j%v)zo56uW36t&w(HnU=RUM?ko@Jzietx1+rRR-%J~%j%Q=v@x}NQII9|sS?hl-r
zmrL%23{LMDhP1d<Ft#l)&GNlU468glbYD1W&jK^sJ<)edFt?_xx8u>vO0SZU;$Csg
zzg2~%>TV`cwcKl*p;vIy|2lK<{Cz8^>sYq)eD)LE5FMi4e*5wCF*|S6kCZ<NMu7q4
zNC9PKjV;CY^Qbh_=`zb<d1txv<w4-);`928xw~Imcg_0czmUe9saO`O^!ZbygVuA@
zD@WiHIV~67qzMIQmOQfyFF<6Hf>b0-vTZX|5=^7SgF}PQ?X~hg%QXdEdjG&Q)Xm@x
zi_(~NJfv?doLbw4xrBx_W#bQxe?H#ssG<g1TD69XZt!lHr;f~HN<R}q#Ye+VARLjO
z5T$0o)nmq=J#US=B5V8vSP77DwwD@2H6tLH+;%0LB(c|GaoEW0WFEF)ve8Wch3htt
z!@{C{5(d7&g~eLD!~&8I+BfF`YvIBosh;F#7*+&qz=gD&yEdhe?MY&V6KdyoV;*?P
zT`k+C11B345NIlUS97!N8wH2+s)GNyw=Y3}ZJ(?+UWlfvo=^T1xb~Nt`MRe#R%xKG
zmJFmG1(vR0%lfNo`DyP(%LhlLAyjQ>Txk=zi;B42ujS1*&D4ZCHOJMH!&5~Yl9M!P
zhy0|QEAcQ}U`B-Q+xFWThgKiFaFgAJ1!9QS!QBOoix8N~Ub<5y1)(+B(vLgWF=*F0
zFe_8Isbnv2x?U^Ih{|&sanbVu)=I$LPdLkmpFa#0UmMXOx5HKAYMV9*lEp^hf)D&h
z!CE8~5izS~`l-d3$$&@uOm4HhdZZ|VX)!9sSEAPqbjEj@lU}qD5}9rA1-kn!n=&ei
zNnr^?0bxKy+v2lh(;ltAUSB?_-yfAq-HbONF7@%$jPa}hM%Lh?UZK>cEd?l;e@Wr+
zIxyr=q1-Gff3)X7qRgk?IG*uI63zbF=6zZTqF6?yOhd!0*kxg0giOmG+%lz&Xgo!R
z)C)9SH7Wz;%%kLi8VGLK6L4apDPMwNxE2cEJ++dML^T!X1SS=$?-lIsvV9;=?+-fu
zN-RHH2BBI&)2$vzo;OOH<^rl<nJIOgVG+kD=%>)kmJ=fTB&vy~zn7Qqo$@CwF%D12
z)Y2hBu**ZJ52N7#v5wv@0|SH4uFDOHmbO=iaa>%H(7#5XZ;&7DA1=Q;hpQ&NW^DZc
z&6B1cTriD6&dq~-6Y0=iCJ~EjSt)m8A*(VNx~9LuIRq9Z9_9inzkr?mky-W@??5%X
zs`zkzY;skZuuOO(d+>O&Hs~R&2%e)vyxQx^+6l(7W(?ynY4z{~*!<BD;uVDIq`=>B
zvZ^A_cfODTI2pHN>@c@djKTR~$?dn4-&?OLr^~Xj#no&p(0uzeWh7zeNh6r&0UMrX
z(Ii=M@@nMJ$A4A|D&V<zG-Afn(9h7xPTu5-je|7l;!lJhLACv_>B^zQTDIw+Tw)s!
zgZmlk;KJ*QfNTbcr`qca*JLS5S>@s1^TU|_q(4Y1Y2GNCN|z;iw13ihi?+Mi*^<<t
zl6#fGr-I063oMbZ(k8Pj|I%iA<Dn^&c+a<5`Zs7TH4B<3p#fp}Sw*l%OR67$?u*t=
z4wXs4ZemzG{Od{SMH7tGI?1HEBAdhSiY}N1SaZ7Ce2R{kcr_nZh9h;Ct^#{>^8p`;
z=(9aJ{H*aoatA@pL35YEldVvA2i$FcjpsXAbQ<im0Gw&Y=9Ms4^E?%cAh>ez$|TnW
zR@kw+m(EQ=2|$bkYf>joR8-7$cfoKi7rWgl;Kfa*;%>t*)J!js-Q}5HEJHuMUV1Sa
zqXeq#<BX(r4*q9_n|dv4+@1!>RW^k0_~vR0NZd}vwEIIQEkIf|+8t!s4YPSRI*tE3
zc!CqlM^XB<mDaS`!BuG`ft_mDHnuOp3B`fh<+ND;5crsM3ZrZ<lDQ$(YM0r$itH(C
z2=c~+AxQRiV>dJOT(#QmgZ+xsO<odVS)}M=+{y#0ykK7vZAvEW`MQ~Y@u}+A=#*i-
zWQL?9z%i=yez=OiU(hWO_)0!dff^Fhltx#xR>F<)bxl+YGkU&JDOh(jY~E<#s10Aa
z0<so%4Zu_Ildr1u2hwMkV*Z6(RZ1v9zja(Ess>7g#X0kgLNF|`s$jc|nxt{2LF2k|
zRKU;e$~g?PS#=Y{?(Q!gy(`uylxvbYX*|8GqhAP4&94%%vQYb&Svgl8-6RLstPEzr
zFUI3Xt@S95AujPPb+PM?%KSh<W)PQC;Ckh00@#{qjgu4S+RrPv=1r4*$TtgqAv1bU
zdBv$c*IfwReoIG8P3N4zpA_a<TEKbR_0~SZsQDKNs4+vTgx4C;P_QB3ehPUJxja^*
zI*0W=lU5f<Z<^O7=&yF|#fDFy;KG$q`ec_}T3GfA?Q+1MzIvxYUX&=#;2oGg42@5*
z2B<y*+c9E?HZ|v5;%(HT?3c$fIfCZ*zraf?xb~Md&+E{@xLw>6oHmVxAVLt<Ww+)y
z+6ZvKVb}%bduqN`++?#VTnmiW&ib8L<lbEmUuZl1O(8;NT@Eu@Kl!DCGq`#YaxE*q
zgS)2<pG14XuO<+I2$zBn!*jt{C;1u}0<7XRMWL!cETuI3Nyw`Z)OzvTxRmo>sIIod
ztdcnXCMU5ElgN{$e8XdjT4@TB*Co>4C4WgMDGwz7K7<vJtkFYEFOB*~Cj6sP)(v^9
zpyc-pX6jHF9~u0Es$AoUxoC{U%Yzp^+}j|LwpakjIk?nze(&p|P01O<A&P^XHjquy
zvZAwn2v)7+x0Uvfj*%>}PW576h3$wahS_xuve&7(T?rq@YA2`^&XJekzU6)rb4UfO
z(EBDli~{>OJfgtqM!eqyWbo3Fd)-39XnU9SqilmA$ea7@6vb7fzbbJ-+#jh9Dwir|
zP4!>2Q@-_NIr*-x6c8(cgDrE!03^MkPVu1E3W69<U&Cn3%3rECJy<5CC*U5#s;$Z`
z#}E1);f54Zt3MXfNn5A?1w?X6Ws@oQ9t6^uq&!%X@Q1j><D_`1yeYk5`ePo0K5#gf
z<}Umo1*DdS(2ZYTjK8s^kpGV;Wn=p<5{Jyr&B^iq%Tjckf3h^diymNef+R-@_4E%N
zwQym3WsONc%_8GUzldbhFGNXoZ2Q{_MTe9MtFYs9EaWjKn?Kq7XLG66BY)z}+tFG6
z+?*N}JeVVn{7-o=Bm@Cx6nH~Szr^}d;A@6|Q{L}9<06ldW6+~|_``RDg=U-slR3C{
z8a&1ryob)72KO8UP8_Y_u!4RU-Jbm)j1U|M(C61)c~x7Kk$ckVSyDK`X<^st-@CT<
zed(hRPhrlU_OmDba2%nBT~4@^6M_on0QJs9iTi~?l6FI1qG(p?*RPh_V-3nG$$md9
zfd6nE*C*fnL*`UGOy=J|7yP5Pp!o8k7ajwSg98H6yl8)6lq4(}GWYg0ZLaC6%jC>T
z5#c?9UmW#J{S(_9O)r!G*K<kw(Y|f`$MtD42-W;-^dIEs>Gt$2<A4){Jp$L%*4`aO
zdi#&p)j*__BH!A#0-nzQv<g0J{X;vBd$n`1f3d+nIC5*(S>SoU7abxNm~7tHPq9zy
zGU(W3yxffb={eu<CO&o>MwC|Q+8`dt$AI=^MjrXm#VWoxHp)t2v6qv~``9DwSk)RW
z!)n&AMUMS}B!jkz9rt@!eZx6@uNoRvql7*?e`|+y-45@2ed7Y}n;~8hbPV7D5w1Ml
zQHP3rJ+d``OEOg&ww28gbL0!YQM&c12Arb4e}DJ79Hd>xonVNMCf<<Xlq5%LBSYC<
z0omyoWr+Xy=F(Pm9p2ukntiF!a^#qSFmoV`e<;C8t+<?Z*FdiY-c(GufiY93+p)zD
zQa=~B$w_1M926#kp;qWACj>Ubbkl1!N4WYC1h0HIQ(b5bWHUJLgmXuAq<fe^-aiR(
z&`|ouk_dbJ{yO3<na)ic+>c{plN!6gYllrTrUg*p2Darj%#|{PiJ=Bl7=Coz-0n}T
za_Zc~59ZTX|2z{9Z)G8rq)l(`+x0-iY*CiEIXEu7t*43eTlN@K6b0fm`F|JjJwh^u
z(q+GlEB|S|bkStbb$;O8tujf9eEhu^a?8GEyY(+j%K-)z(HS<dK+KmO4r~wJ*h{^_
zpz*$fFm8xRvDv-Efuy)^%HMp==^^c=FfSy$Nc_VYee|ML@1;{FM!O_Nkf#96VxY2s
z6{NhK;-^anmcxBUwE`%uXdl7!Gc#qLHc|(AzGhPg7Bo^f1s-MxhWs!igWjcp+=`=@
z7IU_Bz1ysLISO#u<*U%qYm?7UX7|%qr=pXA$t4eEg8H_#S%9r8z14Mq#-SM1JWp;q
z0)OAfXoaE_O8XMkDzZs&<OBABxzTRl8NJEpB^huRNXz23V+|NJeNngg0)p5hJd{NI
zd1B}7KW1is{PA`Ew~S_IN+4o@tTdEX>lq=lU&pqD{)^u-n%NHsv9-P0w9K+yf}?iX
zAr$3H_8iSChxRyfI>?eU_uE>>U)aq1T1FNTY%>VdqwxCylJH?=ke;WM&e>jO$dqFQ
z4%la?W4Is8v;DyCR1BL;9`G>8l~m@TLI+`=bm_iAbEBu=@7uSbvyO{N$eXBwsUJf+
z_DmmOHSfBf%Cvw?^|N`}Va<WO8kUTyKYyJ;;)04XQ`~i6ftPS{z=hporN|)A(xTLZ
zRcVVt*>G1ayE{(!q;JpmyfsK;L=`+;;)6Qg&v(La*&GPBcH348gsPplrhy>2=X-$+
zy7s`9F1~YA9M2etX@!d26AXP`FNP+GZ$rft*2P#uzGox$L4F+^3y;=IF0K8#MaGvt
z?}PLUoGfl1spa%1Pc#t7pQeVx0$z{U7J|}*^&+~?40r0eqU}`oxBYZO<NMRI2%`Vf
z^ZV^=Cn>N!7=O{r^6CC`^;AF8HIZ96T-?~d6R>WYM{#=d2b%VyL^hF5%k^No^?Gja
z>zYNAwK-di8Y7J^Y_vBwtbppn*F32dsAVzq7A7`t3+0#>j?wrzR(1KD`KU)0S2E9|
z9{GYnLw<f|Kj745Qv;$mBKAz$vPmo!saVD}OB|5J^`;3CjRvEACpw#jg1P0lcynWT
z)(zma1RzRCLXnEyi`p`j!#SO7-q;*1TX0iwI%_}wtpU;!Cwau$;zM*1`e!x!Y>ey8
z;7Szk#u&FZ-YT+g;s04nbQbmQ&5J)l#*|DvV;R$eAF0m>CU%vnC?{DTv(~O@vrCbJ
zpbgYrpZgGS+qTJ5!@mq9sZ3JUv=m8vJT9u7`oCr~WTD(lk!gs?@d{es&>Ub@mNjD@
zec_`udi`;4-2M6OweF{g_&$DmVxMuqCs}ZTo~G<iA+uF|s|RfV>&j1egKoXxf^dA4
za|x9>5iUc&6-hHqa(6HOU)~CQQHW{My`O-NP>+~4L@aH>@m5ahmg#w|UD%rHn1FIx
zPR<sI@^q;WW-{q!G%9<Z?`FwJ-)#M*=uJVT;_+KY@ci;cuhh33>@8p3DkA+0D^Mj3
z%$nu-Enn%%Hgs6{Ky)aiA6qF8SyaI<m``SLz>Ku=t>3R|rTnZ*Yt6)u7@IvtKnW1`
zEBCB8P8a@RqeELF!V~1buQNH*mk#k&?M~&<5o!KCyiAj``V=w2AM1kbhDR>$kn>UX
zMV|<JK>0jj&V3iE4r{!?LY8z?6owz{I04ggbBHpMaYfk&!_<AeJ@_Y9j^>p5kgF6r
zVFCXtEW%C~@-cb<K1YhoL~)tiy#dgpgg5bh!CstvT>b-r%>(y}E-<YzNRJx6RIDUv
z?BjNbH{Nf##t1h8nJGd{BZ0L|0D3%~jrs6I1>e)KaBz@3wzSy?K45VlXE(leF3wxT
z?O&^?r5FI2D7>OLhW$m;ceXT0>AQZe#~;F_g`h=(*+V{UUJ!?-q5wG^Rtu1PU0FJj
z1#UllgylLAM{$~<xms?SXpmXvu%B*jE`H9UA%~$JPBv-0Ga?a4fO|d#mLSibSF9+4
z2Ud(*=DrT`r9~-;eDgTzusJNKsZ(h052s`p_Q?dA-TbCv)&*|s_sn8gyfIZN#LB;v
z6GS5wIAHLx+ZslR@d-+S6kI^V*-3<+Kr{B#5)UOmp0=^Ay{4a-5(M=P6>d)g9t<?0
zE$;1bL}EF6axOzt2McRdP1&`ZokQhZ*;}tZNEKUN=_9ZJi@^f{(#{Mf^|m<@pCET>
z%&YdP)C!bw%Qv}IM6++3;Jt)g^hkw3O(*oEBLL0DUWu5?l2+6i;sf+B_Cda1GERi{
z6~(xkD$fdrFZxE8_K)BkN?6XkJwdC-Ll6i5y)zU{OKfi&=^^r(Q!7#Xqjw$Od5-KF
zV}3aHmX=cg?r!Y9U}{uW$&Qz1(4<!q=hw!hwlJu@^&G^ANWni80(SR6jp(eZCM8<s
zT%f|0Y6)rnFRDK*$P;iAwZu3dlw&D~<T{@_C|PK^<d>wHjW^8PQ@pnE?@)onK2lg3
zw9&ITqEA+fIX4)o`+B8kd>cH+{nif=S;cY!YpP=!8t&KEc-P;c2ei4<Rgo`$fQL7d
zvz?9?><bKn#X~gVrbLf-?aXOpPCD#W&q}DMPT`L4@=ZTMSpfxWNkZXZgxhkwFOuR#
zVW>7Uo0yc_mhDuV+V2wY5$$@h9e2QpEY3(C?SAC;+SeoW3j0k9MFRQb*3rRMyVDul
zX<XsjDV#rqzU&!}N}CJ=ix0XqBs`RP(V1$9kD;`Z!~B9>Xp`R)M9dNNCg!vjy&p4{
zYbHH{&17Bp0l>Zt_Ni=KzDirmC4HMHgv4^%Yd>Lv7yil@i~N+1MPnv>iM1g&r>ZM*
zqqE20fNnD9G+sxKu^pvmKyK%lW&)B9iyo6SVNZH^=W$v2@CDIZX8(u1Ml3CdjJ%sP
zCh+Tv7Z^g3t3z#jPM$`{>%UB!iKYV_O{p#EM8XXGLx5l8zHgIxS}Xf_=5d6yF!0X<
z3{7076L-H$KsU`*^1DQLe;e^rnD|fl*H`Pp-i+EXV;eHo5|XC7rQc%i`ngvEwhG|6
zn+Ez(4V!8FBlmXR`M5Rgj*c}xmm+LvYKztZ=`VR{o1sIfFqkY2I26yQEx+D88-Crr
z)c;y^Gz1#Ai}k|;P*r%&Ge`3k0)C<a908-n43^h|Cw5M`fn<m56-4SPgAuwgS&BxX
zJX4g%`YdNxg+Wb7Ekz~;T{K7CJ~2wYw;xPpDmIH3in(*r$oaGTKSkeSxJ9U3oRGAT
z{GPs%3c<8-7YIO{QNxkHa+)BrOHP^l{;E@d69+<8Fht$D;J;74ZdM`A(E&-$G!D?L
zC$=jG-7ViKwdQHsY~-AOFn<dUT(X2qbtB+YCQNU|wX^xaapkd$XCAIE+}ZB<DCQue
z7t9_z`EsC3xIBHAvOQd!{#eerQX!b_ogL$vrGU6br(j3gxl5*)fBr6n#RW#=-Yiz3
zvI7Y0vApIDt0V4NJPm~XL>B%y&qsjO3CiU_%8#WAJeT0`ZaY8UVJM!PA6(u`<K^U;
z*7(A#X~5vut2BQMCk;B6?GW&E;;GOe)3pkx!m#&0^19=0hZV8-Awu6E@!=f=S?JZM
zf`P)yL3xOkQJ4|0Ot&kZZh`+O6SHq{6$&fz7qag23^v(6ln{!8jh81mCsYDx(f#JM
zIf8v<y)0sOLDpbyQSn10i9fW4q27eh!xH@a9Fu*Ng01dV(qqy$UF7>6w-Y(_VvBw`
zvc7Lf;T$h6*X`C}q*iqO92TD+POWS2^)IGjS30lb+)ZV)KJTMC)9!`P==L72ttUo(
z98+o(<BIBOHe3R0mqJ7P8_9oxe%}$82Y4k;%G;T7*PFfmCfYg`l=x{$WlWleTT~mf
z5!P_F;*V8O-oFr6K|W!A*7y+F5GvERMcg`+T##ucrhEp{Bx$$5hu6o*8e6lEa<hC2
zMH62lt6f>%^=FpTv_&CCHSbGR@x~?rB?ja7)ds^*u?noGV5N?Rq7Z7ppptc&`P-iY
zD)J!M6QI$NHpmq}jG<F#BogEQuyszsnMCaxjXkk#+qNgRJ+bXCwr$(CZQGb66WjW8
zan8B<&sE=aRabRa?b`e8=UFRYr$t%MbhEOfIr2`lp7Y&W-PA@g`6*l)48m<Yak#+t
zx>Es>9VI+P#UT?p8wyOSFitQiEL*0;h#W<{d8N?<U^<^x&b^-@<&rrrrg>e}FG?z^
zgj=9Zf2jjrH^;n@!KDp2Ndkh1OPiKeSTc|ZPfseuV~gNX>qKvHj>muo-@Hcjs3s@g
z)pkzb9D7G($u__j@uqu87@-ieiXK5#h+MNVtT@|1P(nRaWE0EOmH?`jYy_%C(T0IO
zLLGjdj*~_lrUYu6#=&uyWF_PzrHV!op+0loL|?bfw$=TI1Y!bUg6f`hR$HRcC%^`Z
z5dODt-$c0$ukZ;sy!7-$#(niZ4^E&cIsoIbqPA%YlNskj6$ED8fn2=UhC1Q5AUnSB
z_~ykSyC^hnER1aO;V*=+vp|H5dqfHLe!1Ct9d#NRN>FLk{_+%R@pW_kpvI%gWezfo
zM0ATv={&&Qrh^VRZ;nM6CPLrr+P3-KN|yXdM<vag3_J)qnnT2f0SqtD+v3N`oBj#=
z4<{j?mS=VvKxwp~5@)b90?YYzI=}NZKdITdedP82owMKlX?C1jT8prE@-Mfs_W}=p
zJ-Gy@f39N=ijw(n`7}RtbM)TweK`=awE<2S)eJ~v87Dem0(6S3o|hX@m{S9CKz75F
z{b>!=GwhSv?f}`*QI~n7B4dDBjihRZiv4I2ZEU?|<K+X^v3rcnpg@9H)<Mscp)IOp
zxpUDaz8IK(Yfse`*9b!xI-x$4v#%d>g;v8ogZ*{EDR{tPR`(Js#<{wj8b!Vbvk<W<
zHv(Du--H$bavHk<HSR(xfg%aqc6^Z*5hvER3b&cEeAEK;YL2?(SHWQi4Jvo3uxuOJ
z1hWehq~1}`<9k2b%5nouoof7R5lsL37&r1tOfpmv9*skCtrY@QO(App$vaw`f8k)x
zZ(#R$8QF+ddIUtVU}IDU@|Rf%oJ3J1>?eze?-LHdTv|XE$nI|NDE%Ex;~epnLL7yR
z$Q^$0D2F|+c;CqYm^OH{^BSwiDI5GDQl<?OA!s;h#yPNQehDRoH?DOJ$)zd}hQ^#;
z*3V7@U({9!`EN@f_VY)Br~|J0O|xJ#ObI<YMt%>NX(0I3JFO93bAQ8KV*adnTXGLC
zkcc8cL?yeXjXoAaF8P(>1jV1cy5Onm+=lJh8Z>^G9E-B3dk5Vj^Sy#NYa1I{zr-4<
ze&_^wLO|xSnMpw-*UlKAH45SaA(iQ15j2*&Ru5*+s4)aS2ljfXt;T?}nh4xboeL*V
z8?_hrT@s_!TDVo!b`lPb6%hN`??yJ)fs77dgoB=IqMT^xvRzzk{>{;Z7DLRoOB+J;
zMhe3Jon(9Fl1B=MgDHooqFEBB0EMhPi8^8PrmARqzP-RbY(Ryl{co2;T}_0dlAwBc
z-(uECUfq=KhWF{E0Ip!F2NVBU`T*k{dr$L0qVp&yX42#CeFkUDe)X_b`*)brPn!ln
z2<9Z&jXp;-z4$5Ni%?b*_tMaTyXmFp{h$N=mxM&UguXb*jRhLUw6X2)X)=RNnI;<a
z<AAYQ-TV=?4Mi!00@k<$u{>R67nZz0d(}*YDO-+jdJ0OVml2Mr;p*RSC=e)c1A&d_
zhhSvkKLRu&pj;7VX`}SQGEXFbnFpo-`+L}GGb1Uqdk77j@Lz`xH`*uet2DjgHuL*%
zBDspZeus9kqwU<B5X4^3XYHAG)~KwU#z<Tg;(L-F(cP0z*0(ob`>yBIa%qcl*5M}}
zo9IWcoJ5J3VV;Knu2-jx6n9!NOU3nvTvIb;cbk_xOTc+%Y}%p*1zsjV90z;=Ry--8
zE`rt}F2`-ZqXHB&F`bs!5de>}3stuTCk}lZfqdgao+I?j7c;X$VLYxlAxwD22P2$O
z^IF-_iBFGrA#-r5NJTSqRXt3Y-5iPn=%8_5+{+4GeqQ@tSD=d@if)e9YRk5GVR|gs
z%MR_Vp+O3qVTZuYKx(8TZpvZ+ajB8PAOvKPdfZy+j05G&lX+G0fDT@l^8~p=P<=MN
zV55l;-Eq>IPJ#%Fmdh~zgG0q(zEe?^(gB_8A8FIjd29*omJKv%=3&|K{R)S0iaFi8
zL@+xdnWQHgnU9{SDkr(KtUcCjOk3j?tj_}M&1uKocGkUnNW&<+U}gz`$qM62H3kW~
zkv`J(h%Fb9S<kcvw0VGv8SMEkr_j_1PrSoPX|8@QRAdAmA;(izLbHo!TW0N_R-+;j
zr(RKrwZ%+<?R|O*;fisfj#~qJ#muCM7LH(#;DXVjXs-sQjPu<t37nDUm9!J$vo}i}
znRdHX9Z~GkC143aK}iBQk9}T4Dg(oJmn-(;o_QB%Q_qxz|H$mV*I~Z^`W59#bTBGV
zYEj?_Jt)_{Ri>RliWTaVp#B-}-IsSxt?Nm~9TvjZ+%`DQ-3H$652wh(`1jLm?Xf@5
zp)s>*&I-ne+Ivp<`l67@Cu=919P}t#_oXMI6ZBd|q<qzHa3vRT7_v>%v6cDt<+JS>
z3pwApY<zHSVkd8vSbcY7%cp3xA9VK`^p4m3swWa^`Q`>g4|Q6ss`IO9-qWz<duASb
zh)C%&N#CvYi<tnDSBDqQ3BKS_{DdjcKC)j^dYD?>VV_F*T1V89Sg<}BUbx+za_ytZ
zJd-NDz2-;9%#8u~P=L80_{ZfeAu!iQiZ6gKpBZ()Eb!ay+*M~uKN_Q&T<{M=a7K*k
za<h>j(50c*%ZNe=EW+q<<AhC(?#Se*P+F-R``3WQza3I+kyBa8HDJ=0IgE&?gL$7K
zE{+hzw}wH;Fl)!f{ln<;euwk=(ZK7`UpDSJ|M*^}JU~1Fxvw$z#gGv>VNY&iY1p-<
zw=GakU`m+2SVn*;8zf30_)9TIwwF0NAa#%yNV?&RKk?sc)UPrF&O!C*GsyQA>tW;o
z)QZ8&?j^+~Hk-5CUlcMo6hV8mdVS{Tv)L`3?jHuEod_7YS`1ww5VK@VsXhu11K#Nz
zPNz00Fn_NFIdWKiomMQA-VF;hUriAp=3Z<Tu>RDzlb!o;(Y1Wh3W_F0Z<`^+)k}}o
zwz_C}QBkWR_{$>S+kE+go?$d3CHBPOg0eHRCvL}y0H(EmxPl{Sa(ZudW3h;Lb8EJ#
zIq$_nurDdj@gq`~zZN1Rz|{|~s8dAKi!Q7qKAv;hvx&&0U2%CR;Y>Ih2lv~5gwAF!
zj>0h9L|6JBT-w=PydGTnzI2~y)#M1X@>c>VMn<reX~>E9m5Db%*&5oIO!GRZD>5_c
z6mIVQfQZf$fh@)sF-7RinG*`P9?v`ZUP@R~w%Ewo*{{dH?b^phj55XD2s!*QUeU?y
z^!%S!=b`dB?JkBe<&qm8(-^kVXTr$5eRhlB^D-Gtmz|}tpOsevg{FC-VDUi_n`JRx
zg7%=9s2sM7RHf*8c@(8vs3Sk_jO$m7$N-oWKv306<FV_aN3wH1Cekg!w(ODH;G#;=
z@Z=vpuYEQ)@MLbf-OlS3xoRrbRA)zNDML-qy~pK(?)Ea%RE%5QMV`#7*nY4ALSCwX
z1*9kT1-gxY%!YFZ#}9Wc_eM@?8ios=>#RqYLiJe1;H`4jT79rv`ldpHbg(muuS~$3
zfEwEhcjiTR$E3~-uWK56Sa~E?hE7NQyG&|)7L7}2N|)WLUORo2*2T_T3L@xziJ+?1
z=^h#m*+)x7yUk*bsG{H$;$S_V&hq2UqqLWsozKRCtgLY13Ft9cdEBTrkH<|h9q(0E
zu7_zPH_;9RBnQf;V|8(zq<0?)T+^X%fX`4mp_#JFrfK&z;sKceT1Orjx>w3K*WOR}
zbIu?31^NaWfdy!~_w~U3xe=uX=t?T#sge-+gfKzY&b{ZQ{0?crCO=AUOs}R}E(?7L
zF-3aN^$0`A({}NoSi2#34*9nj+LSr0Ts{4g`aG^q9zxFY=3^Hg4SFdYu1xbKVDq04
z4qpi-Iy(Uoy&9G5osRl>1y!n|LIr0uz`RdUkv<zO+R;A;#Aaa|ESs{b*f{VkDew^P
zx)Q#fmhQLZ%z2xv#Z<q`_R&Imj8$cuc<_jQhi-L6jpmfm;}M+fS-&U<j9?o%%`QY>
znXpvhV*9yA9sge}Me1+^Nz_PeK*$0^2m5RInseU)HRYe`{c-%(cZS+lbND4EwVFuG
zU1XUlZ{iW+uW9bT2yM${J@?K;oU-&C6?%oLq<EfTs6Zp@BC1Q-D9)qS^}z1t%IFs9
zUvst`INy#SJp=A#nS1DYWKqO&)e}d|8i;qImRmkUzzuajIg##0Y79k906buxxc#QW
z)(FTcaiyc;(nwFzMj5vY+hY|Dh?TG%0&35~sy$|8ANA87CkjfVkMn#}3w1*&V+yb-
zcTEnkxIqCz{<Y@FUfTx)O`9atFAhp%Si*|T*SSuM(b%B9q{lm+XKO&-%<<^T6|0v3
z_Jhn0eQqq5h92=~xUTR9)NAO!m#PZUQtP@h5fYs(?)*`OxChx0_L1f{RT^$96)bgP
z9|}X(!JX|G>Of;VJ-yd41<qEQ3Sv`_=1hr#f-rD$=QA_EXSy`|69nyNXj;U796W2J
zo0NxYy5`?!C(>_Jg^2oFR(-V0->6{sAMyZ~yxK;RY<msHJ+Yb)fEe*{wgYTq#oYJr
z5@-bkD~KP+9AAYmio+l!+<;v!-zT$pIuhmp#~++lEt2{T@Z!9Pxu_UJ5>9EMUE()`
zkgy_D;stYJ2){t3xLdOP7?)4YJIN51e#9BIa3)}h`hQBIHj<H18-<WRW99RTk}yVM
z(i#9#3pG94MpJk{09K49TjNushJA9vi659OaeVt{z}{dTr-N@d;WHUcl&1~CzX;o9
zhXbdXx$=c~3Ra{VE6->KUKR3<S%|yD#4{BlAd#NeMTRr~eNp?#l{GX3HkRw!hA-Cu
z7J-n&?Z=0M?~0R~CI1Dl+v`W}eUR~{4BQI^!7A1-UyZv0=$P*tY)pJN)0gis)z04f
z_7#@D`d<D#*>8>A8(lvfm!OcJ`H(ui55%(=K!3*1o4UbPVmyL`qJ^@P+J$Ri#I_WG
zV)&4!__!9gIlBucOw463<c)C(MME{bav{Fyyaw+9u@Q27La^H(ei+ex^$(+VdB8oL
zK!SMG7cVpf?3p&mvk)DwAc>N-*-{{|HKC=2>TZMc!{E>18n)>Ge?CsuAQK9@5Y1F4
zt?fiPEZw-~H6#(~xXE^huL(j+duB2xGSbSNyAyVypYTI3vfA?WA#N%b4%8Zi^;>lI
z+$JNUeR3)w7dQSEz~<8gwIRZe>==Cjp;QQ|IIm{~G|e3gu7c&OLkSs)U>fJ#`M08d
z#4^@!T}UzU{yLCG64sqT-tr)=3|FhcK#_)0XXn>YLn&i00zq@5s0`h&>W2PDSozI(
zOnf31ko=~B-Ows2(&#iZcV-{Mt|p5sOq%uKF5|g>95?gynH}E&vwKeA?x82qA>^cu
zEWIcR=n_5*Znnhj!Mz<bxa0mqJ_^qskbW&vH<AdN2g(`ta3F77i*taJSg$7SFJ_Nj
z29v}aZ(*z59l_&2lWv^ArNq*WBNa>@W*7fmwiOO6!5^K3If25+eNmhz@aqEyQTvXh
zMT&NJUdD9sjG_FgZ{ED->FAHQlG%#Bow8Ln01KIn+J!VDmbDYnY1|Q5BVST#EEah9
zefS2Z8PQ=8qg{|-n^i6jF9#YAgkLUQNCec7@G!*m=@L#h$p=HLIDhR3y;825+hwuv
z0e##!?h*e=6HSM=iFz%e+>K5hq@(U5BkoK_g!?$;^n+a9DJ~?$6$LKp*45s&Q6wr8
zU{3dYYR24L@E!+OQ%D;)oXqukLZ?98<$^!|0(PqTD+$ECPAoLE<BX6Zb)J<QB=qnf
zr7Lz<UN`SrkzOWfcVWa+^s6Zhf27%&uK<3D!VUV2(|uD<O+*>rYFLg%2k101&DLB+
zsuYQvXsn5-g%wys{t>eQM;wbkOT?-T09B1@a7VZ_N6JXx{2k*HBH1WqUPjPKgbaLS
zx;C2rOk-cq85sXpAq^&`AI|0b4SU9qdS^j)y~P5V7>JOu&$j}*mYekx1e|V>62$Ts
zzzuIb)A>O|8f%m_+Oi{nEk)E9oz4+%sE@IG?cxa5J=>_KOK<2>K?sR&K?jWxkhrgd
zhN{b2f2QdV=B=ljy!ofXA;FmE%jy%(#T!9P91igVZlN%@7q0O<PDU6w(vT-RI2VU1
z+0Y(}Lb$*~niNRI_%UtyT)w7NwyO@vXxhBNsWaQKCjZD*xZiQHlh+ceki85(YJPh}
zqFv^Q1j1F}c?a%7deWCzlNo*yz}suONE$G9m-lbkNN+d@7^qK+uU5}?l3pttYLxt~
zZAGoo1_g#gFf_rLF&7&-fc4F#(6rr{iQ`;6xfY|=s0q`%ZNfcPu1#mfoFRcdCT}y+
zM{{FX9(cfwA(pT}kP9Rqtv3Gn3Oiha@obx9c;funl1mBymGc4ru!gk=@Hnc<V}+i{
z+P#B=2&4vNW%wDHb1&%No_j#bEqSji#HCG(q5FX7tRG>#PTQ*6P2K4pU$CW9iGj6k
zq)X;lf+lxWU-JZ&*ohdew}9)!H1p_OTZj)kfRzE}m~vv(^g2fhGG&P6N)rz*nRy)y
zFK(0P6Spt;v3OtJT<VbqSRRE>)$69@FW9p;VazslF&do|2|Rn(b;og9q>)Sa7ErFr
z_K;a)2DSthB;N9ZIeXu>o|gB~_)Uno2F|A;p%O3y(d($8R!RL!4;61pmk_IZtGf{w
zaostezo<)Mdd%~Fm)Cbi_)0$7Q^8)9LY%dY#V0!hM1tA_!GLfFV5|&n&VkvFR0cbs
z8`)`(fC(g*?!wfVEWD@#MxZa6=^2SxCchTw0z3vpmHsYGLHo4|i4iPD`24w-v7ICv
zp&)+K;Hz6xVPBj56&JDYx=mlR+I{ZawAm12i4dbjw}Qb?u^IWNx#!CELt~@O3oFS@
z^{cIOAJr9#<8v?*fbm={4hVHs=u{r07Z!syQjUw>6vC%l(M66;^u}<nt?sxaZ`!(A
z^PcB)X>OC{j|1^xtOLF=4UENQr1*C-?8-rb9j<^3g(y`hSl4U^O}#(Oo+%(;+~Bsl
zsj9LgP((P*Ler0P9{JKe*ysA}sju%>OU1Y$<lR+)aqklh=(GHst-0d<?J?UC{%fba
z70FJlhvXW>@l3D&eRw2_pb1VLA@s;!`M`~*bgDRK+Qeo`$792_){L%#NYes-p|C`H
z7xuHIB%>Qc+2%<m8Eb_{`&@y&<NPTr3U~c{X_F({ln#jB>)wLUk3{)ZFkn|r<{ja&
z3EV&z=)DIMz{`E3CWC%O4qajwohv|aD6jJ5@cHiC3F4f&U**8<683Ik!V3}3q9^Y}
z<5{g##kF8Sr6v9bu7kog{*RH>QJs^%+gL3mWNMeKG#VjCfIE_HDgzZ@7VboeYHF>s
z-1I2~xl6TNbHDK}X_6PoB4*wdgj014`$0$!zVDC$c#vw&D*bJ6cFgPpkSVR~YaUrc
zbV6JB1l#qNWCt^eWIW$dwx10V@73TWC98ueorX+R5@dzhNn}RNmls(NI1b+%B{EpP
z8wI^%1|bvmcK66%bTAHZYoZ2K1;AD^muz!nysJHmCtqcTX2-skW#SV4$(Cb?*Ow0L
z+E+kf=PIDGx2zivT}|p737refuuNgIx%o;ym?Mcz_G}eSclv#|1K~a8Q^J+?+r6_L
z@C};MO|_din}$Qo!ph0^e`zdMrvGBpFtH}~-H-!xHyv>#61L5%1p@XdWT)zuU1~Qt
zG>?POdZN_-4$X`>5)d{}4S)c{U|6-i-)Cy3R#^i5VsE1j8AMVOMG?%MnBetj=;*kc
zl-jIIME{Qb*4yrWyE~hNzF%DsP<Nx))$Q`U_g_a@<(zKjZEy2H>*<qAv&0#ckBW<K
zq`&~U)#|almqzaH-77uu&x#$AhF<IF^m=|?g|_zUW%=|WP|r&aI)4P3-(V}-S2y2o
zyaK*H?$?JypRaG^wKz6z9&WFF-!?l5ZX4{Q_ZEtB0pI5cW&|^!G5lA`SJuXK0$fKB
zHE*$i2Tp9;tT2I_x+^vJ_{I@vOvyHG{VD(-_Y1J_jYEf?$CM6-c*nzhYb7WAr0m-~
zw4NiUR?5YV#lFA_d%@A^266s4K_~of)4;7s(vj(kSWp!kwa@d&H@;nwE4`lfZipQV
zx$ay4boO_ac~S%P&gczO>78teVV6B@@q&6OO$Yhn33=u6am_s?*$1#`z!l%EKtI5v
zkWKdPttHYGHNh6Z*4=xV;!Cf6law-iUOD|qrN@V+)30E7u(z}F*1HX<oDOnl)DF+G
z%1*~(eI8R{!L@yB%l(X@Yn&yuk}*|#C^p~mSKciVAg-;wQ&J0n=dg<`KgTb4rNgkO
zYqb5rT%0orMcGp<==f}r+8qRdkO11#ELhvuOrDnY6ZZ@TQf9!^ab>I=H&nZLPN;Ry
zePiWHp%q%aHFo7ra*fu;J~HR=s}!d?7HHncuXsgaOJoS{URc{=2+y6jyTaL()r!6J
zgFO7&mwpBCf@6%Hr>3rMPn)pZ_j<cJ++Ftx6VJ_-TVFsoYO!zRnA13e4gr8fAGhDt
z?RLJs8}w{D)a||wgStKMLBFm$^>_OPu6qSuQ`OC`Kd*6zP0@cHTrc|R#?PcgPJehl
zR=1*0MOZF=_$*G>EJESEx<VnqkyvcSJl9`b5Bq^D<Pqy<U)RkWG}%s1GRx)0yG9~v
z46+afA-&?<k3hAeRB`@c%>&dfuG7}%>_J||q{49)5z22?by!`4^)(B&Fb*h3{nG3R
zIAKTzv02}iExG@fg?up_O+VEgA-d@(>rf}tax`%imOdPYR3kgMDS<wJD7J`AoaNFw
z1t;uOr#H06T+PmNZwZ61O}p5~>ho^O(yJwp;q*O-Os*8?V~74*8Vz8v(lM?&RE*}K
zSmXdNMd-s}Z^~HjH{X(w{E#NI#ZH~s771pCBk~&DC92^zXTc(M4Xp$(w`Fic8A;Wm
z73XMy1MUm_Y~jbrBw5?JyzJ=N3*VBIhZMB`muONdgIuV@3kr9{aAz^>IrwVZ<dut@
z@d|Z%)+G!7*uCL=brWDKca_fX?!lG2<>JrF$_V?}mpX0I0`n%C<`@_E;r{#LeR3D@
zW|13#1SdX|ILgi?aK=1T0M*|mL~Qb{GFk-xcT_iKSd&B3C7uG4!fyQ<EAxmMyRYve
zuCrR%Qeh(6fw*6Y5@gV-T-&)sOYU#=pId&IHQUMXE;hk6X%T=lM3e)@=n3{Ta$r>>
zwq+|N)h{_p!h7Ome>X#CbK9f(a=6}WK$yQt(u?v0B<|mc5P`_*ji;f2dRFrQW;$+#
zGTbZBney&xU*J}Hh<0!|;-z3FHHeY<maUYrA8MNa5JRybSCp3hX!lrIG`0>17#58p
zfJ0kUnn@#TNDy#aAKD-wws=z3wTF>loFo5zGMAS3<sP4o*!K!w(1W=cs|YW0YWU|M
z93k<w6x6-g{zB|V`c&|^1Nj<qK@4<FXOn+f07BC*{i$8UPsrwjH;Std1ib>!qd<G?
zYEzF!>u#fVx5`#RLBys>M+D!QuZ@62hw=<>yqm6ViyY9Ux4=0jJjPIs;u1dPkFQLo
zF(ppYR?&hLJm7+(M%+m9uY{Wx(i3ZGhMo2!fW8-qEHhrp<3pP=L;KL2%lO~IOg5Ui
zbm~Lq0tsbR%P$2YrlLA)P**7Rf?A3_?4nvVJl$A?dG$*7KW~n0O69nyRQ+1toZVr?
zsgr0<99RG$z2<sh%>{#MeZS9>j!^5!(ke74D1LoSdw;vum83p#WL29)j{+q=6XUQ7
zcG`6#rVXdgK%tDWLT-9eg!MtP7pOaTkQ$;p1v&g|7059WF2nPL(0kSL2J9hgg~<Fm
z)tJS%(@szbnI%O$DvpAFTn#~8y<5<!{H)fz>T1Afp5UCq7;4)HlY~p8$MGDW2}xQZ
zKdn7i@hg1Q1~LVi@Cbqi(XEOL4Ok9!G^6+-FZc?ftfsHC99{v{B-%iwgfc{EUX=9|
z<L`3i{$0ke<3p&HieH%P70U%dU0q7CjmhP7eR0()2&<AU6*f$>YC0)nBXz1S8e?h-
zQPzOLH{*I$8yZP(Q!*I~@R8??et{AfSF^cy84`&#BHy4%q`xm<G;j%p{%5D@WAltp
z$bZYkNJ7RHNx1G@QMpziWd5cRG1NXB{w=fmJtZ20wJPaYWy6%OQ5c8I(jemKzgEvp
zKO4iR!!QtIvFwA(v(f@$*}n299M?+nas~}(gLsv0m4FQ;>KRyQr`FfJA_`nG+|f9(
z`}Ta=pCt(^XJ`IdT(p%1wPkHPjz0ZeoVRxOMwK+>xz{CUU`$BT%Ui~IS@yXRfpNrS
zmJNmeW#)9Jef{2IGhnm%b-=7k`^1T_!yuid<ONjL<{Z8YQKZ1eojz>HM1C;D<nkAQ
zvWK7)+aytXM06If#=i)kX?SLceYMC=u7EJoy8B6pU1MJVA>kuvhm5x@KFKy1rO~HL
z)&?qE{;SfXp~Y{|CTIY?kN+92MK)oiAf*QWx1SRYoM!-A0;!dJQLPOYgI_e2ja6a7
z*J}oTXhc{oH}$D-35m)Zrr7Iu6-zn*Qz%ECv7gWbrmQSCoHy9wJfYMf8lrkucO!?h
zFX!a&Un9F7{2vmI3a}3-0QMHN(Jkz3^So1-fF?=MKO&x~JUK6j>R&Q~Xhd;k%ysdo
zT3*b2!7Y4=(fe~7b-ba}Jjm$r<}MnN1yw&=9Nb9$euzNY2<cPFKTJafI;Up<+K4!;
z9&<;9KzyAoLiFlr3`Dj)M6x{z&82I)Kn9hRQG0^ONf)g3lb-3fK0$nD`RitXqDbsf
zX#*0?rY92!^h+X~!GdPPeN$xb`+Pq(Qx+*79mzr)gjGe>jgu*E);BO5xCP2YiCP%A
z`JYQKxIJlfhIrr99($3*&_4hte)TWRlks-s8)Mdr_R{&57MYNsrGq52G5meSW8T;m
zadNG7%E{j*BpyGHBaYRgkTx-PZ(^sNEo?ia7{nefTy_ACJ($D?uMx<?^$GX|;n9R9
z0UJexZ!<i9t%%zWJlCs6k!>mJ&h&D*{tDGm6&;DQ!%27xvR0)1s}VqkYB-j1<DiX^
zx_h<y6QoVF)SeOupYIT5KU0)((Rra1x7qi+(3J5^V>;86xkQo-6U+A!8ra}7@QO8F
zs9Q_Rrjf_&2Qri#jg^}KW%^3W<-U6j8REdO=Thax-yaDA-Z&IHoBvac3SMFB%N7Om
z?AZ%NT?$HoT;<TD>;pjNyA-@k@sBpleyfXfX*%oolv^n02a@L&PXTpToAH<c3IU64
z8WmW_IbhgS(*rbi>>EIA1)>-I6XOhlco46_#wgT#s)A3kTJ{sB?+Xc3#ZH6TphS}|
zN1C_=e%Z_-t9k}<>XPBhXha?R0{N0$sIXC&*J=p0MzvBM4F*(^wb=8W^dz5=++4Fg
z=(<jYB>iNQO-Ot`j#G%(K@xi<UxQ~E0-AdWlzo5hKT3`70(14L`&j7jcD5N08)bs3
z54M6UUTV>B->e9=9!gMf(RlG&VA397CNVGIrY(YAZd{?v_*o)_G8EK!F=Q#VJ(9&?
zF#}X=1_SFw0Y%Wf$>H<;x~a9ZJpz%b?FGuyR|{DB%()P*+qz#CV6#j3m_3N}STvy!
zx3utx(T|YFQmWb>T)gjN*1$L-tj)6MIs1=s(L@;=bsrmzmt0h4BxxnwHEmqIeQXgH
zIeu1g7JqLMq(jog&rY~09m6busHfmRsH&X1y}W$)0s1<qZG@TW5Vg6?wi5G_HcL98
z)luMAmE)E^|AK#?<Qn?psG%$M!GvTYuS?>W+cefuHHTWm#j1oJsTecrvCuvu*P_l3
z79b%^Rp1Cw-vIlmU>bf4&tj5$fvgFUql{j&V;V6(^j3tv`zr|w3^?HgLIb2mO|X(<
z-J&IC0a$Uros<3<@dqqg9wI>coH_zI2>|hqHx?I$5)kx#750+W(p?VB>w|y952<g~
z8Qz8_kBQTLEsY$-E*Ta&AYuJ{lxA##Sen}z6#HLy@Tni|?xB$rp%LOchTM3~K3^VZ
z`b0w{^IX{--`c!zSZ7h*QI{u3L&{!2lDuE@04e-_>S!QdmBsYb*cgLQkF;E1HSJ#q
z^so3|@l(p14f|2BYQ#7s?UsXg#W<!JaFKYP04^kX7aa>au0w36lvQQ>U&shvHQnHd
z3hsgw{4G@D#7$U8eOUW{DCWaPQl}Hxs`DVZdufeMV(^T!h2x+h2zdXvvyBaq)4%+b
zR<9$z&=~e_-%~{IiSepx!L!K;+`jD*rRYwNCsz~KC#(==aK=vua{~$c@Bh&?d%j@L
z<f!*BNp!JmUhbR@KD53*7G(y5C=D!0sX8x&l}^J}oi7xqa-$MZgNf5<azx5vhFT@%
zfw-K{S*1<4kj+0ox_Y8Pr!#^0;shl@0HQM)_2{my%oZ!hxtrYfAS}TFTYyMZ0(f<O
zn+|8+-nykGBV^yG6XZYay0vDy=J<v;&L<C{?pb^X>PiR)KN5}`hQia3R&$smEZM#H
zK~(|`A^!j^70NanKssFPiP@5>k?`m}P37yF!`RB3Y~AuGk)e3?MfBlZ3&I=;!1pze
zpMFUvi_doV{SS9T+w|?-`vbR&^j=1eO|5ccf*M=Pa!;c$O>0cuiMw}!G<<03XJ`o_
ze0G-mKJ)Zm>rO3MPw_}=M!`!AT%d0?PWs{9+!sNZ^lq?_q~?2{EU(aJU-Zxuk|tuo
zM$=L>Nk`MQ#h?V7P|FNO@|j2+K=9LDM}{eAaHnc{au4L$aE8xzBXH+plMBwhk+!}4
zWLo&CYh6EiO^Nck$*&#O7w*__1aB;>{&L)e-7D;Z_FnO(K0L}^deJv(u4*E8?Drv6
z!RR;CXpR_9PqEgt7ZiyjQQ54RTqJGj@Y3`^EAH=Ho#Obwf!2!MPg2(=fWsPjdFp|q
zFEUpQ#yz9+ZjhM5O7<5G>D8+$23piacajnYvV~(M(HR}cpyHAdRT}D+P#nI7bpnqG
zLA&&}JsiK33{($v$fi6|0yvC6b=4JiNz&fQT2$b?V^izx(RrRLm`rk>p1>gJ2%i+|
zp0;JvN&?My&-?OP9h3?;pnaE{&Rb|8uSF<P)e;gcss~M$ux;~#O+E6cp;JrZ8>knt
zMg|*Gj>;PKbb9KGzA{5kR7-AfZ5l@0teO4Sd>~!2<Aq;pu!4d{LP9F|Ep!2Q?c1>=
zkg*bI*6E|mKUPQ(f;J+q-J|oG*CcLl&8v~$XyA!4O2PGo1T+Ng0CqSn^bcKwApV(4
z_c4`s<hrPv>{MpjtfjrH9xfu~E|X*#Ej2_7x=t)}8-jiigLBu>z(^1y=3TO2s(+75
za}aLrM=h@B(9EvRd}5caM!SUen7>!~QJv`e)~GpD$7&=$uVBcRbgZA}0w$K@7yCu&
z2(D1zZyZagK4~#B0gul3=Wvl$T^(lhXS<MC@w{Gl4lBXz(ZYUp<cojdHLEF$)UU5J
zev-qJq_adq#ku+}jhWxU9V{1IOL2O1F3%BIj2U4^hoM)`CIXgy>JO!omt$`v1?+O%
zZjv;27H^IdrTlzPoWK&8Hk3DDLkVT}B}#8iQ}DkR0=yeC0TCAvm2=dL4~8s!7{f1!
z-7f}fQ8erA=H5S5?f&}Y?DY)zz-0#6(Muzi-_*DZ5_c6#+DJvL6vh`wL`+P6K!sC*
zTuGkmuhrTRa1d<IDHuXnmCu@3@3g`(48;4J8ZfPcPs3kDJWs<<r6#-66`ku-Mpc$(
zi=j^PTnceb07`oT>4&8dx%{U;nh=Wj0yFC|o`!2e3x78g^2}S`hCO^NqNt4>X|mAR
zg_Ykyz?4*e&t8N%XxTV_ll#=GjWNrIBo*$=@YALAiMoyF1i$Fm)D$=>q`TP;PFV$B
zLq4jR7|?1WXLWy$>KjR;{axw(`e0|$vvtA=l3Z`71yE?9r1cJ8JHGHGU|t7s0UJ&}
zxVno28a<R!wo|8BIiWR#Xj-#Z`Y(qW2PdW+ETl6i<%)~R((YAk`{a>^WmA~OWL?=U
zsm%HvU<~y}!07p}!=cl(TLyCzHUEjh&Kx>AErgmAkFAxYg4-T8y(T2$IUoCgA>I+s
zAWe_>1A^9ze@J^o5`-rvNqRj^jMb=PiAx=-rZ7>{ZntDO$^32{uec`*M@9v|BSUP}
zC-cE3v}}=-P$9vIHD~nhRjKc-TUPYor50fn=`(!eQiqXh%8bP4%ZhGdKgxpD2ofF5
zNP|6^c|S2P0^iaUVI=^<rbWo7cN*kwji(}00H^`PR|Ryog@<A{%h(F8bE=)R@P6>b
zN5GO{EElHg3EHkxN0h`7GNSh=zwYttw$AsJPnG-4_-G0zOjd=86v(!!hp>bGBnWr!
zYb=-ItLPudbxbh)FRO&1kr%l~oTW3~MV)o+bk6-b!8UdXF^@<8m&;@wRM2o@`)|QF
zz@<+9)`6o}H1JUTrlv7tS>Oa)NLJHd^kHcgk)jnlVPgLma$)L-{iG*jCR!#X^HU&(
z;8Z<H>8Zh5;MF+ek(3!3s`XWiQjJo{MH(rkuj@ZakCy@FqLwYYDsfX}F28znjGA#d
zv9|dIl3r{YrMv5!NrrW3P3%Q3++Lia0Q;4KaL{@lY$`@2EcPVgzr!JUwashvAX3$O
zX63`JXvF(J8>|)^=?lZA;4?K~4s-KW2qI8t+}yD(jKV2MdZ6fwg(x3nx`y#f+d{`4
z&)@#EPH2Pw6T$`?dT^^?w76G=LhjWOF~n7>Zpb^3Wmu2k8%NKL6u&e+#Yi}Q2EY#U
z{3_3<oeKZHyL)fEpBu%jz#VZts;Uc~LV2)I2-d==G?i*+mcrph&VCT>mKD=5UGZs!
z`Gog|C^dy40A=AWF(3RE!Q@jYY;0MTaj}xUF+|I+OQ|T2%~atK-XN}tHbS;Gqm7S;
zF4Mk;vP56xHW8j*eEJr%^(PM00+1tg3<DAsisgpiLvwL>C#%)wy2-M;&odx@fnPOs
zLgYDK6|zOE#c_A1>yY_kyjsw;M3y2)c$2r2kc!f^pjg^1|MP8>DM4um=P)T&W&bzh
zm@+f`rzTu!(Gxhlq;=@~UZkVCc&UBE`)#SZENQ@4+D$8hC1pJ+0cYvi6wuk*Wk=eL
zgBdbUnYyPK*_p<YoUgskL4-c%IdB>{BRG&#a<%vKhdwuRM*ZA20UbYi&T=zP0V$D%
zj-cdTUa{DzrI_~3cw2uR?Dimu<ROt#nlwqiJ5*!%B^it3%Sfm4ky&WD%`}PMyAiHM
ze8*(zf|o&Ljn*$^n{*r{m46cSo*aw^J=+qO_7O@9yc}Xj%0*a23h~E*%07hH|KELM
zR_6a1WwUXxawSR>ivYT{Uw?q5X!LJ|djbJ2^Gobik6RK-7<G8y=tdkh)hl!Zf*Of5
z4p#Vg^jKn0Z@tgckEW@iE<?0%8hwsj_c7N#*J=Buz*PVI+5orL=B_uVdy9T=W~Z~}
z?C!pfH-D=ULA5o8lQ6Tg@PZiT{F{T3K&QnFr}s=;Z~QR2+yU-)xu7GkC1pXWawCuk
za(ei$p#_XfC7}#4yIs7V=Q*%yQ2mELsmq;icdw7*zoD(yTW0b*N{ib+bP9#)!^x!)
zHz+JjcPWQMJ?_6zsN(hgM2j~|z0_SgNoYwCqyxL?lM}Gwu=FzCZCOdbzo}^{%Od1M
z2NQpPt6(HJA^~#gubLCzeZe&uD-$#l8y>GGgek=i2OW89QXh@<<O*k$q;Ldq=#HOf
z)MZck-EyTB%_kRjB4MAm7{;kCL>@cJS_ompbW;clD?-SGx-(#$Td7YynCK*gyb#6m
zv=1VR_L7S102<4S^<Lg%Ra9YWfg<kx4RyMFl>xJ=LIBJfC+6~vx-NRkdecaH!aPyk
ziINC*mMqfDY&x}j2c1l*c-E@!c*-^5-ytnfyXtZ`CaYeHO_Y#m^T~}bE>;eum5NR-
z`>F!mSRX&inDhbnBmxji$Shc0Ocn*TaS$1(`n!*pz46=g{sv7|NckOvfBlK6SG^~8
zdVRTvb^yp;9!~Bj8XJT%wy~11109Sl8&IKB5KCuQJ((+v`R5Vp%u5_y22Si_y+v|C
zs1c3X<DICMJe}f`X175i$Rhhq7b?HcZUCNw0g}3ax7)|nksPcdT~K2bvl5z7EPB8{
zhOk>4G}gMA&ed7H?mGucNg^(JgU+m_Ld*%oM}X92xEEMR9-`li5nC+WA2KNw)|#v7
zN{65dQd+~Kh8(%WhA68@4I3j~U=e6?4*PPt17=6)z-<}Nc?akal8|BZ{T%<|W<heS
zP&7jvn#8I}@CBTZOYeF(cyjn}dUFe4g10@piotm!*LoN*O8?ekMJwXpKQ#St8CY5K
z2Edzrnxv-7Cj|^NQ<^j9uJl&S6I{djP5(-;J5hC#MLxhr7mBwqdLS5oCl+azPV2;)
zji9(~Pf&NHME)lPyhFcD^6P*ox=9s^Z7wq5Z_Ti#i9A)4ut8M@W|Cm;xHS2=O{XKM
zbQz;X<gVTFbU<ywQ<hk*y+7(EzOSSPAplAQ0Rec6(mEngzoI3~QOXcGPL4br9f}I|
z#yAwiR28cXhjZJ2)43sT3Yz5yPOxMlv7f$&+{;@&QfUFlyd&F25ZEWp^LK>Q745Tt
zQ~tn+7KG}rhINH}B{wN5e9v6jeUs%TW{k9P9>)>w2#W#F<&$A^l%4Pa6HY!6D`32{
zx$?9j$4dqj@H<8;>MT-fSv1jsXxeP}$v04=8QHiy0`(WAa@TpJYe$&E;KC_0sRun>
zN4F)6in_V8gEZca0#Q~z6qZD!gHS6uLd|Ldq_w>B#s$4apeEiz2pH%kTRlh?bh9mq
zWF5U#7MK-I_VnY$Yh|HZ4h<)5K0r$8i6wkUu~7v^e@GPM&(w<Oz%Ol3;Ghhko&w!~
zD^rw`788`;b{VpHVBL!B{&ibp<T}KlH5+u=Zg*j;^4yNXpmdW6i1tXI8F4|r3iRSg
zWLds)Yy<)HTvD_TEqT0_#r`8#f&tozQIVK`61Mq+-B@u1<(9NYOoj;s1OW=dGSnb4
zr#qxPjszF09_N{aP^U$Sc-n{}gtlJVb9j6R_FyJmBIYSY(Xt4p%-Nr9(PYF}LP9h1
z0h>LUKBSy)<}KrAG4Ko}kCYs&dyv65Z-`5+3jSoU`rsJMdGE8fuJKgJ-Q3+745ltz
zk07xBP#vL(az}BiF;h7H<N>(C{`{LkhL7plyx<4AJ=ECg%e3gU%8WJXTitzwXMd1U
zAaX`IWh1{YqU*<nxV^2C&9L90k%r?P=VJd$%)myNHZN=JT5#Uz+(-2W+n!_m8=%%Q
znYJcq5l!aCUV~=7<*Jn{j|@n#Zazg@0P-}`Vn1QB0@k#&U4&$^5&}39weMRn1VF4P
z$#AOPXi<6rAL6N1pA?o*gT^~Rv+<plvcO)YivIb|tu9fNsFby(iThhDme8yG6ljT%
z#j7wkchPJS&<29T)T-Fu$|}q1WuHmrN?M105l$CNnklmby>$-71<Z!b?46GNcQ=gM
zo{GVlA;BolA1GqK&jeuRu4{;Ad>@vdK1|4gTDhlll3q1XM4kD^nU{>UJCd!};H|Yu
zVZi`)+4&ehu6tEGr2v!?o=vkB!OT#JsG0cc+J=y9L3qjHFeL##S?TwsLPu{3zO>w$
zIIw($LPod5xp7FF?FUdX<Za~G=R`#`4wG~7WBgLQ^>kDe^)WznqZ11Y)hnQJ*Hp5k
z>EUI)l_(v89HW8aGA6>i)rQMpsri>zE1lc4;p`~}(^;`7d06^rDln&fG&E8GvpP;~
z<$A%b$&f!O*)&S5&1+RSPq~i0bI0Kj*7EYrzO9H5a}NuYn^F|=$naKb9wyn#cc4)b
z&3X5?p8-?3E()OaJ!N{74pqA~0Y1Lh?v(c~AM#Z4d3H{iv8Mj2Dnn&*JgY@F{)KZz
zRK{o>h-~(`haU16Nu@}p%f@vjsqp|JuP5-AYk-#HZLuI7u(KClFr>nu?ZryoPOCN4
z8SQp7QMcVXZ&C5Z#FMThpUg=NjT@&gac{8ay+K2DN+lq2G=468cyMTLdPq73hBm&{
zO^?I>4bQp}<qV`^MmuDhz6`eGL^&78g@c5h0|W)cXE(tkPsH?k%oX-&r_~wik#<{l
z-D@-Gm1zdN9)}!{9r9|+;9gGMS%keeP}WsAD^WX@r<3q1W7bEmjARIJa|`+4Jq3=)
z*J&Mb?;Vgb4XP7fW8K-tn?#IE?ao`<3E%ap^p{Bvv>x&M4h#SpcquB-tY5*-x>@tB
zK)v-zAZ5<{DTPgcG8ikCaiP?~KG3?|nh{$s3!;0Y(W6%)0%yZ+O4C6I2g&}LM>j1d
z*#c=y3I_@Gt`t11=EXRYKYz7htkYar(xVXqiU7!mk#cDeUT6KIBI=Z-J1oT6TIAHH
z72GJ(M{j@lmNx?;iF9(hnRMVs10UT3KMIlJMkZh~5KXf!OLazz5>hm&(Wo8m@2ECA
zTG~H02w5m~`p8r=2Ll-zdwf&{!}qVlAD)U+&<S|6?Y6r43-<c3JVT&xU~TXm>lH-h
zWB?F6JZ4qdfK@!7&Wsc4n38|tzD0_tHLs9hDw4e_FnW<P+cKE9DnF=*U1|#FPG^t8
zi_XYZZCb<}EcqF=8H|&5(40*y!&KbF$-ya?+DQA;H>c#wbT5RVR6p?F=;CHb6{3)X
zC4<6$4hn8Q!mUl4t~57@$J5FMS7)@n(FCZR#<6HqE_6brh#<Cr#^~};mDt+mri802
z8wkj9Ka(CGjyjCVV9N1fz<;N@q-}KSWSQYVBBzcFM%3^X@nmQa{07DNvy&$7Nt{L4
z|JRsiY%Il0>==n4!?tY=&w6WUctsaC?{qU2bDf`ejh&<sPdsF{iYPaK$=&Y+;tCMq
zW|L)`s2RW>L#6Bx{(u??k$^l{tKOT`7-?~oO=_N>K2#YN*`)~|?y#*==stB=6N>bZ
zV3)QKlxc{{7t2=4Q#Yw<mJuJw1HG`TikR+9Y+4^NUvWR2t;i)&d!k%n(HVv-QFfK}
zES6BDa@8geLndTDL~#CU-T_nk=L!HqGra$)Z@SNH$n;wIZ1mQ2I4oIDn3PW}#Z7bm
zdec7}>4_`(!05B}dQdz6Gvv#(VzWEH*NEx2ohqOWFDGJx4qTNLP*WGk$o(LC$WI7f
z`D96cvShDJk>%t5#H`tBb3?^XZ@pm!tn&5BHC9;koLYfp;l-Ba@=8-frvUzTM#NlX
znxS2>KdD+&+;cyk`YcZ(+UgvWal;M6WFp84sKgOhOrL1N{~3Pc3(K*8bX1O%knfs_
zYHvFOcOYE(+7wX%U%XH!D2beG?8wfFIn2i-wF+t75FZQ$ro1{plTggzkB$`4DH=ww
z@NT4dsO_gfUtqZ0{_ZmGiw2ktLOy>pxp8oMclZrR#WkB>Q`K#v%obv6@13&IT_F&N
zds9k&NW0bJ{o{QbVN6to(f7}oz+Oc8?yaY`hw?f?dOBg#oUQa&4mt?5%FBS)4w5cJ
zU{+~0UbuSf_x(Wd_t;#f-GOwvqw4XkS-TgBYG4zc=6H5?cvrqqO9P1C^+d_+zWZ|7
zR5*I0sU`(Iq;d4+$3BIr0~R%P5LWYH&wmI<lv9gIM=OI@tg8b8PZi_#94HHc!;VA1
z0_CD}zo11vOM!B7BiOm<w8_ZQeqM;#(5Rwy;x2nEhYM*ehwe?XaWASnFwb}$z#aR7
z0{GWw(dWTs?`~Gs7vRR{MU4Q72&$N7j`Lc7K3d3qiIoVWcHX}EVvFm-fU{y-nJjp3
zH525c91s5FS$TUoyl&#st3xNNB@XuZWM^0I9<xGibQ7)YSXabFI|yB@KK!(LX_Mq}
zrbb&m472pg3|GrmvSEHrD!0Pi{YaCR-J(a$K1bYSo0=4r9IzeYh8s|@x!821nfyi@
z0O?o%&a#c|@RKjE8kl9;(g<1KsiyV|Yl52v8+250>`^R(4i3(s5N7P1RzIOwhEiPW
zOxVPrcjIJE?Zv|tTo<k9`sA`MWHn4LR(r+Zd^KY;n_tjc`>2fey1(iw-`sWjg%4Cr
z<Px`;v%OW)3kWqG_zZx4a!3sryk;Q|AEr5ugQguEJh#D@N`_cU`m!uR@Ic|dc4V#C
zU?+nwEAA9{lybA=c5C)m%<q#+E!FI)TkfO;fu)KRDLdRMHNt5&AE_^m+osY8f@xZ9
zFPUu>1m^Eng5@j=e9_At;PH{hKkX|xC&_lXd}~A*0Mv77mUMtkL51%W)3|2V7@+6L
zxc58~OitRf@N%rSm+fCIaO^0<qUC1xNItl|y+)rS-?6nO-~W3$jl_wB`olMFzf70+
zzL*-lFc--HBgwBJy<eAOSSTRjkT%rpH?3Z1U%QfyQ-0!1Cu?Vm#3TG{EWrA=kWz6B
zhM#@Am-HLBhihKv|2ZlDui%4)lPS@$T@3Kk498hTnl@_@2#}rEVxFjc_a$}llSH%Z
zXTO*L2>=2E%h37VBuU@h*-#Dfd7b^9u}!8PwT%$$PubQL>yg97^6nr5jida{@R?mJ
zK_EdeN?Ua#aR2!7VCn2QezAsB+MaS)`CRDk7oA=(bW@L%z{%626&u6J*YgJSUJSUn
zJPF_&-=A7Ga&~_DIN?w~N%bv67R4@EL<o3cD=~=PXnJ~DRj-|?rDvG=kk>-7ao_QM
zyL()R?WM&<(#i1t9L_vBNwq7)^=YTr(lnwYkZ<!}uKP^gJleWG$}*?Z?D)IF(BC|9
zOFM4O&(I=^hp!@PPJV~rJC0n4ISHV)4Rowq!e>a$%*!TRn){GZR+0KcaeG+;XO)Fn
zF@0!98{w%(*D8xu6Boj0dS}--O}w=qR!_gHh&Juh91bICl-&nu7g@K7IBm0H*{+GI
zA7BWFl%S~-lb~RTw~MBsX@jus(MY{Jt>)`Pyoa&B=01SwZX!waYokDT`U0?B0kz+c
zw?AQ;O}`VWPKl}7JQ2zU&8(EZ67d7?c9c@#*AZuMSj2YW@2w38ZX?z@_3rA)r8u#$
zvE~pb%!xYu$%1GKTheL$RuSt^f@Ym-kV{~pxZfz*O7+$~uz-1*?x8jIbF8_&b;Of<
z$CaX4Ec~;$^RFRhToC<(S^<!*i7dhB{ifW6fP1vgFXoJIg1ZcpHEMitXM$(!q2|@I
z6>z|{L8_caKke&YJK2$r56MO}_Dd%_YKgSGsP8^EwNe$vmdc%>#drpGaoR&D9EJRx
z-%zA&FU&FFxD)CP?K9SJ<wqmC%YEe2z|LVlRN^UV>+oO@!r(Z;9RZ-)G>wl>6MMAI
zCIPuqdcMG$`ekIfL_RtzYCp!hF57m@E)F7?TUe&vo{nLW%roeja}%PZbLBbUi8@RE
zWv|b%F0i%12kGygm$x~O*su+65KA6G{FF2g8>MgspYv^uCbk!+i|k;iXPf9HgY(?a
zg_w)S0P!8zi8>^q)d7h3z2_ZaI>9-HS<wa`X<)W)dS)yI=6)G8)@kZ6&J>bd>q04*
zbNp}a)w=nONW31U`;45BI0{?_jX0f2yPrBk<jhwYjbjp<de-GV09-%)V&!z6SAwS$
zrm#RRS(>MdW;n<&$&6%4)<po}9K@SKvxk+>HJY&Z*&2<Zu>j!mvgmH^`Eh8^)*8iG
zCX52bW&^0r5P@$;FXtJyM_>Zmhl@P?4*-Ece!tmeuFy(nZ~giv1jPB(_+P-7d@&7#
zXyX5eD<!=&nmI6_^|b2rVsvuxY7CYsMkl|F+34iC|Ig{0Gx&4ykMVb-^NVoPF!$<9
zm$?@dLE=lWhU`<3e7$}#e`F?40vyKs@;%n?cCE>X*XH)u2Xn4tf?9Rp!qV5l&&xUl
zzZ8Tib@=^5{t;r(Kk6&|BcXu*Kl}rTNPHA^{BwSJnJ5U*gA8D=F9)4wpoXX(B29$m
z#Fx<t7~93ddj@H_TohHp1IE<Y!X+A98$Iv$y&N6=dAXUd?ia=Jf0L2)u#Oq__w~cP
zde}DP_NVYh{<ZT)LJ?5IGKs8Yw%kmQK9$QwEZdX(vo9}D`~05Y650a4AG}UG*`a4Y
z=4-<81mezVD471&lc$-)aPBZZB8Y`(>Zz0~LQmdKb%bIkZNBE|Nqm+<Mwq_Z@An^_
z9_?V~^yshE^225^e=Ankv3z^FfnW$&mskx@0;=*g&z|jHJz;TYU+mwKQH+<lE8VsN
zJHDSDeSe;btp@DZj_;Ufxw#1`s{zZAkzOW|r_;^%30r~5L2x<U^<SrC_iQ#{@dz+<
zXJNG?)_)RY_}=PeaNLs}J@4xQ?_`1YotgY&6k*&WedI8Ye+R|7{8a2qj4YT*zT<ff
zS<0Yy40;Qo6_5LV>ccc~RBo_tJ&Scqs8*l78aogt&<r@S8z<f@ZJeYv-`rpw{nN93
zRn9H}@UCCKi2J=;v=F@r0^bv6zcGTqmMMJtKFQt+paXp;wfNd!Y9CX7OCGQsJrMe@
z>!!R0egKySe^XA6G5CCdn;x?LufdlOKG_j~c8}S;W4rhZoXNx(zPg1@?MWmQ$cF39
zavR7b7ep~66-AQ>s*xCabqo)uBy!%=%y;|FdOeF=8W=CcQ7&ZLs=TRYp|69M%OVE^
z=H8@KQx@kZIq2%NUkWVo<!1Ge4p>fifgtVI&?xQfe-E7p?kCYyK#L&&g@nJ6hH)Z{
zr=5UuVV@u}F+f9+EWUkMuM6;g;Ag<xfSzS@zABR~t(N(%MI;t}P=lkL)ByO#6=iz8
zMMGd17S*g-mYF>OEdZA|rINTIp&;V{l!eanlF%4R4+1<}|8zD_cN>bidUsQm_i?<k
zM@XSSe;dg>nAi+cKj)T3U{#3h*mqJoFFkCR^Eem*t}hHKQg>}8JvbmCf47QFBwVDh
zv5fmdXOTUB7lX~Hwt?t&ik!EHaW0@*Zul-TzV0Neh&KWi!EgaoUnCb&-u8@}q`Wnl
zhXWGc0+&cY1E>hRtQ~#qYnZ|U;!;tZ#9%)Sf4mBF@ejqkS$;}tYKzT45hEL#BtIE&
zIK(J6feD2Jz`iUt|LdZzXE*U(Ag<hq{L5-q-C&C*w91KyjWr|$SDisnvM+B(V&CLO
z-+p&mt>wStg??m!Adqsz+hVUt2B%TmAJCAbFI1iU)IX!ufKn@q*<0kH8aKQ*lnj**
ze{t+?ph0-Z<dpXquCK1x|K1Jd69~X466H`;41k*JHO=5h3%d3uiQCmI#vY`uKqzjC
zFU_DR0QOwr5bn(&ABPY!n67!e3S3*do;5-XkGR%m+Wwp1ONtIZf8<Ta5R5*D5)Clc
zjv&$;K`<fmuKG6D5kJ#G)fdI4Y$7oNf8bSock<hto}@$o01aX2z?+y0-4V<#;nq+g
zzdEjW9pAT(M;FAa0}jbs0Fa}dC&CY-beq-f1kJX>eM6M`ndadr^)n2LW8GQ(*gdoz
z31@c$G-ywJpmByh;7LoJ=O#o-ntGqXCnazf3ij!4oE{B63^i3CE)81J&qXxyf6M7H
zNq!UU$o68>u4P5*5~q;59S|IbY-dd;XwqC;L-L{diZ8%m>O`_x%SLgguiMEuRE=hd
zRZ~%UXi70ppB22g62*;q5t12D1W1fH>_z|^2^iePnzQUn-S;ImZr7LJ#jRX+cY^wX
zNyT>u$I}w-P*AD5cO@#;pFK=Ge_hkz>lTmn<NWM2u_)6gTd<P~>|qwgAfJ(bRBB|G
z&*TfGr*_CLt5kC!5HQA9VDqZnB<^B7-^u+-TdrjrB=1tuF<49nzR#3*DGs0v%DzIt
z=B#!-h5YxLwp`&C7b)Z}c6mC{4%nCL?W%|)WT3^I;k7`<Zp&m)s5@xBe_RM#lGObs
z)?rB`VY8qnTjL@(4XnlGAyIEqS@vxWa+yskfx>^)%9uB+e;ABjCLt+&OmhF#wimoR
zKtyBYLO+}u;-T<>P9;DP?s_)-D)nHHwRjZzpuJc9M<0d0-lN}wd;Lc>P_{6!`aMO3
z_pEdMXJc;;D5a2kO`(xUe`B19;C{rZL+T`BhfXrOpSG>!Fk&W8LoVoENcbRY8_6M{
z!_Q63;K!FC?l8Mcfe$EPF!1xYAK}}+{(ROyt&olY%_vjC3W*l@T<5gY_Q1FBqJ;cP
zFaquCPR>9p*M1hOKc`G^6mOhu(<{tjG5Bg8U8gsURQYU6=PXA$YBwZy^}ejuiA9BY
zjq6nbgfr32&agbU8P-EZw`9zk20Kf~5nS%_$79io7AH}TFxIwYEoQNSkAjdO!uANu
z5Yb_Ns3Q8Y75ZX?8*J%%gAe=~-FpW69q5j9??Yn1yD*3M|NaY_`~Y#2u*n-DGC43a
z3T19&Z(?c+F*P|LFd%PYY6?6&FHB`_XLM*FF*cKtxh8*FOK%&=5zaAC_DAq&BXMuP
z9|3Y$E8dNPc(w5gFaqc@5=Y`h6e*KKE6%S^^>kPD3^}Ao+q>{V#!OFFbv?fNs+u1s
zoQVmK|MK6PhqI4oA19)FhJS7zCa*8gzJIUvB(Pwm)sxHHv-E+OguuL>IHg(elgo#*
z7m8{2^74N_XHqd~g@Hwv)3X=9{`=j#H<$0<p2t_#GV7$xuijn!{mrlOvF3~$5%S}U
zALBFO7)ZojE`E9Q{)hNj8K$h3`SIo3i=Vq4zJD+LKuN=y4Y*8-v_`r9npa9GX04yR
zk`A7BE6-nddP>iXaSHWZW`($NIzOA%V`5)v!%TnB4z}dX$ibGD2^H`>%T>1}m`qv}
zbKX48>h3w{6%<%CJ%2q<@(mN5PJYwbjftQXuDg$qz$uF3qVrkRESkk#w^lJ9B+7qS
zX8Fc&F*uUY%m{K(v+kY=CY?q(Rgz<Z5cui3d3c<6pDW3fx8g)G(|X<9E$V5fs9;WU
zeA9o@4%(sukE{Aq_tb-#JnmaBl3q@fuxaBX@N=|^n7k6nBkijB)Kv4%D}mW^jN9ev
zp*t`Hgf<jD%iC-O<pT!ks(zezhL8f5dQ|sweB_x5T;itHqC1ud;OpSfU{BpM&I0!+
zrh3drwT@$$Rc%|{WHCWnlzyMwBAK=Zmo9%7`EwWO^P4WD)?HdE$DBjMylu05NJlaB
zHRNLP^<DEROY(APXb>cV#Pd|^zvg@Z8}}1JXbZ7pAR#m)Zi>ph(x{1L!6|RzO2{tA
zL@=i2pnj*%ScX9s$w`0J-$v!aDInzV6mRxOR5E77K<NFLP=L6h(5n}tQX$2Z!BBtr
zWmKq*@TEr&8hC#%!>kGrZvBOS9F+?HHQb@t{nmx}88<Mf+*>M{gIvSy{*cy4Jv@X|
z+G5;_ag!Ox-Oy++QyNKDw7r6=A=8UjDi#iS6GKJnVVG*Q6{a!IwZrfO_~{l}2!4l2
zvRt**A{Qh9oA)sR77Al9KH6E;<|Ka;ToClkYTVR&{2K7IMeOj9(Hd8Gd19bMaEXSg
zZ`y?Oa3HM-Bd*g*2LOW#bb<hLpdw+0ZWhhQ4MHlQ$u^t-_Gy9>K*Za6Rb9_J{DG9S
zif~~CUo0QGjlgeImv3_k(##WF)(LAO1Q{~pEMusL%u|G+5A}Lo-6j11?+kw#s9xNx
zK0me@%OPD&pc73~c>}`<Z}pa$9TS>%SyvBrwj4k_TJC<t#u;(FRk(_c7JFemvp`rN
z%$UePbooB3V=Y1JX~iCpT6M+V>cN)q#*y0D(h@vYiv4nfu?dHvKuiXLkW*ZXp+-6u
z)-ccro^iEZt0Sgw*J>e3kvo4_lY84e&6=BBxNNC1Gc5iE`<IIpc2Yu-=6Jx(x?W@9
z(rU-o-fl-slL{CRH>oH%Za0e?d=sm<pf{-~LtFym;-S=blE5WNNM(>^YUKq{tDkat
zgFQTVq)#>wccs3iC=(`P?-&wTdn^)I?~gFCkMK`%ftVMJro3!db(Me93^=$b@n0c1
z5S+qoME`lUy2Bikf+)jvv#3^`KNX;1iKH70Sn!WkVk=+`lac~9`v5Wx0>ww)2<H7(
ze(*w?4n(A4YMYD>t?;!31p-Az!aT-L>|uWLrKK_Q4x`+0EJiD0G5hrj9WZ|b)u7aY
zYD3cTXEb`L+5%Z_L6v_i^dg+j8?^c~gR?7+kfZzr;=w8C00Dtq2q{)RjA;nb)L)aR
z!!GS~5P6a9XbQZ;q_d-1&yr4Bb&R|A^S>bVsL;IxkQN?80G}tjwB13nORJ6{yZd8P
zL(4i4`W1}Q8fbP0swGOvBLnGEN;N_$b9R4#N>Gm<2->NDfH{8}d=O5+jl%$rx=us;
zA@o5OxE`5l{#R$1H=5`rb(K)n!w{yuD=>XMA3?|c-M=i|f3wKQD4}m9bZ^&LmB5KU
zUcIQ<9V1{4SPQJqqC+WV$Qum+F7ig4P(X2$RO_F<ThFdurlM<D+2DsYRScT2%$I3M
z0Te=bIyx0HUxt4q{n}!Cd~{fip#wg$8bgiU;ZGuvKL_O5xNY)mn9|Ra=OF+d&77qh
zW6oM0$(#ozb}w^|G^bF9LsN~e1&Hz1E9Yglq4;sL4G7|6XB$!yC8}1~ia~WEe=Tn7
zYTaDV>n_MNRC3Bq<QaqZ;ULfGk-dkCp3%CI!A=T#AB}%X;Jds>+QLOie;SVQ*aG19
z*PGPc0xc6X*K698$AGPrUdVgAD!gZm<gM$Q%_^q{n5vNC3a5C6ZzodMYEbZ;1U4>C
zn#dYAG`)n(6uO{LR$lbl^%Bp}^ID4MD(z}|By~jgY`IPZPg>?n_CVk!z=LQ~6bEhn
z-!@06FIj)RFY=On3tq=ZSI}B7(Mz1v`qWHQnnIQZF1FF%LY9tB3>^4>44J6)Kx6`Z
z1Jy)v;n;94jR-Qv?l!!6ZNK6D@ikiA3AFkt4KLJS?){+Q&0B(x3bateE4QcH=noCs
z#yNR<_hYhzRmKrI)zj<jBZwUt20rr4h!S}R`s06R+lOkG$sR<Ben)Xn@fJ$ko9ESC
zUgFC0*XIoFUZ%=4+k)Eg+m2v8P!w=&Z?3kN4R^#kw-VxcLQJcUnZh0-#CBBZHX$}c
zp(l+)4>e8VRARbiVPj)7$1|wdb{v$uYvHf!Bg1ii=rtxsO~b|W4Fat?sX^H3zsfZH
zK)`<~ru|T6V*UzVs6O-8`<egG%NFMyfHP>?-t0GMK?CJQu9)C0swJ}qxwG@ccIM6X
z3I`^TqK5Czx=bms%T4>3%06f=I918pf_D+F<&d~V0$FO(Q!{O6nGN;^mxLW!5q8uc
zH@WgyW`%OwAO#f9?Wk+zSmy$~oGvf1b8&w<gyH9zm&-m$Jh6l6-Cy?Sb}mvsTzZL4
z>n>Hd&~tEEiB5xx<;uMLYpy>x>s<PwErLdEXwvRNw+s?HLXYZ~TKF_uCPE0tQjW&&
zM;mILmpNY;a=R-(4}YQ7Q?YNGhs2gUf&tA35sZIeOh~Cn&-e(^)hLSUbn^<EmZpE9
zUj3!}G&VzC?u1h)mnZ#PQE})<f|~g}$C-5$=+~P+5u*gaKr>CNw#p6wkJ7!!oUX}L
zX|kX4?RUI^=}j%ilmox62ncq{Il%k4TX~u3)1^MQ^lVzwVj$&E50&lb#$&ZYatL`3
zr?Foe3yM=LJT>iXxj_Y;E0bZQ;)Q?hOzYI}budMjPw5&d77fBlmcBJ1(AhrBG7$$r
z)CF8h#sRfHD&xj3F@m6s`);*Hh=z6>6<XKr<}uSMrHKYLg;vqh@$kyTeEyl7Be<b_
z=zAGB%FYC0*mV!b56&Mue(>DyjO}}*c?AI8tm^3=h97I2OjlYm#nS~bd{TeyG=2{S
zLHB>XazXsw4WoR}d0v#VW*{l4D*T4TzQ=sWSaT-!vNuUP_L`wb?7e)B*rOi>{j_JS
zGam!e`J7=K8M>VQCQU*A-fCY{Ai0DVE}U@h@zn#|-o3~3gY=Vrz41E_w7=CnTkA~U
zx8~U+4MvFh`1@aH9NE1ccb$J><jHp#hq^cWZQLLf>;kwy3=jZ`ek0-gdGgQZ9_v>5
zrCFWu2F#-lGU_rfF<u^pOtxh6=#KkZihXSY-U<joolQ|n+vAjSBk0@fJI0%dGMUz5
zx9mYLvRh)|^PTfRsrK;&m1^ooq}}dE;u!P`$D6}p@9-xCHc%^a(X)TuF_!DqEutk*
z_Gm0r&DYD!ReWK$g$nz~^vsT-_-H_YReJ$(?5_>>=rzi(v+os6yFU}*p|R+4liU{L
zQw)9%(3YlSlwL#r@@;xOAV@uWJzP8_){x|1NUR4xu^bX>ZirZ)#-iU`PX2Wk|NS3>
z4OVDnZe(+Ga%Ev{3T2ZV;Rp;cATS_rVrmL9IWaSn@zg_q#aeBT)J77%&wKe1BR)aI
zntp%DeFDOXRgQxrt6U<D6q#AW_?Q_lwkONx*I%`}tJ*X6PJkmiA+eID?XIqur=F_n
z4+~cC1q=Vu-_`c)!`X)gAD-c#)pqgZ^6b%T?iRlAMi{lYe0vsO;0vx<Va38qRd~0!
z+@9SR;=$#Ae_*{*2kV6_yb|!v<<;5!r_Ue1x_tIJEYz}4mYej0EW$Ic;Td!3*^j@x
zc=7D=^~KZhlQD&{0+&De$IGWbgvZhsQYed`zj*ch+3O#p97ZoVFTB<w$Z;;bE1VOH
zb74Wcw5civp%pKf6dJ#>Zt7JvJcr*k=jnO#HpwV|wZ^qCn&Fu*th2c8s)_;}D(;*M
zRwy{ZIS(?&w{M5HZDHtS*Mn{ftGz%yRBhMn%FS?GP^M5G*S6K$s;zcOSPOzF6s+#T
zGuU4%i|gMuZ90LV!}jYc$-tG9sDaDDL_!x#JCtl2k17kT+2K*)ndEeWu1*38RY*nF
zta}uHNYm!)vP+v=rRn|ZxAalPUDiQV0O(G5k8-|`%3_iU^sp+bRDjb-{NkG#o$jh{
z`tG~%19%1~#98nRUPQ;>Mf!;4B>z8~q&p`hZq}`vwojVU66_owuWnbHYB-s21)LVO
zb+fKl=@7<fT)hsD+<|n_c$^i?DtEVIG+kGJzu64BmLR&8_{n-VybsT$^QR2`^6yWQ
zr8IuD++8IZmGBf;X&tzqBUR5kL{~(m8VENTlqw3)VfanVX!TW#YSoV6ZiD?5#5)ss
zqVmmVFf5peGlt?P_u++RMw0ui_HFb(h%@8eiM6N`Q|PRdH=CJrt)fWWOX<eW2Ux;?
znV?nm^}1@)-dr(p!U5~uyI~;%fyi+Ct{Su-lx7G}_PeX}RSRk&H!Gt6u#T&#nCSfL
zrmF^b5T@{!PI<j4qnCh2rSiB{Uws@L`dl*5v{iss5vt0*FIQ>37Y4oReY7@Y0i)pI
z$l7wo+Lr^8158OWVYQ0x4+v;U<XydgDmT&K(n7!sTz%D~z_6a-nJY9b#0mn-uIVSp
z+EyR-b@U8?QEet(a1a?+)vCR{?(1eylJbS-r1-Yk_w_D*2{MG2xNXW1yZ{Bw#+^8D
zlpHDSKy_+Hb&og6Edy54nQr3Q0cah4yM+jDwu5ls*A`_fSF5V)C@v`T_D$M<On?PW
zY2?UbMh+9t!A*!QF+Pa?{Dau6q$~xTj{IeJWEZQ+E~I`VNd2D`%>Y@JaeTF_e@`eb
z3&uyvDf^@bCrFKDi%{acHxoDXlt#e|V=9AqR9@O+Gbl4-hLL%LR0*KD;}g$=qr1b`
zA(TO_I*0OSs>Db(=e8QWoCC^#gsiEexi8~}@BsJ)rH;$j4>1+W%rGeNKt93Gr_=+G
z$Q7j?Oi@4$IaxJD;9wo;fMhvbew`8u#HArh@mqbBaMgl-Ii&=2MWA$wEP0bO$u$al
zJEa-TKJ5b9QO729Ig*mQCM09Z%w?I02^1fj0K!!>aqN`mGGyZsLX%&AhTK7?xvKw~
za)${TAu8BLh!`@un)sW|VIOVY5!mT3%9CItpYvomL_rjh<JrJ}Zj-27lBfV&&Gvdz
zcLPxZw^O8^ejS+-cnr&AC1qP-{ec0a2qgU;^pbM05`~oHEEG0?lLji6bMOTh9sH{7
zO9BK+&ndAC4hHpzQe@G8xu6~nQ}tEaSSez7CB_?79G|S>0+%TYkxSH#glHmJ?{IlU
zUn2--PB}dke-o!49dYdRP_|{plIjl;SPXtNC0fi^Cexc;%Jq`dZnx1g5b}Zx@_d3s
zH%8>o^iMtFafGHopHZLNYTLB832>CN`1(!VuT$8WOkpZ`n&QrX0go~hoF097Hrw{=
zwyFsD4DNQ4b8{$hl^FDL49P51SZJSTPc!RhQ{Hb(=KW8erj=fLeOiWe2F*w{8H-2d
z9kCEVd1*h}(>r7oOrJ{ov)rL8x2RHXU9MN>5^9MXsX3xJ`e^3-l7-rYA}#S~08Pky
znMX%&6F}OD=hWMOgoY+)Z-j<W-#3w0C=l6;5iz(;J_j{2iA)qkOQIl~q;7}}sU!-$
zY^#q{Ix490GoM?>xC7XLba9d*H{{|5;830J6GRuCc4Yw1B?A^Ahjvm}8@e)bIP*bQ
z<|4r6HkL9PGSn!3N~D96o=fQY2%(0ai&94<MHz~SP5q{SEmL&E{+h~@JLyD62e+0S
zDTp|H15&Usl<oG{*BFFa62`PWsg%$1n$RX9UW2_GNR2MHPj*)u%warKcNiuRx0!T#
z>b_+vX6=}YJ&djjN`jO*%6BiR?6;ECjX(jPcK#Sr!0L?UCd&%jW1#8`_*Y1ZNwO_?
zY56WW3HUmHq;AyH<F4Cp@sL0lH9O+Bpc2XGG$*=L5G<BL=<f6;z&k173}g@rXNrWm
ztklOvV$>JJ_M4E(p%_2^{4;^68F8)_yJgy%!wwLjN64Sz7(G~~2wmUqSAFVu416MY
zBOuum?RA`T&~n+`Znst6#%|QJ%f-LWJ}hMH`ksS-iWfkge8?cuI|=)T{_vBFvqu*%
z7O-1&_UPXWe)i~j`0vT9r|{?E`^8_*o?Q&z`J5&)unmZM4*P&J3{7Ov(Y=JFO4;0`
zq>>9*3!3nz-fWU50>MG|Ttz4tk`ASf9!u9yTIl2Y3hbL5sNO-SZ3$8|c#<bKA5%Sm
zEDO1RGV|{l`oHfGH+^OdBcd)DKMk7&W~ST&8L?#Li6yVgsbBs!_3;YRPi_zanC&Pa
zb6X&^V3L#owfM=d>i5^lrJ!&lz1&%kE$>$!S5@M7x^TH6jF15W8g`oBB!faWK=BeB
zLV$2UI6Vff=FN;I>So`i-As<swko@3*DW7^d>69^px-!qfV@7GOrwrQz3Y=70TAIC
z!D)Z(`m*hp_`8Jy!5%V%hY6(}Cmn;Uc2P0l*Pi&me%ICScG1Zc_@>Fey)H4~a>4NF
zw--M}0Otlu%+N|o9{IJt|Gv6?m_7r%MNpuiD!e6Cz|u{%OX6r#gb5FdGpoDZe)}tb
zc+c*t8(uQNqIDi6AWr?7uoLvksjB-H9xfmJZP-gdvF3c}Mo9F7+3l*;oByk+zEG7S
z%sn*!DymFzcc@CxOH$>8LkXxA15Aw?Jr}zarN+|Spo;C`@KDplX&tkmlezJ|DkCOB
zOmWitav3#$4|!ki{MXptWl|ky{=jK}N5FkmeN52g6*YMx@Q0k~{87;=1NA&k1^|v?
zhTP9&N$Hs=M97u^HtNsIlG4jC4S;=E7}JC_3H)=_*4KSRK?PNpCw^77ZJF@gX286S
zmQZ$5<%SYx+A|Ez56H9xCF3eb=E=q<b_p_#Vt+`aY@vWiP5PqRjk9V&36w~GLN0Y(
zCicta#ZUJVy)vHSaBjl1+2_JQ9`d+B%8B=d;ljxK>b@>F_3xQEfOmSD$Ij*ARkEK5
z^G7#n$is<o%eetkbZf39jU#b-6kCI4oD```5z0DiCMTIR{EC#Yl_%f$B^nWApm`J7
zTIPAob{cQ{4r?9oVRXN55_<!GI-I-Xv%0<b2^VH9%{pG&Rhz-7p#YPXO2^z+9(4)h
zJQ^&kLoIq_ZLM=xF4P|h;o%1<M$8?HaOWpQI2={`*_NWt8Ic+i3TjT5OZMHnWGz1)
z*_C<FH8a69=F29SZqOlSiPQ^u^cs#C=7kat7N7`dlMe+!8j!2GOktsaUS(kbgsT$3
zu!CZKPT+&Nsm?u=yU|6CVPocK>zP4egRsGZZOFOM4<sjK#Oh61MXVi)`y{yal;5C;
zr*;V+xkii>%e9`6{xHDicE&NrREazuAmG$3hAEprnEvI-WWM@g89qCevBfB3?|1cw
zJ@z%6;YUS#;{297`G;nIQvm?JVp6c|xanLZ2BAoAIWItz(lwj1h1l!UU}Lxf!VeL1
zxqP2wVTSOoy1n-hp@b`ZddE_T<9o@ct;iktx%SC&Idky+_7379jPyZF!9%tACzj{N
z6rs^6KrSZ+;t~1fJ@PMhjC)Yx@nhVBm{DTdg@uAH1OMFhj2e}HV*TVA%fTm8bugnU
zB|^0S`KnT(s{{06q^hA*Ufy3m7?cHAY$Z+K_PZ6*grSXKjm%W5+-z_-<`rEHneAJC
zlkSCufs`OfBj+As0US-sqYQVzrb`TYYAVg$HL8*Gvz)@y7K1VJP!5w1n@+NUujEe4
zVe3kUVcQ=Ae;8$de-VO&Jg1K*a|c4Mo6Qwsx$^2z^q9Ma8kJzjeIl=kDt+=zyHCAT
zH+Qq7xt`{@svRUs^C0kjY0Y>Z^rT75B3xLbiO${an--k7O}%w#$DS|4{UAykPhY3=
zdTmhVUtV2~qcVhJuANvc)Hx8(&|CT6<ML2Cs+}0PvEyNXA1GUfxP1A;9C?Ab0!~25
z{%wp2C!L(qemBQl!T=*P7b*v+H(>HmVb!!PkpFzaDPQ%9m3t_d$@2aBJUQTit>YY3
zwKsLFreSxM)5(aMYU%XEmay7n5>sNsl*y4FwW&4<ZE2D_Y6Vg_&5N)_34~qd7G*re
z_?}l2V^DK{PAF4C@Y6M~(ac~p4py1z((G8~XNR+6HKoNtw`8lg4GzCU-+&~$Ny7zD
zumHxZDZ-DULMV!g*-6{oH&4DBg#niqKp_VL6v;LO09Q<XodjjY0>aRS&dm6}wt>3A
z!1m#izz_$C!^44XXgh&fU^xiCI2Qr=0cHj!ig;>&ER{*a;O{2E2vao0Y1%8CHR?P`
zMO&zGNk>E1FwYW))A2xs88O#%%aK_@^cw4%Ko-d72QC}#l&jo9i?3=3Y<Xe_y4W_P
zC+ef%Rmh<hr8~Tc>>+dLV`vzzuTfQ!dx^vRh2pR(-W6C%IE9kA={aZj`u^FE4^wRO
z+^**&CTT=Eb<Fw0U1)m!ae5uR9c&${HIKQW>Q@DMYWVkG`)yOllM&$@12-};lQ7{!
zf8ANzZX3xF%`>wfLHNmDtlE9QAWv&q#tMNWM@x8ZfWU$pjiiamq0EaFB|o3)TlJ7L
zqO66DAXx(|qt(-0ed^Syi$9MkVPoq5q@UGd^m+7o%)(m!Q7y)=CZm_<QjQ&Qnrk_p
zT#e!fZ0sDda%_Yo&W<OG(Q`p0c`^CNe~1ghHB+!@ayfeb>&LfmPbTN5$NpDZ6K%Lo
zzj}N2`s7!?EGeOixwL%t#;-9$;KqE)*}IeTpZ&5>L}<y=^5pdFZ{dWO=gjUHsVLDd
zZ{s5FaiY8DNC-i+w&NpiU^VP)+D&)@CC*TjKL7CH!|!!lt?q9()92N)UHdIoe-ciG
zO<TfOju=KcOH12!-CVczWq6<=)ZzoHo7pPdq6y<Pul{(u`6;bZimOjPrHZE<fpJ6$
zHa=pESQ~z~zF#cr&8n$>hZp%xMi6R5{t_0aFa8ofW=az)1boa7!*W@FcUY=#0?X|;
zg@wz9Vfpy+<NpO)cFxieAb8e%f7xF5&zjfmPyN*bF5uD!7Zx+P9KfZ*9Oj${_kWmk
z{J(+hzBYD{hSg}&Z#VU-4*JRoW%-cl6v+Q9$*vVP3wIM>XOKLc%&;%p@IA9cYV^hO
zDy%W0sLOUwpV!qze2*l`;$_tZ9?G-3tLck$fYml1Flz&HV7!vfpsDcSe{XMUwOK_|
zIpNMp+#4U@@uN1MP+eV2Ul4ql&ZeEVVJ|1jDJ1DlFyTmWNAynE9Z$~VjTUmE&ETB9
zd6f<Z*7bqV8i6>*okH@Q0IS)$4nS~4n6?~218O}>)Z$7W0xek#X<1k_Yu)^-P9`vm
zDSrsc!Ot(Yf38>QvBoNef3VM@0h$Pku@O*Igd3MX-!8%~2(ALuMcieS<Jt0fMdVP=
zM9tB}D#RnaS%?e-#PvE-5In_*P#lAJvrJxP6g{0}Kd=x&%xWY|Ho;k)Eln~;ash<s
zPa;$xe8MVpYo>)E$_&r~zb>Q@v_}d77$7MYON5UyG-{pPM7hZTf6k&bfIB2}8lQBT
zd<XI7WIkYBgSc&)FG)+dwD~vT46t4aEZ;7+n}n?;ib=$_U2al<S}Ybj-pO{|^cm59
zO3-PJaoIO1-(LstnIu{W1b?={SGjC^3J6A+!hpDsw^Kn8(d9OsXB5q@uVyX!11;|o
z#SmVIGM)bX>iG4^f141LAk$8w7B)pjY>BE>U8nff5ZHL<e7;T&X99Q6n@=gOK{$2S
zEl>(O;A>Zhyd}>9<pgA4ZZJ5f$FI{m^Q6_do~#B_tl|P`lB|ZEc`d%%%c0Hy-}xnY
zt^$zqmm#$SFW|qS2dG_MIVObKMKPEoo$n(KO6GK$EQcs$f9BxU8W*WSW!l~%jWF-r
zHJh81I2<(^{WT<_vqeq@fIih2232zlX?ausGm3-~P}E?Y|C05Gb0qHoiuIRR4nd|v
zkH?h8AaZyKg~-Sz)*sM4aj{EE%&n5{Aq23oZX$l241+k&gv9SDJP^0uHS>AS<SHAo
zs@L23CM5+We-I_4zcfhb%LejC-KM~11^o?@TAMDZ3!>`?Da0>#Xk{|T7Z5Bz{)aCQ
zQm&gRQbK`H>E}G{yUhHKL#nGG3!>^GIyU5;jLv4eYGYLg6<nvPgF?a?B=7NgdI`i>
zHu2-TiC;XKjQ<X;KJ@MWCOSUye}UMs1oT63$~{=se`56NboBD{?Rc}=)}xodjoIks
zFaCe8-W|h_)7RrajZRL(Ny9^fUF-7Dz`KM&7KUygv^|Us&i*=7qyniFE5%uxKobmw
zb-k^sdL4j+K3+<h-+r}PE|U0BE_Zzq3oc<X#&%P-;JPPVobRXXw3$=<#nra0HVw2R
zfmKJ^fB6Cg@0i4}6n$~ig0aD~RZ+`CeBf{)ehun^m6H-UCK)Cdu3<7gl)GRNA#N78
z^ZT4Pp;Suiw?jqN)pE7KNaSi4cThY<i{b%`Z*#8DnBg9lcc_I$k@uk*4{on>-78pL
zo<hL*WEfrV>q+jqdhnGv+{}_)9r}Igf0|@Lf14r;SS1RHRpM2>sZw-GjsCxhI?bT_
z>1PXG^yBn>vJddoU0Wdin8Nqjd>ip#K0(Mw{VpJZ;@h_C`ZAWi;2={<kipIiHe*gR
z{cfRS`Yy$#M2fGLTgW`I|AdDXPh;G7j7#p^^-z>wP<+7Dc8YW~gUQk&%m<=mpuGH)
zf1=q-m1E{<;XG8X&f4qf6Q~{-7QrYqs`Lh{dUlzr2PJI3hw8)<@&PK|y=26|ccoeE
znRvUZzckD3I!3rOzHZ1yH7!)kvpKYPc}l?@zIO0!@I|a0zy+FNt9($AwBdagDZ0<1
zDB7HNBll`KPi}<tDABaLWCUoxks@FCf24ww8^$sWySm;RAZwrQ0kb2BGN<8v5xNIv
zrPnnyA=5Pd33u(xts>IQkJC%@Fg#c~eLpY{dg@f^$2?YoI$k(@^4Cv81(eoK%C1))
zeET}S-B0Yo4htFEVVFN``X2^hXFm7nSgkYV8+t!;1MlyR)r5wI2vTumLzIe}e>@&>
zRCVy^)?u_%VN4nAt1tom7IcN*pbFdjSCLeOF(9td+}{KG9ICKD&XhnAi%kE(5{NT{
zEx`lDX;Ljll<612O74r6@Z&QStvCz_THULvq4YU;;3JYGeKY?RlEk6I;`@^nKZU?-
zx89^e14N1Y99HJlY49wK!YmwXe>Y#fSiC-!1b+0SOVf1v{#nv3t4f1~#P!n%UPKOi
zOJ;k$<xaN&9KTMRA&ZqU*<oOHuiOARwdkpU!DTvBTDLc$VBxv=GCyJ@X|pM_pC^Wf
zq&^KpXjuAPLqk%y&G>6_WUMhVgiqUh0T5<abYBH?@(knyyD{hfG4euRfA>`Kt~awy
zoim{*jLL&7Q>w4#Dw0$&EB5QR9Xpq+=DKNT^OWU<#(~oiONNFKX^<ES--Geo)^~{=
zrp!PGxp*6+&M+ylWvH4T>PwP}et@bIrDeFP3hhdi2ufrxN}z<+1A}bV(=+MEI@z+@
z*?JwL1QM)PVpkJ<{Ff+MfAnQy8xy6EMuVOn>U=_uBBnEo7&H+_^<K_cuTp&Mg>iC{
zyKT$VldI`me^TDDC_0HlCFCgYIf)VWb!pRv;f0XWf*yUxwCNK&_xFIK_rw8eITQyh
z8v_jCAOA3^tgtasuKY7YdwHMe2UQCe;a8d4B`^<ltg19gcg^}HKt(@vWvD*68?`0%
zJkqELgNj{vVFsA*?9S|SnMeB+?B_f3xT^pCDKSx&{-nNdN|7dnd7O*{>EQqT2Zs$f
z7LyU-6AU;YFd%PYY6>zmH#w7{@I#XR3xB0pn-mEvzKE38b-)?~XwVkTQX@c77lCWj
zu~u73Bsr;9?7#0wii#Mrj<cluG~`2o(~<Y~+;c}?^dp4(k@{=?j~Bg*-bEj4nf*6j
z^j{8o&yI1@Pf^MVXZ^vnXAa;#jw2*UUr>h9q(4~nwh7xA{0aJuIr@a6lo2>Hn1A%P
z_h0>fG&nd`iZMk@VBUP7NXc*vvM6a}??1eKdoVaY+*hACM_drA{_@Sc{ntuNQ$z_9
z_WHx4R|m)MjUO1t{RAB0G*OQ1ku*U`Li&3|fK=;0%JT7iIg#oBBZ#Ef+WvL18kei{
z8qI!FANTCnJshEwXq7Clwa;)XhJTpNxy2~UhufD$HW}{dgZ6Xh;5U7YAqajCV-zth
zUFKDGmdlCn%Xl^_l@v0`k~nRoU*zf|=AU+b{lk;?0~Lsq$U66VIi1S#V~okC=f*h}
zBc67Bt5%DJtjlbCx<Alm;xQ6Dwe=g<r8#NE!F=$v&BxbW8!RK%b6GZ*P=A6FDkxM0
z+loAU+UQ55)i32)R@JifBdxEBX;#hrNT*p@X>Uk^a4f9&=`#~HAt*|z<NVaOJ8UhV
zj<fTbEQi~V8;hp~GnlFiaHC(1P0ewNV%lcl#S8!DJ=|zI*!k7~h9V*yXq=aj+v#w7
z>!2))(yxkjGt19(XK};`r+>C&+I2J>=3B#^=WYBr<=yy8Sue|6Cz3$FCfA;tBaB0v
zCk|Bp*7-G+d!sA&<VKiPv5>RkDpa2N+(&e=3^WwL+!v1Wi7z}n@u6l54mcM;2MTBj
z`!3L`dQ@7}5YeJ$dG4z=-EpJ&3j+%`ti}gmA5Li8t!o%`L)9R@7k?T?z;^MqJ?O?$
z?elP3n^0h<E=f(ZeA1$Kt3fXS!L%hNz~T0`HY1(<!D;!`@1tVst4?H<m4?3DVjJrX
zv=Wj8Y7<ijjE5(?esV+Z)idcUW_ea;qq*<Mr5xAA8b=6VJi^@q0r+<Pf^O_dCCAWL
zzQG`-trrp4ikx&{zJFml<}yF4XTH5qxg6g*4IlJv2tN4I&#PKiyS_P0l7MnnSBCV0
zluQUrA|kqBM}g51iaPQeqvc!&pVQHDUi+|k<ev{EtSpxKr1BGH>&6+1IqRb5G4!Vi
z*$ldMrMrR_k$!gSB2YO1aX__!efF2>L3aoQ=?bW$4qVg(M1P?YG<JY!f=Sih)?V^c
zV7%=ge>fVPzI$!-nLtrOttV#4i3r6)IOT4KT+3=oGl8s%*bX|W=HD-V4SufFc-!?q
z=mV#90T-(2sHt_h)6PNIVVT-LRLy9b-fI#*zyLJ+nQywDjdEXG=6XZ*FVAYfBo?J=
zxroH=o6p^bP=Di!8AB;tm5RiP$u6UD6wx(Za6X6ixt3pb04mYE#m)5;Wt8J?0C%!r
zhLJT9V<cjh+{h6FG>D|z$rW@}0oXLAn&~NG1Ot?;G3M}br=CS1<&#l8YHG}*w#IG$
zcQn6S_m+uLaLj4kyD-stDKE2PS<P2|hJ22p(dHb}!GDqE7^)r%^ha}yzesmLYavS$
zyT>~$)0u1knq^YR$b)R#A&yy$z66%eWfj;*LSyZ^ArR7UaQA6pF-1Aj%j^1=T5h<`
zwR$B3<8EXgi>}k5X*ZEww0F9@3MkKI{iF&k@NF_WFH=2cWSw35_^~?)yzc13lchFl
zs8S7S%73ok?d$fuj>WsJy`gteTa(VMXQN9Cq+1xsnb6_XMSzo3Y`(?b7F{Tatny{e
zp6Xnv_f)?;^TIrrgReCl$4I3xxX!uvY#ale-<Tjn1-fc}>bSjW;31k#SJ(V<W5N*u
zyvD@FwA;D)2JJc{x}jZ2T)b|zvpx6Ut#<5Qq&wUEX7EOL|4sJ2Yx6gBcJEDTlRXAr
zl7u*W%mXiDdMYGNssG=Ue)Oi)7W2V2rGr8LkDmJb2Y}JIlarqP8v`*kHj}*lM1QSX
zZEqa65$<Q9KjL7ZjUD(_e1B;_*|Lflu$@#<;1)Q*Sl_Lst?xy?+q10z`R^T)!{P4T
zN|u2jKxFW^<Zxb|d1lB@6ISsF3;*HY`Re4;$)^dAWBJc~HF<t{a(bcE#8=)3qb8Rh
zPSOW_;(g`R#7b3pH@RG$JeHNNo_}2a??lK-7_MQ`<>KV=`J1zgIBF{|1;^3<{&E=y
zRpq$PQ=h$g5eIc;t@e2^4B3i%!4(eucKOr!o6DDH@h8J7=Uran@;r=jTS;g0^w&SX
zIR7;apI&e`IEgZqv;wCIjdMVB2a}9+VbWAGT}kdI({KV4r`~Mab@yTR_<zy7+rC>g
z^X=_T7e4l~^4#S!HrwrH`;Ra#Mdg*tC;HoNHd{Y>di+ED;9a+Qx9ebot63PBJ()fE
zXP7$W8WhgWWXf6PMf_mfbo=cZ7jl9Yn)37soX<NL?S1k`)G&`Hd3Eym^v5SZfF3HY
zME-cbZ0c>C<tna8i~F0X*?+;*dcBB)4g^zq;$1@hc$$vET*chr7{52$&8k_=9)E0Z
zqgo8Fn70l;+_k?qn-B5VqK!Od%HbbsxXj<dENLC^B;&=wI`C_69h@=+oj7%TfS!36
zDixfOMWxcte<aT_VgmY+3jTuQNL>Xtdldr%v@8v1gXKe=ugPnSfPZhi9O_i^iaVA?
zf41+gn<$bNm2f({d)LnEt_kBxRmOu+(d9Q7h|Z|I@S@qFn0f-Dd#$6GQ=xek&aWz)
z%n{<4$2CC)Ehvzm{U-_rKRY7^8*yJ*XE|*&7Hm_mDp)L7%vUn)^s0TIU;tv+xGel;
zb(U45Ks7>U&$`)e(0>Po(Rudg77qpo@Y33B?ETFRE^W2UqHVTuS+2pZJlpldW{ZQI
z<-^utB=|q)`KYV3IUHZJ;Zb1>;3@Asub0bafdRy{Indwfg-{cSODh4iKrg}XJOq!d
z61M0u<=M(u4=_8;v)bqkU`EZ!KgVRQ*Xt&p4!qH6TS8&gE`L*$gO3~Tvx>WT$f*QW
zcgBLPlA*x+;(i9~?6O0BiOvg-B$@1s0FLB2f%R>|Z_gQlf1ALvQdSFf&tf|~qg5u4
zrE`N`r7JQw>qSyHoP{e2nsgTU9<-Q^^FGE9xP%uu5}PETl2T?<?RRKESg-gsek&}+
z>TT9|*^?AyjDPDzUV8<0*v0e+psX0rzx}J-?m7xqK2W5Mip<;ZuF-oTKZ0ASviN-4
z-gNCI;RCA_WuVOmw5G09z&Nz#m+QL2h!NcLp?}6fip6`JUV#0`>Dyg0DFmza_vjj8
zt-;eu%k%KdWPHvkSemal%Q_hw0LO8W1-ecGF-Xa5;D0;5f_=O{w7qm>d$20nMhQwT
zZCB9=mA_9FV@E_Y>4(9@Kx17t0sxfad34)++PB*TXpk_Bqd2P3l&%Wfhveg2!khNy
zy4hwrp#n^#FU~G6@D#?=DRRp86*E5X`t$2&IFoso2hUK^oZS6enCb*SWCnw6zKP#3
zHP3BQet$%-R-krEE<d_>O({}%K(wrcm?3eML+Az1QlMdiUNZ*0s#1!9s}b~8$q*`L
z{~S^;JJgo-1?JFUT+d<Jb=$S|5|~Ilf&!&+0=zG6ca5-Pj5U434`F=^8rZDRM-;IE
zpp~2Tym=IVfG@Z^ayAYp=6U6Ly+-;5GGv9_jen5FN|`_1UDw+t6BR8>ir&9pw)15K
zMhW=kC`b{_0a2N`CxbN0Wl5>#o^MM$XtKg=cHPvAX8Q=a17Lbq{Fm!?j!t8Y&O%-1
zkS>QUO406{N^#(pMJa#%ifJQ|Kp~F2)w&W2QBP4z47O)SCk2l6AT61KC}ZEE^B75K
zWPjj0o>JZps+guj)?yUd`F6Expc;vyPK9^C$6OzMJ|@jD$>_ihrbUn<FOx7fn2(3A
z!7}OV%akqwP&Ct)+<0h3X32_+x~nllthK{HgWzLUW%I0>WJgFeAQ_=S@?>VUKFAb6
zs~^G=JTEK(6jM*LL{JrIpr2%l-3Gl#lz-ecZ-J~Y5Tdv&+^57n(CCA>7q-Mb)P+sG
zLZo-9Fdz)?sT6^q7z&7XxBj8Sr9Jb7NVlIc6?#U68&(ofJPSjq3yRR{szTbKcyEbK
zmx~O;MfSJ(W{C?kqc|yQx2vz3-RwzR2uc_x2$~Q%1Cu4>EHUWS17cA3j8ZQ$7k`Az
z#Y8z9TG<sV<0b<taoe@42BSbrVhM|VD9BOq!bm?@0#FFlYX)(VDMaWnQ1b2BPeSqQ
z4-y)Lff0U4sbED>y!xiz7ITtYB$^ikzYriKq7bl(i0A`yWB_eb>dP8!ANn+wnk+e+
z0A-WDMB&q%-7Wc4#0?cV1ljSrUVmR9!5Jt4OByhdbO)yZzXo|D@Q81PUhy3v9+1?4
z%o9p2ny#5+gi6TUOv>T+$JF0QqW<?E6;e7oJStQsM@NO|<HcZ`eRs3(@&cli8EBWO
zfJhS{)F`GpLzsGR@v5~rrUbq0M@|#4l<=vrIje}x%^}orcUb_MxIFL=Nq;Q6YrbX%
z?0YUgw(Md*FYzZGsXS8OyiW83!ht^{kt$;fu&t)(iXzkx{a6PRQBiY*->!$>A$)=T
zWqb0%#72ClnWG*!W#f;#{i;IJ<%@S_i-!bD7O&^s9=C#$P~YpOcWi|*-pk{I-iEbC
z-+k8E44gEkZ~@fOv7=;dihs>F>%<tNYKv`FZHLh~1&9Ve*S!)JUD5>Ra1=s-6?qj*
zK2Z@MGp8R&5G6^FzpmTeb+bryIu8Mqvs4BrueG~xyYU9aw#~})u2%tW_E$0SOVGT%
ze_beEw`gQdgC$yRA@JXdOXVppM>8O1G#9!Qr0;tBzU{X4_7*kc3x8znaxoJ-7|f06
z9bmQy{eC%uMI&DMF)Q-8p<@*#@m;eXY1NF)9Bs{P8^DmZ$&ChWC2f|#LiY?l){rU?
zl(-FGnWiARyiQIA!bwKLt?G}Inv1jVQ16gsIPas&Xky6pBD8`Y(yRewDm=8=m0mtk
z98d%V_bmd3DZ1S4+ke7Z0eiEfl(wm$9&sW#2-Q&B`f|B5F5He7CkcXV26&GlHnX`w
zN41_Dwb@3}f_X4>iupH7i--1b$0~~B(%s8%l<uRZ`><IqH^&a}1+^CVw4mn7hy8j^
zr#!uYOy6&*3kDKG8kpjRPL#6bR7TB|`s=$O{w)4$muQm%qJLIU1G#^=%p(o|2(zDJ
zx`8r8kRnF5=yjo{049~xrF%TztW%E@)&ahl*V(UQTQq4CkkL^0Xnu`1P(UyRqYI>b
zJv0<&ung38j+R+&P^E)qV3lRFPLc{1N(}d>OB(wyPZ2APr#%0?vc`3awBhDtSZ4fL
z0;h`m>GAx#SAQCpI4uMs;|1H%HIT5OU+SaJVyM0a&uNep37rFCHUsy2gj_?|qtKLG
z9cN6<Mj%r0UIhkKZk55zveG(B4xD-pz%>faJ$S=*y=cB7;Sr@3N_b|~QFS)>K3o&z
zrdlKf!yJP=D3t876!>cdFJ_M_iNN9ei^pq%1lr(xzJJ^Xb@lsYQc7qmXjd9BA2SRZ
z>O(iTQAgm4P`Vw}s?s0n$b}{=wUA5S5M=h$H|({apwffw@_4`hq@X5qWU@OuPvH*M
z5oM*~*fQ#jgL_^jyp9T0%=BaGj$^||kCKug;}u$Q&~$}_dgQ76SSbU;4_b1DGUi=9
z!t^=-1Ajvw9yDBck)M@=!V=m#ITV_Xq;;rdM;mZc$-;$RucZ`5A$WA@Y8PrHM^6Qn
zH#KNxkBK+PatBMT)9`kL?3resUO;i*f3^{Cb@DcEetY$53}^rlm7tE&?8z~mONYz}
zrGRuMHfp4_7@TlOadjyz&=jC@HDZd?dr=3<CVyK1LIxr{=##$9<&FcED+{AV7YqEK
z`bL>DphI#=_a;!o-YlCgkuKmb+>>-Yunq0eyw;Z%>tnzRdPi}0Gllh<;m34|c_KTz
z{Ty-26ykTC7V*8tfA5mam3xcZ<H+CaG0MFr`jV@o@EC}A&ibzVL!jPZTvbZU1}GiY
zTz_EPQtMvV$18ju!J_1Fu6M0W-D@6RD&&dyeu&hhsJn=MIB<8o7aN(~=3>s5CjsAa
zr(2<a`_jyPv!T9*&_dj6lQz0MFk0`VA93yE*<OUca35^Ps_^iT2lXVW$#J*QRT#{c
zSk;se>2Ucz0!FfEH}x)8X3UHOU#uufr+;@h3Ppqd(w$JG!=tH#+B9~TC{?T%^pXc+
zmX+rdUFJsdRh*$>WQ3HgbKTEN3}6%@>~KY;X#qb-fdKHbTp9#7P2Qjf1yyor+3TKd
zl4AQ;6is>86yiyca?qIvcX++0bHmBKdmdAG%2?a<&Rdf2C_-_pS0U%80=8cve}8W^
z7j<}kIr(>ZSSc;AhDmriIaL*ShX<M6ghPIST01<yeE#y}^yTYGx7{}<r*9|x<n*WT
zzvsW4!Jn5eCVx3Of0>pVeWM9Vf|J_NMe4oL46jGH3T@l?LKEK>Sv|3#c7q?|1vi6S
zBLbd7Itar5+T>yofQO!xRcJpUDSrVyZ<b5ob5D_AsL~esB}c1L*(|B4260|4DK0iw
zb*8F?_k2m;I$Ib?oFzloiAwa;si-V3Br=sRKvv2<>x&9q1}fb=_LlMtwQ9rboTrGC
zUeepuXBpE3;oMnDtg*XBN#%3e81gB}(qJDjJfNe<hpddTC@bX+J#j79GJiI_Y8<}q
zTTIUfZy_x2zlV8Ut}pZX5X%pJVk$%LFeErrS;1HecJnZopi~h0hwAX&F>?IU1Zsg=
z;$*81pBDv8CsX9cZ>&}5CTZ{p2I{6#>*t3mp{YY}5YLjPLHX?9LM=Y^A>NYT!we+2
zJvJSt6&?}>HIC}+N9BSJUw^hq@W3p2#tj7|-1fLt4-_F6h<@Mu5#pS6e5~G!S#~n@
z8HGz7x5Ff4onv=qVWXsD+vwP~JGRY^@dO>)Pm+#p+qUg=Y`bIInw(j4-ZQi2+x`K2
z?Ynl}RaYJGyck`I1POq$4auZ31aNK$(;?{QD@opGhHCHje1WHaf!zIH`Dt5IJ7X(2
z7OwxmMz}ax|Fb*A^`F*b$|E=^GjQ=cR=qxqdU^EQH*g1Rh$r;e2Pm8Y*6byW6m_=H
zMhctXpG&b7)-0AyL;J{a47{Rub91FozHO@&#DLbic5K^7^Epg25BBCGfy_dA!uCBn
zYiKdIqjJWH_~wx8k1nnjU@yp78)2#%JG%HB+U26tO6RSLIVo$gwdv$!0ofj|PdO&A
zjm-u2f-n&-+jKIs1V0{co;0zUHpE8Z^UC0`-FJse16hpwSC9n-y<8n0{@s>!6sqO1
zN6hDVKfRx9Z!ot&nv0AaF!g*r{u@H}B}zVeOJ)5HXR=~C#vX|@|E&X5acLsS9iqy;
zzv`_HH#cnr@jn|JoFap=fMLu<Od*r;BFv<FS{#u)cCp-7vaKH#Mk$Ru$r4l(>wx(X
zqhbg5b?eiNVx3kxkv_t*C@%VO+m%vUYBGoW@pWG<Z<#1YgpvfBBE#KXopxe?HG{~U
zj#JOlC3<vCy;VlWz)MAW+eu182oSG%i2Ns5Gyo0;W}Wx+TKwS)xO4sDKd}0Bc(JZ{
zdGWz4zg5z#wDqPbd&Qb6VS4}h(46+<vW{@c0=Z1f>%<9e*S;H3F)HXs&{`5yMm-V8
zLI($+ltJOf*n`<0Jy<OmH&5tZ*D#Oq&75hF+-?VEdw*g0GJf&CY_1L+)J~1mBJ5Qf
z)^-PQr(^>}tOam@8)9%nE@Fcno=tcN?2sGSvj-)}hth`hLu9@ITxujiVSj3%0AR5z
z+>Xnd8GhQ7;`j3W&+z}E>`i73j5H%LceY#oA9)Qm@iU5F2fR?ICs6V)8^FgLpv~Ao
z%*OnuxHkyuT2Iz(nIpqQv?C)e800uDE;_sQH1rI*uD}n0g-LHvcv-mIS40?~p}J%!
zUt5niVVP{fiu69U19%7?zFK5Rst7}dQ3K`mo`ZSAR(Qe7*$D2!>|rKu;AR*)Xw7Gm
z3=9$9R$@ZwzHW}=c(JaR*A7l)7~x5I1`4GrQZ5Tf$MM|`{fe2$K)X)MW-Y_t*ns2K
zFff0U0>x@za+9Fp-$ba%32=1#DS9ZtAP-0Y@znTYF`};-2KK7jR$YheH=&SZfrU9$
zM5b`fY}wW>*`L&!_hmLHThQyrjL=RR3!B%714#6oM{zg+$rp7;q@4P-2o5k-;B9s_
zs;N){f=EkR`u1V%UF4rnB7wOZM0iYV%BiSn&lv`+?oX2EHmv=nfb>V~ZyfP1#2?d8
zH)JAiNK&%W(_I{YomNw5;i^Y1I;f`Fv2%YknBb0uP{SCZKQ^Yq+SM91O7^;jjXmpu
zKPIzoc_XcoEF2eFH&9tAF1rzLB*MZ~V}?2y{iNI0z$=4Qc_ZCs&^89kXtvV$EPg9+
z-<Z|{6>)phh0w;8zV3)E{q1n0u5DUoHN%>Y%;p;f-0HlM$%dOhSPuo%Mm;Y7gwRa*
z*kJ#lMvR8!4jvsdb>2&X`k|DE%uh3l;{<1gb|h*j0E1%2o4vB(g-yQ{Aj$UQ3&RMu
zN?h!cYs+wm!m57*iu}V9&po(5ABv@;w8P2}80CohSN>Pj;BxiyO<3^IL5n;;Q`|Se
zk^r4)^JNl6fq6A(U=OmyG^co1iWq9ZP}Rd9dIuVH*bVf8Gs>?zqrGNa{o{%@6k<HC
zCj>R6Dvoa3Lr8lRme4U!u*hL)XfFqBrf7JN#}g@oIb~?w{HR6GMbD*glrdtq@aLE&
zu!2wSxfNavS*%0kp8j-OQ*RN%bRNT{Yn#1EWw?sI!co~JBX_4#BwQwu1V=?;p7YL%
z&Ffe+1}S~;FfXMH(=Z3T39N&~SuxUwdMaS>k0f<Q(Xc#bk>C*j$bA!REgA-qYoN#<
z&&EU`im$yIFHN^pJa3#SC3GrpEO@&T5JA*K`89uBoL@3oqG$l^B}sn8IQS!Xq>_T3
z(S1Hi9t6qMnW5p<Qr%TRuWvxD{JNhsoJzUnqF`$#fWSJ30(H*SFKx$HX>wLAXWp=8
z0gn9s;exsJ2aQ%|&yy?SV*#p9qFuc4^=E6PrutuWwanz?5llEusHp`xa<~2y;2jM{
zbruZj^$#5_7AcGo_J+IFfn!FJAwnH+aQ{f`l0M$}E5*8^A}@Q$!{AyB+%kFz<DW_<
z*E~j~0^6#P^>CN)eVwXOhJixlIgBu`)wIh-+GOWGXu^QCpJFik{$jPI%X;c5rVFWU
zd>Sm$57HG_>(!4JVBAJhFM#huI8=bT{#c=fx)_pKoD}^Erz(^`7QB}pAchn>NV04r
z7RJUe3p+W9A_>jU3uo_0;||9oHnMgqH4dYDK)@EE+%(VXiA%<BhwBj?5+Y<4`P(C_
zlBVxxh)rP`#6j^wbi*w`Wy$3A7!bext{HMCXhQ^Z53&Hl>1L^6hZful6mA1UExL(=
zjny_1z$545M_f)teLAz$isFwttJVvND(YLE@EWTbCmy$-sAKU9;w9+idZ;lf?h}1H
z1t(Rv=PXw%Tj0x6$~`qwISh423MU(k*&oYX``f-|J%(R%oJl_jZxVJAQM^UZk0ccL
zn^ck03DD5pdE*r#Cnbdjv~kLjBw@ChQ@iV3z!<%o1av$~`=L{%lh!NV|GHi9rcM(1
zfE)`Nfq|&<>9}B#3H>o2hLYj9JSU`sH{TBn5GLq*;-lHi1Q%~p-*B3O)`zEGD~4k@
z6{6rvyd$B^Q(K8S!#(l_Ey4e_{&Z>-lMwU^>fgP^vQ{e>Gq2Mya3ogTz~!u+rmH(R
zDbXl|lz|Rgb<2ozoR0#|Irn6t1c!lC5<f)JGk5)$B939WT+=cN*G~N3UuwpP?g1^i
z_jOXrrC*p0CMO!Ffg72ijc3*Qjr4W_2prPE#tr@lHd@%n;xKA9Hdd>HzPM7YWFM@P
z>cgb+q1+0MV?Nk#Kxr{ULCaOb@^`HarTb~TqG)#48k}6{$<>=ckk{}lUaWYCx;K7F
z5I$Uo?4=bS+_JC=#!NVOg;8?0ZDG*45KoMSR`ICC;P8P(iPWhvsch}O_hEdRhMlJn
z^I$g!Xm#zSb`gkI1QT5+tt->iSp^H)!-nd`c0^MKiui|oAe>2Nz1lr=J*mjbhsOe|
z_1um>>#$;D4%jkX*27x4yrCxyC^d;<Tdo!7FCe>+omhTUU4*6Csd4qVFQG9?y&AjY
z$qgHfl27WN2G^W*O^j6xo;^)F)#`%^o<R`=NQ%eF=~;XsNaB*Pe@9B>6f}%H+acFe
z%>qU;4GKPpz~f;zprlj!-SGMQa<l%AN!Z=&EUvIr3^f@zy$9D{(6=C(%);o4hHm18
zZo;F8oTI5D*n)vcQT<pm^sa9kC&uj_%00GNW=*&G;zEmM*JAor5@1GtQTEPF_{|{G
zgYuvJQl`s=1<^f9DnDU=EOS7uxTVH<SZ$a_sYyT50jZcAv`)hdeIlLVOP7|q+{|=Z
zYw!eqwfNz2dmj>lLt}55TOWQWXdB_7$`=Su$2BWb-GrybrhR5@UdbK^{afvY#M^E{
z+S6*9v%_2;CUTbDME|sFeVScscBbq1M-hALEy;^L*=vF|^qjSTQd|z%Pqi2^AgYzB
zHacg00c%N+MmX|`EC2DcW8xmXIU}1%3gEU%wz;o=<q!6FH*t6Jh?8!&<<jfp;N|rw
z9n?rub=F2b6t@r1bts0&?N<jfaVL`P6>KMMh}ymm1~U>v8B=``?(?=96x(qFa73AW
zU?!%J6Ca5>csEipZ);45SSy~f$%vxWDpEqYfFT<#Yz}P5{47tWMCQI954+hV80Kpb
zsoP-xh(&DrPi&x%+q1I-TaS5(#E|f%bZ4K1-p0Df2Pz40uY})+gB`U~EA^JtKbr4Y
zhkcg)AiQtp4;IJm2n~Fnrm?X<6*Oa7&sKLop+|>5KCq9_i5vc3p`LP#3W^Bv%_ZSU
zc|ipg1ukmY*sXJ-d|n#tLVm{#kjUcEXl#!|Dj#Z%^*YQLXTYEk7Ly4$n)hWK=dD+O
z+c)ZtqlNMbVEFGOe@~n{Q;xFvPCuAM+;K*8Uih{Vwve}w>*7}h?<TKHMtAn<qeH-8
zCA5BK(nG&O{=@()x`~~~33KLNML?pFnVH?+1o|n7;V1}M*5mw$Hu%Y-suB%Bu_Cqo
zE}-0xQ>69Ho5xm6ViwM%>W3=|C8LLljyhi4Pq~R0ZJ;_ujZmUh`EAUa%sPQ8-=_X`
zaWH?AqvGutJl`c{9866m5oKRRW?^uY8o=T|be$^FsRmQzbt^>x9xV~a4@E-2|C}JU
z0fgaN6|XKtFhW~Rb^Z1Az)Od{C^1GODt#WnP~liDrxaP*yYy@3QL*E1jknQJ%8tVG
zvDjF&bYegva!ek;($mI5T)R=cnekI4nw+&GFx~vF-1;u2${WR`loIeJX^6mqb#slQ
ztJ$2~{Xz47+s>(scA4*8=}eYL9*23b3LHthH}@>ffn6vQ^a~-&=!f`K8zf>i?Ift4
z69GvaYM<Dyl`P(tIvH`{p|6OHeEKhILB>RkG=1%sK@Nr`j9#k2+vbOHf0hq3|1F0)
zvwbNF<EIky8YB^4N?VOrT2fWa-)7cy=~JX_j+dt1zD%J6QPSF>sQ#0`#nr!;Vu3x2
z)sG3=joSDio<v{#rdoo2^wjoIRWJZD{2wmKqKtm4LMB*IHDTH*cywM~i-%EH6)xcp
zVp7mAf26k>OV%&^Z=+BLQ-9~g+P#ceH|QM+AWYv`$1QV?%C$ldkut3tYg?4$3g;P=
zind2v3C`K*Rh?SzWz;Lhkkp}GY64S#2ac839T(qL-#IR3zu8xURS}(w5|r5WK1=vF
zy^3G)hO~3OT-F&hQJFKl0+@h{udu|e_)<W+ahi$m_fGKCMlbOKZOuz}Iq5b`6~iGz
zPgYX!nX<<YNy7J^lO^DLAH5iIoKD{4Ez_vfK8L7Sk|f|+89Tyg(BvFV1$cB(&G_*i
zWgwU_;Va<t_`bNR)kDJ%X#I042=E)<$*DLMxW_x1W75)}I;*hp<Hpv`h<cZ>tnbaG
zl_4TbGgx&|xA|z)Xfn7OcQQ;w#*<=^M6JXV_>0c7e&xWKrk2`XOdS<kRe`TKlgl#1
z#lmZ`<@-~bbues2)Q+!y7PyE1V&5?ZXRfE<zH9%J-`cPCsBPGQIWGRje$8e7T{dPh
zp#o^zqAiDv-J2nv)+DZeI`E`3jTP4m*PF`M;m=VN5FCV8>Sn4q!gXt7f|a3&f(bI<
zn+(&xVm9hY#;pdhW8IQc<loCFp+f2$!QhW$I-mrX6jxLt7yf~F1r$;gKwczqOee(k
z3@`(2=+btS42DBRr#BHtPvy<%w5(S*Oo!4uR^NK<w}v)>gF4q0RzAR`MOEc8ZdiPv
z<CIq#<c$W^OO5Hyi1CTlA|IgROtLpY{n6lMRtZ@t(mv(Lv5VvsU2O^-W+$WxD;ino
zqa{>GmaxU`nu?I+4uow))q>w7T(?`(%Pr(erVjvJ`Lpq-8eo4yv03eWbTGm*yZxs{
z`?!C3+h-6MVnFWx`P303Tci*C_v=C+Pj<=Uk%U<}pyM*dY1~|+2z=(}wFA0oTfPrY
zE4r?v{PKqDl6u>16i((aswr34n*o-ZW0xIsm`dE2-x&Uo2(XuP^P_I9Oo`@S{yH8j
z0T8amAtcj!^Y{>(8Zx?ZvZgkSJN2Bnx$-nBEX3(w^+6FZ{>1Yo%Ae<yn*HvaNKnA1
zs_zekJcDp6A44eYrA9=rwADOh1gtBpZ%1_`A#*dLMfEd=k?`g$_NzKA=`t|b#t%QO
zw#4>UUcI6#12`sdbRv+-T-jfC-Fe~;%d24^6GOAlEyEk2dpXu7&J-jW;F6?MBVP^U
zfMkG`P7?M_kjtQ-C&bYh<!-t*(D<DIxr&MEf`#x1!W+0&T1A97r}Vb3N~qD@M;&an
z@}j-AI)e}1)n!S!&ep3^q$oMlFW_WWRg*gHjk_=m1h&D^>uAmo^e-<c|3wx*p{jV0
zidn<Z=qddrV#v-_CCKk)rdm1XZRGZ3JDrnb?vlIAbW7KDJfK6`57>cq0`w<>YWTTH
z05W3yJs*<;-W;2sg2t?s4UVeo8?Kn8ulSoj?D)MDHkb5lEVd2kyTt>%QYNWib=+F2
zoG`hOsHNv>%etCG5Ai$^e!++RB|up1y0_&97D8999*iXH5`n+GVMocKuBLbsg5pE4
zaPqLFWDtIzTa*8trQkTW<35%p7|>zb9(_zWC=E?-b+rMt^aqbzw4|`{cJpf6OsIN)
zMH=0;f6}++sr%C}gz=v+g#o2mA7#;32+%yDz#!T;t(H0Ya{?=2KBAzcCM~PA-?I8(
z|KBUMZ!e`>QqV3snd$ENzOlo7=sM7j$v5~#CHl}w`5R}O5m8YfIo$(%JpK1=nwN@^
zAkIJkp?=3vW!BL7;dQr-{e4%fpCkArXsKs0Fn>Q!WFYX>hYYU?!zi!w`M&sMUb8L6
zlZi9t(4WOnd60l^YsfBVm)w;zHr`*(TBWQ>w57k;@bFO%^wO-!_$@fZivpDU7x~sA
zyi_0Csm9%0itP?^VNvGV#dqWTYT?EV-`_yo0C4$Llk-fZkQ%Tzz@murM|3b}-3+@M
ztr8`g0?{s6	rZ=AB7pKsrtKY*Ry+uo`}Noc;A#&*zI=-uEx-ovTMf2SO!lO^UMC
zlv!ROq|pm@lJhE~Imc+a&k@kc4Dl?o=-}~p>0@(s^-RFtOAeibt_3}-_iYj8&$EKc
zV(RhRmNDKlX@x_vJ}uY4X)Fs&NM4qF>WdYLoGuN6O>a=a5cS~^)!^t5WrTiKQRR1c
zJ-2zgFG3Pagd+R&`k6>j@=>s5ZkxCD+6wAOdsw2=>WUPjRP3TT*ihhWar*StKr4Nr
ziuB(cu33UqhQuaV1#@Pe$n*f|I0?|p_np<D{q0y#vA|Ds?G@M-sO!H9iB7{`LF5je
zzW4X<Lxl!*rv)W~@+-6RS06wH1O5=fqiy+5XJ=Q!rI$>(eo);gC*K?}kgbw<!0P?H
z<h<RDg+jUW{+X+Q-3`!MBpEDZI|M_So5F&64dcf!Pj;jOE}CLrlx#!5qa2C&s9+h2
zk*xl4O$~|>Po@|mrV5j&hzxHWvwvD3a6Zw(o0js6-x~>*@Ln=glvXp*(^N~Y^5h3q
z{yktq3aYPO<gDI$RC{~F$Tu;1{`y^@x?k5QOa7=jS(Cf8i4B;e29+}RXIxDC&ZTRk
zp!~`4w-oM0{bM@Jg5<GC=>7qA3rF^{RMJ#!`O;$k<(Uh1C(e(KMrrI8%y_uIvBtl8
z&W~ui8Qy%J9VQ~=7AJceAaJxy%Y72UAdpIcgdB!bt5q?j#NHo>R7ucbIM9u=mK9I(
z5cTM}<~xw-avQ+yX1%Ch9o96gFZ%Hj6ALo2*LTl`z_wWEKdg!vfzC9o+l{fVvL(6+
z3hNaAsOaRR*Y!Do)ypW3yWlkNdFroau#%7==yTq@bFC~SMl=ioKMW?@BJc8$->&;t
zj0y<?SfM_Pd%6t+EO*)f)GGol5XnA3DHT}RYe69uJ9D5E8@ROpe9M_vzplMzoSg5X
zaVM_ijfPvQJ#nmxGsAjzK3$ttmxbrVL2f!b9vF_d0n0zi@9VR2MLC^YZx6IRnM9Po
z;s46d{K<`HbR->IdMYkm(M{1%gvj5^Pk9j_%*wzb0(f(xT3<_Z-N)k72$XhoRqyFF
zGYCx#xZ{A`)3FRP0q2b^m>yT!9UvHy;ZQ3}0Shgfa~b8*gE%nBSk};YspJ#uUZJ8Q
z)~`}b#Qy#c+(fMNPc4%_K{Lq|d)>v}1OI8aP3$QVBKwd}gGm{<s6r#h`VB+}^7cp^
zf!{@BQE(FxmXR$<ooRd^Ffin5Nx_n5%{yeI=#m047rkX??blRh;`O%kmAOqlbFoD=
zK?`UloKt5}$V8b`AOA{w^9Di2kWFIQQ(JQL@G|dvesrI}WF@_(_8<j<A80jU+HaT&
zGDb+vH>JC8!9+l$U-k~-F@r{4VD9(pDucuzpt-Bh*fQnhKmpO2=L^xhEoQr-I3nMT
z?4*G^erYshJGIrZtP}5bZJkogxiq*f5l67w!eDe^e3eTK@xp(dEFblpf_VMLW@8OE
z0ZlSuqRQ@#XBH-qJaNbS91e21<f52(y+XrtEfH9C;$@EBYRt8m3%xf(QV1kSVH+n5
zAN)R(2ZPuzU|=x!V1yHx$Kbjwa%^vj(1SoY>p-^fP%j<seDYS#(q1r+Rhi?tzx(2g
zXwx9-p#EOuJH5;SijIa;Du5h_q9+?TED15QrKzyg@kjyn7|_2w94zgCxciDy?)8Z`
zEA5sH#(E4$mj2@rMLfJ?J67kWJPRoO3F^TN?SpAG;*vktQYzU`Fsv%}%|&zrrmny|
z4<{$tONKIqXf#PT>EW(wV(F^c<06+tL7hPiG8Y{;^gaAzvK5I6lHLHY6nC+-wAIyy
zFXCgzB$_iLH;4~Yx6Vk*QRu8#lVv|2kH;tvf;&@cCb2dAnNv|G9?9BZCz$X!qO;E$
zf?_k1(VV3RJ=KtMju||iFHY15&^RD4r!iqxfI!w!eg&GtNp&*A;5UYds#3nFDB5U*
zF|(hqHi={vc|E>|jsfr(6|W_|+%o&hFjX1bbVJR?JjKpL`Rc3Y%mgB`z1-!tD*pX~
zMGlF_aASF`W1#ex&TFM%w>yx&NrtF>0$is^>D$j&PmjqP_o%&tfQ&b0T>(bPR>tJ_
zyiFw(vOje96~|r8UW-;!PH;Bi-Nc?GcJemNtRAp1>RR14{<#eCD<cpeEB-Cj;a6?7
z4=oH7iY0Gy0l_jq11yfPLk)2Y;ZVK&(;R`cTDA}v7B*ambH(M@k>;@1$ghX_rPN@d
zh>LVMdU8)tUbqk`vh#^ULk%S7gUcFxjC9%8dbovp3+!E85SsPU3_2Mpjbmkt9c*Vn
z(K6l~^<8tjp0EF%x)yxD-z1du*BQ_IoI5WYlk?)GrnzP|E!UPRb2=?1Y4B@~^>2yK
zH0$0hX?>%LkhCbR0!NZP#OcZ^8|~dPuWvcjB+|aOtzl^2s?f!PLl#g#$A<A}l77jz
zAFE$w>HO8jk>6f_Y^SXpB)z#LA>T=7?C}q=c`!hA65?T<vw?`gi)T8FfycKNYymbP
zb+|*UnFcODCqyroTqUg^8JoQ5kfLn*o0ZpxezdW2g#s7ARJV~*314Xl>CTQDYq??N
z2j#`vz>k(TS2Dlxr3W-&+#77m$?EE(Tnl^nLAn*W->sMsPE6fGG^m<IYHS}t32HuG
zG!Q>$M;SVQ(op?7p{!`aqpV*CbqqQ8r{$-cx&c7}GOWC%^;RK_25ZX~nQy2+6;<<|
z_Lk_%)UguLg+54uRK~ZfM^-P&@Vt(p`NG`Iwn7m&8g$yX1rFqn#r_+0tKT$e3yYzs
z!V5MXqqL0oP~OTxE@PnQZ~N!0e=GPHD1L&|Yk(@L7$tM9Y>3{`cW#Yz=&Pq0u~Ho*
zlHzDXJ<UF--R)yxa?Fw(2PF#=h*w<pE}4R)oHLIp9}I@0<(_sT$4ltWz7W2iHp0ab
zxydt}JMVCe1PK(f5gcbju|Xo<A)$}4r3IT^H}deYQbV@wc@z7qcQ^uFx*hwCApQb4
z24Y9-&Cb$x3$3<{?Evm?DkXhgNaeIGxc8UTcd9*)!S=s&_#2q=v(<s2zHpFbYoohE
zN4}|q_Vhc2wu<DSB(sThCzRF;?Kp#T?w*&HT3tRwU_f$a=+Dm6JbQ6QkmTlcDYZZV
zSLmIc0P&U=seCV&)C(b*rDdU8B{k1%hp-<wo9vl>4VmK2sM=9u!)YAPix(DGtGTo|
zhXucCm3Ag#^hrHXj%bskf#2K4uA;lb-aj4{dpdl<TQg4Qin?A1Dxc!vlF|0eOD<=k
zbVK}-6BsA_l8lGWC!aWH;C*ak<9C?)!adKQ8)20-$hb(TQR!BuN1YdCJYXsj2&3X>
zCMF2|WZLoF`utYcMEJ72Uf8O21l(Sx?sW&m#7ki;@6j9|mS{2Ho=Ixr<V58*bus&V
z(&S&)9D(<LMzf&FLFV#Y`RuU0U4-&4Nj{#vfuxOdG*Tyy%;^;f*<${V=ruS#!1yEG
zsP?&FLS!{*mNuhv*%=Q~k`4aKohCnd(q*(>V>nZ;Si1P8Pt=%VafNF!bn9-VHfx3I
zbQb~zO-Mw`92AJUY1g{mT-M~{H9(k8kD<>tDDhazg_vB#`QV+)Y%T+_6n>5q>;+RS
z5F!k>4o)i%xJ(YE?Yv?RGFIf6LlTKGMpJ*A%|&b@X3o)C@mgx>jS?+CPhzB&{+I?B
zJ8qIG65PToxMLM=>{PsG?wNtbv`ev{d5Mho_2e93?RVp|zQiUs{Zos!kB+;VYq1q#
zO_^b?oTr!){EsN7M~FbEuX_z$ZPM`xIKO}mS^>jiHQjt%g5tjp!uu~z4IjK|bS<3u
zK=yNDxS?g3dNisuaSuX|VCdJc2_~V8c@ks)<D3G=Q4xO}COBW2Mab4d%$#95gVtED
z66-t=W!?D4472%72_z8jf&CHL6Ex6mCBNB)DFWi>(J2B$t<e^~;}Ga@F85mwp#6E*
zFP}o{-oR6tI>ge@l3}MJ#WoQAjNk<D9<z0Vfs64KLnd#O-asZ{%6n=*(6YxE*HrqV
z?Yk#IIKR-_Dh6<8)91gqGZ>jDr?%810~sKl?yOc|g~$Q^FDG*bKOKlz-Fcpi6*4!!
z>$Trpi?l-gU{b_`rLD8aVi}SuU>W$efI_20Vu3TcxAwH80zA#ylb`*u^m{D6Y}>uK
z|1eAB#z$lJbYDsiv0xL0St>AiwL8qTtXeQjlZ{jw!~H6IFb!@ak&qP=Cs$6{_QNPE
zRLYmeC&gVVx$_d}6K@=GH28Y^a<Yw*pl8b`7?HZGdnu4Lm4GhtkBkr%$N>R~ZS%n>
zlDnO*U#5z@O4gIN|4dqysvdojWZ%oqpyFw;bP(#%*6$HMyQtlzz{Jzr1p=d>d#Y{L
zYVz6c`i8XR1{cbe^I^6`9Pok-SjZZx97xTtK5y8N!Bs@;N?a(6ryyCy-Si|pvcLcO
zgbpyXGW;JaH6@7x6cvJvlZzvzoB~uFC~vpHjkeiPCz!vhiZ&SeEN`rsFxdOdoVF^*
zgayxTNNuyaRQ&7o@9Bi6?+2E6y;Rfwio$Dch`1kjE=|0;_rs|=ivbp7UPS)~tl;u`
z0uz-1)_)}$mez;X4@NU$MCj@3!fEQX^mCq(kNb6u2SuEOE4ArcsF=9p_784>+f<S0
z-}9r=;}r?mM?_mbKO{KnGH01zYqpaIa*2c2xF1T8uR?^S8<RPa+DYU~&C~+(fb>9t
zui8#`u6G&CK`rzYt?Uk#a#${2g|CC<r=y;ZT`r<BTy0W}-Si;KiC3QFBd00uBQb{#
zZYQWxBf#eU01v#eOWwfI#p^uqKz&^;MZMwj(ro~N42G^1mQ90cZPy+WwK5bsxF%Rw
zI&rA!^7UlU5m4zUYLD0%D$yBW(&<`Y9v>G#*Tr3sh_m-(h2O(k5@?Cnv&!Z6Ag`*|
zwhbc>*Ba;Ex?Yb@uU<$U&i!h&+=En*xO+TMVZC+;-~}$*l@AjoSxEp}+3nRHeV}#T
zz_Too64FL(d>?guJnnd(L)SfsXh8bOmfFmEyBEiMCPA+vu`?~;QwA&`7H^xo;b%pI
zq8)A}yH*jNZ1o@l`?^n?T~r?j9^j?r`u^370a6iL=fwwsP*T;QtTMzC?d2Otds7aa
z(KQ;Vr9Z1WKb_O_GbDi!`nr;8j-vxBUHI{S-S-Y1$Rqh^F)qJ`<*B26vV3`QEDb~V
zihVSfGS)h>Wc$gZegSW{*=%l@eGWF^VoOLb=aEK&SCYk2Av!mUD>Ilg;3F<S6(ilm
z#Ul?tmn6yMl7h<z-dM>YwdNoFlR!Xbvo2g)%K9<EbRZdZJ^uhngdF@8@qr}0we_Jh
zTF5zI^xUiy=3g`|kZ2bJDZ414(FV{vI3nmq7h@fK>~&JXn(IRI0VG~q8hYaPI8<ci
zxXM=HryH^dht&@)V0osA69wEM%sYD2*+^{kg`u3mWWLajJc#ootp|J0AU~`ILnJ}Z
z6^rUt%S-yO0JFg4`Zl;?EhBXQ7Cp@Tp<<~CT}^7|&3C}rC;MxH_I?ul1Q<;UU~B(&
zCPU~){GQQ#8w3sgVcbV`Om&DU^e8#hpw)rLL<bs9WIa_Inpz+CLN9M|C4Vc2)ESr^
zqHFjc-Ss#--DfJ#Tk|4&csa{^Z0}0~s9I3=P>e;QH38rjq^TGAEKX1Ckm`GME?KAs
zOxDFc@mp*OiN6KH_zpG-Gd+~>0fk&1Pt2P&Es>6471qzZ)sS5jhQB2?*gvV^2YnvQ
z3~a%E8Wt0F08-15Gpj=7rhKsq{I2uDlrK*OD?qr0XB=$gAZYdOkge;h-Fm4B6YL#L
zhD8AF!#3Z>3<o*6Z567JU=TM*3Y^uyTlqi;GBqkg3Yn0%$mGRkeKTb%`xdJDQzw-l
z<RJ(|{?TntGNeVD-N-7U4um~hV2NWHMu<q7{gW7E3WtQorWgVZps)`1^V>*gVB1nZ
zMnZ#?xI-<7QTRw>%>j%_iPlhT35HN_g)p<H9?RbqEjGRV7i+6G_0<#yA|4q>nxm0f
zb-8O38b9A+8mx7xbefhL=zeYk#!sXN?5Ch*+(dDBq)$-w=GZliOR7W*J0^uK-S_(A
z4j-4>!yI_e+e7oG<@N2YzL<!oh@Q+$1BA1QWe4cRn4J0@Mi`tBA9m(JrO_bg4$nHz
zHcudKVuN((?~F<QcuiEj!%=JuP!<&ukYHBiYbqWEYqEqnm{3t+cv8Z<71LYwq~D+w
zvFL0(@DG9g-)k^yB6C9s7x$X0kiu84g{s{X<l=G)LgH9$2fu33f6i-=2!an$z)7#K
zfVH&Qa*-Gkr%)|_f*QNoUp4Z&v_pPgz`+7bhxz5bD|jb6pL&$D>g@?eXyipHU@Ah5
zyV-q2ZknfLRbk*>O)$-<Q>Oh!!#d_o*1a>s7vZ}mPDyD>wWYdF%R53&f0Y{MZRGRN
z18Z6yiqC&K!Q`rsQw1oLrbP~_VqCVL{@%R2%EvP+&8&W!Y_D0Td=GY_cg)d>Dh2~e
zrMH3og=2rueJ}hmKJ7r8y!5k-k>Ol;b61@b-vio89kfj9U)FtIJ($j)TOp!nBSUx+
z;;Rwo#0TsZISMENSsK_@2co|#F3ZRJ3K$u27vZFA`C`mY`GRkr=PdH7h$&;F1(1ge
z<-h&puS7KhT6Zlx^F3^=p$aHr&|7VR!}UA(&w@MRw85G)UTbq|#&!Bzi7t`qmxgY~
zaj0QLSn^8cVc(gd1<Mj~)xOHf6n;ei3f%HCy=5qFHj2Hlo+Zsi%&;{E7nAKRXn`Xz
z$X#_8y-TiHUJ2A66_|mo+o*=swG?Om`?}=U!&l`3y$gEbe__!F*2()`%om%0<ZJ!f
z-=pdAiP{t$u#Y$72ND8Mv5s$v{TMKg#mr5BsSyy>1Pr?RKSqC%kkvh_K@$?+Gq<iz
zdpwN^8A}YI4IfC#i(7VJenl}F*<&_G_fvrUC_@dMJ@(BynV}qW5e<~KbbrX-7*Pem
z3KU~|^+bF<rwxEubb{Gglx6w?l0)h#NDi$Hz|H7{m)rjG%|6Y>b+bJ^lOoH7txM4E
zu+_oF(Pl|+W1rwWrJ?<8-(WxMe~FI;$(jNuJ^#zJ$40sE-)=Sp^zHB*F$!{KxHLXA
zQS_dlB#g-)EN7DFs$MAZCYuf~U=^h9?>Mn%1eNu!5?SUY<C42&H#?$OU>amD^n1!f
z1yN#Jo_njaRQi})OjVr{gtff-VP$@2X0(lutj)WF{j|kD{=&o)IXg&~7%gddgvk)%
zph(x32d!!97xccP(@z&Q^X-~-L(Bym1Y1==R*gwkqh*FmQkWJ)bhkLlsO{ww{L{NU
zY`D4P;xy*vOIp1-g+{G8uv?MfCltYMF_DL=F-qZW9~TAxTX7;1cpj1Kz7E+Jz{YK-
z{N546a*-c<!itBAO7i1-h${Mi2M>+eNs+<A<CI64v<-C?jk*j273{5E__2+5W#WFD
z0=1EwyZK6`E>7x(g($~!N24v0FBe7KyIT;MZ}6sQ8&rV|zN|z7*hfReJk}+arz~w(
zJMs`rxu(DyQjopZHLbw<yEb{V1P?BaG1=s&%j1W`5jv=9?B5>)KS@vnH3kkeXZYsD
z?0p1_j>l~{%#JVQ4DvHxaOi?(mrD<ky~h113rXV%E|T8A?mum4KUh2sh*Gxhx+6_T
zPR4)aJV^TBnsa2_1I=`O>lM$&TcOkKp3MAY(DbI7aO&?#o{e7Zzg(c_CAZ4d2Md=g
z)XKj-2TUFe=X}GE(P5VimXZkpgy2h%L%K?T5lJ#$0+_d4pIy}exex!&eWEqjdCI>g
zb}2E~hjWHT0_9By!b#A+@d+yU?h2If;{?_%XI9j6o#5oHDC35fJm=g$Sz86aAUQY4
zE>mpTzOO4-IXIb9qS(H#E7T+Fkp3_uh&_1+Nw&8-prNs1VZbir&+P=Im5Wk9eFAB0
zjY@xJ-d|>E&Pe4RJZ54ym17={N2g+!YG<*jqp*1H5nRiDKtZTkAwUJV;Lz=eV`}6)
zcfCw~ybK#V1J<uqG3CFZ(`Kl$5sb0h@Dcr`8>!W<oC-cU+-^~7Keq~y4`<HSyV~HI
zQL7ww-M0~K#tJaPcJuZHE}d8h|3}z<KmG48FVBC6d09A9as|E>?*D;HHT;Xgc_yjF
zHm<lz*`JKY{!JV)i3fHL34>$eNUk7<WH~jXe{iPiQ<k15HL7C>4o*2^t+9NtP&Qx1
zglV4t@5bOo*P5|g*SkziXCP*%*we+w;bCe;#t~4}xcD$B{^?&TVyLgFAzke4($(gE
z<EefX4EVZz1qx#OvmLdC_$-e{VDmESb*bjZ<1J-{0syV%#eGU^PqNDsTO(ciY($mx
zf;D^bu@iK5V{>}C@!^nH>e`-NJ?n_;>poq-nj)Sb<fQsC)fT@U{+Ga<Q(w#;rvTWZ
z>k`3YaD)WX)_Uh-EYXgO*K?j$Qg&55fr6tgR<qt}pu>(T437lmKYg>b6pZJyi*D%(
z!k>!(&rI_zJf>+vDsN1jK|2=#1-7$5KW?!J_l>WbN2gnDHb#auc}bpP5@uaI4NGM$
zDGoEM*-MQ{fvh47wy9DFw?|Dp%FH3^Q+~WSl9l>a+O))Y$ZGI(Mo@6wA4N|9ysTvV
zd?7j)V2fNa_+GN3!O^=t1w>KFNBX1i61hK!aq039G!b>zxM%5jITn&U0*x*ppsv-q
zMV1qCpZRC<fX(V*l{mKMx{ITCu_=9Y8Q{hXnCJxUBg|9c><@3!{+dVV*v&p4tcrE^
z&@TO06oOOQd&iUR;iUHgcTw(`GnK1H3sPeYT+>_=$pi79nXTE<*X{af!+Q)l{CDa@
z!C37Z{?+yR^!wTUZTgf6+ir`J?`ZuKCwS!%?Upt%>WDc{b+3duy8(>)46^uym$3-2
zn;L4vSdAJ`zV3Q4vvl^@LxY*lRxns#`F6c4Doj%wIK1Ea9DEHabIbdjusNmeTp(`<
z#1H}s?+vSPms)~kYL%ABo#}O19x^2uA(`R5!HnHMZPW=9xX@o_fYz#W-ny(GhU-w0
z=ZM|11Pdz0`JS^m`WUVm>EaU4ob);Az8N)S_Pmd1*Q4~BP=dxsck3Tm<k^RL!#}P~
z+Ge?{fy#SIr&<Sh-xn%_n(&{8W7E0=y)v0V+GmdZkQjsZ2;=2sPV*WB4LG?TjQBCA
zE!o=nEHR6y{aZ$vulah>5UI+Udx>;OdpO^!`|d>v>+%E+vgVXC-Cz_MhfI7QJG`sW
z(?d(N8>g`z=uM<RjBU98K^FF|oF@YYAB$%q8cDpF8p=ir|FF-MAwQ)C<_WU_ox{W`
zC{Ql~X{sD<eXAgVof;X%S7*O|*sIK9Q&desgeh~{xMf6x&F#o2ij2AV8_VMGY+ukn
zM>g^Xxve9b?L&;r?yhKce7J%#PQfNHOHpVZ&q)@7Fu<aK)aOH56aPX?_8f#@-#M`4
zV#@6mJ)y=N<lcCDY~E1>|E$af5>=jll%)}^T}Ix7R8_W6v`D@!%Riw=QiBh{dZrI@
z`D{D0he_Om>Q9k_o(bc!BUR8ShST(wEQ)bQRT(J7hX^u9<@SZQ_xqX6VH&J|*!PNJ
zx_=v@i>}jtv>ES<i+r&E&}9h4NgyC$*r(dy4i(qvr^Jz>R447Bix@<J@!=ehO(w1o
z4=tp0B<4$a;kdsT{(2crs%3)d&f~l|KhsT=m{}PiIx6$X%|5`1t6m=#^5n4%AL=d;
zz><jEw)u+oB=+B5Se4$?Pe@vp!mcB|>A9ENX?mKdY;|lv8P7rSPn=Wai=r15{S*!q
zj*F;3FXng7@lv^Qm)I--E~T)SmnrPz5y2w5@!C?oHq|ELYg=^~aITnYSiJib>ruyt
zjs5HNO?VV2lBXJqWkFQGlQ{EA4Q`NgcUF4Lr7f+Snpha!MMk@*4;sb`SAu|z?2AfF
z0YJ{KKQf;qiO#Zeo<h(+w=_GmuPER0wFbNgqiUM#MbEN0Mqcs&1pyHnQ5X%IDIyj#
z`0?#UFI`YRbGle-e(Uqx5jq&u3EIt;r$6-)9v%0{t3vJ)$V1(~;R_ZSMYtiu+i*i(
z(?Xoa@6(!-o?Q$t4SrO*J@je-i6j90*AxUqZ(CNtIgO;x`sMPtwH9COz1Z`i@C~%Z
z<C=nrrvV&1JvIU`ik-Xtn5P60%h5xNy@)J`vqb(u?^*z{Wa=b=GWk{xU2z)xrPdZM
z*Ty{n0y-iR{(~yXO$QDXX$Ddw6#BOjX+b*~$tQW)V`ah3$X)_O_4fB%23EmK!M}Ut
zWus`<`k$hi;%K9$pxWQR=lgM$PPG*S3Hz&#>m1HkJW1w2@i2nXhWx>w)NfuQ)>sXb
zQK^qBL`!<>f1{9HlKqUT30pOA<)1LTb<!Wm1^!#RxTU4Mn**`prAi7qo3DM)~e
z^-t@yv@YyDOEe*q5!gI}3rq=RkJR}top+y%Ga%3kw%uY?p&V580JV8onR7&0a|--X
z(;s{d_9DOOf}$Pc0m7nsv%iu{L`)TIENH(ur7*XWRc-u<YC%FQHjbL0sbGu*tiwCH
zSEXL*)q*n#ps`2X#;mXL@kRPMgBa2#axw<-qzGLUa$@jWxxX!1_&16@L6zwwWu7UK
zg{AV6pK>m9{SPeL_Auke<l&~G;4a5Oc?s<Q!oB(f_n9$!HW0MW1{g4l8(im$r8QZ9
z6mpin^;32;#@6y+2;&mzygV-iBLhU{A<;(Z5T!Prc`E!1B3|_j9zAw9yY4}3PZ%nD
z)~(ZxayWP*CHc2bORh3v(ZvfYB}WSRzbBp;&LO%EW{)TMGU_FUOkv?S?t$Lss#vth
zuX0*Ir1$u(RaTQJ0|7}0ZBdx??z$<%ZswzriV<y>r>e~)wGPzWn9+{Wz_e*D+4IX$
z!{_w372X}ve)(TO9g`RyX+#eN-K|K3p+CI`K5Rc8^*n@T!sYdgkq2B=kuSigilrkX
zs?Cw&dP#c85+h6Gck>X&N?9ShD3(g_rv=@C1X2DVvokokyV|voPeQGlk<W0T=ir?S
zIgsC7^M1s2p1qRm@aY=T!&OR)q_cXqqzEUSLc!VN<6eYv0MEU(^XHLG9I`Plro@yV
z4O9w=GJz9RB#XRV|CuXzio5q_b8@+X1sRfe43??G88t+%f9{{M;%IFjMi6GG(?@E#
z07V;*tw`2zoMIG&4Y#%d4v(_dwtF2tM?%ITr4*r%ls@ttunpHvzIKA)7mm+3Dt+Wt
zZ5mXJOwzp^C*#dMeF_-lo9!=<o$a946al&aQip7u94UHoprR=mo}iq-)^VAz{G=82
zb-hjXhXqwdY$8hfJ@iB1+||(G@xW{dEb{N?-*ss}GYJU3;S7UjQ{SYIhVg<{f5lcn
z8YViO`r+-UwUe`ExK~5Y?wia*50g!CAWE%y^UroKPuE-P$K$rI{N%LyjY4F#!{yds
zj^vW25=BCJ;O)45FqQ<c<N&?Ll=T8a)AB@p1pzyN<0s9JeltMiu&6$N2LH$UU4ps!
zQOV~(rWyT_``YSgM1wufbYKC)_SfF%$@%+90`@Ey)myi`I3pV@R&js7)ryksuP^n!
zdR?}R%1-Z>Tbp0(7ekvd>TR8^Pd1I5k>_gWQ~k*_Zn%RpR~c2nF-k4;G*c|SH?`{J
zzP1g?nWDvZ3%3VOyyRv(t={dWb|b?bW}8?4n~E4fLJv3+@s@|w-NF}%;{a=dq8t*a
zY8&+Uz+J)K9TAmH7hQBTF#Wn<kL_!Ez`W%8?7d_3Dw;40T6QlKPaheT!tr{&kA-s{
zRap^;6M-J6!5ap&q+=4LWvg%s+qKmczn&GkbxOn1yaOZ|pQQF%SRY=HR^H0VgrMqU
zBI4G*_^W3msOKyu!c!6G@0ftN50jI*V@5QWXF$UmZAb+=LAsum8RUH9+{8h_v<}6_
zTvQ9+4gySYlWf3#Hs~PSZWns8=;X8AfxuP2yVM$nw^svC4Y6h5?Yc_e!^i1WF>=gM
z;pYJoaL%u$8DM!FNrpEb-EI0I9Wp7f!82CP2M;dX(tvdMpB15m*AsKf7gk%Y)#>_c
z#+<~~SjSLZ;g-vp=myr|#c2jZbkB3S<UX|P>IlrO<39#d%;_~&0A=XZsSXx=Sb8uu
zB72%<QnWzqPsigyP6q_H{gsYXPxyPWG6T&~?G!q><q~?Mj5Aon5gegLDp2^KQR3Nb
z$lT+1O`w4-_Sq)uck8|u-T!ntBSYNBX%kS<1NC)1Pw0n61S;TEjgi;AL5dv|_3XgJ
zYGA((5+guhm*Kh<yl#P1n~P$T?7v*xy0+fD&IvqNY}O)duhp77gFsIDJ=p)@=;eOa
zBjzr%$*`%7d4{70YgXmB@l{s7JkD3Q2GSnjXK=B$ywMqkeE>BxO)<kI`6|#IGeio3
z_dB<qH1JMNs{*EGXqO<&Eco(A$em-UEL74gJi^YEO&dcV+q==9D3Xofo6&QJ)@h=r
zYBrz&Bl0vsms}4qlydKzP@ay^-Ih=FnH4DCK#~XyLoE}TD?<x1QjFD_ryfW#h~`r~
zzAAL(gwyA*-7Z=Q6wipA<iB>haq>BUWHa3!Y38PM!}QD}xLhRq&ZGDGHLR>7DB4x-
zS#9y{>p$6cdf>^~<S-GH6>t`LA9ucC7>2+>2wNu1_s0Nfs6R1XlxVTuuphy3@!YZ`
ze&bHk@y8wc+6xCwSIh-t{c8yA1w9N4`YSiB-im3&Y$W@+rmcmSfgXO@6QPP3i7be=
zwB!S)tZ|vBNO}f|%QG9bR4i2o{@Q8VTj#k{`wFhlQk@Ju!d<_I$VDVKbdkVe);NJ7
z`u-{MK5=ZKc$H%+T=wa&)7I)65bo)b4gp7<605O%l6t5L;npznL}-=#yAcAJ{2^$8
zhbtD9WFv<z{E94%D!IEED_B8h<OtYz54_n2FXPJ1OpLYJN{@Bf$MaAk8HyO-57eLd
z`F8KPB<yP3y0BBDiLm80<3m|$ol3xt{Rhr?A}MiU#|rqmWQ>1iH}Y28ApE1`!DJj3
zMg;#Z4;A<R>G!wnD5#=jN|20SV1X7YCF#UHd*H7byWPY>7z&EAKFIF>DBjshca)!;
zHq~W5#ae$U4lVR2dhX6V3aMJ?^`V(Pv+{DWm^7%O`NBlR^XsDgh+on23J?ZrCLgHB
zH;Q8Wzg4@Doo(Ik=D`kvk6+oYsWl378*@<dCeuUX4$-i;xZG{F>vR%5mr2z`zog+<
zJS)IUpw;yL7J4s_DZnZfN9=C@oqy!zap`fnZkl3JGlA3t+%-d$3L;)*XKtfR@~)$r
zi1fn-iR<?{*U3A2xDJU?=avA*!`ma!`gvJ!f#6wHqYFwk$uOT{id)ezUL_9y8JJ-z
zw-Lel*~B335$kZ4b2w<YXBJTGqM*s$826;~$H*^5?l9@uE{Md!e_hgR@SvvPg|2&7
zU6|6$L+KtOx@MCT0Y}1a9iLZ@V5ZG~OlTX3n<XxU)};n&efHdheNYViUWt1^q;*%&
zd-~UZx0t22s$$6aj}ESyDQU9;*U)Nt6t;)ogWSneN_p>S?7}W&B77jED^T52UjMQ=
zqPa4k@DE`DV%KGDpOpgQ<NnZzNByp2;YcmmWSSep-Q~|H{Z2wwh$?Do_8E}=3)PJ?
zc4xvwf(PR*knH+}$L|{b@e#+P$utK^@|ee{8FU{48Do=REQrH$6i;l$``xTPKSD7G
zA{*Mo)?@T1sC#fl_PzLP3bA?`4wUNi(PNFXRxcn~CG)r3pmk6IB8dfzGWMr~jzo9}
z8rIl9$!&}?in&r|K+T(Cktr^65gLgXLCq{MOp^kR1_~_9f-W2=0KykasZxpw_tWh0
zNG7)xLma^$%bFTiPAEwd9dQ>nJ5V~wLgntmmVH88kG&7t9pVN_+<s-mS?{292($F9
zuyFop@(t&K*`Bo;-YYWo`i^sqnPkFQG=|;OA=;_?$hH<9rAh4vi*YQJVAaLk48|Rv
zr1jdq`vz_L(grNh2?b&+=t(fS?Jk(u*5aB?C8*2~S~SC7?68?CP7)M-JWE@i^ecl}
zRx+>=BUS(=Bvya-^D3~B$VNEar>EAz^K^Cp-zBNXP~$m<Q5LBc1Y-N2<IYw$DiDdj
zc~#}VQ@=!@q(^oel^xPK6?p3D#>>!khZR5;X`bQ{yKvlr!C?ZZk1zz8&Tr4>hzHH;
zve~)2<5n$EF>X8H<5G2jJao~jeZplAByo>^ToOd`(lgMR(zGXaT<fK?yXc^aeur3e
z`B^;?cdCC23rv;qF#v&Wee9SRVhqh#yCCkoVu>TOgB4oPA789xu3_Ipbg&KgQ_i?&
z`ivb=R4kc5f{FeQV=j0qXkzQ+;FB=vyg=S5#+LDVC|X%h5p$VYYeRp2ERck8P)vW<
zxIr-pbdWR6SAm5vc7hQ!{0iG{xmrhERDwWRP+=)N(aLg41+Tos#=>05h`2lFEux$y
zz8|vM@(PUy#k~SB#-LT+M0tS1;vyInLpGAo$+=J<f0xD+^ax%*rt{{Pxvd<24|z-5
zNyuI^_>No0_;|kWB(4`aw1eR&>bv);!I%5(?e1PliC`!9*Adx|V^1HWhgPEDIHH5w
zyFbpwM$U&vb}TsYEFR-!Zn?f+cXs5Y_kRDM%f`yg{@=Jy4lqux6lbk(G58q>3Jc^E
z1e=xnhPi9LfnjAV5E=g>_)SVxHleVVo{b<DfMJDJ2s)Fzb^^TGT!xhLbIjz-4g(}d
zY<f-eKb^1o5GnVQT7ACsG&~%C9QzEOYdy35lANY2h`^^IlXvb%$Cbw-djgGUq%4a}
zj1?=HHRb0`3QTAi75rv+X4m3S$^#Dz=2N!2d@Us)$#h4?V!B(sKi&^dOGab3Y9?c_
zx#%x0`;sW-ihS!)e39tW`wPVi0drc+^2V5wCUNoXO{z@Usbz9#lx>eWnlJUG8J(;>
zQb@|RwbyzY+Xqci(FutqyYOINFLG#jA+uE20P6{y3H8}j<@~mfJgs}KEa1Q9o>aZ!
zlJAewp2499e@6D|Y9@Lz6nD131D#SdU1VAg>?jMhKmJEc1W7b(5haX7X``TZMZPuG
z{CvWA`PzzZLTV|5$cAJdb;{ugH%UBI|JU=WxLoo4t*Pf@)vs-_k_6j$^{w;r`k2Mk
zHbqmgpZ|-kbN<Z){I-2<W6G&*O>Ntq+P00i#?-cL+qTWAZMSc6=6g=g&ArL}1D;=Y
z@+2#Juk~5}^D~s+_1G+B8f@)=mgcu}^;EOPt#-p4v>&uws?7AAm>0&Fa1>}HMtKp)
zM=)|N%VyoS@30K`89<rTb?z60cxo0h+LO<6R~1a{Tv+uqsdRu2X0fg)Rf2;Tb~74C
z+2#IvO50=FRqC4mBJxD=yBy%V+lf`oh`7U>KE+c-LBZZVQcN%V<)s1;2{_6WOJm||
zR8f^}+vO}y$0D~Q4k%A@ZFR`)0rmOqxn5&}S`-+b1o<bOSgy!Q$kZN)_|PN}?YGGy
zSfRiSqI{idkG)iob@Jlt^}bPz<`Q(>tiarRQ_F{P2lo5<4=RWwSK4{8<A&{<;r1QR
z)o3KxV)}bpAE&25&}AopM!=-f=o%i$iL<Xa#s>Gxcil8oKEj9^XuBUc4(%B5gNuY=
zl%{q2*XP95M2W^z=b>A2^38jr$jLS1Pi}SL(#yz3*x^3{l0uE;JA%<W2?cbx&J1g~
zFhOEOANZXk$nJUX9_m&10d54R8e$Pis=jWc&lk5xAijRD7f;QAOdhigkzr4css1P-
zBXdt(;{~*?AW7kc6F=nT>v<_NeKKS*@Xp{-GQ%7y;fsU%DGpOVh|d5)8;OFXeu7<<
zksM!%C6gX)dmz3g`)4|eMh<daZz;uCX+Nu_m)BqYO_`{0WHCp;hA&_v_kEuYrU-{^
z>%NlP=A%L%aD@XHpr%y45aN3SKXL;?EG$~Q%g+FnGOBmBdc}xA-xSJmb(%;y30ka^
z(rb~Xf&|EmNTQH9(?p!%7+es>I-L*0<j|A+N7p0`^e$&$J-XQbW%jb^w{<w9F%Vrg
zIWfcZj&Rj{-p@OG`8vPu-d<{JzZ^Y{x}$&3Rgg@z(f9(aBErE<R)=jHHD@cJ&5e!3
z$`YssV?5$Kw%q0iy|RP&(lx(}5vBuedv)920*9DG&yNFGG1i)IY|=-Bhx#yrvcYGp
zC_Ge!P!m7;870v_HWt$c&!Y62NH<A_Z%>9<YJ==bwL;Y*HwvN4q40leHj6$`S!Nli
zHJ~w4F?#|2A}t)RVz3Bhsx&c?>I!<KOlMca>iD4r1Ds9*L2s&*F`2-pA4Eg>M92vL
zv^&=msmqoV&8Lr|6|~I6hFHt#R<+7M?cs_glF`|{Gr)kF8$N~czh-7b>swZRP343B
zg`*ZmYkm;~5hhtThVNLwQ5$J$_<74{9jD-6C}IuJQA__8gpG+`>G{grB(9=BNuC#N
zPPYE=BrHuk88vE#TZfO~wP&hhV#e--Xez(rkuWR9f!79L8`!E{N$>wm^N-9GjZxSQ
zMUyw;4CgY#^%971mEnu?(03R|>+(OYteypNVejYTJM&-2C&cP>TEWO%0E1E|r+4sL
z2@D6wJ<h|?Ja*(6Qt4OsI69Sxsn6_|fbLKn{Zs-+Y_1PPqIpFA{jvJyrNSpWh#)9x
zh3amW<(&XG4MxNo-f=gmvv*rl6=|BTO=$U%&DHV=?XG#`n&9}SbdT4XrIdYYO{Ki^
zr;|_f^2oNwi+T_R|4po)pRDVFh_XK*gNO^j&yho!scVcccZ(foNV6vnrFF#0tCs}H
zDNF~egIA8$TTUY3q=OB8(^!--^gQ&bnvy#(84UaT<U170hxF{9NnfIWE6+?5VMA64
zwEHmg0b5~k#4{fw*brnLDHzbx(Sr}uLgl+s9`F5i5e|ffd69YV-E+5a9N`6hTB!gO
z!lIj7R)HO`?zmVvaNbD}Z~YSH+^hmy2u}T}ArcXUp4smUr*OHOx+^_6&&UOxfXnq;
z=)x==wci0{<Z(Ca_}HwRP`k;s_A5#mA;_*_Q;o?Y=?pw*WKVP{w&rKnqy`AQ@ksnu
zj2RY(j;jz<2^=rCa|2m;EeiCeATt>tN15G;bG#oL`s4O}DmqN8jM-^NYm#vbZ~2Jq
zee%@TWDPI<-^!oN5`y8U7IAdnun14_vD)kU^6CD$+LCIgkIS9&kT@3O^moqZBmS38
zceo!%M^^(aqQK7^bNrl`{QBK4nJIpU`?XQym%}|f_|H{?-B`G8PCn98lY=;b<)pkg
z&*dXsD?~{5ZW(g8uR|%IfXI}$Em9B!bSKfeeO3dmF}}WY<0<1Q!Qy$Yvk1R?G7fX5
zb&S9TMveWUxddVQjK?K7u(bimNg5(5F8u!049=pQ<feZki2@lxa_@eEYt#lWqtoB1
zzKuKTdOC?gys_NxTK?Rj=xzhR@)|F=yHbEOTMzCGJ=N+7K!W$f63uS$bBBqMpsT!_
zSaTmm>Dd0<(I;+lZ1bRZnxyfE@kVAiXt(#4N6U6w_D!k&{WbhkOOD!6g8?!XUlv)8
z;BKExJK+0mh7VPcSN0E*G`mWpbCj853-c<ZJM*vEbJcy)IXm{ri(xyB=7wA;NqMSy
zeYziQ8r!cQf_Moj5dU@;mgJjy(Kanhg2XR0Ccj2MfQ<B?#`FIlVe@}D<}A$Y|H}em
zVP;N@2Sra6HU=dJbZ1&SZ;oJw0yPr}`zscQX40%LeK~Ad4kB?ajkIg3<TFx!BFYMr
z;3hZ-&NXC=18&x7LE@PhF|B6P4j}7**IcvLIpCLHERrY$WXHANKWAh8xZX|uZ8cwU
zW}#;pV{`Nje$7e3ldSFDzmM_xL#I(nCIl2ASpI6uBIGLoT;3h^?)i;myr@KA6GP;*
zXW{dCIlf<B9gT;y$EysH{rCbCDM4_il1XCZ0XVaK%wve)Wx-rW=BASbv{9tJ735wH
z62VLe%e0`%#-s4E-7juVKHM<obo23f8!}Wtki&(o$me$RG)EhXy7(M20=ysg?=L^5
zc~)Cn=tD&TN}~BTl4MC6&=r<uct7Uq3VKpJTXae|p25~c?mY|>{+diqB%wo2HyD(@
zoUN@4#F?;BeXL^$iEu`APhmZ?M=_~$C#g}n=r$;NoS6o^2g~StbZbRbc4^Q}lZ&Gq
z%oAGTbi_OSgo8iT@yukrA{UPj%z2fWtdM=kEWe5Xh{N$-FsiPKd0I!pCL~N~d=FKS
z5%KL6RXa&W2nLV!qj;4hb+h5hEf!aQA3EKt`zLcthar@MrUYi-L2@GbSb6yQxjjB!
zKIPG<ug@<MLcgA#mA{?5ZDQRzKRexa7ACT4&+5&|M8nj9UJ?1vDt-^sWtK#a)A6*3
z&r31^W^UG3-*t)U#X#6~8Pq{SdIi(qew3A19$gKHK8{!<F~(f%J2>0Xf@Ein@1DBs
zWiz^>X@N)kxme1BdC51c2`ZvVSlkiE6u<hkj8U|>!gU`%@_XY;Jnx)DHg!4k2OoO~
z_lFHd2MoX;@WMLCvK&$`a>DUcc7f@{9&h>p*c*%C_SQZ@AmYeH$+~H}=p1sQej~E6
zqK)dcq`lI>MtAo<+rsDn``>9%B#W<gvMv^8N}OkCmpD4=W|LL-BcxeXwEJ{471{;O
zxm5z3vbY(+{lDoR!ZFiw#pUfv)9K0ck|E%FH4Y~&k3%=(ECSp1-Ar&=rt_R1sE^nH
zu(n$0G@`#o+O)-g53J>QV@i)giTov-Lj$Jt=$}lmgR9`Pq5t9UFhkQqPj9!3b;dQ1
zJ@u@!yn5U0s_=~Kr+9#U3Gt@}W({2!vD0>`Q%8=pO=EHNFbi4KjkY-$D^SqErI`>o
z{we$(9kx1#LT=-Z_yY9yXVv5?tKbp<^ynMMIsA_LeLz&gQR?v1ilGr8*r6o`l6F&b
z1P&wbY>q_xY~)>ZHotg#@lxFhY1lqzlu>Gs`Ux{$=XKs{Xr}_xk1cz!`Q9}S6X%VA
z25mOCQuzG6?;&tRTN>GO^&LL<XHs=!bhN02_X<Loa+gu4m74S^Z_&BF8@d?)%z0Yb
z;SRI)fo1Z(mfKS5rp}r>Hu}{In%~O;`T{`UgZc@hpNIQ%Y$D*_{sEzuY6|Umr&QmY
z7NlkGjiqxuRqc08E7qy?dPl#D$k3{SZ6WSuIG3FpWv`yS69!&4%W^b<FYKefT*J}Y
z8}g<S3iikI<}UXSYiuKcxy&Y@cIFNLH(w`>#J3Ms|NLs9#3-ey=2{N!1B~4DdLJ^e
z9fbiZ)XGIFezf?%{D85!W~F>96HTL)8p8)kae9TRmx;lVqT)u~q`hCZ>g`|k6;}Q2
z#s#?+(5GnrajeA4#Ml|8RL7kTJ&vstU%1#vApbBz2P|#uGJ#+qaRWcVuE$jc5kjs0
z6t~EekT58=5K&iVVt$-^9lz9$&vvjyAQc6<T(q?<tDW4!8ad?+&;T|UVAw*@!yIc<
z<YPh+jq*#zvleq=^St(Wy^HEb-0>@(0xl+U{EqG6!7sCZvmi?@CigWjo6=FJ?{&N*
zJr7S|W%`j^!}xIxvD^)C)msa#U-mK#Nk*l9BG9&pxDmLp0#g)BEHgC&KKJ++ng2AH
z$nh$>NbP;P1NOU(jr2ZZwKCjlYC+6X4O1QEOeAClyu{q^6fQLFXGeU{c9`Aels&&F
z)3-0C_3L>~LeX277T&vcJr8SoKgw~6=&wYC1b>AKRf~%a<Opnl9riNx4aG+Rb49FF
zVp(Ddvgsb5+_~(dG5@%*Dv_oR_Cj%HG4WeOV^OXR5pA`|g4MY&K=Q-@3eK0RQ8R^s
z^<p`VtUpT*HzHwfAuR}wwdh$UY3iYcL>5iuACRD>VCdsH#nJMDKRk@Mq!D&C(<SGZ
z*P5~z(GS+`b8Sq(UR;ZC(n{PD+K+XXZ^d?@F^r)n)PPy361Mnn<Z%>L5^@KXd!Dp_
zRfz$L9X*a6eg6P*WYRrTAArzw9VWA(D`-uqP4sXcux28~&Ti8LhJvd|Hw>o$-MOT`
z`~fhUMQuoPc{2<qQIZUybdf=*Fw3CV%_jh8PJYY@LA3)cri3<aTI$W%uv_SPF{3I{
z>4=M%WanWuuBfU4!z})h;y}LmJ{z$fVWU*GQ0#^Gs!8k36P00((RWnI*H(la{Yz$q
zghIU1+H>K?dcE;6CWeB*t+<?7SI!!VM@=sBPBpPn<H`ezLK}|QY~igBkS4qCNR+&5
zJG{>pj;8^rw&xqLuQ}64{`TqC(EG?J%Tm1l^*0F(=^kK{`mqmcL_1yFYVjTw+|`&7
zH<}t`J-?xbT0?Bf2qOK!>jizPttt1t+11H<Qihj)|Ic&Pt{boVbdM<DXTg4if<axP
zB(LaC?f>U7fBq+wNx-YtDnNed#imBmhd$D+W-<O1T+|g+f$ihEUC)M$fQF>otSQE$
zz|j9shDU>I%#F4NQBVF9ibBiuo#=sIA-#f+$ST9oi*1ddkI0X8?omRLibN0cvmmlo
zQ6b?ubEnF1PZ5bC;jN9c`%7SAB=L$i_*+jhD(JtQpsq~iJ>JW(836rOTH2bi{2j5y
zpUTcZw!&?{+gw|0r?BFhns(pMzeIjZE*m+%1#R4;*0Qo>g-|${kHjo+R9o{#GsQ4l
zd0`21k>}bh8>sh)X9jwabXHQ4ZE&-$@#8s#Cc!4;6GSe%E+`LrTqD1r`>+4?%f51k
zt$(lznQnoz<MZ?36JU~<%<n(5!3)?@v6#nDpP{rhyz(FMDGAe`c}Hw&V){#%+2Ll?
zWA3bZjAK2q0s8)LM#8hxIVoZOIcME}9SFeq2E*fjJZ_^J1oxQRqP}Zo1@w^HkUk>3
z;8{VQTI=!%{cUU~d2FWJdb=hT2KblBpO&wyyrayiw7<vzW<CdSQ?F3_){1#*_3x{j
zUg#zuejT%#iX{KNY2_;EUs0wgy!>S-heAQGauw_~+rm<IP-I&9Q&B)rmGT^7f{@HG
zB)MQUc)2hJG9l;j%HG^-1w$&f;5c!HgB8?;4v1I>cB-@}pY>u>KIW;~41Nr4aXy5v
za?cb&L*d;ESm1?t2o{1n=KA|3U1F{j|Dd((v+!p4%Ri^iFQ@{<i{6TI!MjC`tUIL{
z{2V&`T$E2rwU#-|A9AoqfXr}mfj75(dIO^&DR_hxdT$9@fgf;goCQeh;P9zK5U#_2
zu8`dTwsJ0LjEHcZdAqX&F^Se8@#tM|#iSl<h8URww2P?X9ZQS(h(SFT-e3DCuF@Nz
zo%RjWj{O`brl^_k+CwjWpUb4S)Y{$zWw|@4C%Q6bQtc9}*%_HNc~cwD$Oc@MLcb`U
zTApT~S{*BlvqBO3n)o|gv{s-QOpFOX@IBQP$#Kn>x3(cz65eIEJ{PSz9IuD%d?1b4
zW9pIs0zjzpC<*9Bg|oJdZBKY~9AvGj``phRl^K_=&1+0?;T33>3d_A>*kI~N=mYla
zc?3QRBXD04MSG;VU$bpoU=wWk*L%m>TD;)RZ$q$f*mE9677tLXb{EB_$H?gx8{9kL
zIATke=a6|DC)`u3ra5EYhwq4I#-)1cpF57Ct?ox0{Z`3Krbkwn?8q6$igyTc)yEZl
zM9IR+q8U9ch#|TMW_pA1C(&@~kwDy44DNZe8)7Msn~Ez0+pjMya{24dRG`&=?$}&h
z%&EB6|6GpUTGsYkBbZm_pMR<&OPmyy9&!v9F&r=;f1D4MR}s;7ga|sTYmIbH{u*yC
zg!;Vce&`TkXqVn%3jl@3Mmll4Za?8~vo|LzWHtH@={-6=yc*xcaW%eEXixWbb9VBh
zAEKLe8cs^v-pYQ(I;ERsB{j>4q~mDJoE|S9^LPe49(SUTu>L0p!x8xp;!s(etFO1|
z*v~@jf$jHox$Mj{W;x<iesGwo-`x?Bh(qj&{e8TDe14?v_VJOC(QoM#4{JNX%kYUm
zY=#j-y307lb&zE)ebUHUvM0xZp3`xqW`-S6tFPL*+)#gzV6OAP`PF5ieyzw>sIxbH
zZVTA_1#GB1zgn7~q0)(QhTB|_Wqp}p<w&fMJy8vI{WDzf$JzlTSsFLTr8#q&#Zoo6
zOq+f?Zw7-Eb=pne)h=ya`{C8k_oQTDs*G2-9nKw;){=PtbldOZdcMQ@URJSUpl~8u
zDFK#Y$~Y`-7Ts?PMA@PzoG>vxK}%uxWeC8}Zyah0LFFXQr{$V>{de=|EhKZslma1w
z%8vIpZ(_m_kTE4DZplQap{;M3ozALF_64?eiq+QX^EAOw*7C;*X6JSXP2{Tei|i=^
zCz`rncaBDp%L7Y>bI}?ej|od5Y;;*NlAJq(14{+DFvv3l_*cU1m;|(A4s%Xpn-yR_
z2Gqyx&FX7O6C8;qF2uARQA29*U|Nqyf2>JXrh_L?0>{BSBIW#f+N~W1DI5KVy_W4~
zHw;HRb_4D)`R^AEsWsH!4YEgL6LxAY*N|3>sHx?heF6r!HrSNCx2wDD%6A4FSfGM-
zOYz&X_W>|SV_`yxSK11U;s&adB3^)c(OTVk7qxbMtZN%EkZEU6!ERQhXB4QVf%nS0
zV{PbXN$+uww3nT--LsK83kzh{#iWt^2G2EDSKyr6WVCMujNriA9E^i(iQm))?#!g;
zmS4S1CD6bIv_ddKSg_)%TSQcob_B2IVG>PVgLkvR6NcNu3H_x*yGJ5U2@Eg~9U=bW
ziPZ|KNgn(nXvbPhny^Mn$`d4aNn(-Mp$Sn@Cac7ppd*KZ#pJ??jp9ZZpp^#^$d*5o
zZ<_#XgUuq&-!fqI#-PE$LHFM8q<e$*4H1YPBMn>g)}vJ$6bDOyTt^ca=={ft%M@dl
zn1<_JpuiAKrej}Dkd^vqs1hKC!S=_H2zO07YDl+N0R9h{4jLV`w91g8r6L;WSavJ(
z6g!3zu)u1AVMt(*ijdewl~FcXh$^69{*so%&65>~XCky!Dqvo>5`~(1l9q0?u+|$#
z<?H6^<o9%hAiR2i__2w@#|5za23}skzdAp?U2;&Ss@r9s*_;yrU;*nGjY+H<*NLET
z?73hPw7C%Zp`-ZK5z3Yr(#6?Zs=K#x;X+XtFn4BE{ocq}M1u+XKOX=vxqRRDDKD67
z`LJ+#edjQ*z=}w7@BxG!nBP$KMKcprPT41S5YKt0yP5ucklDn&_|F)RYW;ByN?M$k
z^kWZ;Z;NzfxWNSuynu%UN$1e|#s`tCiSj66rpLr>?7a@@{os_-eS%L&($ur0ow}_#
zW+4p{nBY3wtCgcZwzMyy0%Ww)scC!}38Qs*lEqHOKQ&{48&);@@_%b+a@p$fNuaDG
zmLa7S*`-9J(k4W~z4|C5x5O2tj3~CmixG_TriJrj_@j>McL30aq5T%GEizu4GWY_b
z4nhmmqxeXum^850ESJn}vxns9gk+<yDl2+7Y^Z$geN{<@di50(4p_w|yzXN()VDty
z^OKGTF(D0O@%bsFcHazSx7|N7cS%I#^W!7LNwG{d?TJS1)N?{6LSEX2J88t>a_}uC
zv?&&@4>}lamH<qw>F8yO0HJNHfs$rcOS*G;?}9$9Pe;m@oFu~IA*AI8>oF%N^3njR
zDI2tOb6$_>mPpMC3e-j?wVe{*0Spgy+Tamw&#y=H-gzNgcvFs~uL0Yk1cpG@^pVSN
zY^C4%3<1H(Qm$h;diCDCB+R~SBvQ9!<>8``;zi@Uwg5jZ8!ReR4O`5M79<d->adV#
zxt`PD>&J?HV{8QQXB^6*b5m)64cEH3WfSqkE<eHqoo{$wy`WVvC9A4nuLaSsmf-qL
zkhPe}0MWif6q$Z*3ey!10%rdoAQE<d;h8iKm0JjKw0Y7yy&J)q!hx=*B{R1M{W`Es
z264`1c>rd3KV4g6pK0oq1hJ_es%#f(=`kh@kueA^(4RuMz6Qzr4?owG4Y}`}I{jc4
zsVV3;P1^z~paW53C@@&~Tz_~a0y4}MrYc@Qsly$yX9(<*KG&8@wT*gunW`Xygqn)h
zoK7nc#W^z^cgKi^0%+Qcqpu_kny;aWjWl;g`T=uLbSuO`l%gYzY?H0P3QfBdBq`A6
zeB7HIsJ)OSFqyMCuEgI4gzypFAJA!~Q&h-jrfxMJDuP-uzudRGU@<u`^h93<k)}y}
zFk+LpbQ2D*CGixw6D=Mjm%-G8CXxl{))NlUn*XxB^|@sil`k*<{*IB4FEyL?ZKMli
z>I6`@6kJYphD;_huTk9%UchZ)3sM<XvEpr7wa%{BhMdQ*pbJOOGyi7fmUyhZviloi
zqVH%U(v{9MA<`z#(B_p?3ae9gbD(-@{}Swe|CDRFvZe+`=D8!|$<WJ4ME|6#&k5lL
zms6SA`jly`YT!%<izXGg1b-igBLFwmI0;Y>5DWgSl{@)z<+CqIlo9vmRDSOMa9?iG
zxxuQxlT)rdp3Q__4Vd~3a6BC@)tHhiF3v32m{It<ygV?v)cD#~S}p*gW%c~3HCggz
z(iVD^_WEl^ASM#U#8w~-jmY^t5A{X|8-u5L%D97b?MD!7TDsxI#euUs1{{22mpWj6
zCwi87G;ymWI(ke4F6Ut}_Rnp>#9~N2uNm3Gg&P;aW=iWpDi%8WCW{Z1|B~wdl!5@F
z{p91_QPlnv0fqp?t1UMlOk^h%og0UMuanZvDw2rpCSm+yz5=t(<>(Y^u6=H>5u^ds
z9vL;fRmwAPXw5$r(A&}exxc;~X%DDj{LD;Pw@;-;{8n%<@xH~H(F1VWG5lqFx3H;Q
zIH?sGvd1zWDwV~K+T|W-qs7g4Psl-y;$;F`c3{rG)BDzkZ;MpekEQrdr+}#e4zyqA
z!*0}A_?S=r&OHMUm+<v~O<D=?7RUTagyp+J@|S0}X?CW1Cu;WAvX1i9;Rc}5y#TCn
z+7+3J%Mjcg4h~9LPQ&d)L4`s$oWGl*9L8ABiTc|Tvf)ud*tmyWd$$RT)7JJiy2{bY
z_<dfgE#ibgCxnovQ<xR)>9NknZ~pUkE=7#k2CUeN@Q?y=W!ZRA(C2e;ZKv0sUiX``
z<Y0l|prz7&6G`6fCLf>MxeoB45HO97`^T@1^~O8s;1MIa^$B>_P2h8JmluS-Fxo$L
zTWrN?0gF|*z$6|<G13=0{A}2@4*%Wm(q`8?^z*!5AhP8i)HM8BSH*s0WUZTelWy|s
z7r*|kV9llZ$Rn3Mjn^R9D6hw(Gm4Dt*qgaxz3BoYH4AFYCXj1P-4&poEYmwA1f-R3
z61ajXe^bLU3Q4h9np)ywXH{SRoKRmP!c^QB3$scw?GAvmNA=3WSCxq2cW2$j^6H;w
zczXMV!S%@=>Mz<Q(O`G3TmxVDK%7jpS7NeXXl};@`FZb*s;rTCF#4$IAIM6ZOfkWv
zWSwP^el|#;A#(WY$_hxSgZs@%W!P`WwPhZsbeXAJ*PC+o!f0!ezy5bG4^-IAt~b-j
zt*7j|az=e;%gsww`unC8GMJ$kWsWt~$wN%LYZo(;FKeEM0v{Df-d70LDU|0Ahm~$O
z(|Q)Bx`q(QQXBnOTJ)S8;r0OcE|L!lF=)+r?N>7p>4e+z`7aaz^tu0<IyJ}szg0O4
zS8BKYKUMClCTG9NgwTDW{<;R%NTK|9v})|1Rj}rX31e*7d5b~>t<|lo;M=c>ZhRaH
zfeYJ%gm8FN;)wnLfrbBLpmk$*$IKqbgU+wQ_qjOD*AFC<>zK_d9dovk8I(ma3uh`S
zZfd=1ZI&Upht5x_E2;EufGHw8Nu|mhOMUXqw;teu4VG-M;Ex2IfQU^s(1y6SeMR!k
z+@~s%{~I(1InHc?cnpN^&7=dxus(qiEYPyrD83Z9fBkOg*W1;Oi$rg}C0x~#CBWdz
zY;dYPv3k?0K0LjBb+ESC{)0=aAHt9eSJ-#p=Bh&vxxXxZIpVY3QY1)tM7+Z6yQ4Dp
zDIajnT??ZmgU&h;R0=Bb&V}B0Q1W$qI7YT6x%9KOQ}-YJ1XBH|KPbiOk0fwW-6-@h
zQjt$^2?Pce2gtw{Fr@+hZ5e2H$UG>hh1$2;<NI{RhDL7WwYaP+8WOdfX`YKLtASO&
z+HkSsON9fru${T0PlI(@hHJuQs(BI1ZVG5!C(!!<8OIYZ#+Z#kXp3pJMsg)spC3P+
zcJe3lgh{CFS|Q6l7*{t{d-Bee9r?{Y@L9vlUTv=c6S^h3vMe^O*VV4XgmOLAaKgZ_
z*#fJD8!#VmQz?_11OBGwB&Ay@KqY=8B{!^=<tg%DA!5HWF3B>+`bXh;MS3VfS07OP
zOKN5_O4piMv*<D~DqL#B@*aQjkTCTDpFgCy8EFbOhCqCTxV)Vt<vz{KkYxH<@#@{R
z?OzWseijO~puX@zQ-arE|0&W2n63OYaTP*jo~)Jc2BY!z`mba?T`w=W#BWNi3k=;Y
z9Yz8thaP5fDUD2<1q#Q$Vd|{w@&mwP4trRPUbLGIm()(q#?^TRVL61kkrzyfn(7%2
z6?nUeg@?_959arV=mwcwreQ)U|Hx_pd``|~2{IBhLwrx{v8(j0==#lmWWTG^TfXIs
z3%vquz!#HhQ85+;OmO1E#Jr~k$n8+Oq4(*ss|wJM`iI!FE&In8h+KW@wP|XO11K&y
z2RmzOrvs=cKuaceYXr52@tzc_W9UbhYA@mVxDwc*0ck{?Bm+FQ4w8G=JOUR9SITNH
z|8lLBQ|N;RXaG`!*Vwg}&(reizaU(EU`;p>{kz7^UH`hLs!U%7pw_vpPjJoelVCM0
znUA4T8Ftcn3#O~7ja{#tg=y#O{<1wP*ZvRY1PuEI>}V=mh#>I3)b#-6JBpEWIdz#q
zFETo8uNPTgz}W9+KXs5r-jq8_sYCS3!|^^musK}uI7+nY+W6VkxY)D5k8)6zv5nPV
z5T4=j{4Tc`@sXCfubOMZ3}TFEY2X-k?ak%A&h@NLQd>LozI@fNLuWodPY6E?=-Kux
z?+RN1nwTknnjU9+@ILPXF#;uVQY-E7VoJ?S;o+GvzdR<m@M-(K;3~i7!{pZeo=2Qu
ztwSklKU<QxHeGdq)-Q)xh;$8)2DeEI15}AK->urpAx#K{+AS9yf0v1!2mH~0#BK!J
zSd7*0IXZ6gKAC=>BN~SkkbTZU4NCS?OJxH7fuod5N;6tE2#kJku2tSO?bZG5R0GLO
z;jMQ2#4enKZFanCe^^o0gh|%fOd1^Noq@L#^|~*|KW~PHDQzM8Q+ur|3MS}=<2Zv6
z!Jk6li0(oCTe6VeY(5B;i0C%&G$A&b-NI)I)A-LUDukJp&?$nDqG?8M+nAV><C-8F
z0PedbWUNw^&^9V=H*Gnx^w7p-7L{~s?NI70g$O@o;c<Um@R!I|f<>?&&Hy4ZTsiU9
zRIQ&|Wdl)GooersHB6x*Z#$Y3Bq(_BdE>Z4Tu(w&TXcymaoQyFz~teY>(z=jsOu=U
zFc&BxjaXi7eil3ko%owI-ULPP`c%+4fYX^k74fZ@t-bdqQy<;Y|LUxt`KKHPg`LOt
z)p@-=jeVdoRRWVEdrb~8Q=NY16}vJ-5oRT6R~7Nb_$zLsdHT?0vce|r;80?<jOyb>
zAfNBU2QG4|R_PH*u&6^`f7>I<{`Cf8qUGpkzW#m)@i1&$B}1R%_?T1YRb2-P0KU{j
zEp%dE@Q<WrssRzm<S3Iy1-+EBt!_{NH#E2kl`}X(n=#)nc&H+E5I{IJ)-@0X^;UN5
z@%3GC8TD^)wz!z36Z&6=Kfju8t)gJ}%uhp=S<7X5L5)KUxHa49CFn#Z;vpD_=WPXD
zxobU<D6nlkygG5ftFal<v-&5ip(9{FAANNpQ}?Ps(E%%$&&-P(`!(B4P+z?#icS+}
z85$8X^u-K8x>2xFj2;42K!!(+F@fc=I$|$^@-hsHU_+0M{Hu|*!zRgjfl=bys3RC&
zG8APEXKA9OEm5L4cJg?^2HyPrGFRhR(H|BS6zen2DaQO5_-;DQvOm@7GvnNYEl`_E
zNp498@d2i|#&DLGMj?usm%UYig0OI+Gpj_$RflVB9sH8wSY~pI^PQ@OBPC;m6>Gop
zg-S-*sj;~dH;<i3#0-yky91pWVwLwer%Z&_ZlsY(6kACe&qd2oLyz8lENEBvx<A3t
zY~#}|{#JP1fcIGn1y6y%(Et1c5uSBUoonhaW&==KWH(l^%lxY(BT4C^Xz;XcXtTln
zJ3Qf3Umw85=BrvgH!|E+aN=-<6fadyMk$E}chJokM$E288=ey+XUg3*bk!HFVPuP<
zuyPjDq|J&nkDY?!uHDLbK%w|!%juRN(XkS8pFKBbIJgx2_P8308~zr%h$wkLI}ch~
z(HyYuPT*C8Mmd$x#)EZI>_1)=!BA|6R$a`(W3w6&i@_cG22m|E7V$Nge(=MlCgZc@
zT16hCnTuMfb-<KTe>!6?>@ZGr9tCHH8oLTLN%U4{!^uCVQI3OC3j1CMult1E{iKHx
z{lu9aKHJ%!XdGf60%VNjVuT^sV<Kx=0~#PJ{FXW8P_qa5G`ls7y=}iSHVQ|S)B=Ns
zAc>yeNe#@GG&HjC6>lO7KNb5y^nn1+H0k{Pov8hB3%lm!<!#=BvUiU(pfW_dpgU+)
zbva#A<>weC5c>V7#N;5HLl$K^_2bolOKY@BBgn7Y9nS;8!CgX#U5g*<bwvRF5e9HC
ze<Y&`>5}Pz>6E1GVi9&+jJS^C?-N2_8psI*R~5pMs=N_ctrZxu-QDo;&9q(Z$+83Q
z1Yza#`#wQAEJTH6oqBq+Ofq&0xNGXa<mc~L>xv91QtG;z?16Z~Kf#}HUG<Fi_scl#
z*qVnJ{9=w$N(FbrBp*G1*;918=LgJwo^(Mu6eJuh+-J84W{-Ke{YU^Zq%<&TF6^8u
zFV<ZAHDZ97tZ14Z>UQzm)x0{Cue@)$@G5&ZBUGc)(WIX4KpZAw3KEkRIWldy*V^(f
zAaseDZEf@{>R#WqLcoO%SKUYlI+F+>tn>TE-_1@e1XG1KGaV=VWt|?6Z~^Qnkk1|%
zpQniulP=ZX#Px*m3x{cnj*1Rki71xt_gF9djIn^Qp`)EEb%5r|Pz~&0#tys09*@zz
zWH$Nd4Ku8L3@oeM<<3!v@lERB5s*G$8Jd!lM@4}Ld#RI<GhZUtpRqzdO?e~GBf~ge
zA5FgmB@Mj~&2dN&kPG1_!3WF@tSB%kdqUM?wK6RgRTHXMCnG^wraB`6?|>?CM%)<M
zRBI8JJw>AwX!qjOpDl1dbd0Pu(DvE`$+@ZxEO!+9JN#+5Am7PQ7U6#6;gJ3QE8_4+
zLCnlVn?qvShG)q(At#V{TYp|t=K(#1{L+Kd^6Y*{9oP@^4talSiVgr6q-5QPDRZ!O
zy%oQ>VqfT98vWTt+2<wM6&`0^mPw5Q6~I&Eef4J*v3+D-e)pEi=_!TXi^A?<7itxZ
zcU+w>xy-z-jYLCbgWobE^n-)Dij^5~`0I`dv28u5VyN-yM1v4k_G7QZfOWcCh<=CU
z+kb27*V~JWN6h=eKZ@8Z8=XC702T(38VIN4yl>QT#9HIIhw|tV=9{xryk>h5kd1Pc
z96Ha~E2P3Whpx5J@L~LxVjn&&13TIL<*otgA3e$04jaXNsaJ#bMwt0x{3J88&@msi
z(;myyA|jX5CC65Q69$xhk7(je2it>~x;neSbigjlgqa7mPyzssc}@{OngyiCXyW{K
zgVY>q#Z-Iy6W_r?r7<4D{im_XC_s;by_s6o<HHckk@R7-xp>?vW2xao4$B!-rz<X!
z_S1km#y(<L!BLhpFTbo1mN*;1zw}--eruM(NbksSR}=oDu*d+dAJzWiEQn<cop1OG
zhfm1qrL4e<X%27|Z;u*oCmvybR5IgStC1QI2HH46V7Nl8eXvz<nVV712xRg`Mf1Ye
zVrT0ey@P(uDwUAAf5zawI!VJlfC?P{{ub?an*Hqa6Q4{q8dNBU?*I`ye;3(A$TX+|
z?&p)yG@8k_L*#HLkDve8aa{=3ubv18j|cZV_`C`HJqM6C-N)=2x*<&bUNoLhr8NRY
zo4{VtPJkt5hG<$Y!d7%|;KlVVPfUpCQjW~!xBEEm<<-&1vB7zTHuc(YnvHE)(bfL`
z7T2~XkmfRb8#RoY5G@~wE$-D!>w?bVVwB$so|ogi-j*E{m~HmHwnwf6Y_|)1gO@_D
za{b3MmCEM@iVe=r#geMw_0Rdui}ug?T?zPCi+06T=K-AAE}=HiuX!SNynL^bT%>|A
ziEuZnPGyx^Z~u2Y$=1D|VGxt1Y!#Zv4o9?VXJnn_eVC&A8!IU;G4yo@nEg$8qp%ZO
z=KbR<qgs5nR$*pGk&h)^Nj75sX<7;h_ESl!AuHO6fu&GlwK7qqCRgVhd;~ro5W`Ui
zWr(oTo|BuE)9dm4{=Ogmlgg9Asp12frE#__*jyB7&d69(le0cr2emx(Itu7<5OLN}
zSN@(toMg4a#{8PsuhrM_arX7R_ERQXWZL?6@qIhT116<MozQhTe4S55RzAaQlg4t*
zr%w!9Oc^L0K`Br~F1tLhT_LRi)C|uX+%iesd^jZ<sXk)%a9)u0yIk;$@d*+fqMSKm
z%;=B@&&@X4TGOY(Me(+H;LU<17VTQDP2(L!2I5Q9G}5KeWk2U}$XF8+>n2LP)NAaw
z4GkQt9W2)AvW(MaipB<&9bPTFJ(_K|-pHpVXQq^(=HL*Ssw*s+;LT|Od}%W-@)}GN
z$0PiB&J3(GPZkKz^BteX&0v$%h}xOI#17p0M8y%1oqcpLs;T>qlHgZ1)5u0WLQO(L
z4Ov?|#+^t+IX}9xW6YKJBhH7-I<t5-8={y9MtW>Ha%Bbsv;REbsygKqesicX&-!2-
zPC%^st$Ha@giAow;iJ|8tV+pr4l*}891lRiFlN=UqLBqjA;bjiTc#T{csSr4%8B+=
zqj~sD(;-sbs=1C0Odv@|cQHBK-)2`BKuF|FN2^zghSGil`c?`Aj>Wc<E-Y2-RtW5t
z(suh>H}$cSC8(B_37D>@M?^sICoMgAGZ|80pAlod?-bc_lqg;S2WFi)>)D*KFe#Q5
zfz1qf0HS`>&MOQMG@ARm)~lc5?MTO2B1t?^AcG)dgI4TcTPi8ADV4-Lk-X6`4lA}m
zILh>?`Ouv;42K<7_P8K!q>pwkxQ{H7*PDvyQ4<C-0ymzAu;pEIR00KqP#$|nqRiVi
zjoBc8#>lUQ?F|J00zP)!r=!x$2ZZ$atqUsEaGim=jQ&?z!Y(LOxTBVLnsffZgu5T=
zt&}XmO<WwR=CIFw5xGJJEJDI$pBc>}@5q>48EjyFXp}TbAwy)xGch^F$?5#r24N)i
zxVK*k^CuazC4`w_FzlQdA;tIwtp>pB!f%)RfCb9hQ@aW90X73U)1TzXtvd_!-ekyh
zf?U(*-oc6^f^d4K++R#j>TfhyFpQGVc{N@fW2#fG%RCRkK`^~+Yod>pLQ2U&4c}>v
z6Y`u&!E}(_1<wb8OFQ7h=Tgjuli5a8)I9=))1s-H$z{;jk1lt_mGd`Cgj1RN>68Rh
z7^(SYaZCkhea^C`G7DKG>73>Thc&=SVNqoDJ$WgMXN&xuU5>Bw&t4i!gZy)sfuwL_
z4G-5o2t?4R!~V}k*fw?%<)L=8f15Zeh?6`CTaYA}j0%R79bq4m0p$`3cn7tKI@?SO
zb*kw>VGc7o!ntd7k<x0gsxnZu0O4wpVo2KKH9rgBz40$nWI1APbQ>q0TGNG2#0F`%
z;w?mRZlvvP1?ie@{rJT+c9F;UE5U)eS|-=;K{mXrlQK?gXu=HnJ9-qsgkr&QqFVst
zh-GNPg`M^qH#bSh^${}j4>L|X7I<+sx*!#{@C-T%Ss1TyqfQW=hL|HUk$0v;)S0%d
z57{3;6_jQ^^0BD68#PPm>)_$ze8VkMm?~imFUn}9(^agH)1!!rs=_BylUVEDb0598
zEG8(nK>EUnPr8)crvB|}_GMq0P=CIew$t<obhgDE-fKtUwLKSS#osWp1`ZHoFa!z{
zyB8vqYgMFtg*bvX9O=+a1{zXeW9KMup8P0)w*=!u`-^?E&c`4~5h=|b4_TFIo@MFC
zF8sSar5P6R1Rlc?V$b?#id_uQl_o=Jr-*rfqs<W&k7ZA!I4PxX!0BjzNfxx-fyGPB
zAtX0v+Igm!S}>fd(-O1m;-6n2%&$`T1LObN|3c9+7JIIYV6~Tr??<?9FA*KQw1QOt
z#>D;kFy<)&S{lJF`Q$>j(5`Q>1UrVop+iWQ31z*dUyq7BMrSap_*7wdK3%%2M_0Iw
z^-64M)-7qj13Iu%j&r+duc6IuWWleOIj5ZtxY}3|r@**o<=D*NAOd$I8s1FZ;M7K&
zwrNED1@W(P%{?j|bAQMDOLz2quZ`ybV5FW^ITQqrEC#h37W-N#6!`7yn-=Hlp&)sS
zH9DS;a%f>uiU=o<78>&>9H+z9<}BLL_efOgWx2|T-<W@;RC_T21;HMe<?9fi%70?X
zSa<%!+Qma*l57>SLVVFOiRsu*Y^INmtD;1YY;MsVvHgSDDKoE;HbU}48OOp4kVc*&
z^&6%I!Jg<mexeqOxp*RN>ttAg0RK-ua0AgTlSBjqFIuu-O;TDS<GnaX?MQdA0}O?R
z+HEr9Ogr~R4C)ryjC(CT9xb50R$*y*5t(LW=dE+S$@Z){<;Y>T$iUV|I5FL}v#4Gd
zt69B6=W$WsbjTP(D?#4AVj7MVAhJ8N^F}6xp{(loy+#Qz8WL<BLZLe-sm>-Zrdo*I
zk}pk9D2vZGo5;~6(dze-C2Ani!W3zu*oTfGS28jFREQ2=Uu}W>T)~z)q~ngX2sK0p
zTAfpIk5%t)7lRwQJ}9~Lu@ant2>06I4X2z@M^14{;8?qf)HKeYLWg?-5?|Evqw`&U
zHFbcP(x7C_pOa~Qic}V=%Gaf`>e>woO0{tsK<Z3;g2|KAWhMu^tELbq*)T$9HwyG|
z9Z_i+1*I_C%o$y!MiN-N%BD4W2Xi+-W?q2PYa}4I7!ZShw$f{4ylB_8NV&?wKUe4^
zPg*X!C62^7+A3uz{~k*Qto$)7RE!Q0XPgsH5UK=S$HVOq|MQV&)3Z*Oir4#A1oMpz
zXD8$6(~5ZuG(5Uc&IW4+Yuno`AKZ8;(fLv4<E+h7(rzuNQ|!dDJUCczXU3<CY4-!v
ztaz>QwfN`(Tbgmz5y|ns9G6LLZUrIZjP!VeGWnabVQHs)qRX`jAo<XMB_DOzT_qTL
zy^cmyLLy0v&=EuuUJr_zG?gAsv<B2eEqcv^VcEJYN(sZ88KfP-MVmch?DyDcd~2G>
z#EpQnlKc^P3A?R8B(<}bIzAL4VWB2GU*i7x%Y!k)rO`j;5@Y571c~A7TJOFswfo7<
zA`rwiq#hZDnpms{(5X(1tZyXX5*E4V@3&$lC~V+Ugc%a|F*n}ox`oWbthZ`W;s#OP
zNuNlg+!s&cAbEM!Y04uEp`7wciYl&Ez=XTt9aQn2_hj0ebCI<t(8)vTvU|<jp0i$R
zm?-0bLi^q?<1i-~_mD1aOxq3z-E~nEvK7j4!*Lv7VR4xWct4+5;}-}uU0CLkEQIDs
zQzlSqat3-za}0HG@85>u^x@wPMtzgI4mfGASfw_Vc?o7}P|C^+*i5|b;GgQ_YICi;
zzi0!h;a#(p%Y3nR=9Y*aD+|_tU-?d~;}IR3=xGDQgt-6*YI*S%3paW^__{i=UrzUa
zLwky(z~V)~+E<Vict|sWBMK@G#F35b{m1>`<^54vdCTzldMl}y)APXB&D(|Z>&5-#
ze62hK!#{OPsOIX9#b06cN0Y+em8fX5wnESMmk9+`yYqy*kWJC?XO}IBF}@A;{Ok0@
zcGGh+U!Od>jg&3jHGc~I6P%?A`8Bc6XB^%*@XG>l^;fPZyF^1tt=bNxzzpZ)Bfxu$
z&Yv6YWVu8x^V$!AwEESuqeDB?8@q66u;tWefJv2Q$eWeQGX2zjn?IZL9N0mvGjCy!
zlyvQ@m~z^+c@KWv&SZ>Q`{(vl<gz1bHAM1=(04Rj*z{BuV$7)?rfjzS^BQrYVFjm`
zdbJU7)Y6Q;q&Jm!`#yN?_j~*Aul4=dndrUM`fA2OG1WGnMGPQMrDZ!((yktY043uW
zKG6mRL~Zne%fznB(MM_N&d#4*M7X?*hdNq$7zIlAq2RykLbjFrx?P{uzRbJ|dY5J2
zG4yreyL~@cs3m(!&%;VT?}#9J0B@J}v%P)**RSQ}qrZ%P7OO>~t<hk-_h01oyQg&P
zD|lBnaB(2tT=wT~9gVYHhC<*t2pgMdc^XftZC-aavc7iaTzZ#&ZpS671Ab8>+(;c~
z3IhF*eoYyEPVbvu%*6s58~uQcy(LABhe*c23rKn9l2=rTz`|VZM5%BKV`YwQHIO7g
z=J?q`q#*MO8XOSIP=LRvctTV)*1?QBy^0X%0+|KT?5}k8K|dKXhRJQWC?c;3$6jvu
zbyT(1v1fe}`u8gBtOXk;S!2Q#zYd3~aoe2`>8Qhgx~M@qV6prN<ik@L&Vb&$S8c05
zU^4f4wimQ5H&W~Wj*q041%o0(u(C2Sr*;PaJ6<(wTH9}q{j-$i3k3eE>y$!?KK@)Y
z65!mSGcpNkYx!fOgb5`#|6?`bG<=DBr{KHWofA2MB-<ksLwr9NcV=s}{a-`fdz^tN
znhoIN#)kEc=`AkqSo1a6HbMPi{4(odh={cOaQwq-Uymq)S@J=YIVMW}ICGpefXa*i
z+Z7;;Q;-0o!KN>t(+zOn;yr}HtNs{72ZkFA;XEiXeEGROe{Jy}V_QxSTsQ+Q+~i$W
zAtoROXu2k%^uf)oG|19hB1@vM$z)lI;Rx7iBacRp4WijVOSdir)+C@Dm-#ywS|%se
zw5os1##E?D$NZT6wo;cX7gvQx^hUer(gpB%&)bZn?k&B(+&sjaANh6LkmRGH(%?5s
z**g=m)rkFTUB$Cgyml8ks0^E?sC5@x5tR=tWG-lZ8+7okf5J1y<=_uY{{C2v|MaIO
zqehBUf3q8E!D7XN>yKlpf(=2w(V(i}-d+}Iy-?$4yPobmNR*ge#FvUPWr1A7J_lsA
z6Xdk|=lZnb<!~k(FH=l2MA|Ab=J;BFe=aa6`Lj-eDS|RHhEWLhiRYlTd-Qnl`+TJm
zhMMJMeLJ!D`h2fc-%wuvW$4)g83FAHCc4aXYo%>@`ektcWT(!~ARUktZ1Jjb;;L(7
z9~yxll<4{jG)(I${}FkmbnvrKQU&mH<>Yy4vZJdC#BMW_Vq!&K9b43rEd0#OJarYg
z?bbG*)TUmwsP&@vreGX9xHyZL)5BBuZl`YMsfMU4tLv41s_N(`Fr<;b?5XQniLeSy
zMG9e~))Cu)RPrA7#l+jxpVZm_PYX^y$_7i`I<b1O5R$GUig=p|6y+3s>;}ZZoU2}e
z24W0&`4h#Y5$o#nhY{JgLB|tG!q$Ap`kxg50mGBnvUc}gY45svSF2CA{*Y~mgtiNn
zu7hd9B=V-=rn*QE^|j(_m1SX46%%qjG&iWi404~<;EBosCcSPcYTYxfB1thIH8g&+
zGLqC?Xh!hiM%azD^2w7<nE(O#WP?5!YQGB|*r_%14n{-qdx<nuTrZ_+-YTHCo1xrt
z>R<-(bPpV|*Nxw`2S-@V+cs!;)#qRx)-qGW->MgpB|W|+&tJiP9T2O+Anyp6Xy-py
z5SZb26le=Z19xTmMg&o>lqaHadKRg{E)Pmj`bix#vt=^+&Y}kG=KulEg4;u=5H!KD
zQcNJw_FcTDP)a1;=NPgi@gEG&?sCW>sqI6=&&7%CVfQZ5RI14N+j+bULFOk(lq-Oe
z5MOO#Y1m{~5qY)vdQwhFb8yFuP&K&%kO#07h~ajp1{9OJB$D3^zD4=W*tk<5(Ji_i
zIpOhaB)q+D#Sl;xI{=Wr_!Olb`-d~_QZ_Eo_MiIvp04{pL;XXTI*0@<>X$kQgL?q}
z;6nQ-yK^=uC<$=DQu%SPb4^;X6^^5tGWE<6d~8`VB>)@t92lPuCKf2_r0;P>5e^N8
z+o7=`W>Hu*0Sa=zf<?iZ+#(rv65eg|_pS%>1cw1`BFI_C7+|4;suk2o2Vzwr>la4B
z*dWE^R%eVFoA;ivjA6k69Z7p3g^NcU^5@U@n10?YRXbfE_!QhvV*dTD<&MV__<$fe
zI}o8ErXOhD7kb4NPpq`p24xoV0ZdN#$rt<&+S27N0$fD2mP~xrK5Q^COagws0XkNF
z?nG{q(Z)f!Ishq23RR6xS`Gq;K==&_G)NCIvY)xx?-oY5!t+Vv*&GD8Zgq`xEzE?>
z1c=O%5Uk}e7Xwp^c>*@?oQ!MivjyAUiqD>N-J&DKFW2~_8ez$HpIl2r+}mvifl$93
zX~u-rl*&7pp`$A|0yVJgco3Lb4Li4fR>DMzai8zt-2ez0*C`Yn?I-G{Ju^p4*NalA
zh+5l*&sr)Tn$k<t1&fM7a^b-&V-XAW-rQiSWaVyYWwQT(cNsf_xL0Vky)adp4psd{
zM=3DM1Tj1{^RWt$Es(3O7Yw7XO<vv6pou=y1{uf>ez}qh4&n@vW-pQ9cTR;_nf{&&
zbAyBSBmtcIi^xTOQ0}bu#kgK$v4jRa$qRx{2|_?SKYyW^?h|Wv=<#fXjlFPFwsP?7
z5~-H;Hm<MqphXY#=QLz*WdhjC=kS&A*GuJtrZFVKL%ned3#l0=h|B{#ASvnN#AjSJ
zJkFA0ZBdoQvdqYf+SkL@)}UWrHY?iJxi#1(8Uf^kYUc)!Y(mBm`oWWsYfyr>Z?;vc
zc>k^dO*FPdie)7&q%H@%`XN?xZ0vW#1LBlAh)U!lE&yj2M$D4>w`;hxJe^r^(fKjf
z9z`3~S7I!yQ){nqY7`clj(t;@`ZF#vJSvPY2!`e-v>W(BX$vc9CK&ChccVRJpF>E*
ze87LP^-j^5McvwMY}>YN+jhmatv9w&v2D9z+qNo3#m=AaoW1wit)2gN-K>k%W?Rn~
zbBx{}pzVb&0^^Vpm2A^qCG$|EO$zbYAGy~Q)0iyp$NK3Laq#?Xv`-)TUN?_K2e$C9
z(1x@`@*9zsp~(<Vr8YOWG|Q6L&$^0tu73V@gwPpNJ8QlAIXQiGi-gI7^7?rk?=c3i
z1m(<aU^7M$Ao_cVM}-{^dVkehX|Ju*NQD3tQ%b;1ZhfGpVpOQ7bd3b1BXGVN-a{v%
zv2s^Di`J$*Va{&liGtz^_~>4UMTL}33Z#*va#q-^;I8o?(w5{TVIqS=EFiQ1t~<RL
z+?~6dg+WN2T0#I{onRyM(nBKVd7&NC8H1Q&(3c=oMPn)fV`w<>7$MDfBgflfY&8JE
zIHfg;I5w(PS-gRzy3lQ0)38#2?ju)yvROed7?f-fso#W}zoGkh)39b?UZ>0Ewjed&
z5oT#*dO|f5?FA`_fAS4AR467%Ly&J}5REFyoXJlFHCi+Dw$})Ck|A8a`Ys1Pr6$rR
z*1a`MQLhPQVrI~^S)0FNl5e59_6e|RP@wHssfrDb?lD(^hyL8)Wzg=rb^*@;5;L<f
zOp=1khO>8|#H?A%RUYNcq#tKktmV^iISPfOD%X|+YW#!$cGMbMnMbNo6e2362Wjej
zp+8@${Rrzsq0{g6%dr1Nmx&nnK^A(IuqktU|CgfF8QQpe5(vwoBXW(8`x!9DCK6Wu
z<;-!@O21jRF#=xD8Y7AJB@<iapl7SQvBNVSB87^x`rc;Z8BF9dY&_cIo*ZSK2@fsT
z!sgVyYwqM9{zKDSZF;Ahyf+Kw3zU)vh5I!u?&x!JcdFpDlTh=u_Ip1!YXlpc$pD>z
z6|OwfW<z{BrN1>~+`b9>@DZTQ^Jo1vv43ryrL~{kvX@DJ>~{qL$kQflz}mYos9%z&
zi7Zg*9>w`gV#ZF@;K<9Z`xo=}Rt^5M*B&xNv)r#!Y?Izec__}g)*gtvKBB&E6_Muz
zNL9RjIGRr3oZhJ-CJ>rU*uBNS9Eh7YDOXoHz3;lqkK4~p+O0nARmuPjweofuk855A
zm~Ez+{x<Ntok<QUt1y3fdOgW?H%{7c*#hwCFj+swbH?epN&<%M7lO5Cf0^d1z&$i5
z_9*77O14Mr-IE-cXimo*YF({V)Luak5Mfqyi(o(Wo=D(?;b?e4P1&$R@-{-_2<8|M
z*&+S1+lYfDCwfx5NNK>eG9AyV1+PJFVRsRknvcK|*~q^MfU+sOMe(s?nR%P7163vp
zgvdd|>@LIsCw&oSuOzyR=bxdTTTN>rUpjrV_BQx=zSguc8kS5yXJ2N_{i=8jpt==c
zp*fhr!FNH;s<eW<+cgq^uiw7~PJM|&`Oz<GDE%&+qX^-xT@$=5pYPZ>P9L)^+){OX
zM)rFi(T4h~SpcvXF&$7^Uo0>lJQoYw|14OurWMeDpr!>Dfl#DPOaa3I90Ovzwc_3d
zoPk?4B0~ElZ6Tt8z=D|BlPLZYyGYT>eEC+^of9}qjR)EdLC6)Am34K-Y1UPqEJmog
zif!$_@czp7<#}Z*^r!or!YIN_PPVuy$6lYHDIKzO_CnFmC#8`tS(kEA)@IG5Q^<w7
zbG=hcXB6Y!9Uur{_Ox&YINcpR9N)JkH+k3>9;MEy4MR3Mo2U(7F*{u@ufIRfZZlm9
z!#6m+%v$(YhWU}ln)qkd{>Vv&3VP-BbGvi1^WG$*)F4VnC6n(t>$a(y&{yfY9pC<*
zG(GP_{Z5m_axtbU`Oh7K>M>;<#^WU+=f!gMS?5_YA%@4bI4KQ4!V{%;)011897~#a
zHH#uwRlD$TPtkr%1Lq-S=KiHKV^%Z%6Lp-1!jh*uTi~-B7he_rP$qsPMPtMlv*4gg
zCCPMlbJ^P;c?b<nU(%<N>Tm6POvMs9ClLo|LulT+>{^s;WpaAe)yKfEh#&iWBNE<p
zG!YHG>BgBc@BIOQRbQFd3vXMOb6&Qb$*R5z(}?DUj?*g8ZPD&TpWaYk)X9DOlkF5<
zEl9%Z25fg2*O#nZ2FCTD%6lh?_InC}S}$`d1bf<ful;X-I~C@UWUMc!MiM^A8*AJa
z2R3PvrHf*VY5Gjl7BPNUg?Q~*t7<*{VJb|qCVWsFBp7)>W5D`jDxk05sIewa+J;_+
zx9U@x`cD=;Yt_j;7Y$Y%!Zn~H%00k{K?<iQmNMWTC+uYVCBp>aBuP#<yRm-T+NlXX
z408`Y<;UFcb9|vkA+z2paUK+CY3*9>AXbb<-Le1RGAR{id8N69Wrlr2e6!_)#<t=+
zu2XoH?Lz^81>JFPO>RO=FgJC67S7$*TQny}!W)%{$OqOgJN11E)Woqx-s7vTM(T#F
zhUw*h;pv<AL}l*>)&?90qc!kR1W~yD~y$X@TsNf-+9Ey5GK_Q#!wP%Aiu%#&IFu
z74r{{L}l0=fBl%2Z8uAEwrCK^W?`btpP+`SP^%m8C*pU}K;dyKt|L($xl}>arR~Ed
zeuNH%EfD+9UTcEFAJ+)lMM`D9Hb%t)ZyrCK`6v{y*}bC_;ruGHJy#eKf!e|li2K(I
z^|{$}Uh=F<imZ!0YeU2lq@mVHuXknySrf~%z)qBGmyRN1^|R`Ow104Tdtr0AQTtl%
zlEa1o`NGC1qv5?=plKB%tr`*zRN|yMJvM1zhA~+108oKAVFj>$auN{kBBB*vsMC@X
zvr>QzH8+WK8&E!sF>o<bM&Mr_IvAZ6Q$|ql5~h@=#<+3&DQZZpX7WHNnqW<?dG}G;
zj1jhtuP$k1qB&hvp;0%y6$r#F24KS9O(E+5m5S!u`@Yscfu=mqH5NAca&f0Rj=-`B
zuyp6~??RUz%nE7`8$9VTor2W7mH)zDY8$09yX0Y1Yw5$({Mh|;#I1$stUv4$R7Bim
zgH|u(mvSa<n>%ABnjkpO_k}l3nFxfwZvXZfp4p=aBY`M;tq5c;XSuh?y^xx1%nrH$
zFlUM8(wP5Bl{inCl>yIW!3PA0=2&58_RSun&tn;Sj5|235T86rNSy3cx5;t|yX?2n
z%Yn-Y$OGcBNSTw{(#Dqp_TI_zXMw#Pc9!%o5fS<f=j2K0f_}^DhDaNBRY!O^qmU+_
z%6qrOmm}#)Qv+hc!06G$gdo(dviMm6fyj7*ho7yJfiYm*;E2IULwglnr}jGKMN^je
ziv4O7##izKd=V-l5PjkmMvmCGsQFhQHI7*7Ksd<iaY0r4P_^j*;ydQ=+TZtG=`=80
zTrpJvetgs358M+Z;4Eu_R!+>N%x+u5?Loe!Lj9FuDw1+2j!a?p?*1816I%s<JbFuU
zDTrBwvgqcaKl%pZqS$Nlm3pFHeA{)wuI8!Y7`GW>lqQIzK3(gW-cpUV(nwOVr%i@T
z1r$<9Uls*ofokAgf5Cb5%SeiDuQrEF=F^=pfMH3QE@yRyOzi>yh6m6sdgRe>m-RMW
z3Hya@qJkal7iu6Ix`(Sx(-_Wx?%haGRVJ+10B~U9(SR@XJ;1*6&89eST_Rz*T)akl
z=#$*7;{;g4Z73VnjgbqB7n>sFN(w%?QM7r34kSL%3~We`>=+uuvKKh4hC99rdnJvz
zQ;zpe&A~a0FfV3NXr8Y<W0H4=sN`PucpXK*>z^ZXYEWfw0M5;;I{pse2>kA+qlgo%
z!;~Qx4i;nqGQSu-MonDIlny(D!n(qu+0cRR)Gg!sD^u6hjhZTBp-Y{qJ}+Fef5wmL
zncN0mvr6vYn)aak(7rW0o^Pf(mS<{Va`*@OgwituYBg0yn%)5;A`LB~S{Y$hms(EH
zGGrRCc!p1<suuX1fb=;)rJH*2#Rj_Tw6-UxzJ4O09(38yp+<yk%zU?_Q&UNJQ{Ttl
z8Gj+Qj)<uaO$_7|-1yge4z*1+9zJ5lL7+Nm6E@7j8Ji^sncubZr~*4zwtV%7t+S(c
zF9jrYjKX|_ygWzQgf1ss?)jmBi7nq2S81ImgR>w7LRr1b+!j9|E(R*4(x>H^MwyW6
zV6Jca&e{cEx-5}uAh0F5N4Jb+^Iv&Sx|kn)(nWTW+KNy-?7i+S9!+=9&46yzG;$}F
zQr^UNoIK$EjLr7@rA?R>MajEt#Sx`mmwS6S#5y6tkS2fOaw*3UXDqnq(t<afKP%?T
z`_5`;@Nrg4&0Gx70<mHyq1$m??Sv`LIHQ=G(~BeAzmm=OZYHLf+wJ=O$I}N!@I)})
z-_6<mdiAw%lkAWPx7Fy3<E-$^{Nl+R)f*-N_UCXqej4qljSJw2-tZx-1EqCSLE0Bs
zF+^!zEEWFl$jUhkw9s&^_8nglPrazVn}fRF6l%#sJ+%Yi=Ik8KGw7Xzlj>`aMV<Sa
zHRMPlVqUw$pDCtsH;i4er|}_ftfJ!?8c6rn_^|`=<|C(p!NYBlsb~i<m21h?bIG;I
zEIgRGR*_jphKl$vjERtfZje$#SpE)eV17yHt}F3hpTRAr%1i^d&nvK$9P1I@`Tk9I
zOqIh!6t4;xL-~W{096b-^L>x|1LxlHjE20x>mayoNt|xLza4p;IR-rkfyC+>=6U%g
z5dd=M^0-o~DqZc2>xHoa_zI%mH3@wt_L$VQaS(Z&A?mAVN4{^OU3&IT<quT31d`H;
z$vLc;e}uo0kNwhs&hlS8E861>RAPdS8+6VwK*0gnKtRbmtvkoeY26Wt9R3;>xv7k5
z0H!$vnH5N%Q1YmTRKiX#^Qee9<g|{T!154mQZ#Fytk+uJwW&LRg1jPky$(!y5b>@T
zGsQJz+dyE#X_2)`SzNdGH}g(gc)*2|e1$tQTvfzo7LIuT)Od}<-g8Yj#R`Wq8w?49
z|9QV7TZf`$@fIZ;#6!$f^B!x=^}meVptyh7owFA0_<O7-*RN`Eqd^N)>_S%8-!P!m
z@O3d81#ALK^(B5GvrO<{!TpS^yDL2#02+{Y%Vvju3n5)=f;nEAaX7Fy3ggavEx0fr
z1P_4OlYsoG)nlOUsnkte*KFBB*4i$)4j!N@>lZ-Iz@gn+6+O&=a)+jzMN$KwZ~Bv-
zV)#i%t{2zTVGpG?OZVt*@MwD7@a^cnvYTrR?m!mN7y@CLuJf*Q-FCIW=JgW)W_uoV
z+puHR@w_+Qh2AI<=JS11`s{9IwP{h7HhU3t9K&Gr?0unNQPj;mV3CVOF=(;(brO*9
zd#j8x<)*Vf^v(YpB7baA(pQy>CDnD`{uV@|JzD~)@uTL`4p-|>K+yQXG?u=RWwdQo
zz2uxA#cF%W0aWp{H@@R0plgpIlm(jrrBjB1K9RWFKzvO#l?=;by7zo|n$K^~WEoU|
z-4QdoJlgdH0n$)(nqUB;eLiha!UM2sml>LdVyzKspn?GYp#IKn>~1eb1Wiw5e(G+Y
zTSvo`VsCPhuEKps12TJ8U|CXE>nj(g^&#JtJ>4d(2qLsblJhZmVBgx)wXU`bxHFei
z9IgE|S9PY#n-KMpA>1Vwfz-z@z@YzuC{g<UZU8yK9Pz)q>G=PT%!P%O`@b-gtW4}o
z|5Gfmr6o=Qqk^!pCimZxrBSW}BLNUjJ}vhVldSWt>7-J%i|s6-*g8l!NjmPXS)z;|
zdY@-zg1a)+ua+8sWpi^nW?g2xSqWKVq{6NYzFivd{qX#zq`ENt=~~y%T-iGQ^0AId
z(Rgum<9C3Pu|inoQja9gue<Vk6C;T-mI=mEiK?LhXO&LQM^{Co_DXS?`2+q<F(Aiq
z!P4G*Ik~xc*`;wy=rlR{TBlL0ih0QA%aP#4J0Cm;D8OftExIqJBL{~Vt*6sy*|lMG
zl`dB&QtYMj8qfi_pD3K^V+^LN&S%}-rl^gvg0bpX=bnCb<S^Qw|2XK}!~fH~{p5b1
z#)rGe34Yhpt9E~Fd`u>>21s$WYRy(HMRa}qlO)+CEPGFLyFVNr7gXHU&-MGh{@8Wc
z;mrZF2|+I>gSwwB-%9CHuS5ZJxXVeV09Uz%B$2YMy*e4M;t1F>XT__yQ&;BnO08^X
z@ZX?6d8PQgvtF=f!l9-yTirY0SZ0dmvBwzx<f$`f?5X*4nPsNm1wh5p_I>f3`2m8Q
z6a9U>P<u#!$>Eptb)H`e$o7Z0q3xTyx*VR*s-*c9Z<j#kdo^0<*np1WM6;gkIAz{d
zv@V;+EQ8G4SXDHU<=4_=fGwVR9$Z0?h$4fa!7Kc(m?f1~(q{L&$LHXLhA`;MKI40V
zU^xN`{r6-b8eiUoF(B>QU0X&kK$pJqpvS4;LQ{eDyMA2NginR)gkI0}04y}CbE$NV
zs1`xCZO?pYTDebt3aGqD=M>{OmoiN0D*>@O^?jO!-HW$(a&cl~w+v*$FSS!i(7w$}
z6+N0`CBYWE0|Cm2Dq5eZRQWcsB<@+#4gxI+Eqod&1b9;<0RS#qSt5rEBbN&gkzlY~
z9LIUV$9{8naCE61n@Jk!g!nZG#?%y(ZH*`8F*!3_YZ*Xxc|-3*V@a4^@h$y|)EKBv
zV!?<n{;>MZB}8Gd`rVniqw9b3^sM^)qh<sW&e|2BcH3dgRd}nw14HBbC}We`UHa`3
zw-_{4Gm}*s!su?!T@~B-xSE{2AeBI{=*!J54hhP=et<(!_Fk!b<d)OP<#A?Ks5<>B
z8r9%DpJuoPOa_?Y%(}D8*Na|@<I$G{b31>6{<$vT5k``nO4tn|a_~Hr9{+Ra13I!F
zihZvh@p{0Zas24NSPWyn$K|^rV&Em0<)m7Qy}k<iq0VNNdG4H5HwhV%AggBJYN$$+
zK*m41<(hin3gqne&qiNFWnU`dx{vCuE8)0t>v%Sq91FlC6urx%3Bvi*ac$F{=(_&b
zWh`t(f5`^%vS*5+zT(Z>khM7D^?RgQptjq?fp<r~z`_3+Ol;+g?NU5P;wfudK>R9v
zbYyzi4{EJI5Q3;fr5XAW!6qyn{N}{`d!Oh9rJh+yOmI_(hdjV<2`xxg4yR?jr5O9v
z9M6B?aR#u%YlSP`?jdr!CsR(1(DU+(5_Fdv;o;Ig#}GO4^4T7+%c0CQO&(X^(KNki
zLpgPh!wfM9Gj+M;#rlYfsD_SSS?9Mm!`o5H*Tih3qm>AwEFsJ&YJY1g>P_y87mnX|
z9M>V#Nv8Z(xb<?>N4x+EyA=tq*?;(2Ydc_xkO)ZLFT9cqJ7wa{b(L$aMr)qptZJmm
zd~6j*Boj^Ab7{)$3Pd8cj9?isQT4<ccwsnrtY+ZsAT^^wUh*qHS%_@}B45b^20{-@
z*we~R7>(nK0amG}atY|Lp~mJxVsbCPmSohj#E5yXccKp<CMJ>EnuFiKf+g;9Q6>X{
zv;thS%=fr6Nd+?-U36TaBY}zpi&@gN#K#;EC(Xs_5du-|i|S??_xy80R?2F)95kd)
zT;LfiKiS+0*Pz1x!_&c|*gS2c$frZ_W`IU*h6a5a#e^b!Fgv`^O(;}L)YiW$8}Dox
zBT>a*+6Smc7;~jkNxvUtuaDhMM>ce^!v)~Da)jTYG74p2^)dR2L?N=!FFEEh7i5FQ
z_qDcxMzFbRJu{Fb7&W{R0__Q~s?fZW=>mxn47&ZY=L-wK@{}B~57i|fG^-pXk`P7+
z5ZcRK_DKqI#SRrkyFt`Uf6~+(O+cGMXgfv%iV}tA+>f$$t<KeaE~o+>g;qdF8$kr_
zMpzy7H~(u`6eZq5<&hS%3(Se<zIw({kw~;!+nCCvMmbl`KaNae1p*>R3T4ikwz~_A
z&PU^q@ME|oMuf8hOPvQv<FW`A##xlg?JBuZ6vIV--VJ3*MMio(Ol$*M8Bq8}0mFt&
zf`uOUpgkGLvPxsx1O7oc0XBN*^K#=UPB67qukPoM!ee4604?9y`Z@ja_r0b7tZr_P
zLI}cq^yz$&RFuwlAiGUq;5YO?e*RB2s*!TqQiGCfuv@0ehOCzkKa)RYSzZAm@11AB
z$JZ`WSkod>wIYQ3d_+KcX;ofScom|xgj)(VTGb`)m`zrNMrVL|dTL7s;o$~esnj@r
zQx4vLcF^92YaZubBO=5KjIfmPv;-|XemuN<-O`i6z+9NZef_y+*G;lwVl|WPv7m9W
zcXvBCsAMCwb${jeH`wLGld3=|HRe?c-V>Wwv(}PnEZvw0K5%kB^Dl>up4tNtxDAeb
zhK<pq4@_?|1&VYH$zpU(u)1B#3vwK+u)K9_E238xiXyb$pMSb%FJS*W2>ib}fQ|LP
zansDq|0@Ulx9W|Lk5SId-on+Ah=nbYm>e*z^UGm#0{OZrlaTnOKpw$3%xBjw4~4Le
zIZ79&3JL}a$}*#MO{$Po<)0J4&%!}erP%VAjhh}$Y|NUm$>sHLmbPC;DRf5Z6QeJ~
zN-|?Iqw2xP!Kg96AA8oH7omqGG6|LOvZky^1EEr};>bePVNc@+*VbIV<A?Q2113P;
z{gW@KMRCeN=KAB&+4@D=jl~J!rC2{oZ3LV_#84bEut^1iiNg#dqrrv|SMcdl$bN5b
zR|U)rI$2DI6%BD13PIQxvyb1GySvlho}`~|=KW&r{_na5zl6dlY6RTk#$TZKLGx7q
zHKl|nF-lR98joiC==Gy1nM7VCQWEeNvC7xwfQ$lqnMTIr_&Q6;Obg4a{C;9PeF97k
z>saTnJsgH=!NA@CLLdm7i8AwK;{>ODsY3a@)1tUj+f>{23mY;|tc<}XaZa&Zmghok
zWiU#HbW!>woo-|zo5IJrxT3bn;Fg0Vy2-qE1|dsWLVL!MJ!@{?z>kG)02z>p#ZWXC
zV$BIvg-vr%d3zw;&JnNCrITu(KrZs&I(XPILq}0SN3N`={?CDul{s?n)aky=>n^&f
zpSp<8s3JWVCCTy%|NO)Giw;^dpg~onJ2IP-T&|vNC;uVMqGqz!3wy|-BFf$eBV|%s
z*E45X!6}78g(_;H_C^D-KN27(bLh?V>Xu%Evw9Z=Vu2ncQL{8@*U_cdNsne5o2csZ
z4N`>~r|;56Kgf=bsmvYyr!r`wxqr~!Jxg3KC2L3$+S7$shROu#9HI~`D9GoGLxB%#
zjwBYruWbe+Z%@r<Wb1R5dQRw6@*PlF*k~EmHgOJwys)R=(c29Y5eX3aQtO}k=wPi@
zLXu9(f5bQ*;q8f46fd0c$f|7LK2qq`C9j}RHi<TCg*TF+I{#NzwLN_=*_xP-y=AU$
zZ~wjtq&1cI>4oG}u55^K<tl9o6kZs$Lo!eHJZz1AP=<VjE60;3IaUZV;+4%0r`?|(
z;5n~y9J`77Kor~0FANaerz$~qQzWrRLTg?NSq?hwNiIdpd1!sX$rmju;0FW213IVW
z+tB_V@}gRV#zR*o3Zm`Hk|+_2M_AmC_GGTJ#nr+S^;BH}W|T`x;?Nax)DXW4HDxQ%
z^_W8`tPlO|hJ7ufQsLcZANu!-V-t*DC0Ny?%JyO~w^57(_zr;dm{qu2;0E+2DcmQb
zJSDj`R^HU>$(T?bNIB#PRo%|>O%6JB$GjR04s<d!Y<M`K2lg_!Av=SbX&eRnS`iFn
zxF!I?cSG7Y&hoSOfchL;KO*E8f#gso*3V_xY&Jkhuck!<_V@VRxvTTZ*coJ!nSETe
zUI=I|UBgb#{{bM$EUbpsv{hqVN+dr)2o`#=O@f#!)^2FRpkihthz>=#=oD<Hf2Fa5
ztzHN{GgAq=LnKrr){;ErZ~)K1R5JbTEA$?~9{U8%UG5K0RmD^O;S?!1RZJI!{DOoG
zzeF#COQLUH-};wN-yZ&X#@<DYZfT#TDhQhl-KVcQL>OQ?35v4e<vg{aF(|+f96&wB
zY?9!k3eh5LZG^Wz<A<z*Jy)M{#TqOS#{d%2KaJyqpf^BDOUEI@2F?4cCTOTWFi8r6
zBt#{u-IDzeEQ|s$(|9_kN2&t0zp_Q!;6qrzI}j^Z+>UNq)|N|_;*JOJ0|l<*NuMd3
zsOK6fiyQzt&YN3~9f9e$v!>(-h}h#Q3r5#8mQ4eD!6}$Wbc;|5LOlj)!pq7r2T6>Q
zR^a9JpN9T@A}2}K=@b2wWJ7!5#iH_P48L;_u#P;u4EruItdPnnLr+`K4<?2Yjd&GI
z2_|DwHz$oC@1c4I**kFEcu^(>^<R{f1;v2}py>b%o~g~oIH5Xl4AaMjE)unDCE;Pe
zC|p3UMrH=+8wJWEenyfxyedeP^M$N(#AdTF5tk$CkdzhUZUAJdd{3l$R+!H32)`oa
z9abF+FSg8PTh5u7<s@_Y7PMi_kgD=Pn!5RREp3QYQRPyf<{B5*RtAr(fX0xF2uFKa
zt62cX_9oEzdN3T0%~CMBD55(u>c1^1K4_~J(+xN-$OMvMYKNx0Nn^cgKIe9OSk(8n
z73YBJ*1KUJg9jc8;X^|@Z|EIUWeB&jY{~W7dnAO4!lF#S#wczBRzA{uH|7LWLtdv>
z9)q;aaHt!+4rMttg{<sWZOztLN|oSu(<(qETo-NV%d)8^&3s!g#_FqEj6feu!rQ-E
z;VvAUWy3{|u{YW}_uf%URNaT567g@|sC}JB-%|A`VH8o2ImZSwY-Z2{6jteFGVLuF
zrh9=ITC|&gQK0yc&~aPj$>FMvy)S$-b4t9(56-(h_Z=&>CD{lZ@NpA4kSez)ANzoY
zQsJ^^rtBcWE(((rv^&bxUA=`LR1`j0s2&8F_z-vHSyE{)duU>UP7KeSCw3tdgi;l9
z_n<KNh07cUD^{#W1rjxc=Y;Qd%f%w|EtJVq`=jF>lXc2hyB$9$Fm!X&enS<^61ipN
ztVj9KFTbY~51yYiwfoEKSP1lU=nz1;m%bto1)(kcC85#&Y1a)mt_V9l!Z|X-mjZD{
zn)8}Zx8XRPZc>f;JVB8m#XT3&RtGDO+S4hT8TdAdIh;%ZpxrVNqKSVkwjzKd5XgH!
zRQx(+C++KeN!XJvOU;*V6hK|`joLy(1x9}7=U#nDY8~DTadO$cUw^nsW(27IHHcU6
zDl8MDF86szLC(jkXuXlEW1wJU*pa)qV#xdR!bP5pS$8E^x0BaDIy}3$D?h`yC9wN|
zRYGq*$lSW+7O%YO)v|`6#A6G}WEo0d&C{iGEX|g<pp1*zKnLoIjd%}QGGUk!-wn<N
zAyGryAi2K9Ov4Pn*vS~Q%L@=n>K^>nA0dwmyzH{ryj~NO?DEbP4pt6hi^edVrPBn5
z|0ewIY<vaN{C9LiQ+gExNKP0Ol>49Q<Q?v?*(P<oPs!_}FYTR@6}C+_CY4fri6!`X
zF~_s^z$27w2ek&bGnyH;6Q))|VPD6t;J@!#stI7PY7UOQfi*B>4i*4nV#Ifz0MwF8
z0H<9vKo=t#sY%6Hx&v-zB=e05ByL&|elMn-<`l$_%s7BP0~u7OeOJwKm_r~^CUVJt
zAJ-E>+^K%VJk(Ok_lh^U`BRrLsrky~LFPVAh}rw{kX7HDPcW#X*^5qaV-#m9{{9v9
zhBsGv4U%1Uv_5dfm<=F-$b?fAZ_GwvCJ%bTR0IqzHMrbUN`;@#%JDKa?+U@f#~(J+
z$Je50Q5`={kkgQ}vA>IE8P$vKxup95<q~*5#~*e{6~<JJe*{`BkpZkh`fL^3%(JOj
zulAUW!^<D0ECMR6rQHy*e<w-7R~fj9?SUZn!BkWb90P$T{{X;_Me>sXWwr|Qu1k4<
zl9v=V2?=|EhGzv0`J2KmQo=;=D_dd$SmFLf6wMjuw`IquRp)FfX-F6iFf*|C>ch`B
z=~!j)LD*;$w-nO7tLfzq6siL)c3Ef!aq#tAvnZKwok}#dZ1!9Aj$k}s<WdPm)O-FS
zDD{iKItdu8-2<f14?2)K9fR!_g%ce28YG`720z5o$R>?DJxt>meLdJ{>k=M87|lCv
z^&MmuOq<wrZ@#S@M<dF$JcEx2XSok%yochaxJl&8e82jyxO-n*#csm(VP8DONYgF@
zZl3hc=B~(FW)YvVLtYHvd)_w_GKuu42cB})gnl5H!hklG#|V!gWbu2RO!ZVr*sNt0
zu$qOpZNL3UzVJ+Fg%}nwDs_lmdYz}+x6ucjxD>bowq1LEXVI`CXp<Z`PCAdEr$)dx
z@TTI5!T%+TbN+W0=i+4kpPn2$(|<kv$>Pxe9md(y3ig310RNeUok0H2B&^73+K_nn
z-yV-mMR{*R347F4^+YrzBqkKQhD7O5lH|9qH{SPjV)StZXGR??s6cdXUfy_@8C!uV
z*pU<Qm&w`X?aRT-!R%3X-|FkXvlva$Hg<mt4M(6@4YsBhAbqd-U99cNEc|=gv-tgb
zs6G6abLhVStoPtewT`zN#{53k0}I0~M=k}1+joY?c)Q%Id%=;6`d3v(+qnj5)1BS0
zgpmWxHghwR#0=JJnm);xyP@RvScvY6DtG(3T*G*)_b$MM?Jtvv>Z)#LyYBBtNysj>
z>1wxNY0W0LAJBN_AD82DIDf(L54<+j_esyvJ!DP*%Qu5bCNq|lcMEgXZ=H5`2wT(q
z_ek96i0};9liV+4=^Wtk26P<rjeByuc1;;}pS84I@9ia~8yGC#^%onSro$ogSfTNc
zol(3ngCVV!#kO}<GZ-+dowYGlzqNmI=++pk8SM4FiVvy*svLH_O%)!vW8SZaQ*&?A
z60Lp!cV@R$S2m%x;Z$6sty?+0U%D9;*Uk7@y4iH~(*VA?w#;<9(!C3VLa`RCxmaL@
zwm^5M|LdT?7Y06ibpix{=I}ySL>`B4wXEJWeKje_z^;w%WI{Ty3NRg*q+<wQ+xf1y
zyW@UruUc1#FBS9~YjjUij^1?Mi%%sddv6LL6>2lsqce)XFE32K(^k}#etF)@3uV;|
zBYB^)!7@57Oj3Z`=X)LYS$gF>7(}Q;^>D4XeNv77TgGqK!_5U(FEFU=t14>=B-B+O
z-<vX>eyoe7`!D~AXN2A6*551GQnb+h#4Bz0*107r<`SoMkT}cAI~vRmtcD<C>I^)<
z{=s7Dd1d@Myq)Ff5l(gxCc-KY&4$Z3EXALafnRBU8NUX-SaMZ$n8v9~^d61MyN;qB
z<ob+m69#Ecma(Gi9GIN-*9NWOYowRG+5c>os(^}x*$;~LmR~pIRS&=kQ~r^%Bg(I;
z?tgr)n1#`Xx{P_?Zdb#K<Zw_;7M>jigjhnioXzcuM_9030mG!c@S$v}k~u3|3SbP+
zEiq%_Mai`@W4=3Q4IqrGB4t_OKX2Echc{OQ-C~;H{@%2k=>Q!nywhUv(4+Z#gK-Z4
z`Zqr0c`{exavf{FSA;UhDg@LQJIi2!nFh!klvutzc+8$<@Q3^6>+(j3pX{9m065>T
zSvI)k^TX)^z$OBPLzj#Q_wvUI-g_>q1nXnoR2-*XNQ@G*4VANkAoKgEN94Cxk6XXE
zLqR&D4s-~5<%z(Ew3VJi6F#{U)6yW1z_}qzQH1mZl)QR#t*eAIcmH_ZW6aDyPL>gm
zIhgDOzJLjVfrw?;2tyZ!_Dtvkj`91y2!jKU*9{b$sZVe`l_fo#5g9ltCW!I}V&L^1
zOs*Ue^&-M|H9za4Z$NC(mb5=1oCcvN1rgEG@j*kkAmGKq+p+5rfMq@Vo$wRFr<V
znjzYJ_vZskuUuYXMQ;64ZM1|?<HoPGcMPn9t|uu-gI95$t-9O>SdbtA6SQ9u->)xo
zW&}hLie0uSU@xgGkxDmU!k^TQ3d@w;WN_SuQso^`tShXO%VgG^gB+sJbcb)B%rY&Y
zQH9E9TllPt^*4zaLT5yoW<${7d*KMMygb?3&|D%mAfps#6qBQe&w5>x)FCiPs(I+D
zsCn8Opa)_sN6vaiR4NUC*CJ9EnTuP~oMd#h5+aHXLl0o_{eHn*peHQHfWv<g?@zT8
z#-di?Rdrv|u5!$q8dyJO#PT>5HX-K3{(@h`*q$bjM(aRvat9jMOq>vHJ1aNLrxO?9
z_=+@Om!YO7Er9MnzR8KZI)PP_bMhTm&1B(E>M8Zu2sQPV*qt^2uMw7VEQS0#B%<KT
zT&Zm5ZVHwnj69530c|$t%txy2Be4UO*+}VIs5T)BynPL>c}<`{&^nM2j6{{r@uYm&
zmv+lwZ8vF(@yPzm1f;%AlD|ZfYYNs^+vEp06OMM~J{mSsB6RS0fT;`Yzg+*k)u$4%
z#P9BEj8Aa4!=+OJN`=y-Xpx*Qu_s-HWxkz6REXb<Wu)qw-XM=S!V)}!_kLzd5l+ho
z3zRo1^ngIhT|b^)-5~7hDrCR>T0Gg8S%ilYGLZ+uiA@-MjRx=Asxm~Mm8K)q%!~*z
z7+{2^|9CsmC?o*(fHS@9RhVL2i}=QdZSyZG(tDAu>F<33OM#RU9Z6yI!Z@9}HI;e>
zH731-WL5msbDGmI1@p3<NuKGEWP7Lu4!spw&)8MK6GSp=lZd!b%?c1b;0u8?+;YQc
zt?uoy;E=(MIkf;)F3@t!gXppqBFpi9AU15PtMn}tv>A$cKcN}avn3=j$zy8)T*^Tu
zvD)h}0(l<*4s*S|VWDGht33h&55E0$AScj-P-o_yR;?w@8=eMh`d3Qd!#FhEkG0<K
z`&)A|J}CKJ#u22X4*<&5pN}I!M~wEp8-yBQ2~;L@U;spEah6FDsA^f>;4ck<p+Pv)
zTHu=Uh{h&my#l}R0y>X56ivDG+G9^qIP0XMSQY^wfU(POqj$uRZmc&_plmA+YQ%!9
zC03p<s}kuWLH!F|xepoIuhl=)q-ZYW9{LV4ZS2H&AO7!>VGg^0?yWtJkm$?(l++^p
z0)BS%V#Q$mV{60F=$YzX_BnM5abnz`{od#A5f_epCM=SUmvt%f^bl7Rhvb>uYDqvG
z)9pB5u$a&wZG@NmfUR>sbpp_#Kd^Lj1`$~)ABM{@bjz^23F^k<=8B+?C$;E04NT@B
zwb8pn){d|kl&p1++S5;-`HW!SdVfn3eTusBc$4MbTXAcy#v4oMTlo%uJVvmU7N+f%
z@~_N6rd;KqT@5eZdNi}|&BPt<l|M-UlIIIhx^2JtQL9#LD6k)TnwW4xP@D@VqHk;m
zu)TOZgV1Y}Zz<l04@dk)7CL*EC=EoCErGkN(T?g(3i;l@!Tg5g3;zG7Aa>^ePC+az
zT>oDR`fn}X|LRDx1GE3<o)XaVOWR>f0%gadrlHp;fs(iWv<LB0HQN)_1bMTHN(uxH
zX^vFpz#AdsNb9M0_q?i;`zYqv6cv<tZt=1xuCAxjy4N5fis3&5FMYe2oxE-XCBffc
zI(8VdjI+6VN=@~t>T;38$B)`C0Sx72KZ5jWakJ?IXO}0f2+FkYP{6B5%02p}FjlYw
zL){Dk;C+zOfx$qxJu*pCL=_#Nl!{w~G7=GK;^6Q7@7|+sma)g{ar=UBdsaguTLuT<
z|9BriJE$_CCW3@L+6(x1K0M6npRK+zz&!ABd=Z^D06ogda{^W?@_3MKg$3{8u(>mB
z*1RBAhJUm9xIw6@36N05l?*T4Y~J*?{P<mH3{v;2ix@sU?0cbvLErC2g1aWA{;cv7
zsn_DqL1uBu#Z~I=teUPCK4e{2X=G6fQmE=DR^YT$=fAT0?maSm%SBuF9Kyd$3a%S~
z*Y@tG-NgwVC+qR!WUhGXjGo%n3q7?wqw)oG-Lr|R)Z{3wFl=u}(aM7)RD$r2)syUC
zf>gci!Sj(9!p!)zH!u)NsJ@YZ`ue_&Bx%&(ATodk-%BE*AOEDFmRUyLrhT%ZP>5BN
z0pRn|LkX+g;?=YFY7>_c$fUn4St-+S7J;=f-~NIK1^ijq&$oLMQL(6qNj|xFu+s>;
zfYx{pXr=3F`h(@d{6dqb3@0Wx^~r73&cR<YdTz@|J!y3Hdh|FMFk=jH43iM(l|jWi
z0te9ehdsrFet3rQtcPodMAo0mZ9h0kUWsc@YiTuP@QMz%MP9>;CgHmPwsZYWa5bkU
zCLP%o*gnvx(8}fKfuAUZ%f^*(KJ9pMqEio&eX$xq_{oB2I)YTR12Jo~Q97O%R$3Qy
zAI!@FOeCkBVvY)|g_Ci;pwI4x#>}o8qX-zq^IQx5#S1%Hlp}_!ryMwf#s(c!OvE-c
zvp4Ukbo;?}E(o!0O?{;Wi?rK_aj@Ld{9=aM!<KnZmhVSMw<(+~f?E0hhk#Lj*b75^
zRg2-B!XE+4a6XQ(CabQp+$LbF`P>YIQ$6uuN3kfFg+9sm#v#jY30Vs$-+w_Fr4bNj
z7$DMf;m)bo{SN`Aol%Qp-Tw6OpBw`Jdsll=v4q)`oA76&3d(2EEjjIC=ce95p7Pnd
z+dBhJH5v!DN7L62pr8L=x_$t((hPYn<;281FdSG`zR&=C*wiP@DL4?UIw0%8RvQQA
z4o?xca~nU*P3^qww&5ToPD#WwMG8RqiWG)Mgz}^L)9cmaB>oxzzc*7DH4v5cwdM3c
z=4)OKCjb?)8Tq&RD$Fs4XC*$&&FzS&(ctUVtb1~uf^X0S<)3LJH@XLz>{37dSDFy*
zqwvHkP{6r+w>HeZEeA1rYCT&CF)Er!iV#z?%Z`v}P)%oFS<*<ppMYwWbRN(EPi)8c
zR?^?FjZrXv7MvRqOT=*Bw+7{u^1Z*Ng@ipfRKTEK!m{KkCA<=|ld9chG?sZmEBJEY
z{Eu+V)l<r8M%)aeuOMJLBNUB@m5Y%~bk-o3-{<wv`1EOdy~zOM;c^}E8Zf)-3k&G}
zu>aTAgvt2HW01rgC<WBtu?Z+U5HNWY!E#I&TPv{h?hq**<Q@PHvyr6$b`k@%-$0zl
zgs;U#02jSh3ta^#0}jL%TS^n%3RiV6SB1jZC~}3tK-xqqdtCatS6k*Gd!THrU-4vO
zkjMGOuqnjGM=IoW#gvh8NZUsxJ+Ao&*B3o7NeS#{j3~!(iI~)*tq(xHVaMD2$m2|W
z%|tx-v!<S_l)m<bfrMp@Adb*9N)<8G9>JJFRBSl9*nNF2(1pQ`L}%GAk}ItY>(@O#
zw3u>|J>WphtP)AboB})P+<~asD6Z6Rl~O*-T;I;0kBUjTW{ea;_s0<9P_qkxrLwEs
zW*iCIeX}a!9!W4{_yypUgaslv;m8*Sbt0$yBEo&9q1;#JZrL?u925ZtLLyFqG+JoG
zLpq1a9~FvWOK}2Gl2?97ISxt;h3r3;6u?~&kT#j%;k^i{)TmMg+Rz!|o9XEc<w4bT
zVc!;sQ6epj4H|e~A?V!a9w8>G9+t_nR-JWWx*lcJ+5Ya6nwWM54MGLXmWBcYA_TDX
zco$HzkEn_%qV|UX&8D{iqK{(dSRFQB?`wTc4}k?qE*To(ew2><M{+a%Aa>+zFvE%U
z7Z=z@mk1NYt=pQAn*o(fXv<ydd-ukq8OXTywO}!D&E?!q<)|zL@br-n3GF<Ay-}f)
zI@3~_Wxna^wiMu~t}(@dz&1{dE)0-|Kx#%Jip2}uV;rxh>tn$vGC%cAq;rPVCI%5F
z%mC+d;TbQgRXoDsqxq%Uv{9C<TF>fdNmevhzwMSq<RipvW`=<MUaJ^Eo~ocDM$zwV
zM~uRzA~P3>I3S|ChD0sF$!#&B5%+?TovtC(%w!8N=vv~$pWUM|$YxTBYy^k}{6$wS
zTDUDRa*h1O<t8y1Hm}aau;;HvO#Wxb4VjJpO(*AR21a0<34ZkWdcaG<%X9S_<v@w;
zv8q1&z>DNO;>h`QP9pb^ixcD*U(;bI4C&!e)>GCgF^fxX2am8$3@$52n#(l};!+_l
z2ca>Z%IRejj(iIfR5S+HBKMD)W0H7}lEZ{fu;YPJ4EvU*YJr$#u@ofZNjlVqSTXk^
zrNk*~eJ#9o<{vZm@cdA;>Mgq?gfLn9UxRc{;c};HNu)LP&%`Mk-$^`aZeh8b%(rvZ
zsFwlr15Qwpd+``A_{Zrto+NotohLh*5Tqe(P-0N0r-B}S2!o1|y$e85hJua2M(d}Y
zkT#J+%y_a8%BQ3$&oXEk6!8#ykMkB|qhFDEqn|8+Mt5p0lZVv8r#lf&Z7ErVDaw-M
z*1~WnVd-j=9HbcdDr1L@K#d`*G@aOn^gq}}ltKw7WKRcVOwMU_T*I-)Gc5D1$x%(a
zZ-!L=fNbLM%kwV|kX!)TnikEQU*Y95Km00a%tXa{y^cV|L1d`-R7|KRQpQZE=aJ45
zvKL)4#T<A5x_7BTDdk@&tV|O>k2ZTvEQ#3+n`f3p)z!v;sdXdZbz~gYrjsF>XnXVP
zdGwOfDsxK>(PBp3WNLogw0x9BO@&!$v{mXN3Wn3t63};#*9gFnJCzPt`fjs@s;yg6
z>LiOBS3SUp^66$lsQEifEnzvdxmDE)e-wT88+yDmlNQo5>~G|YrSSgyBB{)oKr@u2
zmRVBLv8@A)axHgr+!L)!UQzkBi}2!+8I9u0@5grNOFUh4c2HALsz{!e@V<lk8)h@8
zt{#Wo+N^{zr#%4HY1*UPIjHE7DBU9l!4&qEy7Yviw7+-tERm_xe1s=aiEV=(D)JC}
zo|4i|A1Zwym9WI;Vqq;T8*SuAtM+cFk+yR1RhCwt%cm~u^bt(4!E#`KyE|$g+hGN*
znqp4l%a@j6)vkmrO~gBcanxiq`3_KIp>p!VE*1agQWYSA$k16jrS0m6g*K_azF>X@
zT{P|=#J*g?$&RmaDTH$tq}k=!KVWlXa)Z$Ro0{d}-MxMLDjdr=AP_%gTSAVLU6P84
z)V3=(|EU&g5Me<;U)K`-8mgK=`MGtcHgn7@LX3fTmCjlK0`HMVRJJqvfu5*VoZDzs
z(K<Pf;1ZC56VOK5!drP_?IBaZ5wGIC%R4;TR)MB?cU?xKM6o(&e^J2_KaY}zbc|q7
zjqc378VxEecM9cUA0;V(ZZV>FN9+xqE+A1sFzUR<+eq@XNIg2UP~q?GG?uR39u(V<
zk-9Z%S?pUGeYTos^zMSeHF?ge5(KRp+xI4_4+QA9ohh<_s~oid!y+yb*zF|D+CHNu
zw<2!||Dr)TdkQu9u9eHKeyuUJ{XjF`6ENkEiHagjBY6*l$g}c`pzC|?VLY%uUBd6G
zXj?zkz_DZ@_(6>C+W8L!s#GA*gdIA_oIPySkTu;$F^fSub6{_0_ZHz9W0sPxmlR<A
zhc)>6GFaQqvy$o-DqI-PX4aBnGl5h6;5J=<(`uwQ#v1MBX9Jb<wi#WHP20frwu$S2
zUIDbn^1bB~8cSQRNg?ER@U0AjmB)|@lx~EufH`Ao=2`ppw(DZ-oV2_~EA<HqQ!pTB
z*C@54>e$8t`CP<-y~*37pyl|R5!PUqfe0YQ0|V2HH9g#&%I%>z@WH1p+!u$T!1XpE
z-c-@$@mZZ(oN=P?X*|^nE;!yBk7@|`MMU#kF^OPLGtY<Qn4lh`;i}SdpE=`~C!kP-
zCkwqJNMS>|Gwt_SaznO^iwpSc!_=W_Ez3wr1b5aY`k%(rMH*h2`b8J+w3!sO4+DU(
zZ`4UHapT&7yv=>X&Q^`+#QFKLNL)pf4TG5pVDHzeS|+4WTL;_j3EtY@+B?vl=FCWa
zSBB<T!p=;QUwOadO)A0T`V`7)7I|ZKE=Y>fNtgQP;AYts+I+~yuwj!6Lds(KdP6M3
zAJ%f59v)O3KwchF6v#YZz41{rcY6RLL;%h~^sGxnE%$K*@Miw!A<~Sy2~pfvV@6hS
zZTm5|FgcDB)5IPBxYn5yX6q+D=O;d2@7xDw37!jr`uq{qqU;7$YUMe)+p;-(QBJyC
zM-UDY{nFo%Vo6p2nT8GmUgq*>KkrC`l=d+9SP5M|GRAG7xq$p*B4M<QbY6f#)F^oH
z0@c7<sr?`-WPn|)XHbZdYumx2AZ9w@_Vc`Fi;v37FlTO4>Y_DMQJI7^WVNS6bc=x<
zOp2ff6Z(7j7QKJKauMm&4p74e@|}nv?i7S!Alaa1McJ@)f9<(x#K=bWfd_Ek=dYY%
zX26Wo->vGxa%z=Vk4T433uU1Y!pwlFx=e>BH_bBh8f4EIVnJw{FZs~~{ix1xnU3^1
zPVSI-(L1nt(=b-do9-SYH9UM$NI9_UV&|R3o9~9SKok&ldc>~&Ug!Ty9n1b-bu8--
zYyN-g*koi%R8SUn?w`VyJWT)<#10fo@&~Gg3W5(nGk=>8kI&^#&lboL$lz;2RHP8|
zc+Qt09#%`A3e6)Gmw;jsQQ|#GXEslpimM3X+?I=kDs*R|jDW(i^L$vf?bb$rcjt*?
zji)x;*X%H;rr}M)3JFazN|facNmQeYp=&dOq9wr3S|^SL3(R9`)*G3|zAQ1rVNA=C
z2a*FI;dImEw9yFbSfh^MI3SA0OmfvRn8QAEh%XIAf^|j0ImuXI`Phep6;6l^)@2T4
zATZ#9&p#HOxV0esZ4TD_GMjSLanM-Z!NVoZ+;eK6-0DObRmif#TEbsinXw{CWTDy6
zTb{0l%R-en)P)QciGg~>A)Balx+P$pNL&IS$%=d)MQ8j9L?L67{@LZ}!xkDZ=ZpzE
zD8+nAhQ4hQC3{i5J(@kFT<rd{GG<5+xP@`AcSTpmk*4Bon|8c~=rTmUGJZ|cr_de;
zg^s`;jFwMeXMa8+T8-Qv;!awD%$hC%F@q6pjQnJgd6ygP7Y=lY<w6ixZE;+vLwW<C
zN~p@x=;J6(4QmeKdT)M1+tRthn1QZES|MZjI)1a(H?YHT{nrw0;_GeOB;=DdLBWh6
zDY@EYmJ$D5{X6=juN#X{66E917DI_*VXl<HAloi0qbx>AYEO*w{WA9#Rh$RiTI%L;
z^upmVd3)wmp23v01zrka)Zyv<_NxN`?E89E6^^fvN4sG)r?B?saT|ysY+Dhbh!$&<
zD-hES^&Cc>dT!F3>+yDoo{l=D4kP;b)zKV*kjb?DQnO$U8i+z=;&;#_tA(V%*H)qe
z@Gy3CDkc#8FRA2@DMa7)2!5W0kvv~^w!i&Ht7VH#l!7m>AT;>0N1vmj;M!9Ft$3O&
zoH_p4QIA}4U%I!7uK*WyztvaD#67a>$90a`NnXi8$m`IiQV>C-V@#m<NwRVR8ik6B
zy?J&)Q7-b^jAXEPT7!Ycvv`JD16>!KMixiW=-;>{)8|!=tyW2u+7WbpGsUD@Su8gc
zorW_R+kRMEhO_KtqaFh)*#}&J`$8>vi!jkv$)L$feR^M{H+vLkHn3xttolUx&(}zK
z5lUKn3)DlUmcH~>Eif9tO<-XcG3G@-q&_B^&WsO2ZjP<;^6>T*>QwJB?+s=+N^Qzb
z1980q2jkpSG)+-^p$tNdDl$QDamM<2#}IO#lhBd%XJCv>>7gr71~&d5%-S8(vJ%et
z<GMAcT-}K>rHF63^gn5y223x)!Xs?F{Cui4CjSn8tZlR!VQeyQ)Q?Uu#25%8S@x@u
ze1=RtJ%om#eY~<(%zZzx{N#LWM-Z~&3$k?giEqi(0U);eq*7`3VF(E(T93mw#OSL(
z`u3TXJJ)u!F~@b&KwJZWD<!S5LFj%P*+aUyoW!9K!SKROWnmChtY~ukc}`#%OxAIM
zx@34Lp^PzAFLrsk&8(xtt6B(a+vs7=*T7_F5z_IbH9v?+pXtH;JE-4cjv0;3S1Lh5
zsR<v_`5<W?_Y|kP<@35_LlgJ%Qk#;Cmll?S88^J~1qNeWzvpZKXK*UI!gF@v-rugS
z&Tpy^uoy+j1}rQ*uRC9z-w(jPIRaAxIQ%?r7ncqu@5oVhbfbHWTCndx>bj(xAU=?x
zGL^!4&r5qt?=Y_DbEG3v<>xIoT=|=3b~V*AqGx72Zq_~9z#_EC2l~}fEtn5PW8~5U
zf+O(t3Mik~`s?xl+qz}cID+p4B9&4wZWj@*j?S_|ZxE~BmGz7vLaJOrVwf?XATRaV
zHPKq>AHf%Qm|@yJmR~J_9JjVzADg`;`!CkCOZvcYs^RYt)=%c{vf3x*6;Ii+J28Gd
zf^P7i-dHny)>Qw8t#j-SGupOrY&%UF+qP}9LF1&coxHJa+qUhdv2ELIlG`umjyuLZ
zzhUpO*Isk2XHGOP2;b7I!+p`(WaI%uVT&Jpy-Vp@<qRqSr4NoQk@JAm(`@grN~#T^
zd?DEH)0O?dR7T*VVu~!hS1^CA59uGzTW#3F{8g^(eyO&qs<<1TWn!y6pGW&9CzQ<g
zS7V{u-o3PJdjsi5Xh<Fetu<Lk?Gtjp&do*LgH7vC%)?pxe{0*v6Sl%B8tW}Y>%LyK
zKx74772vQ4<cB=IKOAbovtWkpuB(nwT0oD1)?$ky^$MCiSKpeo4U`)pzi>(&9`bbX
z)sEYsR}_+!YxQ0p4t=E+JWa_q>J-8~u5zE)IsNTyDMrse&(eH;`bBTVXh$t`?AW0K
zK3BpUuXP&K=Br+bDNS(r%0lo*Yj-T${!@lrOzglI*hagYrN=<`f`xrUvxEYGj^GaC
zv~?epTkIPJy4d3>uRIOfB{0YhAA=5Qmr*C*oemeI*%>YY?(O7zGi?ubo4nAZQ_F!t
zDgSd8iMKggRnoj|IUcj%fsnowE*=M!&D?>t@j|IBV>AtNtx@J}=7FQWY^ygkD#)|2
zR!b7#Bhp`3*4SC_;K@@km~YESWI;7vu-5f(k1C8~4l5q6rIJw?m)DO-mFJ9BAI_Mf
zz|Ccp*HAU_p*n<L+smf&7Val(B7{P-9>ol9Q^qL`sS=tHC3yMf&j&O1$*4UIadZp9
zElOJMkuVgq=kO})Mdvb4`;4-jl#rttPT_85fa;}_VTe~AMP_Stx;M<vVBo(L_5WZq
zEKD4nsi719?5MhRbnNgrv9`<$1w~>{3o>q|44<j7?GlGMe)AwjfPqHT^R<|f{>n;M
z-pB)dk?lh9e_8(#ZbF;^!3gE!TfX)-5tx<|HXr(g1sInoa}@=q%kUxr`lZI>V@kzo
z3vSlne+Ip)uZ!Vdep6*+!Dg(J;)dg^uWtw8N`g6G*uW8d{Iq5rv>`$dcQ2pE-QHrO
z+i|J6Yr#SAj9M_En&D_!5VJ~1z1y{-V3#+qpx4vU;rh?ZX$h=<;<K;s{qFLyFSRn(
zKk<14;P!Fye42=E6v0CojLq%k_qry>&$XC>#ScDP{ii*<IDIu=Li481ilAdyEP6Yt
zB#6MF1Fe;paSTNVx}o`or%>fI2-F@px@??(I?gYVv#`g<UPPPQog3waWzkc$G(H-h
z5`Tfpj*5D_RM5gG^4PRqIU$k6aoN~}%A{#zaA7Dwi1c@r4c7G7zU5zSNHiF9sXf~q
z94T|r#XD@tx3;@x>_K7<1kJ*KHK&A#A1-Rz0Ggrc67!CBg!lvC)X~sC)bMz@j;kPC
zW>&N23g`y=6Ixt!3vnar!Z@fF+gssDAyv_$52y5{NYxj{tG@>vl2Oh|Rkt?e-~7bs
zShK|vowt44u^gW%!r;t>>r}@7JEyxeHHRP<r@-5+{Y*`j;TY`uWZsOUp`eH26m;Ka
z3mig#_@t>gJoGJD1^c5mg{k&K2s5aThh{I*8^F=K{w;n#vjO!t7_?Pb)go4S6zQKz
zB3}f=Jxti778eEI<Ji105;BCtelfA0M7+gWbBHqOQ-^QeZVOi7`Fb~4WTz%U%}G6E
z?L0k=kwv?#2XpeRh|F+ZrM&JpTw&`u0j%z($)@?3u}g2A>nEcC7bMe|zvV$>qKGYL
zr_mMc>0!&8N!n-(<;y(l4b3@|3QMVN36(oW7K8@kh#DkqS!3ZxxOo0ncK7S>D;|Ef
zBi8rxY&UnQ)FA^iu~0$&+z;q+_&_PTq)I|3<s{aM>d*0XIzz7)yo#CoWlF`Lz!y)T
z>Jp_QkU5)JT6^)8)9VEabo+9@um3)^YEAjrq8F>4GoUU5onRm*KIgYB=dB<RGlnJj
z#h#YRzi&;?Zat{G>ZMwJei6qTz|4?e@<9k;43<DubSBr3O6r!Df;`vh0L|0los||4
z7Jnr0u=vPdfj)j>hk2=>+32eR_!4T)i+D3e$N$nK4F(OQkt!OXzHs|VgR^Wpo|nH+
z7C?n2X@_h-W*lkvT}3$g&w(4JkdXGV76xGoA)IeI!tWiOV+=T%A?4v^xV|H)4~}jE
z6zNfosz@^Sgo|7PF=joIrSdxOB)D^%Uh7Unq~Nh#Q7a-8jz1UB5c`~2z}1w28i+}c
zDie+0?~Am4i$Cla;QfQw3*1z0o#jYj-Nv$i`lR5#70Yc@^6$EW!-HfxQvS6K-ihg(
zgIs1wz3l7bX<70PS3$<{V5!r%JmML~Y?k5>ImOY$??4*ggC+#+U|4(X*aDGwd)Wu|
ze?~0rWxXkaEZe5MA#<jd1Q7Yag|MxS=3^W=xbM|be#k<!G7f<XyID)82Vu40hp*8O
zZGx6!IDEs13yq~o4UiBz*R25uzgqd`1gaTB<|XL-@BiKvy0r4q(--pK&-4nFevN=G
zOppzC4TmoL5`T`~Tp%+AhspN(^m>ZhbaV)s?_hn3QzYg`lkV)}1)yrv`gh50Mh|aR
zD`mX15_Ec|q%^9vw?RWq)IXkpg`CBw6C&W~xZ^ZL6XvQ_ZgHMZh+M&Z^;{U=uif*d
zB&nN{vDO%U%m*u2=hHhvtJmAj%w+Gv3VKr(vHZ4Y?T1Iw7qSrM$FZns%^84Dho>o!
zQ5Ob~5Ne3WKtDTA0a9!+@dbS^%r>49xgaoqUQqTwXxxQabZSu<t4JSr4^ii+#v^p}
z@O73*;|V#;@0(63a9t!4TGp-jkmGx1t%*%-ri1;utXdrgB-JM}j4X;PecFJKzzN5U
z_Kt#K(JATRuz35q?8u#dJ0oODRuaXO-f|A8*~T2cgLBvc&?!d6;qHKAp*jrCu(nu%
z)RjK@U79d+Y@VXRqw~}*Af~A}LzIawgRo1SC`abU-s|$ED|(p9_+*R$i8y+OK0KSx
zWe;0$2?Ds=$&XfkdSckwvYy(U8OCPBue|OWJ!l1dBN;M+7Q5C>5?z9@0Gg)pQOeu_
z7MVTJvs!E%;1EV}y`u9k^-VLKUVfkU`&+36e&PPWq}f*w=!|`9H?AkAo>o_S3qF>B
zw%;zh%F`)95LFknv|I;P+4!H!0*RkvSISSdh%ND&i%?FBLz@t3OhI^5a@1-Lg3j`7
zTYiI=X^vCe53nFrET64`qVAPiz8ZgSQ{?cPj+MMJfWN1>>#!#3IEd}0wpNA62b`BE
z9(N8=0n^Ok*(0xW(CM8Kv$GD3_C^pNPBi%M`P$V5+H>k^KN*eINFmL+2pG|YlE<`b
z*W(_<eC;^YJ}74jpQWg*&^)dqFHyYpRQs>uZ33}rez&!p%8<vTIa7mVFY@UsuT-K1
z=kLB(10-!l#C%t;`N(cg3LnaD9}Sx|45DjsVDHiHhY(7t`ClRW$`0kXBM4r$R4YmI
z7>plEnyJGk6s0N{U|pV5dLDzt^tY+osKdq2Xl_|)<X534q-?*J-m}yk^Xrcvcjd{4
z;j`)7z$1is>~Jc?+hCcL_6O{xcsEe6)OnjKfsT9P^9>oJts8TC&`gQIl8L^=<mFo)
zR1yxz=Q`_7SFi2|Y*P>nqH*J;viBp;{XzVw=?ULqL%$Gau{Rr5HSEeYUNj=cU(smS
z9Rc?`Ybs`+IDW|nWo2V<epwAejt$KlZm4@IFdGk#C>23_Wi(OHqLRg|x-<TI7zB=5
zKnM$Lc<z|<cbt#KB==D_?VsxFizp2QvijRqb{das%M{QX^?nG+-P`aSq#?VHi|S?V
zQHD0M|CZC^7vHr&=kn54XZDMm6cCD4Vc7#su8wA;C671a9i7fPa9WodZlMC1DBOR!
zEW21wT-KFHAe#A_qV>5**Wm^XBoCpX0$eunn~A)QBFZ3xb9~W)7(u$%5X5O&l!?!k
zN1oxQxUXgQlydau<g=LPJ;>phSxEJO=GQ7jY|EHXsd!3QjfrEX<RHJlj)#~5ym3dR
zl>S&E_R}LpXSqZXDA+JG4!Nu)?tlavf35|mK4?$&Zo8OQ>zPlV><*)xG2J!?Fvx<R
zlltRQT8Ad-Y4!A-34KS3ZDP0rag5YUyZ**k7;&`X_BW*l)W1-hL-}ucUt9!eIac49
zcDsSc3r31fQas|m71NFJ9!yx3^aJc$jvg37vL@FnmqFIeg-@ApKM;fGQ!>qzs|O;%
z{RA=mC6307rsMS{)s-e#wVX5k0LWpX&gb1g1!O{&dz6qlb<|Y{8Hre95E&`8gF?Ce
z-RATLMB^8iqjU*_Z)I4K-}-7Yk%Sb9?2(IA9lSZgIR2gwc(KSWF3jkL-6rCFS%3{4
zlXXA$S(c$G^hkcUr{dV9i8!1UG%!($-<iuk>5L6mB7V4+^(#}-EL5xP07Uq-RG0(M
z<D6N!;%UVL;gqN^UE5aQM){N?+eY5*Xr4TxZoLY6KKD4$BPjLvOO-mgsq5_}BxlQQ
zbTxBD&<;uHPnP%5ue<vm=g>1mE2xGdwrq$!pAE4cn~2LuYQOL6+l-k^<1qaeQjM+c
z!nf7WdK%32H$-`b=eN%N1;t|QDPIJVnnwYK0kCh^`pFnW4$aZQx2t9t0|~<ARVBi`
z@00A4GuatX75V7wh(jB-zchZnvm<Iyof5~bQi4bOu9F^#ZFlO8q;e{q)U#GpGW4W^
zkCMQ)ZmDgeyyJ(pe+Mz&j!XY2G=*d`r<>uIh!SVJ&=icHOY$kfXEkEdIadBWV`=!g
z16+|0$URK5tb5ChR~=8{gEg}}<yO)>)k|FLQm$_rc$PB+C|U$cw+tg`l=+;*@j?dq
zoRIf{x)a>tT1=;{P3R>R7+--p_YFfV_>PrEGL5i#F4`&S4-yl}E61$$)PxdiL8HZM
zgt<|y=A;SylF8*7kxo(J43mw<>5Lew0Ip5>)g~*DJ%p7BfHrI|tr$|524-#%SQE!l
z4g-j?+$19dHSEcX@Heb915w29ZZ+??b1F!}&2aa_so|bm!Cc00ga#4>)BTF|=kz=1
zGZW^P{;mzH29U}r+wM%M4_Y+!lRc33s-ZMB%?4gIvN#=A#wu!DghYQIVo;r8fDjQs
z@9<?(HisGhb_S$<V#tbMM4YlosE#Xk0zDCZ#h~*dEK0>d{Ep%i6jRSE)W7lx5X0Bu
z9`7igf=7+jS3BaIi!^(b;TdjNj00S(VU-O#0(r4e!r=<l$}>zRa?oR|QVX+@+pb~A
zzQxHj!!r~C5YhT=WgM9tXA#8^!21c6-;pZ`+=?3Z82S>F8k~HUxi<0TH|H_x7B>qG
zW<wc>yv#M~KY|dFT4^%tpvjXBh9(nQYl^H>bd`qo4-N&+`i!hbEbYkh<ojm5`Ypa;
zrx4le>N6B&?zytq;dR~pDv-%f0$rTac1W_4RovBqKIE&Tu<0jydV0Pez{}A5-<cz&
zkXcqsxj`3V197eey3JeZ0{T~JNRJ2f`cqy3kSwL0=9GOaC&)3~{--B`HN88?66rtb
zA*T>D5OSd%e3`6PFlFsHNptbeWp_xK#VRFi=RV>pF~_l{(kr%J5YZr4^Jul0q-JjS
zOweX}kY((mom;C099o7KfVE$~n6#u#Yfw$xzNxWwXYirmUek<A=UKWQ$Zj!(<R|g_
zC|C;Xpd5Dg%%1win=$m+*v5j)%Z^(#1qXV%0?Nlw4M-NdjHmJ=@eGJh5qML)f52LH
zpJO8o33algZkUu8ET~_f7z?wK*8)xs3!tS|di)`4eG4m+!1$gEED6L~ozLAaOhr89
zf))+u%}3}(791iak+c|#r>=5*+71{2je}j<V0xrk*>8Ly)h>((>*`Lk>Yr<b*3t-1
z+|*i^xnH0=dA1(^zxU<%4=T#a$;I)%f;PwhK}AzvS3nt3*J!{{0gPv#)?aW#G3#*h
zMv^I+Q0lugZb>n-->DP%Rs&|gwzRLV=sb!P8dQgcAZ}9LS?(uTrzh?%>Ey@gn!o;T
zzj|I@Zmr{<<^&7gKVJMk-I|3xW=+JACeO{zxo*cEn@AJ8PdDOY_H^yo;*EoqC&>M5
zkkl3-M`b#3u6MiH0}kGMS4*QPA_k<MA2Q7ub93-}xqN)@=04q>MVtY|3blf?yTEow
z;~inU31Z_31#aFVxExnf#S5YAzVn2a)ZDvrNTk6$(Sl3n8`I>X2snQC^f0kvJ~=J6
zP1d@sT|-?B*J*bVvGI>a%jOe;aj|r^u8k&_oa%0VHcrDEpsVf2k;^kag@S{3=fv7n
z3E6DY7}Hv9DLMo0mEoe=rc#<;Ia7bZT9@{ruQ1Io_pV<bG35KZyU~p~8q~~&DsEbE
z@X}a0?S=t;fHCD@{y+>|tL#e0oY`N;wCf70<4qy^!hTi;UON9oaS=$a^qH$$#iw$)
zpnM3#?$a$Z0M^{%Z)2nEb+OuB-`}J7pP_IBed^93Ot6{(A^vt3q*|J|9BlIADiH!&
z)e(0CofAwUl)BEofGf{CC`m-S63;<+j&gws$)g+%HF_Ts#Af1tcj5lEnN9ca=NR9t
z`0m2q^)G&pTZ~V9fc1THt8w2p=X4A|fJcl15(cImxZr_xs83J5N{UdzRoGfuOb$hr
zh7H)c*tuXXAh1bIh8NUOMK`m!bDftLHce28KxcG{^`>^I+bM1=Zzd84-0hjC4k$Bn
z$jXK0MXl*OKHOFeIU1M~NbFTuL6C%^0=}q3=p?W&XbswFG&ym?sPW!1(t?UDk|))5
zh>;@zrX;vi^WvaOkRO?x0ulZ{2HVa_?y(M&HlkVo@yC!^(w}u)iG8Ost1bel<_sg@
zU}dm>hJ}=4{y{w*=~PPi!(#TVBPdWn1=9;XLRW1Y%#=WFWsDm&7oOyn!YiM0mLwLE
z9~M5Sp3NHVXaR^wA_-5W(=?yTw??Y~FNPeTnxUe@B6ahM`!56=i<CHsKwe|rLhnXZ
zk!0Mo;uH2iPmWG(ZDo#Xc+fvLGJ((_TW_v9%O{flpq;PPvbqa>7a|*{6~YN!6|`R{
zBII%&dUSU~b~sE}TY?PydKMv2R;dEt!TF3KY8o3JR@Eq?s6AulXTx%(KtxDEtur<l
zD3PVr-L<A)>6ypG;NXQ39A9J!8KBZZQv9<AdE)+k?V4_o$&kv!#rKA+8Jtt&8Nl!X
znv3AP1+ML+`<5~p?DGw%CZi9nUjE|1LoLAy&743Nl6Kg8&OeroKa&30Y;)smTJ#*U
zRwmAvw}yVFV*fr^^I(Vo1#`byRk=o-NF9d$z0dbdSqgN$JVIpF4vucPX?4#V@)+^_
z_<q6;Qw4QdWYf4(s6!_riHweB&TXm;kYJM2@NhllgL`6aI-bFzbFY6GO#th@DH;2g
z8%>m)QO0Iv!fGZmqo0!eoIdl5tFLoTkQK~hlw9)sGmYf#S$w}9+$hH>>oGOjm@3R}
z2F(y$zP`s%3FJ(jNGc9di5@;$=8n(mhobW41`Z;vyRMmy!zOVkn0W!)SfI2x5TSp?
zk=|x$)QKStY9!-Y4CD6q_3ky%oYKIUU)>jk#Af);=AU(04oF8KRV3wkRQ<!}N`z57
z=dgG>qj#1}{1$b0k`NSZI0Bh-lB;0X+uM5SbnkmjVAi8xNZ;~K504J_<3PSHx)w}R
zofYG4f4f+`@7-%l+e1|n*eJw15NcsihUHeQ^d0;lr(<_N5{d!>vvU$!98p@i$wy|9
zsHx5sHP6)g@y6Z~2?pW<{G4nraacDs3^l71q<;flil%M`p(B_!rs?7|aFq(7h0!Tg
zb;i1`k{+zSK775wb@(AlEcnrH6t`X)D*U>uf}fX}AZukFonKsVbFj}EfD;>O@iX-7
z(^4Z)r^!Kh6<0Y(ZLs`6#Yi1=)Bf80JpqBo$k>(D5*%A;P6Px%HG}umu5FZ3F<2m&
zlgSN+f5QWXb7OPJRmvMe5YYGJ6*3f69$<fM-sYl|TIW_0CUWvuRtat+hAAB`uz)uw
zVQLTCP3*?aY*>S6#EqT=0xhiz+&<%pMa^9bQFIA5Ma>s+)l3<#8^ubsda`*qf_})$
z%B|%t3ajb7!Ub^cRMRiDOR~<=Si4|zK8oZ++hbPFt!oDgS!jPygA5~=3x)@TfmcJH
z3(34-c0)<6c;hASRHcn%b|DI}BFwUCYjc-farS^o$-~s^WTKz|%xH}=XibU2sP7kR
zqqHWN;dO1dvgpA$wLb{S)Ic5_E@qz5#S=P0uXztC=7dY4U{@{pfW+5DAu}3;2%;h0
z$}|W%Jgh#UIGGuGr$F>FoOG|cjlK;czq)6yztcqf)K>%H^jg%zt~wgntC{KqnH<E_
zAul8;`HN3QWW&<H^6N(DKoOUHdb0R_5-P$G-343~ZV}BsOs!iqYdtx>kP*z9-tOu-
zr;!5KnS?T4CDn@GQ5u<RA}NkvUiY%cya{#;95+`s@pBjL+F_c!5my;3*NvDM*M;TS
zEe=BctvT0GKw3o^0{Hn~Q7R)LA@R8FW^#s-mLez}$8KK$b+Z9V0&1Zu>j>q;@lL(n
z@eFmG!C#xkO&Mv(pE9$Iw{h*6^x_d*+#-ralFENKuO9DBv(@W21P6Xa$7Ygt91=o5
z))+oM8hVl)zIF^QdraO&l;=As%u@DRTAIlFV`t3cJKD^*q;FDLE4$ftmXgRVXIN#Z
zwtNnOeko-@_br4(<|Pth9JW%RfzREymKMLVLa6fl5=3?vOQl@Qd}s&~J8M!*)jkp{
zRzRj?VKW#6+G40iZHY~wMJr>^WduT2<8UQ5@g24Tqz%DDr8n_=fWWv$Rh-Mi^<_Fi
z%ra)S(yD+(i8)U&zU&20ZrW)g6??r9LOLQ>V4x>}aJ%V(sV8!pQHdH`9GV^VJ$ng~
zMH8&Edu;ShfP##tc*z;x`Zdo;T2y~|sOJ8B2rc%x(h7U;SM4B%C&e6At8z&!`R$_^
zTwQF4xa$$Y?;N3@hljz6f<$CNF?S%znJHtgs)t)cMXHqA&BKc{WSArM*naY^R7!P&
z*YESd6IjxHUGXU`*0zV#CHoDL*Tos%n3oGdRnqrOe5#eXg-K8o$Q~ajA?sEq{EBmA
zpBo!8!*wSk1NHSPr4_;q+s{stZ(!k67?Ryrf`Ry14cWXg^1f1FjupRqtD`*+=hgMT
zzabbrQjN6P+<O7kF^i77Kdd<hFyZ?5?Gq6IVgbt!<Qg)sYQQl4>uTvMWr5-2)XOGl
zMxuos3aqVs%RP^Z!AN?CpM7zZx#)b~9t>(3d1aKDFW(hY=;lNKWFR@>^4%|ny!8qk
zN&}ZhJAH45ilS_I_`noIEM2Y$SC;|t3L@n0(iAl)tSRL(RQRL>?w4SQ&|$y_bp9~l
z*I0EE9z8d`^=^h13K2w<rq<sh3eC%OOPgeNbre*G($DnAn}5p+Bb1EBEJ_2jvt9M!
z+)Ad8P#Dz=Z)H<;U1!ksQoFVukxzswHhwn?1{7L3X{0k#dhSko_{qSlfSzcpND2(4
zrbg^Eh#hTY1dD15h6m1;jFl-M{ec9C1KmDzUFRFaJnD}diXPc$tF%<6o^v`Gq$W`s
z*+;DFZd=2$3QR<T`Q|(wmM8oe%6h5s;rH?){b$wxoXgb`dcbs9lD<`qWJ`PF39*&7
zNx0Sat^*B|4r8$J94DWWR`Y!r?gwpBq27jLTsEAc{RR{O-{Hb+x*VyAbIS^lhas^H
zV8vk%OB+XO7-Tk4FZsKR7oDh^y$(@Jgehn3ZZ@QOoj<@>o^BfSa_#vT4aD5<IL<dp
z_lmdEF&Mr6JK{?UomWd(t&nix#ObYdxn;xdVrx0C3aAe|qv<?gvak#nGn#+0PV_Fy
zwkE74nEG;Cm)|S5y88qSn-vJJbH^n4u7Vub(mmLao4fjJpigw~=!L)T#d80Sw-grU
zbEjOe){e)X{7<j50!%N#8rXWUsB#N&J^Eh=GepnBi=7S{EP?8vTrWo7n?9n3`(NYT
zpHz(coHj?_b_OC~#0ozy|JZiiba8H$T<9eW2e7z@y|PqxUlZZwZE^y~UuF-2wgSJJ
z6-r%Qb7^bO8AFfjF%#ai>ba1i_uT)rc^f_Z!#Jokau4b#s}5J5Q<wecPZv9}Petaj
z*_TZ=5QeC4owZ80do+rQ|CZq1-d+X&`t;b4H-eNP`*!;2489$AR_q2Hn?uJcWMN=E
zITgFJt6*KOnAs;)d?o^;%_Uk3U-{g;w1hspfL|83`>u;lf4@O{<P^@6?p7Fn*~&wA
zZZG4`ODI{4{Y{_VSL-?kEOvuruHe=-i^t!nyyMnfpl8DF>A4f}M?&;6>*Pun@gD@U
zwuf-5o11&mR$0s1<OvY|FK8wq*uOlCHa@V62c#>0jZD&)kGkac81F`1Gav%?`tf__
zkTAJhH}o$;j>$SVppZuI`_G|@FAGR;sX|;}7z}hC09Z{2Pv7S|;reY7+J9-*{=*Wp
zvi%!W2JV82r;c)gae&Pgq<(RM@dNR={Owy=eCTiM=fJ>+$iwxtA>sfIpHnxNhwJD5
zpFiiznoknHS@SIje8*V5qGj47oZDPqcOMnEdvo=>y`MkcTc6BHSry0;1$*C5FKNGM
z@>z+)5S9V=kE_Q;S+{J{aX;M8x5xKN<Sh}IL$Sbc?&YN+YDzYAUHKBZen8#re$~l5
zcC618U4JHJ)7PAlHJiD3&#QJSxKq<SBf{N5n{(I5_GYh#KK9z%*Q{0^apQMemK^nO
z1gBoLKgM`wH?`Io#<ZV%_(=}wTN@L@qa}1$$c^T}8vFYCYHOq2rQQz{mESlCf`7@Y
zL?CM%eIH~0oX1{&on2#dy92@ZH|xDw?P~W?xLcfV%WCVk++MEV@Ja6F>i7hX5Ma$z
z!_5Zu&yIM#vKuF0zSF-L^Jdy8{>1;<A$VC?BwR;Y>U7zv!+US!gjb?wgKV^r2m*Fe
zD>C^rRl3AietNooomCYu+}Y_K^m5yKwr6u9cTV9J63LPM02+TX`~i+u#!ytxEx=c<
z>7g{H-B3{6?}kq+bZgJ|!#0*DJsrMXM)&%l;xKP~9zG$7v!tVAUgbRuGrxf`4Pdbi
z(ns|Nr~t<|n4l;sW=}t+?|(uC-Sge}r3Bur&5T~s?x68J?Ak?Iyliv27Ta!H6ITp=
zNBjDhkGRxf_fqRm0R;>}!x#>9Uw_k27A<i=d)^C#IhFc_uvZ|L_M270ewzW-M8e%@
z*z+3Us80i?S{;?6pIX0@*LMLG&OpV1puEXxNeQYeb99CAY#*~D*_;&8VScvbF4gEN
z%B=1mMSi?)v~O$H_oO?TyjHW(obIMEMS%j%uv1&CR-rCIbpr%Gwj*Io2XbNvE9rZY
zTEAIfhJT52Z*yLC6!qnjv3xFe5{{6t7Ng+RAlz_HHX-l+u_>dBQf2nuxD+0VR6jQ^
zP40WlbkuV`B*BqL=dq`UjLo-#Cj_;migwixN#@dGjFMQM`U3(3=GW(Ztr7gpWkTB@
zpyjf~U`&QSNChPLV*GJ^j|Q?#m1d|IT4-B*q48e=4<(n-=&Ul0x{>HcSf_5k+noA<
zgd8IHM+*?q#p-m@XTz!@@sg^v>%u9=QU#V-iLDl#M9>w;?OK5#^oR+qAgB!3wA15-
zg|g0=u)KnA>9PBZwn=p2t$1{Yr%M(xw3T;o)TN?QgaFqg#~7++ad{l+u+bD3f92s;
z@C#Rk!ncJW9Whn>utW%3*(oB`(&+9z8`s^$H5ZXG<|wMeT3)So1jn%A1Hbs<=`$Pj
zf;GdlBr+@MyQtd~X{S8#CI&X6c6}Kxi}7jVg(Aw<TROA_A^eUp!s#3W$Z)FFXX(b5
zNU^j04uL$K;LAW<x>Ql`IyuXUct2!lu!$p&O}4|Xdovig=h6?zFx)_Ey_Yhnu?CA&
z(v=P$kZ+E&IV^}r+=#(9_op^ipm7_s6!HN@ldE(FA>eNXXpYLXnH+V>EWH+cIzh~{
z^^s^-kZNi+nv>bv#BNDuqIHP&YE1+wAfCcr2Y~KS6&8YYz7@eh23=|QNl@P4{;b}5
z2fSA5n_suPgku!KNjyoAgroR7HHgK6(xEeQv_K`%I$On=o~pur4Zq$2)DRoRV9kjJ
zL2_S6NZxzRK9n#A6?(00gkrxn14@!9-cFv=_kBnBTKdc+-+vSIlO<V0aa`L*t1~@!
zW`JDElz2Xw>~<WBsy3>L`X)K-*X+HniR4O()Wu0Xr0KMfe*SqK2~(z^XV__vb)Q8*
z*A#Px-mLF<*ALKeyG0e`y}k^Bh`g$N!Z16L1N7jr+SYnd!>G~7m@m<9=pji>8+OO>
zRerA0mPII;3kfPQ`H?3oK}g@}^1;R0Qh;+kcdc*UD~#aCnMq*x4X1F5kSGWeb#T{t
zJUVwaz4w+NX*IP_I8A{W+E^e&p6qqoEsHjOrRQdGtIO;vIHp=?!sr0R)SLVLO!6fH
z0WwK;{6X^>2NePe72GbmHv>*fA$+XFB&vxMjN=1mKYOm^B9g}dBG}%F^GDI?IpFv{
zkeDw{v=7tY+3^E^Tfpnd8)>(f`Y1Oq(vdTm0yQgC?}yUb=)fPLUDmC|4aWQXarE3o
zQm{gTkAZr+O-)djAqo(Z@3;!2gW?Mr6D}9Kdn`poW)zr3C3J%X@(Gxk4La=*Ax{Kc
zh>J;zC}9-?`eql^AVCZ$h)IGeT0nj&D_fWzf;$E$Q3%3yBwi6bF6jMx3F7$g5b<IQ
z!zUT)7%eGEBlsqcq#)|_xDeGzRq2b^u?)}FpI**CZfRy`RxhlTx3XX9b9qo<$GH^e
znz|~FOjnvIsK-H(7~H8kGzBQ#fnA%h5IKap@@}^(BWx}#&(Ev9YvK$M3LqRyy1z5g
z&qXAk*G>L=VD_Jr#7@gy*~mp%wc%<{ZHIM?P6IEbF2;857@mXA_zu2Kuw1PdQ29=e
zbeqpS&Ry3ZW_BjV=@9EFP$-<k>nycvY@uEuFn2X_rWX3p`N%fX-^%!*Jg3KkD5t&3
z(xU<fk;L$ux;$z_1RzGx(|`==&HEzkZH@a9+jG;<{5Wf(@u^ro1dboON4Z~095570
z(B))$AyhIb>|^a55%CJ?LsTJGqwMNbPhPCh>x@Xx2JFyR#1+Cs%Jk&lB|sdtP@_P`
zcA(NRWuH_(-NaY%F)YLMWgZKbk;fL0yS$%wNveW2ya~?X6~{fZ9{@O&Iwv*@vB7xJ
z>?M^Ho;p6p3`^X|PBW_390~NxLx<W-b{>~Tn+bP+U&bYy?>7?&GK%Ybo1tznI~0Ma
zJ{i?{Eo3bnx0mrY##C?x>t{%>=<6od$YBJh==pF&vkZgT9<~YYH%Lhd|1`g?<LXoS
zf6Gq9X)T@)_dB%7G{A#j_isfkY#tIAd;T~@qbsGI?94p<Qi1dNUsM=b2CB`p8AisB
zT{@^#9FM8YVI_n^VSZ$WqkC$@2@B|<hKOTk3@F9MgO%~@P<v|YMuH3qs(b6G26(z4
z-442p(F+zVuJOScRo3^xt8TO6!*Q&bAI)~6cm|J11uwpb#sK_gv@kgrkG<7$ye0YX
z-XP+(NGk}M2GD~8Kg6t=GiL2NF}(0s{6Bsir}iXICm_ddvGpN~#yx@#7q3F6`V^%~
z1k>0sqS#vA68@03J6e{Jo3?tB4kj$7Pasl7eiQui9ct18UGM{Q<6lX=qyp7=+iI)7
z87|4=M_-xpjDeL<8^&k-K}#*T>~)QG4}6f@A{~k6tw=*2vUeM1T}&JIpHl}0J)G9m
z!kEkN>*_eT(wfoAKNyWKQAcUMp@HxXLQfuzwN=5Bz@aG=#38w+ZK*BLCeszs9ZGSR
zSFnUMEt1lg_0vom2#Pl+L@X_{AT9i&pBvkK8G-JFk_GtJjl&Hxbz;Vghq*QFKox(P
zYw99SDPQ`ds%&)TZgt_#2P?6dtWhQua^ncDGthB&xXJk~{(1II@gytYl)ugcjYzHJ
z`VDz0t#u}uvPC{;AvZm$$YQN1KDWT5Q05f5FnZ5ya=$ZH7>TK|$JbWLI^@H%F+69k
za>|Qi2m^$-BA@#!JQ_49t`YeA_QK}Hqg{UslnTTMtBR&Bb;5_>Pgl<>t;%ro8jB2#
z6XlZ}k}!qmhCeLFZrhqsD9{|`<7cVFEzWM);=E^puR#}kTo~PVDpOwU^UCunD2SB`
zxTRL%$!nD|hJMSR4v(GKU#mlt9ZfQBcJC(0<pUgy=z<?di5EF44C(7l>-UT0Z_EFl
zApP9umk^@a{ml|K!-WVoIGg^$Q+VU@{KWogMzs}CGD}xA@49;;79cZ2ceTqcz*^jH
zqxn_pMB<JN6Vfk*^oOoBn&+%Ut&^HVs{S@8??_T@h1c{XblW23tubxRqoULG-S9Qb
za2{~|=~8L`Z?1rTQ|S4I-fh`9nU~7cs!mg?AA>}%w_XltNjd2Hax@wWMzbRaKd)H5
zcZ0)C2wyXCO*?jj%WO<s!@O~@oqmH}o{@+Yp8RrzHtZFXs>5?eS#!<0xHSPo#R^B#
z;_7je%bl7JiHG`2PJ|Wp)bWPVCJ)CqObw83KPdbj4g0hblSIK0!qP1Tfzs;k$@zPE
za3A!}SYD!JL=o`g<{Xv^+&;BsTerJ|i@VdE_cX)D!|~}pC@1T~;_LqG4*yfvTkv)B
z_c{D?PVFm`><aET_etM;aNr_Ud-ug=f~sWkYnY06K?A&S#A*wH>wpa&GE<cf3>(ms
z0<~RHO5`n1c<u;Lcj<&9PcRcBiDt_a<ji!$LvnYNZDr{<yy&{54o-AR_)+RyRgkcO
z3?a#qk|{|Rz8h+4>&_Dz1*JTWx?gBEd_7q-BEL#=%pT)N+GcR+s@Kx*@<gUgxy=7)
zBXezXB>2T)T68noUu_IemB`a<%?}8J^4Z%D9U%!n8ippV3-c-L<^I(NYf0+C#W63b
zi(z_2Z@@ed!YE2G^7r|WtzWIqE(YTvHJR|y*+?NSib^PykW0`f#X_~^^=8>Q7(JX@
zY2Q9Mp=FnXsbYqWyoW7hhIrPFRix648wppXg8BZ3Tn)u=^5dEtlB^_%UIf_0_4dyY
z6`nBkP-@9h8L;>s6w>epLv$o@P85>9iO%Jk$9G}zZ>a3-XDC?F_eZ&#hR50ll#hja
zqSO7i0j-wWzdZ8qyRt=GWq3mJ_%8F)i%Z6f@(6Qu_0f7EGrz(PIy_p5pdr5J@TtQ5
z{5G5`xUm&Vs%FLt9!qpSSreg4_#x#-X}R<78tQL$#zV-22=#Fs-zxnETz8Sm<5-@b
z=F4Gp&U&!YJ35Zf_jjpP6s+w~C%Y?+SdnnOw93VQ_99N<Tu7$lzsKDpr}m?MqnCGY
z{`y2*imH%G{dNh82f@n8!JW!|2`ZMlB?(3WIH;`qi(72_919pPtLN*n6O)m|O!H4~
zdpM*Q!BCdJ?gOQf{f9d&{V7<!C6NcK?o2#}bjnh&Bw8#v$Q$5URKaAjEaPzrzulQv
zP{Rr~Z-0V|prWRM&%1N1;0g-XiG`49_`jSPd_9I2vxb!Iq?hJ){ar+nq||CrM+-p(
z!ei6#`0_--67%Mm5UGo)jLC2l5Xw>>*9)@rtIXFdNx}@{&V&Bet;khQRtO&pX2cHO
zxP++|g_%;1k9ZHD(S@S4xkYwSQSx4=4qG=^5r#}xhZ0`0hSY)3NKiMb@n`4s%;Vih
zn@Pp7MQnh)hGSw0GzC>x++8%;-i`2B_cM=k!7HTMT^Z&9<KBAeiXCR?_yO#m_!nkk
z9-lI~m@b91ghB;IAe<iR^nzM;FbQHI*s+otJ!&9eG(1p~?{}2SgXIop4fiv@`Lj<w
z&q$)mg~*0K`{zr2h(#~Bd24)~ec?>C*2A^bQ|+a}Xf=~<m(*8dCs8^n<%A|dnja4c
zb;ua7B{{HTYuvR1XOa&SVD9PKR<q7~u19;~@-Wg5G*t)Vq~@okCWrcpYiG@bh*NAH
zaibXS+}0>j(c8__5Ma_^hEwmP!Nh@)!2+E@239?IIkcy@-S--fllBoo8|NGj*)rEa
zemtN3+E8r@)X@sWgU*2q9_RFnN7TelHPs$@b`6u47K=Axu9fX;@LA3-hS~iY3?$++
z0S61us$t@j>?Xe=s(`6rJ6N%Sr?(Norc0ikx^?s~PW*sa(2#5qkUu@w=C?pi*gk%-
z!8t$CzZefH8F%O5n}yzK6oq1FZgopqLuV3qFtuS~6*Ka&i6=v{jArmap%qjnN{35(
z8`KpXbK=|D2WP!@Q@;RjxgW`Asi@Q>dC1j;I2~RUA|nQL6Zhpkw$lE}r1|w3xO9f4
z4kQ~eP>q<d5*W>;yGul^flzW1Z6y9pRp)z`!ASK-Y#e`!Gb6%E>YI<|%WJB2Ge{Wh
zg>GEAlqdp`U82C)!_|e2({OQRh{u&hnssxtb!^MPb1HHyL<&w&q*jJf{bj-MNjdnC
zz=sP&Whh4mQGZC&6x_I6T7$FI)BTuj^CdpTA}5SEO6`*cBL+IMIEEXld_v>6D2ntI
zeV&5CQnEX5ni_MLQN0`<VNjt>tHXM4nxby~>T+X{2T2$}v+GIl?}*g$cyE@5ja-zy
ztIw4%NyznlL}f70pq6U#F4wxMIO|C0t<3`#6Gu{7=zQQ0xUlBVNbHXOSnfL8i^0O@
zzuDJ($B0I1ECuvj)FaOAt%SA)t3i0(XHF{-l#+&NGLKyXji6M&ffs(<iA!~f@r(yW
zNg==xs>~lrV-2dDJ#RUY|8D7j`*B>3uu}1G*iok2XBg0c@w41I^C9orrkB+slnYcj
zw$AddVwQDz4-&#$r^jPI+jzZYCjh)VvXL&W!y!T?BLRpDK3p?qS7lBuUSf@<pKymU
zY`6CAX>rdy!p80qH7NV5Z{|=*ihKX;jh0U0pEF%m6X<XUjbFN;S1f8V2di$z)z4^6
z!E`q9@pfU)#PgT_S4A^H)Ti8y!NbPi#|w8tUnD@G=Nmr$5AJ2c_DwT_7+p9#P<Jtp
zZ#BBh;7PzQ1ZHXZW?gYj<H41-h7y`+q;_p29|VmXThdBrf%TUs**UHgV_IQfFBHD<
zuVGU;rJVQ}Z&o`KYrMB>d>P&Kn}MjHZXz?711#21Ws57h7K8l;h<(0j?H}rIKJ~i1
zI|C|GCzzP}3RuK-H6JNpkg3uw$yb%=3XQg=#DaiUt^U&vYO;NOpW05%#+BphDEpBw
z!@E@XrYZ0*4Ugbtj=ycw|C5HmKfBt)3&OE6vFY-)>b<Mwi+EOGI=>T=XycP7^lZ|$
z@pa2RODFaEk|Wk1wzd5yS8vn#DLQP|`J>6yrK0XF7W}QNky$^y*YJ~TK=Vb(`e_TN
zH#WWyMo`&R|84N5!WXW4Yj1W(Yif4R(R6Qyny6K((DT2ipP7T3IrZoBKR7}@rW<L1
z2_fj2FL;#2V2`cWSe8`lO;jp3FATI?bQ>W46&S>q^{|<JiO7X^!zZ4aY-0_+wyKzd
zxi-e&Psio_!vgkpG6oEkI!3~;oSX;V!8CcV^hMf(`s<!&b4R2|!Mpy<)2`%16sh7{
zF|i&(bb7o@)cQb4X>R8&eg=I$-n%t#FgrEP6Vvl$z08lKgvtRs-<$l^cA@<_Jm^?s
zce686KCK)^TT`yqRFpSRJTPX?RQk7nRqI3%%n>+RZjD^NCW!R;*|NR)*J}4}Vr65X
zCv$SI`Bqkw5K_kx_B`a(SfkCHT<^$z<>huBuUGwCPN#Bio)F2+rTOW6$wZEZ?{V~Q
zm9ZubEgjRbea|2cQLx)8_u1!u2J2n2H<&tEI&zv{(u(aTOFAqp(9PavUL55{o0iSo
zs}7t@INlw4Vk;!28zC&ewcJK#nTl|wV{wMM{ABNZVOfDw0P|z%nz)g}L&9R!!uOgI
zr=ZKZS>W)&)sUws#(ZfRts7(OlZ+(vl{15_bpPS?OwE%^J?gNXtL>>#msQ+sODK|p
zOF<r>UsEYq4Sy|k45*>dhP>wz7;~k8D*#kY97HytSkTT=C`mrbi~npms-(}IrjV4e
zxOb`_*v9(=4asa3ZuNp+B6Y#|tlNzc_7(l1ORJps`v&#nor0($b6Ag>(x9|VCQuhq
z9P>gb#(sj~{Yes8iNHce9m)54H)<?*MeeuD)IPLu`<Q7`|7t^o7LL#=oQ;1kkq6>k
z1~c8PkY$YUha%yl?J+y$2bhkL0%z2bJ4uLPIJl2dqkgRrt~J2V*k}F{C)g&#;j4(4
zI^BIKK(vb!La&|;wrs6I&Sc>tlKTghxp}?g5#7^>>ri``P=ga_H(<El)8($q<3Ji?
zJ`)iWaSBVb<cq~Th0?JLkVT=xtph%Kn}VfcZV9`)>jluv=V(HCiDnaZBn{tn3!2I*
zdusoPS(66y5F_IytayoK^sic@5T8VRheqwgeq{?2&^7EGYjbc-(U!|H$0AG%#)kye
z7@BoaUOuFl^+$yHim*R|`uTSB5ekEIoW7TU!;ZrU4dwgtKrP&dvj;Y`P6<FUMd-lF
zyy+O#;Wt%PiLMY)Wx(rBm@RHDe?x4kg0P5DIGa*j<R7ORvcssLD%5>H5Y8%y8pv2g
zSl&_$a4UH2<L>pMd&3sP8~PAy66V4W=dh$Y!BsY~1T6}Lnj9Ll%@oxNp@B6aGCfBN
zl0b#=8AE4UmbU4^wW?{*JqGTpoI<pgH%dic{r0M=G&(=>M>Fyv1bXQ^Yuu?4_W}i^
zc&A3+OKLL3@QK5@6_p`2q##HVg}0psXFEInQl|+v9;05fRUMI*j<TvYIZoMxpg3)j
zTxKaObOop$mVH!g49G=hF2?nYIF=8re+GX;Yoo(Rf(%LNIYl#N;{+@Qef$so4qqAy
zWbGSuk)uTyvt`Bv-fZ)v`-nK`9bv`>!ZWCY5a_aDcVUt`I;<i&ENLKgQJ>TkRCAqQ
z^N`NXS{c^$qM{b^JV$h442lXk>?g=qEnSrfiMELbZ%^g57o?QZ9VA&kAQEs|MAs||
z|7iiFY90@-A`I@oxrGz|0Yg0q2U4DBr^@pSXgLlt;_~}zLg@}fR2=(Mzv@ksiOM4s
zo!6eJQ`)jFf=?{WB*2!6^58|4C9!J+L>#kPlhnWxzyMN<5h;s7U6I?*Lqfq1Hp)?@
zHu6#)bkrjzq2og7=K_dTLnWSROBs=b=$5~ZAY8X3<b({=X4hbpdlv}Rs_W^wF$Rg?
zQwZ##Nav{qzsuJQX|3pTU=cy4aNAuedD9EB<vXbzR02%WN5*7_;{wkM^a*b|#@*&4
zh-y_OQGq<?(jP1`F*R?<wx)gK#{VjvHIFBL1bfmL-7qLeuacXDV=rR|13A>oF+?#o
zl64;MC}%f1H$u2diI*!CqJ~m&$XO(7UBg0x(!tg?-B-^`1IDc*K+f8kG-Kf*Y_`__
zV)bF}*SZ{8d7hi<<3)w7`K8-1ytw@ruoLVG1O%4>y-&m2Po6B+uWEw~=9g+A766p=
z!^;nS*GkwL{U>>Lz_#8PNd<CiYmYgvG3SD4nZ=DJZual(X<Mk_ek;^2Xc+X15Q;l>
z8RZm0`IZ@Jm|qG`vUjtOBPD+`?qDdeTJg<8Ck<!{no8OH2rknW6IoHIfK!TctN^H5
zVBK<i^pDZ07tdTe!8<yRs-qiU+L8T4lt|Y>wEiQrAQ}0}Yh+C_3d*an!0G#tlqX!*
znz9mj*<XQOd6;FaX}RVBY)=|fR!(jc{wR!$s?zakM;~YAhiDNeDctXo-+B%iIOg@M
z(z<3wIZk8x74JPgvR(_VlAW@JGh0}G0U;%hM-A?(`o087@VVPL4Yw$v%fBr8?spF*
zqhJRkq2icYzMp6q3215%LX&QoDBSmNGlivF?)FkBH}};N=j07$d(9bd4<nO<o@d}&
z`ndVcQadcU5vU+%=$G(m7S?_*_v`Do-XYPm75U|a{Skpl_9(7!G_)a@a?aN40YI`@
zWBmyivW=`=<WTouR@)xr$lpynB(3E9je|ljOSIotN-S6w6~!x+w(BSw-`)M_^o%PX
zq81P{YsESv{N<Z*aosKS_2I?hK=*q*fee|uZ)7{63;I?EEwnKdHlqe5zlyMw*pC}y
z2Mfv8XdkI=whjGyW7KVo8m%X~059|yf_%npxG9)>0l?7swV)Xl_w@A%f4~$zkqQb9
zh7ZQUmP!Z?CYGA{1B?>@r&w5@mvm9@)~tP>kHT=4*Z^*?jhyaI59XuZS{}^n)4O>D
zJ#J$%(&?*=WG1F+6$YT4CCI7SGJi3^S(zPYCYC0AxPRK6Fp9PIss~d<^>ZHo`A4U1
z_wexo_fsxOU2!QDFM$lYc*(&tLqjcY*FQTXM&O6Vta;y$D}MqCKReBY;l(kcF9myF
zC!doc8#78*|B7MsXtKyZtgpV-0zS`o7ngR1%^#bS=>dQ=YbGmV^=IU{rOu*hXXQr~
zSPSXA<@nn_KgE_S=o<Lna&P%Ie<zyaFj`eLbDt_Ze!Ok9#CgbHPCc6iv&och9lEx!
zSAD9!YRl&%4EF<e-lU5L*ojY`It;0mm(7Iuo~oI2PCB8phPz<qx@z*OdHwct_e?CL
z_9ZHA5=fOfPAl>Lo70;=_kqnmsY4gcV^e(WCO8Tr$XSx~JW$$@{51Ngx^kc9=p&Vl
zl@(Wq`t?>t@1HAW{SJQ~8LSh_MYK{f1Z&suw#Rpxn!f?*5pej1dN#G9<_d7c_Yug|
zU;^%Y)$Hasw4kNgsz-o8cZB{ww*n~Ghdq{PFV@3f1~`_pKQ(^;gpo8ZZVpsmU0C}?
zOodd}8No0V+&l`^MxALu392W41~<jgj(P)8Cw><+c_6`MEjBNy?JR?rsfS=fEuHbJ
z{pWS&2|)(X&@>WRN~lXZlnQw*g&zFxZ5&j)ZaU5qg;3gZ`6Y<kWN99S!)UX}fh{<4
z8pM<>x+c+@XmsFOQ3p|7N8MY+G5g#ufxK>~q8ahtO>cZ*FOyK;Q{#4s_Cb)?uRbOl
z$4wo7(v*4hChcr5(RAUldJ;#B(LU1xjHMuSsmlO-2ZSYm`?UEKhbhbxcD9p{_6h{i
zi<HBpe7q?@!ueEDv%^#p1m0!2goleIepae-79^xsG9Dhe>hVi*^=G9v{LT{1LgA{!
zxcM}Y6E=N9lu3KpAFOyR6jGB-@cj)!af>4uQjD4-T>thh)eJ|G00TT>E#T<I>+9)|
zaDfn@b-Ri8uCu;ddg%jq5vDLA6yX^CG+Dkrsfw8M&A9(GOJK#tG{%#V6ZMrswV3zp
zX;BBM;-)OwLCW6`|Le1?;h?Iq4|6GhiW~$AfoFo7tJ)+3Bj@4#HEK8+AB4|>OYDzG
zEk5r7nQQMuF5Ad{Y1thk`3IKZQl3w2Q~WelRv#=57{o9j*cqu+P}I-*v{_nuKRX!i
zHG4Q1)_LyLG_T#AK2>ZaRM^UTb084OYfoU<Z}Tv4$`RK5X}b>MG6geKG^nf3hq!`1
zK^yvRB$xh)`_7DU;424H*#gt9_8T{CzP*UD3%>{Zht~jnAATDb0<IIu?n!$ul=%`$
z>8amOpocrMauL69x74yeGF?<F9wBFp`oL?;cq2~A--ZVyq)h`gV_ix#dML~H-C<UD
z?vI}Kraprq9HHHaA?Vxl@O)Z0geWO}fFy_jO{B57xl1uT&!g{pRZS~#6eJl}-anBn
zvmvHEiY4JkF6fAWVm5t&upN#Rbx29!>CMs<z{CVMQ+P~F0%{#}khW%UX;>_j`QlG~
z)j0QPqn(<0y#KjByjB>A2)^rC?y|ucxW60xedT>Bu}v0anyqAahYcSVo+n_jD3QjF
zLGurz1L6<fqs2)h<Q8PIT(9hd+f6?BWDyQTCqqnmbhm<j0}smSGdQWk+)}P7{1JM5
zpgJUB(3E)j<9`5`Kxn@_<~@gW2FX}A?>YLB^WHKBBIHRWHN(~>a$z8SNFlZ<AS?!i
zk9SAM2zHC{4)6&P)=4>&(=6lBK?<1wRS4V+s*&wLXPF@}K!RT^6xUkIVg2iNfGlKJ
zudY|~$k_;Vr)c|axsHINIAT+OEu5OnoFa2@g=Bwb4gndh<OCPpL}cVS%R0o1Ou*$t
zK7b%cau9+hOQoYm=j2YK*P*I+#hsog2Y?N+K{;@w=w!W<h{O|+96|dk*xMl(z)G_B
z?Z=pgrLdTWn*(qQ;lLc+3UGZFz>fvD)P){*^GM*?9&YKuB^m9O^5{!4P;&qc?<~oo
z+kt;o0Vm>+gdTlW0G+Nn=&tIJvn5&r@unEJJ+FY{w*)C$RsfhwYv}IYHBnyi`PXK*
z4RGT<SNL>_wR<GtP~+>N=c+<yv8X9GRSXCrkxw;Wo3`3yo|R_&-Op4ga7nDg>Q(t+
zT?IdPEZEX6)b!$=j^Z7102#%5PqsS}?{I(UcPH5x?_PaK+c-@JAhHG(N|Aosau?fl
zPWn}<B_aINc&Q9=IU(6)Q?`pp?KwxS@g^J#_yQIupHn&o%*di-PN)53>J66K_R+N9
z_e|-m`_xJ2WKgm3Y@wL_Ie;KB9TF9JE6F8qBBNk8aMFw`5no{dF<n<c=}Hk_Kj(i+
z&avsCv9iA%0^*3d0FYz7(x{HKyNErt!0k@y2!Z1JIuPfE2;1R;klUbmHj!uq<(_f~
z?X{0bOEdyFxzp-}hH^ysL=%YMlZZ4HH;Y=bwj-p{K!$R>N5LF80JLj?UVwF^Q6s6b
z7m%rN7DcDty+eMaS$>QfvQwi_G=W-OrFzw7dXp8NPUDfvT03P4*~|9|zag7B6o6Dr
z2Ot%EIz?e`=o^I_Sgf@@rv84lS*^=@?FBHwoDe%Cc|8gB;vz{{Qvk`O^nNRhEZ8Fg
zBsWeHbMq8Ld6zF^0%3n`3aWJPq6$$_=43sY0R{<QNKE+6ezB;kWfMy+LGW4<;k7gP
z@$$<}IpQwgl^URcY^UlkQy4zD`3mm9`Y!1&CDT;-P7cVBEr?d*1ltkn4qde2r5YNN
zjCJphIO?wrL$Wo{8THX9#)Dtd<S;Zeb?<Jbuk~QSKsudFWpIB;^b(>cyrd&o-XE0X
z>=K27shiQMq%cKC*Q*Kpp!dO|`IOCA-XIy<taB4aNmieNjUsqRcJzc+R{?qe_4rYp
z_pnNPRj$^Fei<e31H9j2s6>`PvTiEh&Xv0fiS2b&HgRYuYQ=#3_I3EWYWMXvs0*TC
zIgv#vq$hY+bsc|};R@?C>LjtO4ydfeaUC{PS-C&qp2~XmbF{8tc)|1feN4g9;tkcG
zXv~%Z7xX)HhzG9oe%@?Rj^){>56iJoT`DQ>E64s$<z>}eLJsnN)s<s|Lfcnkp=4ad
z<Lt<>QKIej{Js*c<7oHLPw$p!A(;Y+5%-fD({PSYlVg9Xr^73E?~o;wdV77@v}L&3
za?%CCmk!U|kGL(8FW06dMn6y%ODzW{5cd#l?@~&=LFqRdG%BTsq)!fzAgP{|KEdA^
zvI8u@+>IdX2M`3R!L|@U;B+!S7{O?9ZjCn@hrl#qp&6HIJ-uOBwq;x=%a0-uftc<f
zQ0I=G7%YF@kE<uHuRW}u7>(-5S)g6g3Z&HWHV(|72_4*i0&RmG)9f0(IaO!Qv>WMe
zanmTS#EDvvd##0;7g>Q~xSOwIklgL-2o*LXRldT^?_`cwV$J}=O3c+9U86s+7=~z(
zt_TJMC6B4PaSeC?WSAKMeAX?7iwKp3qWqPgX&HZofN-GvLK;Z2H%BM+j~l2|-DK7Y
zDTBKG)SYu6r+_o~WZ`=}?m~ZI>i#Tp8gi+V4DAqc#s2_tA9?`_h^zHO5f`e9|7XN?
zyi865#67OkdWdVF1nFFgeuqoOxpqo=2X4O^2g5eM_3pQKVQ3t>^wg1u-x-3#2paAT
zRUdyh0r$-qH{B)NJ#f=)a*Uf0Yn<gga|AazL<bwo;94AbZevGpGMRgVGXb5B<`1FM
zi6~Ra1NzEC&<S%=gwE3_WN^pX?PPZBR@FZ5#p1x^nj!B~lIdqI5ND$rwFg!%M;5WO
zBKW`pUp%=>jj0z;R?xAvJFDnrR5N;y*+YNpySCw|DQ;s}*egN$S2kc&1$jsh-_yws
zoAj?9LKVhcoFY>x;_4(te$nBDklgNa#zZn86jER=%57Ba!NwiXT2^gUZ&uqXrUaEA
ztYwSv4sf~a=XlW!TO?UC>ASYjgHs6S3!Z~hqXYpSIglU%OY2;2Am8Nf1<t^mn0sNX
zGZ{2@Tmt(cp<L`da_ndkNGGEf(SIZSKwZSiOC49+rp@HHv=fV=<EE)?WJ2Qe#E_5-
z%;Ut4=MlD5)|kA~@Ojk)N00@l@`#zpp_K*4SG{Z!)>k0&bpQPqyJfZUmjMF;6PNB1
z0to{&FgBO^5&}b)@0bDymr`f~Z30nPm%(TPX#wPyD`^59e=&nS!oI06e6UBRz({Kc
zdxSBgXc~K6-`8Eac7Ko@mZr%`SM~k2?Do5=jkd`JrQk6cY@<pQj4-f`7aDCV{0f2=
zR5Faf)m8MN6ja5*H``_7M{U7124+=n@8`UA0l_B9^2G%;1y_S<VJ(_AUBy|cEtJ&b
zSs8Pah&WpNe|^CsQt0H2?xBjI?Rm1Tmd$qMy$%yl+`>b-zKe@VVNxubFh&7yb~-H}
zhCc<Eh93oH+m+i@xm!hN3y5d@%cqBWnLMCm+UtWGGKH3wnIqeOELX`_+!T}}K0EJK
zz@sQa6qp}==TS45)^Ai7+H#)!R6ahg>nb=94lAL0e=sX$1!F3WZK}2{?*rxpxEszl
zI<f3xz@@<;l)EarM@gFoTYzr0Dgu(g-aeA3fCCC&UN8b@I=EsRCWb#~k_>r#zie;m
z?PJ^CI#hY{jR44V-0ID9zceWXBMIyPl^8;0ajv$Dp|*yk?d-R~O21JB2I7faK9sw7
zPANksfBA0H-anM>!=Jp*!DpP&lT)pmi2T7+ai(>(^^;vt3&94GO=11o`Py>brOBLS
z0>6LUZSQXZtep>%0u~d9>+jqjlL3yhH5w2DqJd6&0daHHtIsnInEl>u5x@6)l-fa;
zrm%mt+nUvWy>D;d)wtUWSdth3|7q79h-$O%e{e$@xpz8^Icl1l25h={@#k6g<jkFO
z-N*d(Lm&X)M8Iis<lTO|?CJnvZVN_Lf@|5f`%O5OKn*~543A~vHg1sH;wesFYy1Nq
zdB|}oP={H>QqIR&1c+6hp!?uA7=(@4jD~2YQBonKs*iQEZ`WVEqv3Cyvm;hj+dzZh
ze@;gODd-Mqk#2yDS+?Xl_y%mYLTUu-<38{WY*2FAgR37EKyM<MeRC5J>$x|F0<p4T
z0&|(hic$7qg(jGN02ue3pPK{rEye=ph7ZoY^%`<15n|+V2APMY$;$P*i3G=UHviPd
z`~crV#FAsmkYcF&U;Of;_fnxW!F`mwf4Y3P4qyQV!Z1S*45t}HJ4k-b#*gcQ*@O^B
zLzs`zw43L3VqZy7F)hnL(*`1ggnkH!z#Kgw{#xyt7*&J9Bba*g!W$()C5SQL4Lb?=
z;X3s;i~-WnBVAaU0_$XES?!kr@c>Ingc|(bWmi7ZAs)bri9Q*&N$vUgfUm4gf3`iw
zMMa?n9-Sqe@FJoZvav=?B^<xGUi<?TJr7d;LKJ4fD0~c1l}tMdaiahG%d?l4e_M3B
zeRcNoUkiHn@-OcHzW?P1_~-KV;@R1oOFz$iWiZmzu`*x)PRac`KuW$gfIM)H8kwZ1
z;R#|IPf+4Buuvi5>g}rf97QZOmqBd;Q!*$W2Tj7u4TiT2svVM^7FG|oa30mDR+#&e
zl7w(tRFc_?(#-J>e2kUmHXLgP+BZ3Im&I)Yh<`W#H-x4mHYkc=okDtK2C*3623eVp
z%P(n#9#aq0GMOgY`qu=(Uc!xe9x4_xsWJyYe|z;RI-8-E+aN{diW0pC$$>yp&0_o}
zWfA}_6)D!RulD9e$^aVcpUW;{fMj{T2EcS}N*1|iGAkW>`?Zt(Qb=1fRW(yn*oH1p
z0)NNlT@=PJ(vKS{sKx4gGbf&X0!5OD8N>Z-k}(E$^t20s!UM;jypf|pnrs9zf`)XL
zXnt-ZAm_Q^Bcp>905RWVmVxP<8!<MWspFju%rY+7VwQmtB?@1s5(!CO@8OF}#8;EZ
zlwu5*UF9$raU_-L?PZ&ks?a^^4vY>d41a($ReqG5RDKgbYf!Gavk?Jf$p}+QBVeA*
zPGcdh6SVYUZW_0eLFM*rKBAfuor2DS7NIhG?A;_Ied$6C2WMPSaV)Z#|G9&^$^4I{
zqYLk$(h-zmntj#8GovkbKY|r-wm_0&{%kso47PWc-5yGgFEQD2m0MsSSmREhqJNuK
zqblQZRd!`EIIF2x768Pl%ysLoii?3_m$~;)uF{ruMs!|G&Pc4mr|4l&B3MdA-R5OK
zdUsel^DG?NUbhU(>D&_&3du6;%=%ufoWP!+E_jChyMy{4s}3WqISjc}+7L_#yS6-(
zs10aGm#BsCt%`4!sEzAJ3s?tKFMsoyy88Us1=5AsD`L`4S2xdNqMP)<nd?Tl*trxK
z!smM6{v<x32mZRk9=HG*Fw#78J#Y|+rr!himlMi$L{RiL!QI^EntN5vw@H%fw3s-`
z@Z&z~=DrK#PwTrt#eu&bmX+M$0+F(w$#A}REx;s>Abmf@&zAr)0<t(Q)HCekWId93
zDDi~j*vIKlt0Yl5Kh~LsiU?KmM6wN}^IemgB<{3fWIjP)=X=u3$wip+E4TV^0_Fo+
z>YLtmyR=08I*@bmuDghypd4jjerp60J308&1F76dIpCM{K!VDw#k(fmEW^06X6!>v
zdp-n=oX3=B%=i|}m7p_4;ROet5PWdm?PtQ1;v?ez`yX}q`;eDT8v+{yGcz$Xmu(vY
zLw~(oZI9eWa=y=tLxB4S1Ls5JLxyI*vvGGHES(Yym$MaXgTTN70(XYH%V=h}A~}+E
zzdqH??yBanXS8x0TYwgzxZTy&RZl(jLcd>?1zVNwPx!gnU%kJ2zheGb{IS`uo?l;m
z^CPQPwy>IOxw^i)ntp+;m?{gyS4POfR)4GO{naxizrOw-cwfr&eX9#oat^<9y}f$&
z;=6BOU%&j(y{JT?EYsm1OyQm}RY+4-;n|OGzI6||C^VPh+3Wv${vWSixW|$ey3{N@
z|J%!-{JW~))`+;9--yBQYZW*8>Gkyw|Ni5*ufO|gl2)q~V}(_UJ89QkgY2qWt$(?J
zGX&8@A;XTP;3`V;H@~<oBv(=57jL`}3{Iv@c=pfCKjVcIQLYd0f`3>Q#)^1^zc!oB
zKZPZ&jK98Z5BHO#R-}4eGtCQQ6iCVn#{IkPVe|`>MWxEPz~j5k@Rq&(z|`BJe!Fcp
z?v)DmFj1%7)}N$=la%pv&CRn-xPK9CajovKd~@)7GG_*5T=94q+WSM}*OeNCW;XoG
z=ArJrj2eV4<I_Lxhx><mc=%Uu7`)(uv(GNI>n6?2mkKNGnuA|#&7C@hT&>}jt7?*=
zJ4`|gR&c}kFBKYIM}aRbQ(Y7o-bP`WtqK8BuICqOM8OPRf;-;ZcKh?Mp?|Dyd)ys|
zx3}#$lR;McR0drYB|{nh*f+z?*MFJ}a}E$-kKlxgc^9grfBpKQ9fB8>+C*tTw!59T
z9dI?v=WZoI4~oy+3YKMzi<w)&GpkB=>Q`W(7M0>uQjf>J@mg_yXyc7+gUf*zYh^e-
z_0Ql<!{dR+hv}gP)32fo+kbkjgTq^azurbCF}8||zPSM@zVh$Nf|pf%x4R4PDrxbm
zn#2A05Rkx#N~UYTKl)|XqO=8ri%jggK5WD3RcWK(n{NMDhqD8Im58MAL|}0ePt^Q8
z_Vs2A76b~f@L105!U3d~QP}#vZlgB=cvpyKH#fl(y|@a%+ThmV)PJC0ojEmlrB)~r
zuH#N#OfFqH-I9fRB-ensoZ$|~u!CU;N)L6=wV-Doyl?>P6r!4GHED#1F=L#J1aMYr
zG>9e`FIXVyZw!X+wTgGpcgL|k_=SZiI1>>&KR&dZXn$Ivpx);}VV0Xy<#V_aRQ_Y%
z1!pl51KjqwnXV7qPk&WXFATWUDDJ))hWdUI%oL2YzHRTD=~iJCZRNtYl}c<oO84@5
z^`Af^#Ka%gvZz+lSOaFUQnrGHD#tXQzq<P7)!$cRe{8P4`R^6G`sO?L*Ynpe;K!@K
zu6}p*@|9obOX!HKcp;42rVyTu06+$F5#FHCT3&hMvo1t0e18ETvqT*{)*IBWh=}nn
zV=yCHM^wpV1mL|)8k3rugj*#Stat4;Tz{$2T7nzTA7&+VdT)jp$*hR$?(1<Aa7hTu
zQnRWG#Vpr&b%5hvMdDPcOY#rlobV!-aZU7$N~346BKRI-NacP2`TLLU(D)c5!Q6$4
zYqTR>2+Ihd=6?eC`(%!y5%L8wV9OH4D2qVw_{v2SsV9OLUs_9GNrB&ab|)NB#Q+z$
zr>KB?qFR1<jP$NTF4y$+*aD%*vPtW%3m^_?Wuax<tzb(w`Mi!dW=b2^es>SZF<HYR
z$~yKZnMvs%@ns|BOp)NQ3{WZ>STqFqFWUO?b~iy0#D5%XOMSuIKLt`<Y6Qr7ci;8x
z_^=OQLup2aTaS1$r29FsZtDSo%L+8|z&S->3AUp*7{`|4i|wJlZFiG335XE*_NVE*
zM$sYAU^qvE`8|eDri@+e#B~yrn)Ub);xM?Rixd%FCP=n!VMOn4#CV6h?YnR+Mf?TG
zSQk)U1Apkwugk!FMe$uw4_6I`!fl3jY@!7S1fvjbLI1=tj)!-LF7QDhiSb|`50T^u
zBwBaC2jFu5;mzFp6qp`hP2BbSuHV<Yoma91a)VGws?!N&YX50-+)a1H0W~mn3YP@7
zhdWP#gTJf7D;VAVwr}cpAuj?q78VacE<n5~2Y+VuFmxeKbB1uZY3o3JATz5h;`GOM
zjL}zevy7+-Bu@bnxU#750>|dQ=>v6Ay3%vShGQ^b97uQ}u;1>QeLx^-b-cIR<A{tI
zgE9#6DUt(IMMMdt55(gZ!^oiv7|NZh8CvZy_U&ezE)g>NQc6q&-yho#(I^#13;{Y8
zB!5vQ@|kgpxXKm+NG_}nnRCnln&4bqV`@Bn8pd!+Kr@b_-%hAwfYHVMn)`ObSkPg`
zP>1=OIdflrBNt|{YVdL5dRB=Njcy`eHU-DN-8TW?oew53457#psy*hAx&k;M&#e*8
z=L^lF{rlWPPAGw@KF1Q;9)Us70rEU?%zuh9*V^|vQJgCp%%c91KM^Eh0tvul_DHs<
zxI~H?=o)ymt|Xdfv>X>d&~mzd8(a#2nIRqN`T(kuYXa++$KCX@LmY)vy&K!fhJpJq
zgLpQ671j{MB`{$D)_WQmX8F^8>HUCq?IQ$Nz|V;S8kdEkT}RlXY-2dyu3g}N41aG!
z5*n@N4zP9tC~#7(a>3*zlq{|VTpv)Vn$f5H9YchtJH~)*C}7`D2LiQJNZcBV)(ES0
z-gn^lti)^jmz)eP4O3VzxOtZM!J-oCqPaq*%q-^IH(y5=S88U$pb$+K`;^^+!`pK1
zr^XU^{4T58nQyS0ug`4e5?G3d?|<{VNkOP^ZZ{wq$!>USXh0VdQAf-v5#7{>VD*-g
zq8wgFj!Clh4W_1$Y#JjLWXw`}z1!^1=>&pHX@2D!$nNBLFJn=BU+j{udZg9oFXYnR
zp3xY{RwKm0l@uYE8mXi9DP-CTfscqfP+Xy&MAVf;Y;mQ}b{L0n2}~pSB7aM?ONg5>
zxX*CUWjFzkQAkGfPy<)55Nas0St?@<-M$G}tptYulx?9kMYgq+L>02EOlqOaV67O^
zzTvnD8U)&I=RP44TaPIYKr2KN5F~-t`^`3l-b#xvftKb^(?;+PTJmp+kpU$j7E@{a
zFX2&&CNbIP<V|F_iXt|UsDBSgmoYu9$4F9@#5CxMN$1R#wc`v6Tjn}r%Sj^l3v8Kx
z-j=1w*s>@WwVatKsVT>EP<0Y}2u(jU!Paz9Ny3on%uBSKDdCLGm%s@krd`TQb5yaU
zMD@21;UWp)-Q9?Eu2lHy(C!~YUgNkrkE+-<kPBfn(h5t*=h+G;Qh&K^a?tMyBC_s3
zJTdN6u6u+&b`x*F)i%(3@=1f^jTD;y|J9#>L#V|2Ch#oL`!-+%qXx`lh92}o7cWZ*
z<nJFJx_}&_!fIwFNvmTSIw|Fkk)bB~#qy*ks?!`c{iny+vCt*nX_7Sp^N;HIv;?E>
z*oPY`IZ?s1g2v4g0)I1y#DPeEYNmqB)G_`k?*(^Pmd_O+K+ULti@^}^g1K8pyts)l
z1jhx%VoPCHPwTkaF(TdA{5(!RmkX+fN^O77+Ps2ri8OE)RpUiHgu8=`gIXz}aLCgX
zJI~Z0j}#as{~WYysQm230x^_DF*0v`f5xX1(?7>04fV)*B!A7sK&dgO`K&Q_9H+X1
z1VgNJQqKt-JIO3J?c+n!yNk$bV9l-TbI;Pc7iZ#ACD6Cdr0z@Q!8?#SgBKb=rEuuV
zRpH?p&xaOMC|yDrS;x1&4Be`v1NNk-5Qj(@!!-X*d)Q2N4qIZB`~4x#RX`%GWVO(|
z%tz)+eZvr$!GCc$L&R-<ehe~6jZWPiLZoulFpL-Zi*<~Yf?T#2;H<yIwBbTlE*-l?
zl608xCQEWOLhZTQfL@TCT&V$)Ax5Q~GxS4Pj?}Gwd<=vzAxur(4>1)o@&w#nij3fX
zJ`?3hKQ~*Xb$##pc1KeJQk-bYBV{R0Y-N@ld6A?~KYuZN9kBRo%97Yhh)h+Eq9!X|
z=FKhy<#_WcZI+y9GiLCn#EfLyP*8MKTAy@U;3@&q4AIRw97*l0^n~+Pu3C12c6s{Y
zmX3#rpfyJu1DFP90JJeYb%bT=ZC$$!UpvRak__f4oah1sf?jdAtbNOZCjwy<oi7Eu
zNe7g0dw>4t=Z~1a`G@QY=En?2faLb%1SOCK6p!Wi<QbJ-s`ln-fGil%fZrq%xWJ4}
zl{f9a-PL{QRIx%*!<<?<qRjcSKJjI62cY`aq|p{V8gPE;(W?AEdi27jfwV1M8q$w=
z2X5>sfM%sp389&&i7urxAh3W%IRln*qGU;rj(^5{0(3w)ohE&(>(9iyYNw8nD}NYd
zlYSUrO4}i!CkUP$V>UK%8fn|R36SB}Db%)cJU|2f(+u6&V<?s$Bcuh%F{C;@##%wJ
z(iKnhofpTxpTesv$O&pMOm^lk8LRTKJqc`ppLFP5M`hlj_jDMqDQ%p(Awi@BNfQl>
zRexg>ZHzsil5!t^#QIS0KK)}Fa{{krY&lNEX<qh2yTz8MlI*nR<vXqDADQsmO-Ypx
zAf=eq#;C96Tfw+W>|6rwD6EBm=ibK(V5u<SAZlIm(=Ml{ap)tvF7Pu6H%oJUnc8zx
zV}_zG)%`kW$3>98WY~{=wQXWUd>K|iUw_=rxXF?b>7*VrJaot1Hf#cH(VkazQgaun
z*7|ULRfV?-*LMilBHYv-m7>cs=-yD4fN8WLB|Y}dhoEE&7BC~4uGdaRH;s?FIs^{V
zY}>xs#PKpPAEFLmnnODj0iu)I=f6$o)q>_UL$}Y1MFWgAB+_Bb2vS%w<ThU*bAQ?<
z&^(jH$mBxeIDxX#kT>*AG%gDWv0y@$h5@q$g<x+<HouK^I0&oq#IB7SM2z=PXZDz}
zHj9^gKDiG*#MLRgo=tY0v$=T>Dj+G&keVbMPFCkrdPK@}{_E1rMy8C^4MQ6!`+Nc}
z!qYOjf!8=Y;dKjAWHnfH%vnWtp?^S%rdR$P@H(MD=ZeEgF(C|7x*>ENro7OIbBR*g
zh#O*+-JrWuTDum^je*S=O1_<Q^tTELD%JU$bsxD|5?^yuOt}Gy09TG7NsR4JOUy=~
zMs2+-Vl<<ncj_rrG(WQM!i*|-olH_IDg-M*h2Z18n`uR}6f}mL9nCz(Y=2%+De|t%
zca~gf2?OtiEO*gOSLAS7DPh9Z0f-w)n+GgmxY27oXY?C4ZFmY!R!NLp6ggewLojI$
z-SPe*Xqr=DEH@gruipib5fU#txV|>&=)$?$UNyV=dK_`y(Q=$_dN-hjq3O5#SP(E4
zk2LptW5fv^nD<-i-4M&lC4akMxpAT!LNt|0whet!u@<Ep_9Jc??7`2(M*ZE@;fokZ
zNh&M@e@Pvv^`mykD~O~%>)kX~A8Lkx8_1HGj*?SU8QvdjH(oZq4apbN{F0iwLo9xA
z8sfV=(9#{S6ChkdHDkuF#$e=0D<ImZG!#7ZH{6dQRzOswVZ^{CAb(V-MW9kt2BM%?
z@yrOdl1XvzaT=)uu(0fOBw^M#pxHu#335%y;Fqo`64!i~8cRNSQ`eyG#};_~^nDSa
z5@h$-iK{_k_zN_>n{-@BAdfQ&J&gTv<GyW~7!w?gqlKSmOnwBKG%$dwH)l#SmFtki
zOF3T#an=!o;Wigk*MF>V1A+eQqjFYjSPWfgU*Le~fp4DQ_w$<q`#9N`=kXa*<aE#2
z>y}?O5tL;V?lT^t9iW46#G+09_%hUY(l^ho$>$4Z&n3eP>5J!UP=4zZl`e)56W()?
zt-w7Z;8SYP%Fm7s&11?jPKCRnXe1-(pteE>1vI8WCoyxZBY)4JnymjMY>mN|CG*?p
zOzulLiJ<)EI2EQ{4VaNX4SBb5PA=@{Y(kf%o?oFjtMc@%Gff-EBQKZxoXuFSo@R%F
z|7u1E8rG*q*iyUp^uvU7(tTc?GOU^vak6QYD>If~+B}}@PASS!kq0TVurK+9%mvM4
zTsQgzCbZsKr+>u0bYtOZ-3~uj1jga!w`QNO!Y>xVnXJUI)i=~YhKO0BquhtjcC=$7
z=sg$;HTAi0;~~TngLSL3yw{C2smmq@pi<eq$(@+_iN&2Am7b-#X92eqPq56zruel<
zl6I$4)q>_bvb~-_@&MAv+%gGzLaPwxJguS;0CC!Af`1F4k6rpEz?Yk9QPh_iLXGfb
z;-~{Nh{Y-i_Ms&8M}1X1<N+d?<?q|v_ivG+3#pcM+b4m$u}=i|+2>qaKRp`kyTly&
zd`TmIEr8kLUEl5T7EyNWV-11GS`a1q1RGhbT7I1di6Ii!U%+C4HmK8*rRx-&c4&PL
zN`1#n<bO+Q{hVt3XTKRF8oT&Lh|xDfp#tTH8&F-xeMni110R%$ro)r}R{%<HsB4=2
zfF&kqV6?_8Lwr(!ip1XKR@rKo=Cct9Pw$5SvPn-rnf1{$>x18O^YnA@TteJ8Q}+rE
zCl!vPo(lyoun5f6o|+`jxxN3k*8TZk8UL&!Wgc#1b98cLVQmU!Ze(v_Y6>zrH6Sn`
zZ(?c+G&nLhmzOF6L>60Fj~mAk&hx@Qf>0hJ8Rl%?NAhIJm+^=K9)A@rj70FL*<D@7
zS6@}Nf1QwmPKf&_{<+v({Ce^0g!*skkHu#4^5)|5T8N1)tYS(`Zf-Ba59q|&!ib6H
zqOfLiv$=S#3sJnd`R@he1yfYQqMPN#^Xs3#jvo~h@!L;tUSIpKTozmj7C+xy{q*C{
z?(^j}HT@%*q=m3)nSYdFjgk{e3o9jaYo?s@LJK;XG7Z1<E1g8lEf%z(k{yV|nfplN
z$M4DqFQ+M}VK#pJwyeu$-c{RrOspv-AeYgTDYXSC$^GK*ZlNp`mpaM2ZQM5}s!{w%
zE8HZlG~0bw)n)5tGX){AbNHLN`vhM&P13eieYY<C7P{cvq<?*9v!?Z{U*Amr2?piC
zl2cKb3FFKb#7vYi1jKeWe|dFrdG*7jYxd>E<u4O@arqDTe=py>f<Lalnf&SE^_Aae
z+%bmgNRGk4s!D4(M;9`<#`~ZZ!U;=SDIcDBwdg`okuKVTB#Um}_?rm^N=5rrUN5%L
zusSW@x8*XpoPR1LQ6~A3`=kmkIZ1li9%*nh_d-!qaDmJGxu8(Wxjd=+y1e&i5^!^=
zj|}Rx5x(VHQ-im5--54d0ggipWBlJN=IixegO^!8aDG;B@bK?J1$Fo0FYa8cNjewI
z{T8lLzI|Ul%%1NW@2Cdcp73<$-CKWAusI_V747du!GBT~_v-xhsS9Y5?(ijSdH0nU
zT7qJPqJ5#AL_rljk?!#)9LyqU+A1$L5*N4C?`7CtgC!I*us!pCv)<Ns(YBP46p>*u
z$gK&==ydQtXchw9P^yyfPAM<`HXgfh9Vt1$1uX(v{IV*8<AHI6%n{}9^DORe6=4I9
z1Z5~Ll7FtdRT;g?FbvA7UY5T_Z~=$5_&K?jvFR$EcT@`AVU#|%=bP&vzxA?$sf|s?
zFUxk(RJ$%fjsPsP2t)Ixna7CJoFx?ntremdnMJ&omR6w>oSnQ5IQWr3-wHYae^!M7
z=SsFqB13Rzk=+*ls|AR~{1CL@(9xQtnRg*@n18nEw+~&wMKBhlB57-Tn?x1X9%u`!
zOUyCcT7=t8Qni#Mh4ym4-nS7|DP=mVwQ3^N05TgXQ7=I$U>jnk8af669654~fkw)D
z(LC%@dJ&LNHG)U^+b(*#P?(Rlby*|!@FaB?Z2;g1NS166g~mYCvcDXz4Fabf9(EPr
zkAL48QUsu1{Qe<$htdRd_k6vNrU0DaMxl3w`>8@@x8Yw!`v3$cMNpk0*a{2<CUsOJ
zqa07Fm(g7Wv&j?+Vpa!3IG4dNy$YCbxI&2A-`$mM7ik6|2q6#0$!NQez5q8($G2Uz
zh<K>8!@mzPD=ERubYFEVuMk!!rBz?hV1F36mSnt-n~=U2WmKXxsGF*5<B1?#lH*-<
z7d5LbI%-*O_jjuZ0D@w+iul0_#t=VtP5B{e7YvqnNcl9c>_YmZz^Tx0o9aV_uA%$+
zGu|5DSzxm4y7?l;sbwl@{Cyjxl13g|R|>Rlz3mc2359k{fxtLV3(Lf*j528O^?x>g
z1TK(lQ$&TT40*HJ`xu`@VRDLeWXb`fjnB+%7|YsXEZ?U@0UCiFk`v_+2cdZ1Uk;g1
zayG?}AftE8ZarTl&;g@pw8_`&bvy`I$uZgJ9n>PlLN2*EPCENGX`N>eix><^fFXGa
zKUKWPj=E@Blf7tN&clY_+{B9H1b>v7XmBDi#?K<XkmA5w0QYF$ThO>9qk1q67!q6%
zh*K}>y4Ac!l7`43DLclVGjcilA~L5*E=MtYVV*M%;?V1!2O0uNrAI?JAQt8gkS{SL
zt~EV$4W&`M+a|!BrupXEO@@hN9zZFP5}y(WATbCYL99An`7R>T5!IJqaDT+a*$eNa
zz@)$<jgOs3searBP6@jL=U|8Tgk;WWzJ1Cd+B~YB0hj`uGZV=badpj8)icz(aFKA1
z1g!G)%<1A`tnOl<F7otpGKe>-Okd7XP?&+iJlHYd7DOhuz1`P~L`8t)D5`SGkI3q*
zj`mv2J0t>9AraV=5P}bJ6Mvvk$w?woIHyCTX!do=uoAtgt2Sj!r<`Cq1<b8uTtfgd
zjR1W*n@gZ@85d4k%;7!fhhFH`eH_H$w;98W7^jvZ0s0}H3XE4H5g$3VjU_MKS+H~}
z)&e49tE&=`6y*RsSM^&ae3UTpwBBc>V~%hRPu_RilqEVF6jhmz&wrk`Wr=(qndw;0
z!K4n%J!$ZM_99wX8gu9&t|5W|cG^3Dy;}5+c}f~k-B3L!alfdmc2zE87M21D4AMT=
zcGAcGL&>N34`>$nb6RzEi#{bE+2R2L4#uWVu}|CL;R1~9s$ca9kO+43PWjYwD#*+b
zjXgO(0*Ro$9wg4Ib$=owh6$|ayJM@|R~VQ|V_h@fcUvIJuDDuzgDcnf!4ky<NKE*I
zkpmZ+x^|r+6p^l(Z{lJ}Bv$n&v3VKqBXTf7HZRw=Az2HcsSc=IvKGPBZ?FME9QVqN
z1B675$Tm_$-Um)%58H0erJ<NU{lkY{3~>S=l5El<_#sD$<$pc^iNbO}RrcVI<UAEF
z;yROC05_|Iy3|Ph{|gv3b$QJPByXs>H{bPx!bJmy1y@=-+!02r&(onj5F~~L*WkN=
zJ8%x%+=s=R>#KizT>#gS*iZ7h)vlY1y102gMhL+v6)HQD^~2M_p*8qb?h>8R1f`lg
z4G1ltR1-9^34b^THSw>P-(S5NyQBbql~YR*bVIaNhyFxe21@?)Mbjp>E0p}BVQ^e>
zVLf1TcWEBtjOFrt2X%X-(~#yc&vmIp<pwLg6hf{QaW;ga!)wEH&W$}1Kq`fqaTTNi
z7{r>psu%11GR`)j0<;#JS7QnD)pa}zc1>H{#0>2k`+usRp?7mY#<DA$SgJ5FflF%+
zVd;!!od57xkkB!^YS&<&rX^U?@!XIctxayX%?8WKqn0EX(e|w~7$Jbl-$Vm(Cm-(_
zC=H?<Y!01G4Y)yaw!s*pEf?DmeVjt3p=aRwq`UdPICfgb<}Sw<+U?)1gDZgCl9Gc_
z8-zZ0bAL4q{nP&CS_zNwFEgNt+dAY|2r^9wAM-kJFn;895Wl${d%h#A;9l4f&fP0c
zupco{g3e8-Khnxg&37m`v9+1#hSJz`>>}IZkj}6tmgW)MU`86fXU}mZ89FY+7m(^~
zr)X(V+`xDJMWdrC*B=#qKRp`F0+v(mb_HV58-LAmxA+mG+1EjTo@gTpL;X3rkLK#C
zGt*i?I1VA*o7SG56!vet#Gy>C7@DXV-81QZv=gVi|K)%ZHSeQEghe7a-a^jCqhe%~
zk>}|LrMt~jgp*UnDb)hpaWaJ?W2bX$mgh!m;J)2vyPQ1-Xz?yK94~eWA96>0U$@m=
z9e)_8a6KU;#EaFuiP6*>>U~+&IHpkeb+8L4QQ<D*qrs|PmtmhNKuw`!rp|v@pzXdx
zi6kAp*CQly+a#I7dSv2bvrvb2t8f7(A>4%>q`9WPd)sy~g+oX&hOL4x&yQSP{AHW^
zjjH8uSyh(jhW959QxyOa>kU(HRv~eKpMM&Kz0CD?zD#J^YcORFz%oj`169Ybve&EL
zq?O#H%yHX<-sgb9%w|>n3}Xt*k9nf)oZw@O$ex7GRZ1GVXxCfLBa>wnI>_8>|6GtS
zqnMiHv0$AN96ur!gPS{i4(&2OiAKW(zDym8A&-3ZbA)XdwhFD-?l5a3hbR}-7XxMc
zRhRdZ0;wM{NF!?KqT|IavA*X6<+5^^_GHB^1UH2$6V3r=`dF8~lmaJz2le~{;L=wE
zpc<gw*!*m&+lQ*Y3++xpfSDoL$P+Qr3yx?vsF~Tv?be&wov|CRQ|0ZZ-J`Upvl~+`
zL;7=o(S44lgs&Rdp>3@gv8^>d+eR#Mlj)2_DQ^&ks5Lt9{iJsrO63IH^CG|}a_B{F
z4vuKNEQ9;hcbATtcvne(vp8@hX8Y~E-Y^dG;bVt!J$wVa+3mZ?&sly5wZ$$qL3oSl
z-w$EX6HkwrQk5yKKtudqHrwfLzFY>vB>~|qJILdHoRsAAia!`1q-4YLsPl9hbw<-j
zs{Tx)3TU2+pUSJ#i2L9lB4^=+FGkul!WUQ;BRc{>FvyO2y<DDuJ?}m<7L$z@)$6+L
z82#}9X(A{`uR_3`vhR<+J_C*Kn#eE(>-Sl)Lh%x-kE;@(<4BcGy{JlO*($JR&<(`*
zp_jy`WyH_OQKvf)5km<d7nDt?|J_JPoAcEuRJcZP?yFG~>OfbGib#1s>7nrJ!Aq{Q
z4~1nKjRVPxQvm^gB{Y@>xgDpEb9Arg=N`YtaMnT(!QQ37{D3efnW$-+1EyVVo9>v7
zw-1|5*)@Sc2q4A;9rx@j6C+K(l!+jE+!!=G2WT2DxN_L`(5KE<QwJA@Fmn$}<nSSC
zM0c9sVZ2+9^mD?UAf)->lP+s>0lTPntJqI;4=nRDGt44?a$LP``j+SBVPoB!er(FN
zo!<p`7ZB1G;r(<gqW}Bb`J!4^sR#sb)f9I~Tq4BO@HJuI(j;5@tT|aWXMZFmd#|Hz
zw+XTaW54?-gSQ_ajcehmPQ<v?962cZ{D%?QLgw$cC&xy{!FdLc$N)7WDzV&A{!lIB
z`>IHMDA$mGT{HEufw59S#OGnGnoWRGYxk6^KZKz0KaOMb*rV2R;>an1zjQ>^QLia;
z7X?iAG$`c-n_o%fOx)8W{F_bI;CTQMGrXht2$%yJ=w^pm7u3BY0D4AwU=*K08G{Sv
z*Ea55DIhkWvp$$jxpz_Ns$U1gE6xx(0}C9Lp1Bu)_vY!PcY|@`&56?g^ycR3hpYd*
z{>BRoQV2O{oiX=}6(j8-5)3YN4(ybv1<3)^BGE?{{4QXdr3SmCDHi;?^y6i@Yf2mu
zyQvnH2eUiRX)z-YPGiTX(cx*n&~f9~sZHFoDZ^{V$W27nLEJ`gGkmn+{woZdsq!lQ
zw+X#VYWbYE>hS7?x;JU+3B45ngD~aJDflNit9!i2hA*=p;SU+J+&}*VnJ!?7Wo~41
zbaG{3Z3<;>WN%_>3Nkr4ATS_rVrmLBFfufkf;a+0f9+aZZyUQ2?z4Y|;Fl&w&G3Ff
zpOVyQj9%g<E{XsGf~~Z+w~-}ByK;{IeTQ6fNJ%SMPMmZ4P#B18iaQ+6<(qG2^L0cC
z8&UrgKPR_GUyr_ySXfIRliSgo%cEBxm>oIdG}m%;d3Dr3z(!0_V))1iNt_*B-X6VB
z`sL++e_+3q<$kA$p`61rm(!ycZ{NMXxIFvdH!4AtV>*6eh+kuhNJDL0`|$C#U*v*l
zF5}w8Ki~ZI{H<S>jA*J^T>s12r?6KM?u<yMg@YJ8uT?te)5YccKYw_A@$OTvtrMlT
zr(DBd%8pLCfz|LtGw*_EO01$LidnYR=XyR_e?HuGpTE=(;};XZ$2!nIsk)el(<zah
zs<_q$QOw(nrhTh<+g#7<X}FYzQ<;n3Om3=WI9e0NX<9vL=5XR4!gfPww&Av*WXaiL
ze!VTIna}EZkaNnMAe4*IDPzRi?^A2B>Po#V?%yqGST8RLHRD_or44At`@<LW-iU$`
ze{LB6UL(%#s%3Ti4BGaB*7b!)3QOKC=hvUxuIlO#_l5||Q;44UFT;~U6D65M-wXs@
z5Y$Y63Huc%TyVCv-x=J0Q?)lc_WSq+Z>2=aL3HAy`Q;z`<XBJrQ(=RSkQ|V^y*n;%
znl>gW1$RUtSF8D?Yx)EbjtHUCy}mWGe_2QYN0>{_d+%2aQE<}~v9HfAf><!7ML@W#
zrtw*=UAp9W4EYe2EfJC?!`2VSagj5b_Aai%8Y4zJ^j|%{?rwsn6bxZSnH^CF!&qAW
zcd#Xdo=YnaUEQ02K{Cp8(e5Tb9SoDKn<35Fv@^m;h#ukLLgi?0x`-iysdQd7e;=?y
z+bx!L)YdXuXc6{;aVg$x(%jwD%dY;Vi_veG!b?X3IcFUj*k^W>Ei=CDx3K2J7Pbs8
z9t6Xe#{v7LB7)Nt5|_Q=KK`}JuI`g9oGZbG4h<WPaw-6~1!HCUrKkK!!FifUjmlNM
z*%(B&aC*yZOrqJ^>NZ)}K_*~Ke}d?`tCt}L6oUl83qJI*LPaisi&ZR1#-WqG`6WOa
zB`|syt68`Y=Y(n}@vJsQnxU8#-6DwOgi(!1@g>HMk}mmn5}rM~9Q^}Iz36NFDMZUi
zGHblCpvnrut!D#o&W~Q5|83MQSM|}We~sADt9SmNHy3Z=<NQyf-yNNue+M~Fp$roA
zmO{We0=ybH1KXt%H;^~Kf=UpP6qX8=7FB(>ODjd8!2b$bd2Xa!sTF|4B4xcooSoL=
z7vq;?kjV&$9SQj0!8&HbP9`(0e=8=F3UIOdqcjF8Q-aUmki&qO0S<$p^uJDHyd{})
zXvuXB1Ifwg0Eh98q?;VZe{VL!93~tiAkGTQq^B$t!b6zMU{Ied>o%U?Az28#NI`tO
zV&Wj;17?ES&UX+WVRsQ9Wrm24Qpw$k4oJeW!-=^VDWT&!nb{Ma<5(1!#gM^@3l)2y
z;sPmAwiJ=dpn$@}L`vs^u5gW2buTe<5`$-2M{35wYL;)X4}c<%e_ExJ!9A;4*Ytr1
z1XO6$aawg%)PxC>Zkb7sv5%1+Bu!GN%;uhp*zBT?zzKE|8<~0O8nMy%KuK&QVQdGn
zkr>DSXEg`18tDZ0pFf+`NC(I8gILW^S1GcZLZt&(%}>`VvYJ9Gz`Fgc=2TEaGz$$8
zfJFHEJY=FHRw!P;e^(4`$}zNav!&<;x?)|V0x>M%4u_mU+-chR@4FbCPGZc4ot8jx
zK^(ph5{Whx@voXS3AI>8t-YYiXwmIXBE>RNq{T1W$yav~nFJymqB&5&+<cD50K0t!
z0Z5`6ubAv94I*n43O$*W$uC1GNu!&fniz0<0rBraiRHJZf316F0P>B(n%(tBI+b0R
z)No1~x21-%d(~i(14EVZ81E~ruiMT5i`65DqOc48A}UrKD)8hOClLKiA+2}^j3cZ{
zA}DtCAAwU<-D=r){98PML9|NiS(Ed5-am2M%zEkuHWD^h+(pDpX7L)C59A^`<nf32
zsG}lzF-{R8fA>&;kq)`Xkl5bb%o{>ljMsJ%i<2{$j;prMme7nCwnzQ(c-mYyT{W9M
z#KK3j7*9u!Bk$A<b-S(Gwz`fyfm%POz#0eA>b47t3PH5R^cx34Sho=+Ade-LSYi9Z
zBg(?lhZgsffk@P<Ni%B_pOpYE%;fBe)Q<X;%EWbnf9Z&Yds4UUw#5<}0YK!b%hh5w
zTg2sJPW3I4AU|cIVv|R<kq}UZJoToEMNnkMbDv`*say95rG?m-Tp8tfa(LatL?CFC
zs`a5|x-QQ=<-VEL)8TeAZ9Jsi^r7(CdvNUgprB~kZazzEdD~w56Z(b$(3W9lKi*&Z
zp3J80e^F3w<{(Hl7vJAw!gkb3vBS067E|a1)Qg$jL+4!$o7Z7$=nSow5IY(+e|u*#
z4Sj02_C({i)vQ~yJoH0reZ<-r+p>eYIY4>PcDS44L}!e{p3OpWOyGO*@nhrzc__R-
zok=^Vb%IETX*oz#3Jes`bO`+7CKjR4mC4+<f5ezPj!+Lo2uC%kP2qaDO%Y|Al4HAX
zRZh93o(G_N{~m|L;k_DOcM#u_U7(7($LxXwY=g;C+Q7dX$aDCCLX``eDsIz9)^Q95
zY3WAu2tdU1#C-4)(6`;Kx>#^jmN2A5=su^>td67LW{#AINxnXb1{IH^=77RmE&ML0
zf620i?-T!c7=|?zR|UTx0>k(9vblOlK)eORKW*xFC;;vsSgqk7ur%+i=YC1}lp?ZU
z+wCgi-)ir9P53m#-ZNtJCt3EKi2aCP)*%}Tlh#A?y)~6j{JjV6SKzybZeAVsn$jbS
zlsl$%d;s4e?8Wv>F7vDL_&(+W)u>y@f1W;@Eund$k|Ev{W0ur71T%u~g|q0xu-zNI
z7)>Ek_*QKjDeMlUSertXNC9Uujd+H*?gwX^xZcm}3Ld_rk=_ICmgKD4)mZnOylnS|
zO6%e0<Pl-fY!B93xcsu3q#=NR7mI?6ipwNc+#zKri`%;@769mUIA!U~>bhzofBrx$
zLTjPc2Hb;VxF4ke(i~0!)~d-C1z<`6!{gf%7l?l5aCDt-!S%qz#p*)?C5tQq#pGrx
zmR^52mfrcIi-%i{gVIpIh;R%`%Knjzk{Bg9@bbiX-6PUuj<AgRDkRS4n>ds5j<fqL
zG<4FgDOeu-I*qwl#DmEJI$cB~e-#7Ren#POg<G{@I0!MG40l^~lcW<^FU4KDQ0^87
zfo&@io!XrL!vi`e-=I@gb<{w4_L(H(xJvu()NKZYQkje4pvVo(tIX!Ss-INjKyGbP
z6_P1Ws;(lL3wL-ljo04)_)ZDapj}NSbv<n(!FBnCPsS}l^Q(=GdcjSu9~T2)v_H}%
zFaEboF#}Y5a|ZYW!?!S5_CNmx^A)tXmwQJ78w4^nH#3)-M*>5ar=tRJe-jXe-SMW=
z4*&s&<G(uy14N<EjmGm%fArx*4N^qZ*yYvfs2asSz?2|0JU+X;_#lRdBN#SaA|C=0
zX)`~NHW6;x3^2wZAh0_?0Uxa_zfIEF`hL!YJqdsp!bt7$!{%|8KW<B~`cX^{^y~ma
z5QddWl9m;44@7|%sCAn-mzJagB?66Xm%XF{84=EcPYs^?v`CgIn^zQ2PK=?K=cEEm
z0R)#cr2;|$*Ozyt0#G!m0|h>T8sO<4XXEKFCuir^qf@z91cO3iVEw0rMr?Fm#o*oU
z5QvDnL$Hc%7U9&UTk1-e`=tUb0l$|hrUE|?5DtWr+1QnOwKG9$3*sf0cBTS=0iBok
zrUHKg=yI2Mrvl0W=9fdL0-*~FmE9>lPpUIz^@o@5r~+#QKA0Mlmv~MB90N2qHJ6u8
z0z-e5R&7t)ND%&>U*RHM3sqQl_QmVfi4Q5tQPikSQzIQxq{v5{#MclTdnx5k{qJ3`
zy^hTq1oDSO<Jozhd1iLTw;o2|;qs|}uWtsogIf=b&Hh~9cpt*S$qWKdBIy&KdEshM
z9RLqFMuK>PG9&{pycrzw;3)i8`!m+|mp*?Im=Jv?Tn-M;K8~j0cvd=cins*7ej!k4
z1CE%$L2a9T8<j>vkxy7{n_hmHT%46=2FS-g)b>x~E91)%k%C$@0|ffK&n?i^H2iWt
z8%;l6Rcs|~vppu9AwmQ1m<Vk(C$^-f#sh3=oEj5GoMW3>k^C2@tNCH3$o%Nf^8J4?
z@exq$d&dAM2#i;<a)ZtF6X$vPf&!uv$RiX+8<f0=7R&fLf5_D0d;BmzEL{T48B;4;
zdZ%g(Ut&=khowm(0hn0HPTtpU0yk9Roe3Q;O@)Y-qH$kFDl!u5qzIO^_5F#-6o6@w
zb)uw_3=AH@DBul+KD=$bTdR%9+(&<$fwiYA*Y`TfHgT@vpC&yn5Df@@M1uojoVNwn
z<ruoO`?%ce=&@S_mAVznDv5P|QZ)Hx+bG#J^g7yEdOjd2_cFcRzLeWDv7eH#jS0NL
zJP6}Ljk4@u=&IOTp)AUy8#nwa&0Pu9CMn#6vOHbaG0IE3zw}MjbYvphRTF<hSM=Ag
zt7vq6g?pR+c~EiTmVBG;)=#&(FAxNKK|fzkCc`=g5lxIfw$s_?b2o0GBGuD(7EX^e
zs)v(>%ktfNkt}}>>rMc8_ClBLE~Gy1-p|%m76EHlV-ppdS74UzufvoSNz7n>G4i;0
zp{75gZL&<%gXu0`&up-OeKUXL`5{KNZ+CjUEobb}%b28hxtpNfVV!HDgFYz*0f`vf
z*SkXRw(Xl!_ja7k^k!Rp`BeFLN5uaoa-bJ3G1ts?k{&5~VIA0=;;s_C3fxt)_-+{y
z%<bMV2|@WS&@lR=IOv&fdeNo%LZypBY5aBH0;_jn7j=HLS7MKA_bh)PL7`o^JXUx4
z&K(Tnzc0eYU!#l3<!oFX)+3M+*bDy4py>Y-Q|5P%bWVD@D%x({dfvx7<)(ih*S_5e
zsobEar>?DknKd6MeWzR0!5_N4m{$X^%e@a9+&;7|D|{5Npe?@<aU6PI2j%k{s(xaM
zWo~41baG{3Z3<;>WN#2+Y6>$kF(5D?Z(?c+I5#(!rB4Dwmx-+cbpaHY|E&USe^!KP
z%7T=H`Im(zmZRvmRlhLTgi^ud!*>tu;k;jmrI}qg;y^dDUs`kcT)4$jC?bo8@_RBR
z;#wd3N5m;X)1#{E&&~*wIz2mW`jaqCn6>HQp=}<TeYNeyhE=&vVjs`<+a^eEiDOhH
z$^9cRn4mlzCMXqlb5?A<V{~Ovx3!z>?AW$ZNh-E&n-$wOc5I{KRBYR}ZKo=>U0<Es
z&U??j?K}TgTYuMVW6jY=A5TAdsq#5f06o?i{2c7J`?vl=6!%$>(&wdzR#>@O1geVA
z;Gn;win@qMnn=+wC(yKiV-2oS$aIZ(hr_y}XD~#qSTe?Sau$%tXz#y70%s1g6#Wyr
zLLgr4br`COb8wfac<JTF)A|XWgigaP`@L7(r_J>U`~665l$F&ciN#=P(+%5oA0#Bs
z1AF(J=RuFr<87&YZTSbFCKo1ysU`+#Vi|9ajXER54ngqND82Qi6?A4<oCmu3Mk>!^
z;z%=)op9QWxaJ*CwJ(<^U9pF}qqLEs9eI7#rQS<FL5IVfN%^^zX3C+T84`chB}26e
zlPSNZ!aT}ekjImn3IsclQ{({pfgto_z-$M2lcY+Dv|x<6iubGH&D@+L%m!Dl^skV*
z1H$@@rN5mQP-Bs09v)?OtJRJI!#b};_Uc6T7my!&>?>8bH&x))mQS>0Z7Vs%BpLRa
zPFS{I{UeFU*a>LKIbOgaEkp!`fN|g+maC+wbdW=ElazZQ#fJX~G<LvV5X5f2^w52e
z7pTU>5(O*phO`f5E3@=Z<s~-(+8ykka6GVUt~wqakCFjzwzH%e&26*uW&utl_8!MW
z44CErYYSK?s#&}7hM`Vkmh>khk>iyx*fm5SoeY-(EzrE2SadA7sDK-4$Io#@fFPPe
z3HRJ^99+d5MNSx&pcn=TWM?#5FFME!O?ooPB7gcZ{DU(%$kUf9^aBV(ok$>jgR$fE
zKt@s!^~KT|BjkRggn(;EZe1LdkY7uq`(~N{*RZHBhL4zr$`A_>^ld0OkbDFI@y*3c
z)6lW=L`NiwpmkOLIFRU$d`-zJh9W$?!cHMek9Y<1aVL?jspdHxgp&}UMPpYIGJ-Na
zKel|f6vD?qjS7}y1=Zr65V$)1m0w0i8qx5Cw-lJ%7E>L5Bzni?dd@QsTkKhavsvm)
z2Hw+`*vp@4H$a;DE&q$>uyBG~?OfCfm#L6aq|$1q8(48~^u~$?2a78L|Kc~bH}aD1
zVGAxJG+INf>fCY#3QB<BHWn$FjaSD%_~tmB{a2QwcTW<pi}}8=<<wXQOiepY%xjYf
ztzaFJonZf(9*jvG!-%j)2l2P4#{3`#-A}^&zCXzG&$jVWziaij-Ro--W=gJm<EeqF
zC6e=9BngRSqnl;8g-mCDz`uj6nU&II(MCC}4~d;=W`cJYAQ9xy&Iq@#0EC4>RA=JY
z)Fl%qcE)fBRixby-H0=1u#R@WJ#wSbcML*#G~Nv|6iVca?5`*tzc@7e;}pXmv!T5|
z(afLc4N8E+7$bS=zj2XHSe?%*?cs$pcw9GWP3`~S9A(<8Hs_l{z(E^N$`arW87T|y
z(F#evzl2$x5w5B<Jh2T>mRq<qtF$LER$w^y81E6#pi4f$Dt$})YWNo`*eCuNgg*R>
z{=G}FE%2h%fb87`7#@3Z3@ad+knS#Y*b}r6SoH9?ax*=<FxV8vN~A7(b#J&d{I@Lz
z{sJK+grp$6SR&sd0WG6e7jyIhL&{Y#*kwdgA4$KGKtub{e_4PKeHzdJMWd@9B0k}i
zU*ol=*~5%hA#*smPZ0zLx=q6oz6xHG;HC(4gA)J<>a7MkdqEiSt2&7Kz_KAy0)7hQ
zxBre7A5GptV>e2;VsW#}LYB7-r-!5)u)R`Dd9x+G5;-xqsx4L86-w=AdM7q+3FTRg
zNnNwi1ScGXQedzPEFQ0V7`67;S|Np#%|peq8fuTGYjL2EW=}x`9dsK@ML?zgyw86~
zPCY7i05s=~%|%5Hdb*W4Y0iL4IBUW@_BRuO`x)P3v7zGm8IlJ>$}(Ju*^f`VOeFr>
zyhPX9g1%QS-M=|DH+Vh?tQw$hsMyMM#pT!Qj+ckO!O0jGX+*vWojONT5WoQLK<nX-
zC^MG!HA}FYq>}su(Z6eBrRc=afp7=Y3-I0rw1zh?7UWZ8Q4(QqVf431x-{m$^(!|d
zrxmmIfCtDZEP#9A4f~5i0y{9?t!Ng@aQy3qzLJc6vu%!CSH6WYQjh%=I!BU$rZ5rb
z%`xFtHIzo7r&~g#>F^_rVzXeT#KBgLmVcN6XBAP13bld*QKeXq>CQ?I&6E5c6(fjY
zxhOp#899O>-d;`Cf1-JYbWm?!4h>v9%Mde`y(db3$LQ=huaFx42UYy&*ZhZH$n#so
zK7XFfes;ChSavUoC1pe5%Xa?MQPDBTq3TLG+rD=vL~qPz;LkY(`WanZL|l5TdEvS~
zDhi+5?lCKaasoOD98A)55oD4Ed-VNdUQ-pL(nPMFiH}iQ$~%<QqxZYM$McvzEpI6r
zHdr!gY40PS|J#RCs8?$ka?HUJ9L>N!Hd5gcA$umD8s~}-{Fd04CNy7n+7U0s2A4$;
zy4+E^T?3`C{4JEy<EC;l#Cn;4(+$5Y1MhBSwKV+!lya~-B0GJRPI7g#pU)4e0!tfS
zMjH0?ETwu@@Eu}Gu0fVnNgzFWWC#g|NkTvC9J9BV1-+d^H>q7)?c&d?T+T{HoITqp
z)y$V;6d4WArPu(&#KLhqu8{4X`QUB5`WWD9)`~R;-*vf#S8NDkPjXNa4VMT52f`V%
zq--k=#K*vA8pRb@-EO3c3&>;q7(`xEy?P`iWh;oRyd2E`OLH;-NL|3ryP==ls;J!2
zyBX<7VJ5AoMm(KE$-N&@bin%C;nka<U+h}{P>ng>bUQ3?U7EMDo7?8+cYpRMh*kRZ
zW4G(=IcU4<ZTPRp`z-O^>^U*^?$*ache4??XxKP2ZIIWW++hatIO)c5vVeZkoyOV8
zEsB*p4_1lzJp|wH$+|G>kFVEuG($a7WKO;=Cgejhejs>6k>k}vQ(j@=mOw~2F>%U1
zI3<px=kJ1)c}1+^o~?1?YNXCXZV5B3C6<RODZUT3fD)IQ*-g=yB{dT>B~7jr4V>iz
zkP==Q!VH?D<Hjoe#8F(2gGe~p0&jx)p`&`H{Q}=wrf@iZ%FeK~U!sH1G-xMG2mHqm
z7P@iGeB}9XiXYEJ*41tlq!RPlbIyS_&VjmJnYV*bD<?_qJ{vgxFV#Eh^0c$Qiy{St
z;9TJ?JBgNT;fMXJw*^5738m9aPngJ^pbDOBn(whDbMZ8pdIkO%JLVXIVtz6~){dip
zuCCl)eT1;bV8!r9(@UpYQT3(_r@DQ#lcCWDIm{U1MOsnaSY~57^?Wa`|5z^h_G#9g
z4Vz&kzl!IV3I1p(0YJwz#`d(5Pr-B_PC}rATl_FN!_~_>14HRwGTR}VtG%k@2OSEb
z+9nFG7Y$_NMTW3=#ODE4GDOH0O))Z#qCa^!u0DpLLDAC|L8Rwci!=$nTWngc=zU<B
zuD<$dPHZcpn7S(W*aiVfNE5kdu2HM2B*GR^uMFycm16Yb2CF1KAHyPqaE}&^f87v$
zLi1@Faab;xK?x9)VRCG8JliclfvP0HwrA=+RK;}>Gck+5WXbB*_o0*p1AA*!-4oWx
zwO1!`Xh`ZFG}VJh{f=2B*d$|^RKKnVIf(uan{)u7xkHU3A6%x|ChnVlJc{Q?4N4YI
z7VUdnx~EO0O-3zWdX^L1nr2{$Qe@2;?_H-gc`h~MFB*@fEy<l;@GNlt0Wk@tc}Il~
zk_$qjK|~otO()e72uq7A!@pZ=n&|Of$-^kVgJXWi&~u<CEsS&{oicvp75bv@fJ-6h
z-(p))Af2rRkh0LQikl`}zz#uDEol}+m@uP>n)28lUJu;mlH8#YbiKbwC-(Ko1_pl;
z9m4g2vx*im6xvTP(ScnLg6ig|5-dXz{%(Ico`MlSmt!bt9T-KzKk{*yU3IAXz&!Nt
z{`>U&!3et}V+!g|g^F0mT03tS$@b;18nLFLNlXxp%1}oWdQfx1fC(ZF<1sByq?%&P
z-e+cZQ(morKTkR<O=t#^i@n5gSta^kKU#AwA?*>6tVa9GWVvTqQJHpgRGE)y!u|LD
zfl;y-io(;lbpZHetgP%z|1qPovizsX;NxSIGqbmFwIpF>N$$I$Osm5O0Mh`S0DD+Z
zvxnc-UQco>X<nTG8qhKi-}}>D=QYFbk1oIaL1aPy`{d6p6fUjuo7ZOt|7PU!vNB~l
zKHqx>50qMKTJes@(%#<NC25{OWZdvxp>0UWH=N{T_=>#~A-LvR7VYwmIFD}q=V~A8
z_5Itu>kD!{D;n3|j;)!9+uqHOt+8ev`CgQmq>lLY1C7@P+aR|qy$M>#JD5_sj`N<=
z>+M(sm@0CgY2!}!+SOF$m$woF=$gP&>IKE^u1CqqD5jJRI!6&J^=QwF)@_50=+;Z)
zdRvVrQJU|fH;Y->G&8hzN)EYr1GEKZzT1iP6`7RXwH|>2)z(C?x0<L4W#)+;>OP%B
z9p;V{`e3`Mb0BYL;jTIXg50eg-inBdw)uHy0_851umsP|(g97MXL&fhW#z(c>&+Q=
z;nh6t8gjEq_nph1x)!AbG2-`Q*ULHB)PccbzTF1bVfKG8nFLPC8jh|oAV;Lh$YV=^
zZG{6v9`Ek+2-~GMEj3=goqAmJ=-PpMWNvni-N<iPhM>#+(>kQCN*##-_e~NvYg&e+
zrL1KFOtXW@^VHrc9p~61ZZ_f|{vyup{0g+7{GZU@Qe|*R3t|5rP1UfFt-o#fXimed
zvkp<KktQ?KW9hP;^D~fITWU8kF&*)^Fn~x=L&WgccLL!E-ec6V>pTtS(M;G3l~q$M
zx;3C+AwedvU!~t^JU<$c0VNADHqJrW`Mc9$hQIcRwq&3&#A)k3slyGW@J@zNxN>H$
zFBUm9lR-j776L;C0ip^Ks3><2VnGn=CM39B9eh4suZKVen_2xY7E%kw-HpH9-p_bn
zKm2)L4=$#Qd5@)WA>z_>HhgIJHcMg(FlKXRgh1C}k~yF5tJ6WSGAKHp-p7ATV)Ehs
zK+N0WuVG_s+q6ad4>bv(K3G$ph~l~TBdKpy2Sw84Pir~lwVJk{`>%U8mZnmqYX&e~
zyCn>h;E5^D6hfEbs=@9Me=<WU%;A~c;_r1~N{~_}HHX^vvxSu~zF(r`%0zvHeJ6}W
z$pj&w`;=G#HKF%|Ra~pgZu}6z5%g%edesmpv5G|1S<WHkVcHOBHXj7mgnzKI$8R7L
zAs|E6jt9#WrtV7(l$^fxz9HDHQH!b~HfU(9@Eio%V-^=fp4s_76TR5&f-J8~h4#*#
zx)0&#be)>SJ)96n^rM;Q9kJvsy6blT(t-?;`kBoz8NUz>plZW0Mpd&FuJJ>!Ap$qA
zdaK`|puuH~(cu5>l8>zR)ba8E)kW<?L5ZI(&+tr&j7<6br-}x?>KydvCf$Qs3*p<E
z8r`rkr%xu0qQw!}^b*@nIS!GWXYB<QD7;obJemQ&i{uSYc|_}pN$-6m1|H%-If62U
z5md)?`nmfLVR|?`83Uxgv(a**(BqE8+JI=(q4JmJyoZFr%}wsSy3gNNz6rO583_@H
zd|_inh$U}cab)F@P->a_Y$FS_^uYoK#G6RJ??*_+itH+IiG3q5Htl03gSCnvGl$iL
z5fQzCg6UJd!z06~i$W71daHITt_4BVgwFNCmg^{GCQJ~RkOZL>C6|J^^LaYfks%OC
zieXftDE*Z9uBHOL!Fr<9k-4g$o@YK&-_>>nRqGdEsxeV0XYkN@xp4GX0O-`lcE<Y(
zk$Qq0AM<ngdWUVZ-vEe{;u0)mF0>rM+~zc!1j1&K0?WH1!!+p9C4N)wzXWY43dr7u
z^Z<HVok;iJNvT+cpl_S(>m!sQt&pC|L-Jv2yRn1EjaKxUHtk+$f5aF~q@t+LiA>8E
zy{GYBw_qc9sv)&Qwr+YhU`TH`SZq)GwRXg!>J-Rg--vUw)U1fQ>PD)(`Zb=I>qTIK
z1w;;+I<aX0rD#a)oVb4~U4i;@8DO7WCtU9iRsu=g2i&73z^e{&-u}$)9cc#vmZ1A_
zZEodhB41(r4Z~w(*-JJsMUtGC7AijdVB!>UGM8xb${wg~)xb}MRbp!OcYwKO2i(%r
zCxcrS5Tv-ltS=oh<&Etl7AMT{RT1QDvX=Ca*E)tUqT)0zWz;bD(jaAejPI2w$>qWy
zI7t+(EkQSV*Q<V*4Vek)=3ngs|ELO)_Eo5*<}~;w&bGV}7`z<Q9DUZ6FbwzU-hdXa
zY4DdsvX0?Z1L#gQb{>MlV`Ud>MV*$G?;`|(^{m5!hTzSoZb_Pf%++gnG?Ytu7&lTQ
z#4YkVR#7rNJHuQ?av)l1hmYwIOLHVMU$AH}waZBymG-$4>-Z!Feo{T1LC`U&Jx<)R
z3U)n$5ZAwJC$}p_H1HR1os`sRkzt}xmJC*g3gePudG#W_XeV?~q(p)0vzTKDaqDHp
zB|f!=pDdzGNypD|INv5nA{*OVaUc{OZSuo^A><f%(ig%%K{<nU91KB?h6vh`nh0@Y
zd<DWcYN|y&DgNkQJnA@?EuDH^_FPNF2wq}$a%2wcEuvBJw|mCBR{}Sru<pxorgMxI
z`%*M=7=JE1v~5lDn8z1Yh~tTrD}PE?M?`2ZjJlt!k{S(?;!WPTMkLo)v6B1Q+L)|!
z^nmlWZ0^srB47qs%O~<&cP6~<{Y)bn1dv0h9@n-?3<A6XAVYU`NMm<%7ELa{U~J5h
zzu!Vwqsvse@EK(s$7muHWuPCJgIofY_67f0V`y?0bg*SDsL7b`LLYJlQ##imi!ko5
zT{j%`P-qcA8BLAUFW-T{>RHYYGqedJ4`d)R=Q}@EYw2vs>};?C+p$#@8oaWy38{A!
z>t=EbfuH>hh>M^$<zL*5_NaN7TIrwc_NQ7bGDWCw?zS7d7MD~raWtdN*=)RF6w-D0
z&I=2DYAW#7j(x)pM8lIvcO-ejR0;)SO!+}3I8fJ<M)*yY)?3p&R5+mI^9mKy8GKGu
z8dAjd8f8=W=D11`caZ{>+NVT_uGhC4?X%49w(h&^Ak@xcSKq3@j@EM(9M`P}yNf?7
z4FcJXrhDxUKVd_SvT2HL0hR*w5B=%Ql<%wV0Kvjt)=o8}>p<W8y@l{cxGEcy_%xBz
zi0QfI{Ej$nbx$c3!LyQ6EG`B4Xv<#jaPY2JuToRm;pXTv={i9rUNw(4wnqv#6v`ra
zjUitRkQ+*XJX%s_wM}kW+%}e>i<gy%)^<lI^A_Ao)78Nkwd`?1OLbp~_LoMBfB*RU
z_;xU!3=j7P|H~28G>MHW4lsK|&^JnU)0wXQp?)b8-#5i@&k{*_z_uH9i8?OK^?Dbb
zDqks^+QmwNWAEKCjfbAk&V3c$pkjllv=7GxWIdu+8rZi~xp^KKD`5*JLTWzD*!wQf
zYH2e;11=g<Zq1*M_i^$!DPT0j5YU36)W_ae)_CIa*ZXns&v_D}Q=NY@M}&wZ))>}$
ziUSW~J9JN|)vZ4|ZDuCbhns*OQIK3q(8Jh}Y7AASNuzzIc!&ba`DU9WFf5d?SY!wn
zWXEVeiM@$6gCjC7=_b;SiU#H^(}jJ%fR}4toows5|7(MtEett63`uvi{pok`xkhf<
zbMC`w;~)#eRfy@i28wA=p-iyFHt~uN<3$wi*b)?_L0X_Z^Cn@egj3VrO&rHt!8=#5
zyCOplk*<ZYn`6ZcAC^LSP+x&W!Cy)aP{qD+fyyfi_RW@g+}ftucT?7hvPttMjRO}E
zhY1pZjmdTS*x-1K`5M`ST%YgK*ALN+xLp$sQ!SlD?mrK1GTf8qL}~o;nJS~O`8jUp
z#qx0blpj!M9{rE3(doFI%A{W*5!yW*I%v1Iu4NZY?t+9XD49>X+xDuWWwuj^pi;pJ
zqQtL@5gnsL=>_8<lM0MmE_=4H{&0C;t7NN);Xssci(Z(E+?B|qtU4vXaGEx^$t0YF
z+;8txeyz7^ZBzL^=|cZvwk~lJg{{P7Fk=yqpg7*o<tYweTh~}OCX7;8vKrf}vG+3%
zTv+|$2{a|FEffnlzd!{)&JHIw1ci*Y2_%31D26owF;P1?o6%)0#rS6!mP?zJ>e6Ko
z`_aHbLbm9uc7{@zA5ZV8FgJfTE*0yE_tRb=!~?%KvafbN+V3xNKr$Do5^PGloUmQm
zO$Fbs+acMKA#Bsd@C#P~#R+Mp!Gyt3B(y6X*Ei1R<oy?E-2`2Yq?hf=LE=XYPM;a`
zpBl|%1fckb-z5P}(QNPX;KrO=j#8+Z0C%cft!b)1G0A>D&C&4QuCv51eiP%&freaL
zo;sX?s9|<%Xq}^)m|j7?k&4N3Zku$6b#i!WRzJp^*sF($O$-PXIiDmfO>H#~g+*};
z*4(r@dLwx=?NW8MZl4k9Kt?+st86laADL9dkw8y`fU~vP$e1K(BPQ~*mRNd7n)6Q>
zM_YOR&G9~EdimE%A+`CixW8I~DxWwH2t&QCrlAY(VEk!9x8*up3_xb)FG4V+(mpn)
zrmL0e58vxCk-OmcPfPb8zB=0YDw9}Ev^U~6y8zRORU$371S)!IUhHnLe@R-p#u+R1
zlL;gDIG3~`!B4w?!6+2|hW!6WJpVP}VPX022@e}H7gL&&8xS*XY6$=XVBtvHF9xSd
zYn%iyfG#e6%w%)F|6uLQd^LEpe>-dUu3=ugvshf!Jh%4xW_H<URb$reUv&Ukl>_nJ
zhMa;+xAy%k2NLOe6{PtCY_)96>Qkw^^UK@gygDeDX^P@})WM);wX)XW>p^mox9J$S
ztv-MbdJf00sRFg1X1IG+1O{9p-Mb%g8zHwR0JKMks&q@RS96(l`~Dj_1&V=N5&FG<
zb1q2uH0g44$#!!!N{7T+s0#ZxqjAqNK~MqEC{_x*;|nDQFNT%-%s)Ge)F?Q}Vs|}j
z3^lc3y~!phmE19oN83Q;whzdQ2|};}O7)vITxMEfGq^ZbHL+c9{77u(er&QCc_Kv!
z1F>)?iu(TLR>f~1hb|XqI1%XhXRE2{^4p5HJDaDaLyTqIu0wQ({y}Q~E+8h(q++2#
zP^wx?1$_b_LP}BP(_EK3ZCK{<Sn@=70<ZtgWh3#q7SlksS$4xFS-I@RMwS67{b2B-
z#sPR<c)sLw&k|yT-@q!d?-;B>%m-d#f=skZ48Z7?6?~!^$V~?(sFCENe4mV@sHsES
z51)EV1o<F6Lm<rWNstcxc{%*3!;-AOSmP1C^KD$b?@d^_w&ZycbjY)|f~#7uS?PJ=
zAD|^GrhnbT36B7O7EJE}u@vb?`kiXLavjAG=TI9QnCx@?<txX%ocI(nr0{UkK)8>y
zoV3kDYJtVLfY$jyLxyjX9nEd=zG(jElT8i+#jYYf|CE#zDw7=gkL-dUDA{<~s2X1F
zbN&#g1p#H4FPSA$I{L>yy2tc;y=phzKEqdyjWBLVTHuYTPU-WFY*OUB8Ip_*sw@7S
zx$wu2w&;ARn>2s?{#)bUTQYlA0{SZM&>L2&o#@zaE(k)jn$4(smnOHWOcGvF-IiEx
z(ix(NabuMoIA8r$@f=#~feJMv^{!qrd+4+_rI(@&CrxX@AXIotEwbkv7<(9+p}Nb*
zPbqKoWA6`(5LFcjS}W-{PFj=5A%1(wq5GzSi;56j{)G9_H0jlzm89it0jLIFh~^RU
zJ`ucH?r0%@y~qt)ML!`DMX9Dtp>f)^<g{?=^!hN2t7&*i!Z3vRQ<{dDWS*#c;wawB
zAhiwSS6y~oNt+|dC3l3;{J(YpVEml^&1fw?J_0yBN$$+GBPdQ<!~$f+j*r;ATkK47
zT@{=f=4cjWq1DKpc%UMq1$}3PvJ6~e%8IxTUajI2oPN<RzQrXyRV^7Jd>(DbPZ~?a
z(9Kf(x+EL5tj?e*;J-Ltsw<SF!X@5l-<~QriVP*pWmR%t{rd&I;Y9EIzZ3zE|1JW|
zOw64Bqs#oq37uBH3V;V^O-^j51YK(BD&k9G_&?XKbtwt`OSX#Ep`~21LSf7Q`JMet
z1FL>?1kz`^CMTib>v_h^qk9seC{*K5{tmRPh52l@OV9NW^ICKmCBUWXS3Gvk`HWjo
zcGVj`W0L0JOh4GT82B)A>A2&@En^;#83w2T%oiFrZ9BPe?&AEIz9?;K2N}=={1fnV
z_KO;Q9*+L3*9q3)<ASS^=rc$ennmE^rW9Xv9<J8Lzjt$fE-n)5_cWiw;SP(WoPYa#
z)`-CElSxon`@2q40A@VXQrh#`b6qVO@h?AiUrguTdkselM$uafr+ibupe6?imV#x*
zldwbU7pN^08@o^>p0k|@6SV%KQoHEQDIB0KvDRGEC=Z|$D>kW2uhh9E%Q_j`nQlm*
z{poG2NzFl2KudQReZO_d37#UCy6`Fcxn6!sS^_3XeM$<0;T~P-%Z-l<y|N)r1m161
zY`@FU!3hh6CX0!)88Ps!lY86c*l+;MxWQ}24%Y|52ALG>wD8Ak9Vp{VB>$k-UDk%X
zyqeu+jnV%yM;xFemiaHHWJ|pzJ9Kp0)n;T*#=SUAzgI~}ggW!Bkou_O<YxtUmHIi~
zbr|$aTC?{|Kmq}0A$vOxF108h*01j&u|MW@dV1#Wx9IFJGk@i?0v5jWts#HvW*eN%
z)lF9n#INu+$`dUZrh;Y#f0~j391$u*7w(>}J|U1XkA#Gm9^3>F<z=T$4zSFJ@+-jt
z>Z;Arzn@1UYIW$|YpL`B2jwRu4#MhU3>yyzvah`2T2Jo}m=I>?_deGhAFhV3TYnT6
zRRCHA<SC%(zkYjnkEi7ek66W%vO6V7Y<V6dThKUTo-GN#ErW9EPP5d1){0gue-tp~
zV3Xoh#+G{>D%n7m(|ZFr>APW-|8X*=K&$I)&8OK{sTp*E0d0RC1%;4_u{;t)b%lgz
zs(8i}GTy7XvU6f){Jq`0ebrKbN!0t|@zd4u<w0{?u_q6tB+ZpA@Gdg95|$rC#|GPC
zA85DCh&U@Y6oW>-2$Ne78WT)7jy%d!JBTnNUyNXoA97m?_xQ~Sl%{k|%VkwfT>La9
zU2)zFO!sepxt7(<O-h$J^2|oNouV6)=~SvUX|Su6DtL8VKL10i>_@p8Tyf6V4a2y(
zfP7K+1Lk;(kNj!b(T5kC1aZ3Xmr_JNu2rK{HAZ5nmqE1ufIaMRnu9MHaZ|W8<)J5h
zOZsx98dUhb2-;`(j%!_Hf#Z)aCg?jF%yo@YoNNusn~ojF9BVaGm^(pw1#5SQSuk73
zMd(y;FuZL7&~2w!7rAB}h;Xu-06%rHq>mPRpnEPzE$0PG0<JF^E)@5fm9e)JGP4T(
z1+?)wng+E5Km$Dw-QPB@`YO-r=hh8uElGdU_Z5r&K4@3nwxsQ8QTF+rJ`CHJz@No^
z-mfj-&-;DKOj{Bzkw&RKPVP%RFi1l79qN6`-1T~G>^<=(Ys;*NOQ*#nXF(>;?KPl&
zb4z|W|Ec>!+|)VNDWZi-YzjU}AXMbj=+0zR00fADj^%g%ze^Y^(|<}BGY8xMTf$gb
z|NHI#M_Nvv2U4ZIEdfv<cCOjekd^`DAcx(le{qkcOd?z{Q&zpm;x`z4p=%>s$N4Y@
z-}+rgv~UWwQ2GZbkTc=AVoZv(sA)v&;gZR4XvOBJU$Ic4{?Ukqq_Gfcugq7eWMB(e
zlI$KX(>5!AA6-2)O3PblxqU||M~Nc{%%g{*#tZ<eL$T$fN+L`;icpBrKh$q%fb5{<
zZrdowDpYz|_F+?{m?9J%LyV1+d+CXE!=C#cy_tECnMBi3J^b3&==>IzSBBokqRXoX
zn3ERR+^ZT^ibKB_F_o?NG0Ia*$PtNZtw{t54~3IF{7#*4?OCg~Lq1ZbaNb)kft36W
z_H`5XzRa0A%kxt64Dqgk1D1xQ1G?bQH3;;%M5j|IYgmbX@{Y%VC-&~$J&Q%w)BJN-
z-*Z+e&n-+)va0Np`o2U%ptmaU8cCBLISa3+_9#GjRLPQ+CB;L4flFLe=rl+~N?C5>
zn-;%`B<`woa=i8nlA7<SnGYhksL*wZL1rptva9W3*O~qOjX7ht+vY|t0OVDE{#%nA
zE>waGTA2x8lP<PR?XwV+LM%$6(nu#k1#ayT^11uT)2xBK7rj6{dNm5GnVPZdUESK*
zVGF4$_Sqc5r9!R3ulpezc=eLgHJybc9P?<#gzSI1fuWb!_=m5ySs~nFvsizb>B4ns
zj>|GW<UuR09748UP^C$I&+6M_)j8Zn21g4oGBBJt&ef-0oBy1)RobMyq$}99!c{xs
zu?QS?%$u)B(Ugf_k2m>53;V&IGUbL>(@B%sCi<M>10($&TK6?V`hPi@Z2x@*Ias;V
zNIig<aQ_){uyUoLW`a|JHtn}0(6%i|*Bo$O%<M=-pFbPke@7F*w|fzSuY*DS>kEqa
zy%|`f*OhwwE7zBovvK3-918jZAe+Xn&MH((6)+#22H*sY_KCl;YZV1@eY0=;=|9tJ
zzs)i#<o5irKY(`#QBIDYOnw3Ua-4?yPNh*X&^bQ*_PbtLk>Lv-H2a<1cjrBbm2@vB
zdU*U0yY^RiJC_eW(NcrbPyCP2?*n+Nbt42d-F%?Ovk%+1w~KIMf8Qt7m+s@b`sSDS
z>sf#JXc6oI-N<N*zo(okkmwS}s-U+kIvwa}0{3|x;CTt)B6&fsWME*$GKyNvQ|mTJ
zI+4Rmw|eqObTi8y1ebrJuqh8J_)e!uw94>P-64}cMS}nvw7#^uYNS0e0K3t4R$$iY
zpX+P`Z`8-KrY$k)ucz^;J%F7#{yU5zci7G-Ro0$*_t^%8d{&L6sTZTlG54py<7%MI
z5z1p0w^kC1HrMs;L#SDleOpAh%$fp)?1rl_Dg3k*w|)XV2u#Gg(|(?>S{?4$xHD2g
zHB^m-+wQ5&b~DSZyZx-XHPq-|t5BnXW1Hdd%1wtGQD-`iJ8xqsh#l62^^-2Uwpq}V
zwYybkIycWDmSi_*@cd|QVU|4;BH~~?>$)(w`f1>jN9!$sw@XSZQ|1&d;19;l=?~YF
z2HOg8WL$kq5X~ZCyW`@sTUy=F*a0&6ZI}49kNEL2YC{*(!Yc&MEkfb?1q4(SE<oPx
zof=%B;`eNWm5dJNY2K!*CRI{a4Qa0Hx586}?Vm~_!kN<*E#G%*&)jkSz1*2!Ip<Ph
zKG@Vlv#6o8;ZOh?DEr@-*6;6=OOFK=I*v+syxz`3K)?9>2)}&3jvzm{K-{mJ<Lh3%
zv#WDC#wB$e*${%{yUoiVCFODJkbN-9zK)#~U@Mm!q3g6E`54)wOUL?X__4ypS^T;D
zUTP$&QPN{{W@M@|P)pzva>dj^i2SM(0&$LPCZ}b;z@_}$sUc>SYkI2w>dPC5N>oq6
z2w){Kg7$x_4@I(WP@33t+}G^bZ#X#vH(H=#P!qn-r{5zUj5_D2*lp4k&<|iNEG)xX
zJ8~aD2;rI6HVfD#B#ZFKM15A`tYxdh=@;yGTadtQQD6^M!7rWh<@Z=~{DG6saZ0rp
z95CKIf~YgRMyBqVxi$TL;iUcpQ%Y*;xO?1l8Z`EDUZSsQ_ZuIkHjy_()gCKyAYHM>
z%b-OaKT;`#1fe@v3`UDnEF^JjU%J}XIF03>)bTNQs1&;0_MZOjxq4E|h2&=@YQrSC
zIAV=?MxKmvZGc1tNP@|$9iFNbT&$<INyMnkdlC3Oo63~&=XKC@<LIxJN8_j828Clw
zp`g~A5yRSOGglZc*a>9f-qHov*^)E+%n+ZlyWnlnE&kWnVcjJ;{j3zJ-tKlB7L`1*
z1Bx+2?SPI2jq;oOc$bA5x5#9QB90UtE=iI3Q|{B_>(Ok;@$bzP@{YJhh26>F;#Nu^
zA3id)JX%T*(+eHRwP{D_4FJ?yWq^|13rGr*fS{#fm($Ee7Pe4GNMYZ({%9B*EMcKE
z=XkTE{7COtJX%ya2kZt3+#x)msi0Wx8~qTS6={kHxR^-EuzDmcgc!{U)ugpsY$XIg
zp%pS3{?n3A0&f!J1~yWXOTbou%L6NR(KZR<#+!#>NDAdh5RlZ%rDMbY3u}_M2*kVX
zOjoFo_PBhfMdd_ILI7Epuu}-EdDo%JgTaOSM4KE{igw?GQU=uWR<ISal<Ebii18%t
zzs(Q@$iM=YD{N~P76V9x)4EDO&bGr_>wd~8`2?Tgs&$so?Q#$XAyB06243saNUI~l
z{Wbaw+N4S@*iW$7NN^{l;k*UbfVlM>gsO^uWbvTb_{gzZI>w)}2V<4tF6EnhzIGUx
z+?2>tb>|}qE2*+dw%2woi>3vW1IrYWm=8UT>F|=-2N@sn;6#Hd)nU&(B`^W6XdhW}
z-tUvFzuigH$!^rw^M_JHF*vx-oy)8M*fs(Il+M9WEcq{HVc^Qnzw9KKKuUH;)0b}H
z`kE7_!imHRHqlW;P#q@Vk76E|m)?4A@^V6ufogKQkRMp`9>RGAWj6JR5Hf*hRilQq
z9zv)c2I3f=eh|}r1gQ~?Q(JCdMhB^tm3FEglWqg&0?<0tM9yhWanj(f=bgyQmk7M3
z|8Q^Ua2$~<sU)0k^#j~Ypky_BT?0EZt$=G^h1=H#xdk_&p3+Asq>EQfJmN!|J6?Qk
z>g%R?Ygq<jTVQ8Zg?umSk5#A<T)6()78{>Mzi5=jOtzg{yOC-h!ZnPPF3KA{&a6t0
zIRtlp6<3tsL-3{hX|5dy+K%xdSNAtYCRhHR+AXq8&~IG(2<s3qpcfR<7M~-lKG7;m
zRispAwjZjb$p-QHu=iKBl8de3l?M1t-pPef`o<C;$`q(W9=U>B<J*WOgfTwaA&E<x
zL)UddMV{u74>kvOO1x3W^{_=W^_sb&^Lzhdv$Korr3caG{nbj93fU)Lx_V9*C>#0K
zzL_0eQJGPQUq)cGg3@5<k-JTTHn9+uk`S~Uve<qtuKXFmjD@5*yeE)>;~RyYP$39~
zJzt!#3m?eeWyx__Y2i8wNvg7{+g#3@R|*$}Jf34N(Gq#JRJE~mxwQq8euP>Ur1-ar
za$iyaR}GOMWmKf~o1+;VwoR`vlaq&=Q<Drgrd^U!MQO{K5){>e<|%Y6@s9r^1hIYl
zS_Y6*#sQ@-6X(K~JS+ugsq%4hK3>458A67PMvu@3ttz=!0Edqw1U5v%$rRazKriC6
z{8JNC#$s}OL_9}~Wyv}p`JIq5byG4iWG7l_DgI6v-BbAV^?nnC099Zr=B2)ZulBp5
z&I^lqWAXAh283-elfjfdag6B%%LZ`UnRR@F7avY)XC_mHrB0qe29Fj-U9Tv4^Hep_
z!jMuI<)19Lka>t(bf1j}`^hKTtDoxf5D#NioG3>Wr`*Y#CG7tYg7G#_XC-;ZW*+*-
zD~dOZJ}%aDzknx(FF$oI)T?d2bSa<g`52??7Yjnl6)0VAhRJh(|I#@Cb1%|%mAdS%
z3{&I}1|%;f?jEm4b+E5y*qtAtGESzD3K+e$2X4<LV$xg3IvM=B@5+I>K51Rs0xv}y
zZ{?=EGwEm&f&C@T_~gU1<ZnfWN;qg7BeZ|R6SL^}iLJ~BLJobcBQ&<B6HiglFOAUO
z5NK?!Dj<m~-}VS**(V2woBDpv=B+$jc|@JnE#oYR2fU`Xu?)ex)Iy6xE$IB|<UG2C
zMT09v=*<`&vggvUu>4EAO?8_hk0VO~S05PF4wi?H(?_oi0Z$~n#=NPrJS&m@H7>7<
zEE83Ooq{N)jD3`dfg@BPr3g;R6}AA9eBd)QBPf|f3?u&8f8ajI$?q49W7|cip>)ET
za>jMU<5dD<e5-}WcNc1xfluxUf~LxS$<$Xr+XA9^=vE>Jo*t4(qb$P4rk=v-#S2Bt
zdnn}HQio&&5)|)Q#%H@<-X~}{NO?Cxe)xP}#Zm-W;7k(LqJGWj;Y_1)PB3j(SLo-A
zI3O9shnm)2cOBFgQeE+v^Emyld)`48JjaK>!h3m-5UPeY?eBV}BF?PZh`agGKzLPC
z&ixI+vM&@lOd?uwoD<2<#4)ca>iPIl;vH(#mSc!Q5vjtr5DGz@#DWDd*h&^1&Qsn@
zb=$w>rGaRo>JHSJh93TFoWk)GY9-QgDxh=dv$h?+0{d{ZfK0PFM&P=&%QAiaJouAp
zF#VoKyb?@bqW+PCq!!*_D*<h6+NSw-fnpwRDWh&Zasz~L*r2kmXIgk68*ytpQ@sDt
zD6ePBap0Wn#UnIiQh@PN;t@we<U5#w42%Fo49$Dp0KTgq3~hEWPN%GO46Zea8)(YF
zunfE#F<~|gDY^faeBAKv*FQdi`TcNDIhtq8?%y3u^BkYT$MOpoK@*lDt@VB4=CT{k
z9}n8OU<VgqBsU^WI-;F2i=o@*TV;vnzBj8F5aJd{D$dtkJMyQK6)tS2+}AKYMQs}u
zHvdveetmPvr+$zKM;cc>ODxa`!vH;+cV>L)50Aj|I2V=~mO3m?bbR&>Le##^bzI7+
zJrTgur6;!x*RC5PyL{~(B2a%c{j?3-Nth2F$CzP7U!rCn_{F`jy4#>XY^59jadQpA
zSh{xjUm6jv|87KBnOXlw<zr(`Q?3S}|37{!%ijQ3aHF*C-~S@=5;?5yF`DLmXDCq7
z{JrfKazj~$;Esb1LSCmu&?j#>94eKCYha6mMu)>YYqlLUh1nWiBni@G;|kcr<Kdy<
zSR9ypKhOM^2&*QFSd>RP+D|L&)sSOka4~POJ8KAQNnuxM^}g!0mp`e+&@ScBR9-1X
z34#Tk%4@?7AqUDpa?zKUZAX`|X^1wHEwa{DKaoHlUbu=zDHCm;ox2R-CEIauQVK=J
z(zO-wLDehLBWd#<Lo|UN6|3h?#A^~a59|9qc<PX%PPvp&)#+4IZA~y~4p%LYmQK>J
z>KLI-%HZT~ck8hRDnrzxm*Acubwggeo}qSXWCRvqt60?_roa*~QJInWJXjvZEv0Xq
zFo{e*>?+-So-x27dznXTlrZ#^#qXs=Aa%N%>dP)`r{f<F_|rXA?Iaf=G-74&AXLK5
z@%tcFp_jhNXWFskG|Up!ou7@CY(MvhEukREF!WK8$4LA_IqGY30vSS~RewXk`_oqg
zW*Y0RC(+3Qx+cjo)cxk_6#LsT2Z21Yk+z!Q+`eoelq9o?4VJjouJyEbH>MZt<$Fdd
zL9r4UPUZ(Q7<6{uYrf6!Q1iINo<<Z0t&zQMFCLkf)^x5o{}{o)e|;a(b*2gUfJWiL
zHto%oh){}4#T+&>4lrMbTpU5Ph)IHAb$lL~{1Ocbq$xgVzj*>MTQvIoGFJv|#~z^%
zHB3=&dgHGL+XSZBRJf&(CbZ33%}JU;dQxUw*eoI^282jezF&5DMF3K!Pi|!ME{523
zZ`|kl24!gw5}yyX`);t5I|vpfLc#!0k~l+sU<Ir=IIYXhFdWAttg4ZsBpqykgO;;!
zo*z&k6xe~wXaZxLKc_)@pI*DJI2~cEUcmlf^!M3!m~=<O4T3w^mrR>DI<~yqM^sj)
zx?9+N0)izfuppW~*$W>*km@7pecvtB<yH=q5<VfgCkF=U&#v5V{1)&|Q8po>AxldR
z_Q+d{B5AH(8E|Sp1}S4sH_W@NJTcs*igrX$iwXK3UrvKqXM7Z1IQ7PJq)a=<$wywd
zBezi@`%6Tnpdq57qRhG|r{{tgr)j*f&NR_se$c+s8ma~G21$)6S0y{yMfjmDl3SnF
zHNd;CD7xwV?J@0L=weSj^ldx*UFQ(RJM=DZyH;}?xI$`gBgN;Jm%%JV`D@3U)Rz(@
zg!tBJs5|H9w1|+{LlQ}`jtp4>g8Knx3;%VD+qYSU=U5>S#I6+BG`qxa_nfd$J|9`c
zm)g{iA7E0G)F4mHipDO5Wx)@`f<(@6bSaG{3c?fjMjqBnzizIhG@P5dVor3N#T|F3
z73qhkIAc+W4m&wF!>&+jBbhC)wR`}<pwPSO;G1Bb`9M&Vl=5YrTZ-4meM$Vuqc&e$
z_zZuybd#jW)~cEg6$TxJRAEy6&i9T8v{DwyF-|qx+jYN$g7}?2j*Q^BS+h!m4Kaag
zIQ_%`H%H)NU%u6Inw9@W888qT`~^$`V_rIDl(ein|75!GZ*S9j+D@`11&;?I)fu8D
zH+9(r$6~5=vuz(6<KEKxA)=W)S$T9gdGc-JoQDKAN2`P0_H(oCyNEd``xw))0<?I$
zH`QsYFgzvO(FHTNOff2N9QxqN*lCu-MApDQ`7{;XVMDfvuv4JLJ%lPlku4+$&i+~c
zO$^tw6FJJSR5QFZ-@!;p7=%H}BB>1)M`L<vcSVf&ToN{M9OMRgcFD4S27Y#Veq3al
zWlaRP${a>uW2wyJFTZ2eX_ur^9h4-Ig?PU+A$?nJY0$Fc^ov1+DmMX;aG|8TgKNee
z^XKFn9A@WChSVGThcpQq?EUP;o`pCM7)`?N{fWG|(2pjA#$0i#mOun@VZM6JFGBgy
zRGu;{C`))o95m`%z3Yydr2e!~p4wODG-KW%@vlV>@&l5rXo#<e4-eH)yx(AvR`MF?
z9CH2HK=v76%*%g7r(|{W3F|p3n=y%Su%jNeJj*;Y*Ta4!*i?$?WaR)`(;YI6!9HSo
zPxC(K&=6Dd(fx-V^T!3z2pt=<Vj0Ys`N$uDM~y8yn~Ml-qErPuHZ|;$O!I9%Q$_vT
z!Z%94J;1{*1q&0fsJ7E{J1^B5gpVWdlYeXutVs}a5M4A{Pf-)FCBIaRI$64UWyr~q
zlLQOyT0^w**g)jgJ_$phcN5k4WZuk1gMW@SefwR>x=gBSS=a~?9aW#=2x7S~>Trdh
zVe-OK-B#WDhKZE(^PEFp6Lp-0Ve^hZ&$Ib$-SGLxAdcV&CkDWK;F)qEBup7y)@AVJ
zbP-oYO=*~N_M^BcBuqy-<9EvWs+k0dMxI@?z<kea6IX(l>cX24oHYU@A+Te`pG(l1
zPGTu`@RDi!OI13J@d98B{AT3tnU?xrPlZ}fPigNLfKLz&1re`>f)(+^<n+a5`1)`-
zXj)jGzw_lfdzxYA9klcHj^^+C;`TLou^q0g@H+h#p*4WTB?(6R!3?a~C$5fuesgL1
z?m9m1{Vsqd;HVep^?6i87Pt7lkXq1*@K+ZkMP3nJO5!b~9nX5y4j_O#+odEgxNbBr
zdIwO=qz_7Z3DFJ)>SP|;9kiVpHmQBvn6UHQ&ntMHFrlJ~`PC>d$vo{I5xI>!B^8hq
zpQrqJoA2Kd#=<7YpNCKkbJrP<+L#QhB&e1sSK?B_BazlPHYyl6*7?gMMl^2LflnH@
zQmGGn3!x`*DCX_{ej<1#w|P`iN-6-4d)MHcGz1g_WMrii2i-mU-nWvO2=PK+X7S+}
z44Zs2AZ+XLkHE^uW5iIyt*7%P40!k@R0Ov31XB#Hn4TW+VS>nex<zF`I7ZBw@oNSl
zf1r^W!(_{_*?@KguAhCVmM`F#u*dwh7U23wi%^9?(KOyF(UBfQLJlt%DS86iElAme
zT?-N#VfivA9pR42fHLjfy*yZ#FoLu0B)towGJFl*Ikse}+mZa^H`6?7V9yi+Yn#LM
ziCY~BcECb^7DH<f&kM<Tk;1_<_(!Sw4(!)KfLvwUycR>xCEOA5#{%VIG_uqZ-Y<<S
zh^?U_fl%6-%J-Y7sfdGDTr~BC4MI#Re>thxqSOrN%{df3_!81^p(Oo);@96YCOfyF
zzsM61aWDV(y^HNX77G?`?*DPUv!(Sf0nh<#9BIlo0A`S`R_wdKbgpeJ8vL3(Mr~3k
zH~>mMb|_K`iJ!G;+SjjwahYEf$!dItimC3d#k=F&x#CQ%Sx`Yr_}kEDq~LL7W4s0N
zx24+s_*d(@v!jb)U2CeAx+ogv_I6%);yKvVqB+}wcIv8(t*V(^n#YeLgF1tVFMk`j
z0i0k5dwbAqZnyva-P_S!^(M6!DVzE&c8jBp+5jH2)8*aqui6@i8vXZeU|f;sgy08k
z42Fa?A@*OdQ^mPZ3Yi0m-uOEann=#>&YsszgPoo(|9gfAUbX8WnioNuZ`g8!6@Lq=
zzw}zZL^Ld`ZwB6Gh!x=Nt72``5{U~fHC%o)(b0hxg0y~^$`M?dst{iNmUxMl>!-$c
za%$;$jBY`hDiBMWAIu@HsNvt*NV%lCDh4{x9_u~Qz){l4PEP7AsWHbz?-+FCt<e7H
zxP!Vql0|wpm<VzlNZM|hr`bTmaAvjHENi0zddzI0Q5Vt-$0EP-broz4-$xvrm>#pV
zdiR6+V<iH3g}qHat~-XSqGf1*f@wAHv)F`6fce9uSy|ySr0T6nq}R7St<%#eWm(An
zv|&u4ZBiaL^N+;Hrt0?Sk5WN<Qir4gZUhDecob3}be{!5Q>P+$_}BcD-72R6G?%x6
z3(pA1?Wu1U#5k*(ywD^nfxYO%L?*Uxiy45VG9IqZs0A=-+$FBH(+oOb0Hm=O!9rkK
z)Wf<0p_Ik2gT>m-*?wAYqTDn^M`f1X4ABw58wzS~;f%k-@+ja+B#{@P;@H9BcNl>t
ziE(%*LFGmL<||VgW||yCa!FV!I8FqVZucm&C>(#P%pOsk$U=vQS@y(qb5Xzm7senJ
zG&b$?mN=w3T+?NqsM=y~j9*a{U#{Mrj+JSg$-Sc7d-+H|A_nBzQcIM~0UZ?p7B;mQ
zO-&2N8vhK}=@vep+s%;NZqLK7`?ELpkG40fyYR-z@1Pmg3Ak`?aOyxCAtnP2jmGfw
zvbM2XH!(Tz;v*1giJ{UHiSX0!3vm!^LHU;aFZo}8_qu_5s%X`qRz1;*>Q&SX(}Z94
z03}aiYHn0x;10VPZlVl^a_JUa`jph@wZ)_vp=`~#wxhuLL;_YyC74fS!YKw?CrM&a
zHwuDm7k1fbGVb@Pz1NjLck%gngOH!ra)FdMWzg6O=*H|{YMRufW<YwKnPaZ&9O;rT
z2jqP$lfDyzRIc#l(|f^K4L=zv;cWapqMDwAu%57G>)^<pvlN$11_rcLmMhC)hF;q=
zmInYEt6vgxUd~7tdV(0Cuw1)kPda<}4sUI1&NqQ<9z^9VM|&;_%ZOvsShMaPVnK85
znonu$w2TLU7!c067$a@}0e}GlY=nq0f5e71vE07aFGPq@g>OUx;F!l%!RdRaj`Z@X
z2%I%)(nr5n%9>_R1_uP*tkM|zd!rv>UyU|%&y}4xmvG6z0m0IRR^J{N#QMbwJU}%o
z2^T?*N_9fGOZKSL<XcurwERyo&|*&r7vZIO*5H&<9>Uz@=x371md2n+B|3KTtjlmS
z_V^hVp5<i8lJrAoB&{z#6+<Z#x{Mo7KWJFDryVK4gZJ*pi#kg)pB=XYK-uCZaGa~M
zW7u=X1h|&i5I^C)zw-Q=B)pIXwGM6?g!(}4i@Dg<a9S0f7~2Wvv;DpDIIH9hXtq9V
zI%bQKI$#9M@#WKlYy~0pJoH}G$9_A`{cBwz@KYfj5^q#=8(Vm87YjA-2A^_{2c9i`
z8gbS#w+|}UIy3tE`CAl@42K7^q5^t<<{Yr$(?!o=hx`}`<_lv_<VVR@8Lv!O`O?g^
z2t>#FwN#j}(jFUnK3$u6Ji_7<_qBh742@-dJyi4j9M;QOxhZI2$bqyy|DZ=KWQ3{R
zpRj?XDL@BF>akpm>TU~6Iy3O%rxc!+K=CLlE30)o1kFR$)aOU{)P)ZIDlN=S1;;x-
z^d@WLInDDF0>7O@TcWPxXR5~EIl02!l^T1AT-bJ;XZy`II04kQ*4TSg&WuU4(7t80
ziDWJ6f}lBHLu$}xGm<jc4>{$ZrMRpF)O{;_K4p$15^ByYEvDc?K)EWFAiK_vNOU2g
zS}AoGQvskv1T13DCGY$nn2)PTt(nGzz!)P@5~AEg5jxmzeBQA(Zp9=geS@WG`nos<
zOA<^B18=6ml>fulI|c_5w%gjVt%>c4olGXSZ9AFR?$}Ny_5>5#wkNi2+h6wn&U?<T
zI_F>i>FTGtyQ){OXWi>EF{veSdcaB2GFC33PZ_hC4PM$p_$zJ117x7?svNoGC!V&F
zMi@9-$!$WCcNdpLk#7i_#y-xiQoxxywd#(qh!zM7upMvQAvciG3A?S@H0sXzXA}tI
z>k7^jTROYw8@WNbcvU?X-oS99dJuZi_9IA>B!_UU;d;F#s}hvZnvh!6&Z^`6wfS%i
z^Zd;lm!V*V7C|g@2{ewu*!3s{bd+VNBGB5hbZO4hJAN-kSCy5>HzJbUf)b#=dJ@rC
z&}h)ihT(7_l%Tp78$>8EQOJ-IV_Gn*MiA2z&ySh$og1ioC0m)C=B7jL@?ssSugKzK
zG|C2t$fMF52--Rj<#h<Z4z~*W4aySl=S@9X9B&7%O(+9>%1!RVa=pa$!`o6^Qr50|
z`JWn>P_9RQR>)MP&J3Y7>GD1)QMzO0crZIG?EFqY6T#AIEUI`MdX!vB@e`N^=tlB0
z7&-XO{b>r-GZ-sqc#8Hj7!&ZyV@tqO<U12J%eNNjNth$#wJLLMecp^T>fKq+9~*@y
zKES1~@)-H2Iz@n{8}H{*jzug1N&T4!W*9qMZtlP_1CQ<Qi{hl}`!yn0n-ysWQwwy=
zdM(}uuj${1oeCp#;y?v14SX$hCblgU9uFKH2#v=^wRft0?D6ghcV8gAO$^b*^EP{e
zY(2<|{qM@fvHC3r{(3V2a|L(swyXbV?Vo;`Y6Ai|CKc((J(m6%7q>g1i<zY6)_E0U
z{4sOV+y1?(v!|;v;9c@82osR#fz&fJlrFtSR&$VsQtg<XaTO-ASt>Cto?lk~^QI=7
zv+e6!w4$2-@Zk^$R0C3yXN@v#jLl^@wkuJHD_;!nHp;c{e*JJaDy0oJWo*TyGWfN5
z(-FifA5;jNoI+Xjm#0N1SY@v5XG&xwHZ9?)-EsUM4Cn}_2fnlBw}G|VWMk*Q*EJBK
z?btW3==>AKK)E?$O_7j=%3_hBx0BwYjO%moa?84W^kBVZih!5TJr7fP;-lF$3zo;E
z3^Sk4&hs5|xz<5$iUg;}v3T`l#X}$8QM1MU9p!H*k%WwdNI_mP*q!?RhU{K*uc}cU
zpWwNj_gRtTV!v}*+OyW+pB@cpNWATDuM=asEkPW{;3=WPJfooBsb}7wk##in`u?Z>
zBQW`|?i5zG|HSK9xLDZ#cQ%DBC2#S|cZ+MG0yMw+MO!d0>RS1QuB5XJ2L7vHl%ph)
z9ZS>=9o!Ngv`2$bdRBtW)GTT4`Ti$<LMWLf-4A#ZRAMMD3=f9Q=YPRDMM>2(_n$kP
zUmOn08_Us`hCB0`w9d}7cF*tobEw5F$+H=+l24!+JmTe<xFq3qvl$b6GpLe!Yj1A7
z0OWQ$&62YdXG^>1ZIOPGh!ySb4x{>~uiJahR~h42S<^Vu<e?fm?W~;5TXvd3GIm8V
ztF3|g=l*-CwbZAgy-`ru>)~zb$C3Irw9rhw4xdiH=y^eSr0Qyw;!bM4L&e`$cFB4H
z%QDZVOHT@fc(JSIH9l(&(?u2dPsxA>Ac?Zj3l<|Uz%d5x4jSI5e9FPbYqQFsx5de!
zVj~-_dKpT#g>-P~?$j1D2y&LCG@&S9Xp=SEZ4=6&*}-yASiO<Flw73surv$umy`IM
z^B{H&$6u`lMb8RZ7FBi3Q<o~tMG@?Mh00p`T^3Uw8@tBW%F?logI+LK>zlrOfF`oC
z{gj`YlwMj1%Xb9r5Zm}TDZg{o_N5|3;Wt9(>SpEFjvvLS;yZ#kb$E=Q@T;gFiHl@8
zQ7>sIcp47%;w4+ZM8=*D<~c3trsgqH2fWza#nE9$Fgvm3pgYr5sYN~{7dGP0nPh{^
z%Eu&>Ag$j)ZLrY(_F_9bMb@iEfTkGy_fW76)v;Pc6jum2`NnP-6mBpSHG@2aGT_S>
zP2Hs%d6;Yh!bw?4(}c7cB1@4{KshaFmcoyNL`RSUVGNkDM8*l9kX$YE5|PNURRSos
zN<qK4tW~={D!Eff80N8AV0aZ`J?S^Iol<<D=9>L0y3?4`0=?L-)?awLsiZcS8Ub|6
zLI*p7T|MfIpwvkcKF@@m<SXmk_@(>rG4|bTAB{S9Q0=X0A5d%zV8A4KjdD-J71lJ=
z-R=VG`|0UO*(o5?W~MKv*O5~@QkL@$Q~^HVK;<XL`|RFHE5A7}0sf4O6g1)V95aAC
z1>~UoHw>e72x2xD`1=74F$-sH7ZMO%+xzDDu@fL-P7~uU7eB~5Ry2TdjWP`87|<tx
z#1+DYN}6ZT5Pb*xA{7#|4neJKs0((;7Ze?fB95-%Dmw~;a(w*J_MRVwU9Xk3Jtiz=
zZ<UEwAS^}Q8YVmDvh&+Tv%f;X9tyV7VpomIg~wHwZ7it__}h!X(dd#S6`M#qD^E3_
z24c$wPQ{yfv38;S;-dLCPBjh6n`^vuLRgjYkFGO^NmDc~Q-tfW=8vn`FW^1l)ub$~
zLigpM33%+fR{5&UxWEEQ@!I97sJhMRhC5mmRVp7=s5xiDe61W#ByBsgQ^s)1`E3||
z#tEN^)5UHukmDX6P01V9m>5LG(j+F~_~mB=k;4uUO|1}Hm}gh~WxVrdIEbfj`}>=f
zjRqv>vFG%)Cz7R0=kB07!9K!4ok}bjpLq`QqCV}%V*@{Bb^RPMtaLtOcUw)AVP?^M
zit4*DIjpV2{T7A<7nZ!H9a(xVc7AhL>7pr@`5?j+u$hbTWadw7mn#wyeR7Ww{>BW=
zB59~lq^r!xUr(T7`P0@L>JS#5@qLKcFC;x;zm&UWg4TI8W!tR6q0a4a2xS6IsZcnx
zD`@^XvI{94BrYNn!#LJx*9rMBEJoQHq8;Ce42#|#YZ45o<1~1^ydT`cUW)#=HCL7e
zTDw#P+`y4eMC)JUOLo|Zy*)f}@8-W4v)GqYA^#}oQN(Y*Gr(<mLxE0?-rnMxo@{o*
zxyuLt7bb~^MLu-%q?6W<fw7?wOpV0*y-S}R%!P#<4*c;+uDVJL%_dgTv>WaYId0VN
z4~Z~h!Hq5AKJ^rOD~V}=hP;3m6{`{W_QTg(da#tlCvd7Wixi1A{QZQjO2AUalv0|m
z0(#$3RbNEMGDZ+Z8RfnO$xwS?%odZil}QaL#?S6symoiDm|@(0IjkEc$huvIES?P*
zYUYgdxPz8KO<X9UTt1EK02n+sd45fPQKaP@zBWiJmfIXtP{42WzS-~=*7_ICsl$H|
zz!B?*uHYa6os?gvI=$bS4i3x8*xzim&ZdIi*Tvzy0&e{B%e}!~&~6GQ{6Y3tk|_Qy
z1d1DMs#pjN6=Cp`aV9hzF}|q?TcT14eGH*>4+Qi9C?<a*oqpr`1`RC2`eWyE*<$bV
ztv_!V$wn|^8!F^boWHq1S}%;OX$NLa0h{Fp=6@iB9$|;GeWD1O`wBf8_b(R&WgDK_
zlby+Vk_mI12uo(0Ll@mBvQEsbTGNDDs!zUnZBO|&e>Qp56h^;%(X0Ao2!Gr7ok3#g
zJC>=pyfPz-lWy!1kQT;L7rZf};m7edf{z!Bq3-F<9@P9zSWEf?Ir#Y=l4B4gfLlD_
zwb0w5tV-}LvETBo0Mo)6YA4+w^HH@x3Nj6SepJ9DZ6#1kAp-=UGS571HzBkTN}Ok;
zC5A9jG|?$tmyqr=v9)|lAnBYi9RdmV8&3P99qfvAx62(Ktcb|;Bau?qS(`q^6g`WM
zb$^#_Jg2Omn>{0pHv8Fd&i0EhLe8z|!SyDi%n;x$KqNrhB4PbN!a<*l)PcTpZ-3xN
zV#*#eSGl}VIVRgpI_D=<J=;PyxooOTY*8;~@u4*EoRK54Gu|#;hJv&_s{e+TL@YIh
zuS=wy1joy2Y;v{Bj79sY!_Ydn$K)|?V~^>>c309p#b4Doeh7QahU=pPASR#;+nYVB
zBngUoVbR;nfl1jo<)`DwsJB5y5^X_R?N85w2Uhc>1!mX$Gi=2P|Krk7GDAmXUwWU$
z83rO|OYJ2TP-W^EFyKa^;&*d>%roDo!XsfIa}X|?*aPq;zr3>)(7>@ij4Z3Bnhq5b
z^)dXxPd^`{jp_xtLD7N*Fv@P6=qR%G!=4MGs@*SBBUfZ=^imMR*?GY+h8O|l$6xV7
z{1zm`%}=QhT}E}<DIN8l+QkwOG!z=f!Fa9DmV|grKbhc5iNGOs;6z6a`X4V2bDC#L
zE{t#wWuGj-`6P`nB};jO0yHuNOZ=7z`FU>#V8oxIq7!0NC3s>1Jb@Q(#+UlA{dj{r
z9ZVc&e_u>Xg1gjpHC<25-Gpoq=c|?J<VYX%(b&#pQ|Oje`B<7{^V_imI!SU0s<jcW
zMY9K7746X#yR3nOw7^^uT5mgP5I=jC1@hCtM|0~B(kQ*(*XVt_)2EinTIx-*sBp-e
zr{DLEK*!AS=T_N(NcE?5uHH*g<slm$ew@r%&5}egxRX_L(Xp-K45PF7A4#HCAkns}
zg)g2=@9QcG`al#+H3Ra$UQi{Nc$7J$!Hpx!%>08DcGPH0G#_;vR~icLM4G0)N6}nD
zlXVlV;JI(K=pYz(^nKUrM0KHzbfzceX}s>wkd0<I6T7PN+S-*~{4fHs!ala~5j8ao
zm$R(xcZ|B09-C?&*`pM4>65NFdG#mSI-i%H?Z0<w{-?(L|0O2-f8x(9?A**LZLMGZ
znX=JsaD7Y&qHaL&ptB<V&?GZr9xOyUR6`thp)iT?2T*c8sKBPf#nZYXNa`=+wAUK0
zdnS<fTZ6N?nrm{8#GrcAYOCpq03|N|2%}lc_^LbOZ#n-p)r;2WYtJ7QsR2CS@Y3^)
z@HX!7BC+#f!brdH_;8t*K$l%E8Q%J3#^jm=sWCE6>hKLNw{G(kJbYYBS=2glcCBBd
z#il!}F1AI!l5H{D3^U%Ke9AwRQsl?L@W7clIZ|xLzE<C%r5n4-fpuP|cxK0RlZ5dr
zc$2ioXQY1lEO$wi1BaLq93rCP+G000oZfur{oac@KIKNEk!smNF?V(p!{c(h<uP0O
zWGv3qd-#oi`_i57iRFo9Z=&wWoR>&X2T`wc){I)iEQ+bGEJN@WjEE;ilbub;WCp3~
zAn>qj9Sd-CY4LQp&+#|bv`rgmE*sh6Hvd>2b4x%D?nUN)yp7t)jqjD2=-w=|RQ*<G
z1{HtJyJ#5lIPa`Dm!WzL><F1-NjLF#q|2t1m3C$|{laG6qfLYZ-f;s~qqe)mc^(%U
z7fjY-RcY(A_6^g=L|Gd~*$$^KJR9ziAtwu*9e|DzGadCY(Kg(W)^Skm`Es*u)LGjw
z(_Jg|riuxqr{iXgA^Gm1;PZQQD3*oOqS5QfusU6SeU4nGEZ81ho!$4c({ItwP`)c%
z&03sCW<sUBNc3-ic$E`wul9b`NtroP=7SED(&APH52tcmJDd}xMLAWFS&wB5;wIB<
z?*M2nemy1$nmB}=*&Q?o^av4#(mi#A*kTEWq70#ANGjU-<wGCeG8}^G5g6B#Z&{wo
zG$HOj8gZ%KEG;7a=j25G*hNBNPl>|R?j`~Sb?vN`bl=z*kTN*gwpnJ=MIor>C-)1O
zsV3`<gM@#m_)$^Xj+8<aj|xC>y`a?bjscj44<#Bh7iE&`&AFPC^{#Er;N-imjSIct
z|3uyEW46o?udvkGU=}yEL!;+B`b+m0B&33%z}$j7aPd1aZ`(AV7tN5e_XCCrboSEf
z_I7MgsY$q*Uw*Y=^*xBqjwXj`NlWf^Hd^16lxD2QKgmvQBy{P-cbz)63#PJluL9#1
zgon#~@LmNFu~=*B^ic+EX#U5B6q71O`>vZ?`;_Am65(|Wqt(}FA(ky|sO@#Av-6Hl
z-{|)1y>ryZ<_i#3iM=D3>k&l>o(j;H>S{F>d%yxUso~-0iPM5H@(E%We8MD%6Ml!w
z#|x#0!s(>Ek;B1l+~*ne3uDNPvH`j%Q5)brVLm7Z1&*|G0x;CGkpc|pU?DCbAZ8(=
z-xwPG_X*uLWZ8H3-;i4D){DFm!S-oe6G`WmH_D;PzN%b2Ia|ch8e!)wN65FiGa&Rx
zo%;RDZpMnN^u_4DraeSpxaI>vBErZZ;#Pz>Otc2Wg_F@+B3W%u9SLZO&;U?PPwmDr
z_(M)&p+(An9D*o}=q$YZmBUo9&0+Fwe~HcN>tX{!R`o2Z1;cyB2CVV$YXZ(eLohbP
zaq?i9288_Fjy7V|g-hcNh8M)pkn-M)eg1{PRBh-bC^|&om2S%&|Mb+XgC?DlBW_eB
zc%IKy={ITBOYwnhqcsD?m<1{bJ0dG06_gdx;|yJ0@t-seAB6L6U(n=@he?rkU+q3&
zC{#!Uhq(WAh70gei?%4==>vEvZZ1nEiBJ0UMzwLSn;A%-g9EMiA*Kvec*dnYW45t>
zH7K;2!&Em4an%?G%g%M@0;g)yGuC@yleox~srI+8C4yWUEWqW3^Z@D^>jBybsz16A
z*Oi#X!>y$I6IJsCnI;`l8ZQu_t$9HvAxYIs>b*eHs$WfF&~S#MVr4{NFK1}Kz{4_X
zr_I%<?N#HlK9Afnpy!RG6BjXfKkR4pIlm$MvPMSRm_)d5Eah=w;dOXkDpRCVXIU4t
z8JXF?flVS>s<2{=543CkGaK_sxhxw<8l~`Xs?&5%M=Z!-H~`C>D6CQi(GQaN8@@>=
z#Hsm>2-NBM+Nq@j$|il8&Z2L4=6EQMPen=nv=s(+ge$#_0sJtNBF?ubX;utcirP-}
zgciq`UDjSc5Os;K*M_s#>)Z~bcgW>_Q_UK8N<H!JLf51-6R<YRaPc$`3cGj7n5iAw
zbCO1|;2rbGy!?hd6WMj2kST4!NQ2uw5qMUq<m8s?_QDo<KSIu-tMA2|ttdN5MDC1q
zp(w;?6q!zyrs_weABZ?-lB8%ViQ{&A-Uf6?j;+=Yxr|>%%)VMMgZ(A;Mca8a`OcIm
z`9n0@>t;163830<GQ&~{n)|)L99~<n(EBPOGaR~5Bul%vtLmc8s4goudqmyrV1h(5
zw5Z+(Aa^2|dRZ_FvEVtv$EFg%K~sTjx$`wQ<F~iJ9aihvjP{Hn3-h@@BY##!Hg#=J
z?qBxhKvgkjc)UysxVE573N!~Jb(_IJ7tUn|xX=8A2QamytY*NA6!bj4&3cSOt|;kG
z#Xb5NlRmDTzr}>F5zX=TR$V7(l$acDnP9c=Ctr@?B)YSde6VbcuaqJQ8XjTf!OFGA
zHc~)A{yyPt5Sx;njr-v<fEHq6sZgkZ)3VC_W9b}-&*HxC`ZhKN4SITq@j}G&mqGos
zTln|cB~UTp6R{U&b*B~ca-OQ3%0EEtqE%ibC`mG^B)y_-6cZXUP9MbBxWKaH#s?({
zU_(iQgx0-*1}fAx497k*=@0f1k#pz+)HKddMsb>9jIR}i#bPZhA$y}rL`!bvfgFqy
zj0mzeuLqSA8XY!to*r7(Y7=EV@IN5-dmkHF0d;Zderxn!u;dVy!x;+UTRz`*vj*K)
zTKilIK4|3_C9m+e0|jUIStDxX2ST9-#e}fWm?EG&D@9;VDxc)8Jtb%Xd(ywCg|?wT
zXk!pR&f^0&1&w2ze<k6(<*AZmExs#&lL?bvFA`I@B#3+xz39A#U>^N)(z|O3!5U(D
z0mvUdbl42ve{H&+k!~R;8{x9fwTA>Wna6cWqS%U;LZ%rU9mn55bN1(eqzreYj}Sp(
zCvl(t+y0RPu_garZ`3*Ij*Dc7U`P72mirV}LtSKU7(e(4MPo&yvT0W|>qxNUNse=y
zBD8MgOPpBQCqqY|wdTwq`G6@|e7A<F3TPj7OesoQK4N<Ez@i?L?<s^XF1%C&y|4ML
z9w3_2mw7?+JFgE@U7IrfkhkbG@?hKWhlz2ZKi&2D1c^c_m7mZT)QI(hggv_l)4c5^
zV$l+npS^RCj^oR+$j<A|iR*WND-5z*-i+(z^_%0*H|;KDCzJN22btgrhJ1U|1TJw9
z>m~@a7nvA~k+vzgkM60e1xWEzC)&({W1w&XlqD`)*nVJ3ov)akk7G*#&VF?F8VJ)-
zL2+-k2*@E#PrlRZL>p_G{M*a8+R$F8&}*DO5LJ@15dN{Qk~^Mde2W{Qc9^1$@MFcJ
zz_hbH{vqaIDDQXz{WTm(6M}Rq2}nT+&jSDY(4hUPuZ9G3pbO*@PsYVOlyHusV^nY0
zO8!}6n1GMwALC-$Uc@B)*NGyu7rEEjq>6^5pO!<*lEE)aQc9I_jwfpzsKvw7CGv{@
zbyS!jtCnRn7mMu@r?>#D-(W=59$|K|Zob3(ab*0|mP(sV;;B;<DFIC84YSdUzpmmy
zixbRnL0;n9T^d+0n)dV8$juNx+*nC!DF0fBv<q8vawQefv!cuiNyQ(+n?uotPDCp8
z!Of3LpX{Im$*D)d*Tc+?oMZe>nEQ?wG6o?x1fp-(Wt=w0NnK8-%O2^TRui4O3w5`m
z5|0b$KY?t`h39H=Uu}WKXV+ab)xlW0G(+*p!NYxToS2}W4mTF}X0ne5$d#J$j9L6~
zvQ57FDXL!lA;~gRg=t+%cOg1%jNdB0SiAkAF**!Zdt%{G9zjcS=PZMY<j=qdbPe6`
zcuLvim(peVQo19PU?M3#Xy9(J@J177RzBA<>M8GN;C_JpR{bGAXRNO+()X469sais
z19X*Jt~uxPV$S<1TTa7{62U{L<U0EU?%g1q&*+r<=p3<lsdTp6EIbww2Y7i=@b{xh
z1pWGu;@OVt1q#fnsWZbrNvPl5SA166n3uvZc<3GKbT@}!O$QQentbZ6{zNHwJA0iL
z7X;z)zS;weB9jV+GskvKW%CQjc-0QSLpB>SOm(D~*IomgSQJ~0NRj4swY&7#JBEfb
zabfH1nXodMup<*J)J7=<OhsmCHBW3t?m`qsJb26q&c^C9s1fc@JsWP?RP4#)LEJYR
zPAPX1a4F<cO>`MK&#SechJq<nj_U~%X>Fx$(ntX{CxPbGX7VU7tRAM17Sn3U!a|uk
zS3<Wfp6G|Qi}pi3y@?N~_;F#FNl0c^rWE^bB{&eo9F#MCJw4v8H(L(pwu7B#e)GGX
z=cbDsM&JpKkD)8u$MO1RX3{AL^??JQ29z}LN~$FoMmZb(<zbVV5X2N4nL_^wWX_C3
zeh7&9X!OI~Hx3MOaE)oZl$N&0r!R!H(oZV(&l;t%B0iuWsy>!tl{ONOePaL_(X!Xf
z=j3G5?c&4NnqRM#1g-e)0K)0szVe0mmUV%!6~H>6YqreZZrosSEz<=MWW-pJDQzjn
zKfVWy2swhGcMHW8WQS1raf5#dQg^idY6XgpY+(${Ab;#@BU<-+u-F^P<^`(_{al{U
z7;rsD9rvpt&vZcg{z|~#kAneLbRF*R*h?eqxdDNpDnL21D_m#Yit-H%J6)Os3Bgy+
zfNo5@K1o#`HmZ#@iF~>{1TD{bJo^uI7gYN|CTJpgIYWdt2x>09S)ox_TfMj?*bs1k
zc!9H&J3gmLRhM6tJW+IfVtDHIU5EBJbd(-5LXAz6MJr3{)|*y=WhBm!X8LVE-1X6#
zCWjAVfSq=B7Fr)2|L2`4m!H)P7WZByTQrFlu1qB7JtfcZLC>O~u|-;g1bRM5Zp<}C
z7wk?rY1&Vy*FbL>d7H+J=cxu{n+^aD6dVCO4+0dNio<KWA2WWql%k<}g<Vh*j><Jb
z^%LWvta%RM9h)81m^RJ28U9+9gf~q#RJWn3t<@`vM`?+cpD+j$hD=Z~`$2deF@7Lg
zq<x{U=BnWLO!0eO^R^j&wt;dFGp=Se4Uu`u1SugzfAwG%yWobR2D)Oiv>q_CK>mQU
zGVj2GN`nz$ViblSFZngu*|>q>r0357icM}-z`W0@t^r{b=&`2X&pr1bZOIwO`<EGJ
zSU8;1KRNEG|Dfns$lvQ!#be$@$vr5%m6=_Yl0+@uDYP)JxNu9hsh`AzIzCEreZDD@
z2r5|TGO-YCxCHmHG(Mvx6Zn9mqYJwy?RJrbX>K?DnL(!i9=EM0T_98{{PAZdLQ-{8
zj=w-`AgHn@jZrW69gyzd?H?B~PSdn;saK_?f5!|Tsd9qh7ceV>g~DtPK>-%#s)E<i
zJvF%VxVspY(HWeCZ6z|5xw4|Xzg9}mr0j)9X-1a+E3`h<M8jj=XA`)amQge0i8944
zP_ijgzF*>|uzLBZ7ZF8VK(4`p#3dQUwYy{ve19xFdQo^ie<7)b(qLVFbjKx3q3iU8
z(GH0#lu4&)^K}<xpWyB~sN^oVh$V9^eukZsl@X6yQ8k@Nd}v;0L*<Afu?0WN?y8+P
zF-OPV@KsvDJ=^$-fdaq3?gJx0ElVbV*A48D%@3u8BqOnB?OWKylQ;%h$6D#3h~vnZ
zU)xxr)9he;z%ZLzhOweJq3x5A0E7W*vYX;Cf`X~RrX4hR5HVzX%8`ED)G|uX<K3{{
zdpbXVzTemF<P#gWsLZk#b4~qQI@%*`B#2elV401>h8G0u0w^`!im=Jh_q7RVH<2d~
zMUApu0kqEYAoMZV&N<~Pmt3tR=_$#CcKX#+(`m;L%cCK-33MU(KFjj#BO%@H73LnE
zi+l`-Q)3tscL^+rGHygAs~jjLfDp1pnwFI>)+6HIx*IzyR)7CzXc<ntV>$3<ipW&8
zr$P3k1>-&&Sopi>xC5~uJv7W-rt}v<*p_leimr4cSoO@}w@tMlevLxiv0L8h5RD<0
z4agcU96Q`-^1(FJL~!es1VC~m@7FTu`K*fvNu4Bu%j&KHV?ctDuu@v`I!AzlC4IbV
z(-iaPSt##cv6S{py(az41;s{oM;m-YAZJ!4o0|?1!1IF>=7}2xclvi`y+(Rd8%KmY
zQnop^ep8Jy7>&pXxYM$AWv8y~324;CH`EoH$2;#6XVqo2rnZUbHjG;hG_(l2yDM1y
znh1gIG<4I&AS>+b1uJC9D>}@ug4OfN$fDWbTNJ6OU^3la2#5reKMxgrsX^qebY(ol
zpg|9ifT1aR(dccSQR^LYd&J+QS=13KFxY|gJDq|K71ifq$xyItEz6GI_w>5|ZV!I{
zYjiY{V6!Nqtk5^`%6w?SR+g>Qd_fwKl_`kRP`TO98WT}X>8By=(*NLa&_oMD>53sX
zMp=Jyur^<5P>woG^02Zbco-lNlGV?$mGBqc0$7(PQmRE&BfL<M7ua7PE^HfR_WDap
zqnoz;_pgY~_wSD}-?q9$b%dH<Pkbl?BWio6`imMaakm|eg2%hJp5aPz?bL<6x~$d-
z9)uCjOVdkNj-OxGPoHZe)f1fb1jldi=}H841gMm+i*Gr6Y11WJMEpRn27Em7;Vhuw
zAAlUG#>{`hN+0!0uza8}_7+egn;&S<6s}W68;7AA(B|q^Im&+0rmjnON<v(XgZAw>
zuJ=}$FVhMhaCF=|DWsopAl-K{quk-7!-GvrQv1IKATWu!hY)BJGjA>62rJ@gC(Taz
z)_g#@VXaX3@@`?<CXi@u+-4arrxdWEg@J&wq}d}c(n9%Nil$vZ0>Qb$`IyHMu4%I>
z`GZX`K`3Am$t`aTzO9z~cMM)@vbq<dw|#)?G`Crel4;9|ZL-fA<D~jGW;_{;VHmh$
z1ne>p$h0=R5`Y74jM<_fH6WzFPZf<~{c)9qm!7!e&xjb>cocp-*!XwRTi>d-F`&r1
zrfEqmBbLWccC_HnhwHxr1x#h$1&;hU8afxEsb%M?0JjwP%i_E6ZaOm`6eEV^X&-{=
zq~KP2RjPGHCZvl9M>3x_Shj7%pRJ8NoyL|^MB)c2e`Zd}(S$=6&dB0xe8^*}jQQwZ
zgMN6<iSC|}C5_!$6V3e5TMLKRjRV^6?t(Asf1<qhVzm>$MR&E0++g4^Mz5XPu)xne
zcHk7=BAO|U#ot$`wa60uLY@lw8-D?xeXJC}Z5bb3?@i<i&GI`x<X^Ncwfr+g!$%?h
z_Qt4UN!FZgh`T`IWi*!0`>pV7LsKk&mnC7<_UA_1$9Xt}e~$4ST(Ts`Mk&y`=I`{5
zB?b_2BKwUznpx^9Xg*o<&-L9O4pbiCmvTs`nt4k*VpjR+x*;5FG@TX{eXpClzt3<-
z+QKl&8Jf)37jPswkQTK?4(Gcr7`;=alM>Vv5HaZOc4!x@$Ff7Is>-6^6Yh~_{>v~s
zCY&kdd*C?O5gj&mKM?1SW0-P40KO@tE#$NKe>=?_|4Fm5GPAS%?=S<$e`bsRN6`ic
z_kY(Lq|g(A+kwaRFQ?=Xfpdalr7RMG>i{5suT0uZmJRBOWk6%L|CqXXor>eo^@-x1
zFZQXJ!6b5|xps7PtPi#b<qtf{dZ9P5p*6K{G>vsGH-f@Zi7D7yg%x=EkqWKUzgNR>
z{hJCpvQqcCY6LXY+wOO)ak}G!l<VsWx*w3X*?L&YAxOw9giJSIOi$+ReG$ECF#x<V
zmw80IU%gyn<7Gwfwtg9?whqqq5hQavv`wpF{**~OZ$%vyeLRQb*u9WBIjkSNfsL<(
z^eomlI#e2aDLBjIkPzfw@Y3zuw#ts@>Qm!t8sVV*k;$sJ&>kq+Boj3GG+uK|&x_8?
za(1}~!gm#Zga?*<f>}!!Y~A*^TfpQ%z!l|>EDi&IRmOhx_t1G$xK<bYcD5GsHBRPE
z0#uj`XqzVvvM5?#jJtH>sjAY>i0O&n+wKR3l+ZaVLFY!(^^EzlD!Y2Cr-rlw<pey%
zwstQr&Qz++Y5HJ%cxwJe=1~$P?+#bc%^QU+$UYrp(|x_<-c`Lg-ng2k5x{Qpu^ooi
z48k!uyPR+^J9c)P?`rVho8L)4oZM|KBb<a4I>H7tO!rD%F=e-LzYSymh-7t}uyeVK
zuaSxN2an=T&*-%6u^U(%+Z_>B&Rd9<xd%y1bz3mPX={%O?q{aRZgj0DFhq#745!4S
zNR}UJjr0@JGUqMj2uV3We+42WlQhJRNg$wtwL(#wh>HA8Bh1*+JN=dTWxgrUB*}a~
zyAWEyrgSLR<5)x<VJJdk3RX@tmVxG?Ca0C<UblU9ArA$OZ<nK80Xw2dQw-7ZS3n@+
zYT$$W<J4n_ZKW5nn&1*dF>_pRsvbB7rU{ax9U_8xWe#R7SbtKv>Iz&xaTua4LEGmm
z74=n}kR)KM*oOqO91v@qQ6Cr_n8tf})I4GM=eCF}AT#FQdMsdNbl-J*F-)vpzBF?>
zu~lH7LYQ#LcOwmg#Q%U9bFlKSJ2SM>Z3h>lrbw;2|H@Q<9vrr}q<_L=;HyyofT?%-
zBnng6{iCZn39&HNz6hk$MUDaEueSP=48GZQ%LDrF{8gJDAYBYV=BMGqfun|{7Ca#~
zT0^e=S|7+O2yi8c*y-c;e5nCgsBvtDI{gASAfIecJNQ<029lWoLuG&F`f3H;BPxV%
zFDXlTH&m!o@{f<m{MUM+3OMZ;0xQXRJB*Y{0W(C3E~0Zs1dwD%QXBsaHh_R($=2F(
zLUs=tV0lMumpRQnszkH1;$6r)_a@?DK_VT*D@o`}cohkDtw9)4Krq(lnzFE?S?ygz
z9C$p5X)?gVgm;f!j8#g-*k|7oJ=n`&PvPE}d4DA%(KNJ}*4T(rkN*@bR9X0x<2?19
zk%H>MCm9Z+3J4I3rz#cDSFY2bRmuH9k0VF{>+~1loxoBG2TNJebx8@w^DVJ-cY$15
zac5Y(J`YW8hcuW&h4@(kPmNPGu~!5&?bvkYEZ!TZprMGYBq1Docpl%9pXg#>#Gobj
zeT%Z<JpQQA`@~=_G=_R{I6tZf_G-g*x%dt<li&sI30ODizBpmRWMfH5)As@C3^NCv
zkA$?2%-1Qtt?B;uv6I!gsS`?z;3$qSrGU8i97efUJ?u}3zxUh0bWbvua#VRwy=mg4
z?XTq)dR7{wh|2mpXIlYhuu`*Y`!P>pH5G`!nbF_x+x_Hd_UYi{?W1Dk)UdGbQ!s`g
zmAAEOR{+NMEgZ}VT3nKpj5diOV#b-YCS4+UIQ74V`OSe6=F7)+zOwqE2|Yvl{H1U*
zp!GtCs-TYhmb46Qv@T1K{~!*3Frj5iJJEaBjv28RtrmxS-k?mopbacm3h=^z(5PiQ
zUb39bE4Cdt%$vi_FS@C=Nlz&S&tM=C+!Dl0m;mV?KgQ*sIV})Cokc9F`VH=2jjkcU
zkRZms`S-`9bydWs0hm{GxWbV7g!PhWEjc1>v(6rCHrw*Irl0oeRP-o=vv<tKTCQlu
zEQ}8LjMME}p`Lqn!5M!N;6MY<<EYR@dLT0iQbbCbsg)uG&SqyBc<n`<HH52$garsW
zkO8q*@3l{6opQl`=?aXCAYE8Q1h=K%*rb>x^zqOb8#086ZKh~}EVKwQ;*JFhv&D9U
zC@bj_`%*=^nd?-bU!YgAcO&uTx4nD$h_`v#bVVJrViP%PBq`W<;#67^7ra2B?cX1j
zW&E70?+k2c0^3q#wRbq42orY9!WjKDSOEB4ah>=FK4zlq{ja(a5aUZ1boo>4(x@}f
zD@xJDSFw>D)01e+qFMjS>R%wam?I4uccA*i`0dm`*GyppZQ=*OesMlX!Lf*Iou;4c
z+E^_0>4eLzLVUtZ6&=-u?rGCW#ils*K#X>_UiT7{e>{~Uq=Aqp9Q<@JKb#403<27H
zteJN0XJvg?aEY@qYKF*mHeZCzKK{}64dD3|NQ2SsB6gz8^Q|}I@mvw5H?#yV?`rn6
zOaFt(ML>d{vO2A$RGI#t`b4X4;Q=llgfYY)L}n!aLz&K;^{P`01_P*|J?b|~yfA@P
zq_SZj6xB);Rn<}t(VF8x@Djx(XF(u%gxc&wJ-n)|@;NgCR5WZS1M+qfF;$y{rFUcG
ztnGbhRl^0;F0|05r6ZCY#A@K5_y`UDK6DC)0+jeforCb+m`MJ8T>?FM7|8crxoBLl
z;)b+z;_i2Xfiz=x%?l}m$2$9a<9}&r;fa&cRB+pLOxsp>pPn8V_Mf>A1q%RLE*Ff9
zb+5)|PS2G4MaGW%-7hUBd$&+LB^<)Z#BdeJv{Yunw4?de8ku?pXt^kM2Riik;2mm7
z@`58+P>AubJ-yad+o{i+5?!gnT<Q4K>@&abN7sp2`LpZrri5O#%4s>pwhMpU;0NF!
zSt=qWc?l7U6upaQ%y#x?_6mTO(?*R+46GK<rpW0^9G-_(E8E!y5Q)PloKZ7s@d_ho
z1%t9?i&{yH;Q7u?+tN<Wq9H0o_UPlYUY?)HM{o8?AC#b1<8uLe4$3Y~Tu-f)7o?*o
z49?^&WhxQ^nU3QzroSUI#`EES=<z(>P@c|S3d*w1MY5JZz<GHo2ekn!jR0J*<g;6W
zb0Z_#(+Wn@CoC?*$CI$hzd%wYD+(=Yii^zy0ZvDKmXB{z#{%;dh5cWKv@elFm>|uw
zfMzDWo|qv&_95^AZ`PWQ_WzJ+|0!=|;b8qgLr0wd5pRh9L#J`FCiYyBr%cj-%K){h
zq(>H5g2^x5j}`BiRIv+@?RIyzSQ)xL3q_Nn>UoG~(%nHg!BeQk0jrhg&Ie)4V(QHs
z=DU96%ouI1=QaOyP>UiuiS8CS>);~LKYm)s`xLhc$KVD>j@*L%X8z&wf3KADKOJq%
zoa}`ETTpWTCo}s$7aC7Ok+Mz;?f_byBL5w{1L)>E@34vWcrR^hCSIv&ZiBIBA<c{;
z8EK_P-N!a=R%t?Z*=T|3);8B^f9!nCL>Jc8`Gw@sWZ}b<&$`+5$u59E1Bx=VkFRSG
zV_~}V8~)d}a=^(vE`x<IuF3}LoxD@!Y@Vju&+atEBJmAwqf|EL($@#~x1efRtDOa1
zB;eSCRtouf;j<h+o-z-vB~*_4IKRXw#az5SGM`irh@B2HnPJ9hnlF}i@-43&%VR~N
zw!lR_tt1P_NE*78_-5POEd6{{DN>H3%&d}99&p+?RQ^MeHa|&uF|G<yIml^P2*&H%
zgmi%D;QDjp6P!QfP}UiNxPH(d=CqCXR>0%cNy1n(9Fr6bjRk^5{1|4i7@qQLV%kjC
zSEHIbsIyl_Fkr~W#i^1Bo!F8<{yAP1Syb6nwL2PJ;_y!P+MF7*5@tT!G=c?R5}IOq
zFV;iVO#mJwC*n!CTmh0hjn;WnEp7>OhX#g|W7~sHP87WwTxxqk=L?o2^H1fgH!q=3
zN+V)~<5z@}CfS0VC_*}`8Tgz4FC)Ahm_kYC;mk@z(!%Zwo)V1Uh06D^EM;1Is&7!u
zP)Fk^mgp{|9s!pjqQJ&uPasjV5$nhw#A#BG)gW3w14m{#LTd8FVLtNX3~j1GnP2{I
zpt4WMV49c#gw&u0taIc7rCyi!3_w@t=Iup*8X8g>Dl$ykk!H@I@TFc3Lu$?nh4$ls
zvpE-f<(YM9irwhL9es$--P&rh%e6*`^KV>l!+4a&P=zVtuW)Ai)4>|YG(x}o0z%Lb
zCF>BY)R+2?8OOi9xj4NvqmULzf3~Rbkqg4MLlTv5DS_k18X`N0akysb1k9Yu2{%~9
zs$ipvq%`QH-ZqX@d_?#7_O0)BFDgZzAf=%jiq(hDV;;mN|5mD;p041p!^E}JBcjFB
zvU%Q5eL&mo3#h1$M*Mgp&V)7^@?urQ43;T{3FGI0E<oP=5tdi#l58;cJ%IP0<q7=;
zd%PfI>{8BHfnoin5YN@Gb|5yHHeWq^tZVcQHFXaegNRHy&y@)q#!!Bcpwb>%L%MqK
zLxh5nsP`-Gbtz4CMU#{XqUql2Us(2#MDud64KyQXpF!Dd6E3p3Ic#zhcB9GKWbi8R
zu#v=ZW#7e}ui|2cgt}tNPc~{iiBZx%|0HiVV&jfULl}w_q(uJ150K~{Dd(Y7ai_?0
zKXObOokB3Hk%nJ=Mmzmz@j^YkxS2fEnJYp)grdQ}w9a>aU}8+%0c*nAZ<?Jq4IxxG
zU4jd$VI@zqt25ThVR#Hf7)R8q%VVKKttpr~!RZj_SDQqw!GrlMuRX-pv3*K{^^iAw
zPwEvh+77lQ*<wxb2Mj}D(ub5nQ^VG(1z*0In%HzxuDGX*wt-HK`oroAtTRT0@wwDE
zgwj6j_q`Ch6RT)V!2CYa<}fIISn9Wh(yC0cN|lc(3DLYR4?)Gi+xq(p%_W8(=V{X6
z%uuL22iL@uU%4o+3CyUceRuTdu{;s<6gN^_M&3Uk-XMlKb0AJ_`i;bZ%jANqMU!N<
z+QU!7wUmn5-+?u{`t_>CNiB+!HWdU4eZEC>WQx+?ak%K{lldKkLJ2N@22LBUims&4
z&#?TTao2!J)Qn|1310@o5WY_hZ*+KD`3Q<Hg;Fr4tZ(Ubb$*HcWS%N$g$mnGauJtZ
z9!$g-NSS-%9za-e=Ly24KkDpogaWfos30wc7Ie46yy;gBnsN>9FEr;&)WFWc;s9{1
zt>a;Mq;!3ZOoIdcwLM0OVe|^_ML$y%h{7sJ|9{R03K%DzXyezEQ@X{Pj+Mu_3iJpN
z2dyoTFIjxgQ3!X&Y;Kd165e$;@+>7%dfqcmfe^os-vINFke*}X?Jd?`lJK+VhHlFK
zlmOiI)7C|8+dE=f6{(*kgxnR``cN48<o4;=^ks~8_mxB}6`x&-WlhKbh=syGaM%o(
zJh|!QQjBYmb&T_D43$L_Jc};3P9P<3DI2-b#6Xibo}lb<y8{Ek%Z4Y@kMGtr2a;+>
zk4dz4Q-Jc=9(~SxbtFQa2b&gIMh>Nylvu{b<uR2O_&g}t`#Cygj(?F~6B<!!0ai`k
zZ)dwY-lz+_6EfR2E^kZD3{Bi=rj}$K1=ohVt-~`+wwpQL44cNNu^O!-#cPqKKPivf
z7S9o+C!^rH2WG2k{0XL?dsC~+x}IPUPAI4l;Q%s4Y(zMzTJyPJlmMfeWE2~|i$*L(
zVEmJ0u4y*w(6Lo*@@U_@%XfbMA!ll_Ck$$JB2uhAE$(qx-gHF}o&3EYX=c%eL-+I6
zweID7@beW9E+)wM|M7|B{9ny2EKF?w$8+II!SR8BPbrrJg8}7A$@>D-0q2_9v8#ia
zzMJ}alz&gzUCj^qgzIUxxIm5i!<u50a*wd!Bl6YCDU>K_>>9;Bye8L1DAeT`k$tG|
zhz+=So&IZ<gu4$JK57^&Bj=Ox!JOzHA6=L(JTTyUeSdRyLNFbPV45J+sbTwX4c<f$
zLM(y-WA`hXwEuC|vU4~FboKfE6MqdBNm6n*Z{hR$IB82+9JAX@iw+>E47)>y5j2Z8
zB4-+T+liH~gNm)sAFt|o+s12)C(RdGdb(NX<WE->LzxJItNL{Id0)sLV4g{b?do*)
zj5%*LNh0o9-btX<aKURbRo804-j0GMyC_@#M+;SzSlv8vdjHP`Fbf;#@T$v4HRIX!
zJ#IcN3*3ZLv&XrkJ<Y#%EL0HeZ7scQEps`}c7W9TvwW525-J37OH6%PfjtF2wiQ*x
zAcbKQ&+}xY&8Gp1W;&AdXa=hW(bsb+`?>))FF}oy-&nRrDiUozjZo)2q5(x)GEfMc
z(}?_HquKDl1eIzC^j}_f!yF>P#h~$IyI<9+h6G-YVy&GaE|A;OryHMd3!7rBrJR%4
zd7TnNy|Ty9e&{5HZjgy7pn9)E+bM+kVa-k{#Sw8FB8kZ$8Wx~t5@9@T7jxPjR1ZS*
zCLztOsk>~XEHHth42p<AyLGq~2NO3Z@*G-wTPdWO<~V5pp_y1XcqD}7{b+do%Ke#3
zjAgA$1d9tANFZ^{-#)7W>XlI8*hZipF1R@GNzLUlFc%W3dG%1$=l0E5xx((>dE~Z3
z^<JW?7B&m4^lM*5N+C8m4D8_EH$%o4sLI~-DTj*G<))90pIP145W^<94>cF1Z7Uvt
zwNuT6b`C!Hm7YdQEju_R(7ei^FU04eU8yJ2p*XL~|C6;#Ll@(loTxoyxQw^{{p#^U
z<#NjGeC+duM(bOG04TEpOdbuIo=yvl31v~ve5(h4^tKOoUGgI9!u`b8zY(VmPH7Nn
zVCJSg<lICDr;)WLlaO*jYLtHfj2z;}Xfc^N7yg3kCw0a|^w87<&;nneD6#9nU{l1<
z;!gyznbECup2lsV+t?Ip47731L)DHXlOWCYg55suXYmV}fm=f=vLzHwyS6&jrCnrt
ztri)DI4hmwaGmx#z{D|5k3>%D1jKecSz}_=C4o;yv}B#8iT3qy9>#bL=Dkg*D@V0^
zKBk=RpRZo7`+_<Hlce&1W6jRg*La-1y1FtAN<k4~yy=%!y{v!c>;62kd@Br(gJl1-
zbN_rfZW+`+OQ*G{_lxGwLf1M$u~;RcXHE#2MO!uh&e-n3LD9#KQTh`~GKfTiWk3HU
zofG%UKC<%rM_qr%ck`1`@0H4%op)!K-F#-O>Tvo#5OqGFgJxf1STN2!N}h(_y(>fc
zekz%$>|p7f&`$|>sB%|_ZuQkNM0H&zM7GxQK}7t?m{DvJ$r^;}-x3Hu`@JEnutZ%I
z5ix{ZvF3pZ{#?pg*My5-{HN3UC*@+6QA^|aqH;M!3|{j#Y|Lu?1U~W`Zt|a?z8@p)
z`Z_5Hh<v<&0se<<6_RpNy@^e_4HJkrn6Mp++qojKNT$MVW!s~t6iM%3kxNLgO23Q3
z$7%bmZhnBW1=Ia+%leEq4t}mmzoMToz!gsf<ln@elFGzT!*olIy<dOmN%b1h$YGj4
zHmov1ZAB$w)m_~=ZtZZhyD%;a#Fc9oBxqLidJBvJ&Q4d+kn|K6mPUjuR!Hm^nlRi$
z%0apqo0d9PX2hl8fFUvCZ{g_oHMjYow!9iHFmlCU4!uyG&c2KS9OW;LAY5h+CJ!oN
z7zip3<-GW-fzbJA4&~N7p~7{e?!2@JCSXJU<sj~lzfYffI4GTKzo@ZA4<5z=l%XER
zzpxR2Z~^k3vzxqIxD#?pgua6Xa`?z#M4kY?A1{XR!WvV;q}UU}51k)Q-?rnHW?sSa
z{qM=v1dNWj7=EnzNu`S3{aEWxH{o)(KHwp7JM5)4i10tW=Gg4Ui1MB(CBN(6o>}Y3
z<XKBm1d|#xICtXQQIbH!pS^I0sYcO?>4n<`IJe-a9$fDy1oX0*Y8~zcP|>O&Zq{{Y
zdxIJ-={N;9tgsmU^g==xz;O^D6`PtGlvC3Mt|gx^W4HN9Ogt{vB}f7GVK3B^k`K=L
zFhZ;#{@y7H@ZQ9zLa#_&BPf~t3{H=E9wfiGse+Bl74;9JAkfPb=Vz7~R4W3Cn&mY>
zEf~5XiIlp<rDj+}Oj*sD@DL}Kx5Kfd80uAO@wkUiwy)6&So-bt*lqB8h)Pd)3DF&1
z0w#$J@jQgrCMv44+#f#fyF}4166axvT@8Vo+r;Vm{obS@HgM-2`^ufO%SJ(UOox^T
zdNTERj7MLC5L=C6jdQ%5R-u0Kz}y9Z5L@ay%ODj*0EH(m%!CGp=WH^+`gi$9e8V0h
zSqKHN8PkLCS4rvuTFRuBF@al5Wq)Z5a<=*Hi!n7Bo{H2zC|@`Mx+N|GN>#KqWVE?l
zshC|DiQdFauyc2*^WHUuR$p;}xe=P3ax3h6pPR6#Xa;H$pV{EOS<@R*XOM8f;C5wK
zI(+H;SiVey$5<LNI?b)aNHbIVM)xwX%DH_~CThUBNDd!Db5rOXfdWl<9<8t4{bul+
z2X^h;J7ZH%j}9EW8;A+hBG=Mw!C7kWn~4KWmf%#R;B!pSkz))D2_ea92+K?UkudBZ
z<~FlP)0VM!Ise__Xy|W_l{4Z%lE_awB-&7%gkNu*u*7EBoyd3R!WQ_sBMQ56NTa0V
zBjh!&r9U48VWd^TRj8#d(GZp6^gDlm-FmQ{(7A+nzWcq&oe#|pi`L*o4eJiJBo+DD
zm9<sClW6p6koPU`4jy%f4eN&^`BVS232y;=pg>Uy9HhfmlVNT?=0~*vY>T%H*d1YJ
zX%l&QdO<PX<O<X8h}A*_G)uFdD}S{+B>ZJ7^x;yg$mwK5F=&lPHc#jYt+vH8q9=>Y
z;bC<IliT2`mn9BX$ygl9N62Xtc}Yiq7LIdfcRBk>B?Q<=?S=h3iSr0#r1;ZpkzFW9
zS;U$f{u8c(WfwmK9}XQJ*t4^j%tZ9NBkZ#!?|!oV&_=}G(h9t*Fne$s+xD4WkI=T~
zYythdaB-_Rh$tA$@u>f{aou~M_ZL+tZQRVM)&OZL=XnNIWIe<y-YzAQKPzpMA2cP5
zzvurJXI%fmm$G~zbpDrr0RhL##g>8!^@YV{|8H{z_9wU-7|WlOfS=$-kQDE%A&)7?
zKfy@>TC#Mp*@Lls*u`7~MBf#xly%m&PU-OBAhbH&tCWR{S*!CH1M=AfkuFu;Wei=_
zul?71vvYk8QnG;4r~bKLWBIz-Dv|QrObo0PTVe*!!x#7r9y#mxgE@5F8hk$QJsc_b
zFW#ORV~##=CbVo@Ht94a-REq(8|QW@rpi1(Q{6Z<VIwzRC+*6^N=2d!4C-T5#sHZc
zEkxSEQO`nNkeN!vQJw8^V<FG3(2x(O&GJ_dY~?QfH4`PP;PknDYG}(aTjKRL=e*}d
zBh;A!srV3c$Pi}Ap^LK1n5un_iORNkN`seRfDfC{Yb)X}Qt@56GMDMKW@4u&krO^3
z*S2X*ADz&IymI3Sf+DlJ*`vb&8m<l7X;8DwP!!MK*9oM+4@8PuFRucejz-;~p~LZM
z0t1tjr#MsHoRh@5SE6R0^|wPbANXCS+Zf98+LmVn67zyo26T5nLnm+gJM?gjSMq8w
z)4yhNHt;x*A&{W@{k}u!A70S>ldWc7PZXR2n8!~Y<XQ-d{5dN0w_s~pUwi|0OGH9H
z_*)&@PP{E~7aF>|pWhH7X~)&l7Eg6Fl^;KFqY1xNNV8#c|Es@5vU>LO2Z8Z*(Rbl-
zC(E5z(OC=<vxvHOWI72pVU6~M``Yw2=;*==?CU~6p-hE+#k8a4|6}VMyE6@&E*;yp
z-LY-kwr%T<ZFlb2>eyBX9ox3mv8Ladd1hv<cYZ;Axvq8Ys@k;=eTe<^=m$js?SJbC
zKxU4BbN!ySakgns1)(udNoGtCUp0O=N=SXys4iJLF5aThZ&&d#LRse2l~`wdMTBg_
zR)$$mtb`Tulc9p^kl3J845*_QobfL#e^t;r5Jpg?9gKW+5V(OVg4xqMn^+}bvK+#L
zQxR$0+iA`%(UCjUEzw8Ck2V@6a$S-wz#$5QE-F1$Y~wGyM6D#;$+7m(XY^ZiV>@~L
zlwFl)6>fFx5R5!m#gm?#Cd^09b>@%{B9lET=;Onldf{*YhGReM{#^nJ$SKK56w!Ht
z#4GKhK(5-~X`Nm50$;X!Mg<QxU#J&+1kO)k#btCPnV7rI+QA8g3XltNEofsFKtzAY
z;!u+Yn$W;l&IMmQ1j-cfyy~IDX@WsxuC|uDhn^74Q=}$n&?GAr6d`Fn2qpaaw3gFg
zmQo#s^DmAusZ?TV3}gZqU3B~pfRvZh&yx5|X~qfyc~S~uh$U^j(Tz6eT;aoh0cGU2
z9#QW)g2Cn95pC4!<Rhf%{gIStz)VxIu9g905hWZdm}=G|sizM6NiesF8k_pXR--mF
z6HUBf6evV<`TWigMY7Rp5Cg|Cm=fXiSDX^g71R<d;N#}~udY-OA~o$jM|jtz*LS(p
zP0RqYe+}usKs^NMPX_(aS<I-5@r~MmCuSNeROad=e${<7HH&&!>U#Yhz){J<9H{cV
zUX5HB{v>E3Ya#*CoY)?AvRTRS6GNv}{qhJ$aD|;#5VjM25^oagRs;le9XZ9a2X=aR
z6lw_Ki2r?f4M&vkwCW;xDH<hJlTxh9(^2YLn^)EZuD`9oAwIFgg~9ck!fEN%L2dLg
zQd+$w&yG{m&JC`s$;RRfU~bN13`s(D_tQr&9_s~9b<8uAms2-10J51Df>L`GJB*CC
z_lZMS^~EdlZ;tw{0#BV*HJWU~0|AEosh+C%yQOqR=_(rKoTWk{beP$%IPtwD%qt13
zKe&b3(@4CB;u+a#d~ft7nBsBYQdTM%KSE@T*wcUE2jBM#F<PJ<0ZKI?OMa}}aa3<@
zfbjoLh75^-SOP7Gj&;k2Q`9c9?XW#JCjJXCcl?{GIhQ0!8%-K%>Y5!XB&vAv`mSL-
z3+JJse%%|G$f3N(4Y(|BL!p~#UL#wie}N}~*^S0%%GcGif7n2jy(iG|z>QTpN98{N
z`CB56h)rmPkL#|l187cXQbEAe4tAJum<p5NmNJ36H$xp9dDN~rrBKJRPzyj%0P9yp
zd_L@fqWlXJtdok(G_qdVZ6n4CIw#JiriycEe!R5AI>|!NAS)<}V-i)L|15U32T}Pd
zfdHlO!X#=F#Ne<N>*BTv63}-@BRJ9j2ShyG^bk@MBnM5J5<pDt$O~=gkgUn#zYP%t
zzT{(?iVR%E4}zi=HBDW4nMU5Fb(PmiBtn`@_uYQ%P%;IPU?iSpg)o-MwYH=43c$os
zl%@I?;q479*x6$NSp{2%QaREKA%F`#O>d>cau9|BsU8&`D=WN27|k*H^W-EX{4uTT
zgfWd=$9Q}d4d4%ESZx3Xc1{S(qa%ll)>)rl03P@keQ^EHBVy;V;6}=yeEXeQ96i8>
zFUs=}`fZOCATG3s_d^CkRPKI4Z8$`Xi2B{?JQ&jzRG9?(jPd_VVf;LLFfP~co#W5a
zV=(*5g5D`t>pkYrf)}4O_~aWafSwA4B%TTtnV@;x1^6%*qCXf9mYod5J-Lz$YtJ)f
zLx&PHOdmk8Ug{xvLR2u*WE3E>ws0V~I%j7=H~G5~A#ljsPla9yi&@7F@nX1IZm^gK
z@kzEB<LwZ+2utPY%3MzVLKvOi)bofnt7Kj0#b`VS@-CwhR!DJ2CJ?|cQ6a83@QtZ?
z&EgA+Nlz_3BjxW&@}K?QzSUVPJjyT+-KOXRyx2>@$(%h!%v35;-3{EI?KK7OGYj}@
z=Ck=9lV}7c?y=1%M6D73drc7X`#iMwZ!?c2z%4-?GZiGk837>$6@%-ww*YuTPs|_M
z4x$r$i-W5_k)D{C?Z$+yp<Gz)<@2sz>(_;dfdd7fbp>2ZT(Pbn(?XhD568z<6B*y`
zOruKVRH_@ZcHmkPErNj`4YgP*CHSl#^OD~D*RGtHrjqYeU(1%{oqGb5huA9~G(Q%2
zrlW-|OJ+RNF#$_Hcnq&TW8)G&4|&I5xDI{R{gL3QspsT@z4*kZIz4p9p#rY&UI;bc
zLDvgYYkq}**Dj}e5c0G;hZ8!I%EQe@n>>YGc6ZxAa`5wsgxTwx#WFqm{JEKtdcu|o
zV|<l>{B@;4hvrYRw5wrn_fho-&Lf{CPYbqIL>XTgAAmYzPaHoJHE{c8{qB9YgvFHY
zg)5Mq0-?$1g8A9dd>-l&D$*y=FGbPNDO;aY%Z!`~h7|66Z{lt+)NMcfKz;8Teg?>z
zg0n~^()M@q3DeQ6^<Xq90^KEMaK1xH*Cp(n0|S1evJ5yXx#~838}7{l=}KA}9{KtL
zwxh(23g}FKyW}ppyhBHJ@k3pjXgasQEH!%x&LK22-cK9&K)@{U1aL}#;ux86<7kKZ
zC|aiQUC%694Ny2*6VutWi&J`sBWUB0c|gCu++l@IBX^PB)WK4{>gDW*IU{brO*|jG
z^m6+@znvZ~DJ@W1ynNwS8NNRNxU!i#{!1fLxw~4JIQ*Y=7B|O#CU`uo|2KP?`yT-2
zzceDxe`!QOxT-?p0y9SUiPoWHm%TyXiIWT6r7QtTnq#|$C@HWsxWr}wV-=8i_3s$E
zS(HZ{ZwBZ?+@wSsoYu+o5lgj3{f@zp1&~PXol1FybGMC3rt!%ZpezTI7Evx@)`&wd
zUZ|0wl2vRX&X{?{HIfdAYNhg%r@Gl@%2@mSg9-^C*AGTO1{n^PjxI0;dr9J%6toGa
zH;zs8%8P<XiyHoYemzi#0E1U(`kHxkpZdI?W<4d|-=vlw(R1k*F@oaYU|B(b9{qrS
z!xUAN7P;SevCimA8x`tse`RLitB*E7I`4Em5SRB;hsk_-VyaBw?!B}u>GcG;H(l%7
zz0m;xh)lN;IhZ`k@12O<Ms{d1(RN-+wBq65V#`q;pY;qSa{N=aDo{r)(Xx@YwUU3-
zRBU5*gZaaW&@>7x2BqL>6~HIBm5?h^Tkh12y2^*swedr8sV=pK)cED+xn0ti3=MuF
zDI8On!&nJ6(GzY9u-h43+#-w=N+f#^P-*~>w;HRn-1nv#&9uJny{zhff>#MUCtbdf
z(ZcdEh}4i_tEqAt-H+_O`h&u48PWd;gwKoYezKC30kQd8-D<WJd*n&pW!9IM;N(p?
zg20}PAj#7^Gd~mk{smTN0_pny=^XyEqh;s%*EqmB{;yMR9@b1!=zkvtTjrfCcot}T
zTZ|mI1}Ff;FQm8j6DOQv4yMjxP233e_tXNvHLaZ7c4@phX-6rty*p#Ywr>^b7q0`L
z1$hTwxWd@Ggl?K0PRwn~bHf-UvR^j^tm~#4^9{%fhvdZqr`I~i?I3gS(;R|@2ZlPD
z?HPqn$A8_pb<IhNOX9)9C(1$rqlOD~Ay#zBe+QsA%D~F?zHNp%4Fp47_1W!b?a}A9
z5QAJ<wB4_wG@^*&4NLyfmtl4jXx{ysVWz)gp~V>dAxh*Ll#3}v1U`I<P}dn9n4Dyk
zDm<G*zTw&i9``(O1~LDWM%-sjqYs(F{52~K1TMoT&;Rjlip#0*^ZMNj@UifY4EWkR
zNCXIHk6?*XKL~y{M-i#;`~ke${jE3t2XHv)`((|1d3NQ!v*jVw(^y$ZbXs1Beyqzc
zN9Wo&8!pRDxaxIZNPIWpbpiNs<-W|kpA7?0d2`2J+>4SHSW2h<n!R_O4QEor!&)WH
zPO9iel|`CuKnrJw=sc<OgKg0coAo(90|6T51~#|o{i@BH(!lw;of}UU(B?zfZU-)L
z`Pe~Mih16n(zK|vjZXZhBdW4i25xejw>9=<M~DUOnYwfFj`ae>x<KCt#>Q3-o7qHR
zN4s#yqQ09*+t}X_GN+CPOz3uWKN}qg=i~U6hv_FugWA{mWLMtJGe<nouYe6s{|r+G
zy1E$=RqCWXQtDJ?&L6?@pz=BUMe~z|;IW>lFydrvBE}#3kf%lC)13Wcda|iNr%-_~
z^aza-AR0%~ee2^WDhY;1Yd|l<#Z;`e?5|d;{DR7eQ+pB2e`L+sl?tj}BYHt7uh2!8
zNp3pI4O@+ywg6*u$WqM`m|XKi6+nw=_}KWe;i#C4*%j%fe#4Z;xjd|aNsGMM=d8vN
z=XD9LrA878h$YxptXbbR`E!st=pmsjdBs^pJSRtqZAbJSJC>ZAQNUWL!`CpFBB=^_
zF7MiF8i=?av_aTkbXlD7$SyrCgCfH5xz5V5uCw)kAW8}pt<hFdjb@yN06?V6@UG`l
zZ8eD4b{|?hb1Vi|37i7uvLzJ(+h5vqsHxwdyD&C=ooiQ-WHt)pWspR}o*`3O1~B?K
z7RcHB_a%Sw;*Ri!@zb$-5+ZOd$|a0g=-*CmahAhJME4gxg)X0DDpW!Q;K9(=Ngiem
zfmI#2%X4fQz-Vk@w$`h2AfOZWHhfzO#-dEITydl9PHUw>$-GKgU9kCu24h)X6qHC4
z64h3oP$`I0P0GhEmuMOJoVnjZ))LfCC@G@cLVxM`NWog@IPFw4<U_vw1@vQ&1sOA6
zS^Yxg5<GzitD<w1B^emgd;O<c0W-EoUAkLEP|Qk9-H{(iH-}~$1?Z~X{2hg2yEvyJ
z>`=cDwSeo=jy;8Vq9sPKfc3*wO)M2aocN=LKLuI1S_e(4(esfswWUrFwjS)+iJYP!
zc$Pe#ze=Xozu3-mA$#))T>6TPDE`Qhw+RCCzQM6QmJ;U=itCqUsxK;|^HP@}Q37+S
zU|+uGu_ti=4forwI>3!Mbf33ZUxes1y@EnXIcXag`g7mHF{IQk9=Q;<0PHTs{?D&G
z3MrQ|$c52gi7VY`DQ;;qM;iPC71jPlC9tNh@>7)shJw#OKx(=3o6XrLR@4R^qAU_|
z7X`cud3DC`u*%_Z5vfm(ResxbZ+$B;lYxqmCBcHyQuF0$s{&w>u1!L)qh}}?KjgTn
zxWTsq;c_-u6HpaSbtWaOUy{&?@002-JkLwizIqU?(cwb%JeW*HS;ApGAbqdg(kMhp
zb|8Q5mz~3I5TZO+fQYbpio#pF$imCZDwzlFk_;f<_P|&j6gRaD=*X+Rtx_r#J^Q<;
zD+=|7+!HwAkpeF0v5-)j?%pP!Q&S-bw-n;853{<S$J_LQQ{z9Pc$S3i>yHWi#l`h;
z>^dali8Q|=`F5*1<1+oBz{F;w73Nus^L$|TxOkkN6pVJ*MViEBj4?fh<)TFC9n+H8
z-!?jZSO^9B{*=Y{@@665kJo{X9_})8B3%LOQO&nwaR5}O$V5V`HmRGe#>+<!LSg*`
zM#^^9_a#I-KR$9G1nqNxdlM6#ue@-I8De?f+qaeGt{TW{RuFvU^h!esW0MJ$G87#$
z-Q8hB{_(GNM0A{1>uIU2xi{(hsloA2(iiPsNUoQmcTZgk9W{fLWX;V9pN%j+Q9M!s
zr<|DJY=BNdd4`^}v9bUf(Jw{e*<v?at?YRoCvZwy1#R7i&CAs629zN)%8AC!=V@pP
zpKo|+p%4lGl_e1;mS<kK8o3~{#%*_u<UHNYUm!CD(YDJW{Qq*L@hX>XD5*ej73#=Q
zwP_n}L;dClXF>19zK8ud5T+`=K{W(yYf{86X#qBMY#7KDDyaW7z}~b}RBnlzP1%Z=
zQYhitLeM$YaeEgcLH@dz*L`7v(-LRliF0Sn?!)A3wwa{GLGmb^HBmyI-w3f)-OD?n
zhw{TTM&8433PpUCWwDlF+%JHt-0HU~DUW~LRCt)1&{oepg-$N9h1t!ak$MB^Tm25g
zBY@Gp2Cl$7DOb>QsqxzE>xXijIF;LWsim^$amlO(mkO3xtrhBDL7`e%4dw&_*VoIT
zQ7@5CC8o_Sbe#T+;Ryzh%(`+zM+0CKPqTfSMkmcNf!+o0EPNW?ne8BrMgOtCPpf?@
z)e_jAFLBvj4Un9v1DoZLlKYy>GE}9)3b1h%$!dRv6K-0MT-ST&!LGp`YbY++pq?ex
zMLV^USze`y#PqDB`6AASbd!T_9TiQaCT2W3w8T87Y;P{Ovj@*R?$Um7PP$$3vLYVy
zu?q^ijuSiB%*3-Mkp6B$cuq(lW#{YO;xikV3qJz94&*Aqcc`kr@u&9=vbSLI){^lN
z&a6Q;1#|eOp%Sid^Jq^64()-^?^>L$fahCZ1$uX7eR}VGeId?9;pP2zt;6#lmlrGN
z|HJ3x;ryRk=YRUTG{7+dkgK)v^ymC|P8<FxD9)7EG0_yYGIT(Nx$kYhA->EKaatsT
zV&)_X$wU6@gH5;V+pRbY|B*qVkFM369zH*=0~h*F9eYcr+UdN2sjW$?ZJ1(9EiS7q
zc>fWOiJB~(O4b`oEnpM%a;{MT^gryO?{>628|aNb!%SZH$K@+PORKII3EB21?F8ai
zzXTQ(WN2i^=)erqPOtyt@zev8VZiH5+t%U1ls=4uF&0}F3YO%7oC9WF*lQRw7WF!Z
z1VQsp_vO9a2c~Vq5e|p4c}~NTQEkhb;be)Hj){$XUqY)OF~1>>uh!{{4Q_h%GIlj?
zeaE4!i7a=)_?F)Q2bEDNkC8OFi(eBLymiEb$g1Xlnwl>^tMrF^UM6vJEp<H5{ca?9
zb=P(?erlYVb9t!jPHZ+bFDqbj^?Oih@QU;rj<P@kOFu(f_De!S5hYwDdkyw;WMA&i
zu~oAt`wJPlXL4fu=qJklRWQ(_Pu-)}3Pr3vs0^RPv9ba1u|P4h+vAfRhr~`Rnao;l
z!u$4JMNq8p=5`oRV!IusU}{Mij#`C}w^J}_aowpP{UiA1QJPx{=oICv<7EG}Y%^%K
zXo;87B6~<F^8SOHim!L<K=e$>YR5oKBxkv9ml{EI?OZMYVqRLr*YjxXNsv9mbvK};
z)dUbGn_yH9Wl}%3jA6mg0fT17bt7Fd($5p<`tV;~?%Kax>$Cc}T(jB}V(RsU1u%Yd
zzE7=HPjJsLfkON?w<Pf}A>_6Z4>KVv$!$$UT5$U^*YR)66x0Ui1cVZ@V1hnZcT1$*
z&X>d9$i;DI^8Cay)VQE@jKl>?6yy{rUnK}hOcO#DREVHCNRt=Rcbvohqe`anh?WdD
z82*EG97J=WSfIvLqCVRR70sBkm^L<XgqkZmvYmZhEIXk4<q(Q2cGQCeh`jHHtlNH5
zSh|jNN<(Unw@J|339#FrAgG^ZRs5paU^U7V`pttefl;2ne^9USO9HM^>AdU{BN!Da
z$+UOWQ6v#d=or}LaW`7~&lf`%w<#=x1}Yvv#fSV+yUDoRWzmL=ey*MUIRlK8_;g;e
ztnP~-Rv3d!CVN{`(_dqSWAzmj<r@ye`1Cm-o7$rTb~XBm0Kjg2^T2-Wh=_`X8wjV3
zrWhAeD8B~0A*c~n<)vdN9JNYx?y}1<H;zwSeT*Y(bmZiZw$0Cg2fZlq#^Hz`w{a7K
zlxV7(*G_C)IX;v-27DZWZHBNV8#Lon?98sMLmiV#Z4+&vDxDArr)+MhtWD?hUq7Mz
z0)t9oeGLrU23-A!M|#r0zN+0OB8v2If^hojjHZ9lr`8P@0u>kl4&vhW^&Vuod~sNJ
zN>2C^A}zLrBolV#LQ{v%Nu%W4yRm%;bTv3;$;KohrY3VUYW;!We~X(AUzNA5@@P-g
z+D?*G`!^8yoz<8I#BkF-1GiNv1^kTZ%Phz8iA(fR0)Q^_+eabMz@<(TY5Iu-HH>)W
zT0rwpxpDN*P!g?0<w2^$JWVQxcTWJ-yPHk@7Qq_9wTli97yLVFVy_{iK$jM#Xx%1H
zNXM-4hkttlrJ@U>w^h;o<d(s`EubkXe+=`o<<XtF)mVZwW*0pu_ynZ0uK#`C^3U^9
zDde671B9foK!(mfiw~UdZ`EF!B9}y)O3LHH2YLL_=2dgt(I(H}mN~w@=iR|@pliT`
zX_aG)iDdn`m{Jk2q=DqjZL%9w&o+c)2B=>xTUDpQA-K%=b4^h$pnqnK8)08xi16cN
zK##Z%0laO3orXpmdiaE?VvxL1WI!(6g~Fqr9WXsp9!q|TeH#_~I~m2R0jhyHM8BMM
zpkkN&kVsk?9j?ZGNY-zOhcQOSf!fTI0{`AaZI3jEnn3#~3a61eK!_lODMeYi=H7f)
z|3rbBmK@OoT%(<IRf9UjCIxaXbTDT+8ED&6dmB*c`%}-+De+}2DDKwZTGM%+Ysa6B
z7=UrfqA^xU=Q$MW>igECMBP4|gn=W*{rLCogor3@vplw${JNlZ6&3we==wa9zndTH
zSrjbOBk;5UPzNV&h+^-nY(QM^>2jg!)4@j%l*kQX=~WVMtK^h9<=!58AS@dduEX{q
zQl(cUExes0dOL>nTI{x7uTn&Z4<vaD26R6?BFGLqZn-ELdn}h;k_XfEY$yfIL5x0j
zaH4t_TAn6W0x(XAX#DCC7PG*232BYcDPS?Dqj>17@yK3%45(m{B&470Sw{tR><N=6
z5iTK@1j72t@95^*MII`pkk{NAfc)dc7OLutM^|w9<{_&#z(S!oij%%;QA9~;z^>UG
z$ex|NFGB1{dDP6L&EP^wKq=WW`ddg>YyV=<0kS+29kRHCuQQ!r5T@MOJUQTJ4yCJv
z?5w{p-qy3`x3fLgbu^11F|c$8fkah;sNlRMCx-y0`!TH?SUE1TZawi%wyyDmvPH3u
z5EG*za`zWr(Q!b`3~2tk!lQf$ActS`lhinDy_#MaoNEc~91z(>P9Mk*S(nIVGy6>c
zeHXHe2F6hVJ^PeP63LAGLFHcM&}O^4hnu(uWtLrjWSFLR3Ht+5kc9H9vnls5pdH+h
zGs?5TH$|d>4jlRFSN95O7>Wn@J+*st{o#|=IckEE(jl@vQ@=KAN+>7{KmzB+PazRS
z2s$7Q5KbE8<j7DeZUEJ7Q#OH4Ks*TAO<?Wn|1|+@Jq<&0#!;HY4d;OukumKlWKp%N
zpywrc_{kahQjq(Tj<J@BQF?q}LwsE6AAK3TuOCYI*Il9xJ_Wo+&=4<@^=}u=uhZKc
zb&vofkUH8R(3`7W!=jUHz;<OIO7T+4ll_JN#%5u478OR-`J#zh$TMESm?Il|OKbDS
zzEq7$aK-7|(J;hoP-SrJhz<x=g>pe($;o2tdtgYYkb5GJ7y*BX*js*=e{lLV-Tt)N
zL$kH~)cjeDgMABVbu?SVQ#>WDL31nua0{$49NqM@CdblPvvIc`U<F;JY7N+zG=&T9
zS_qvsUw{*+B6M{OcLa5c&MU2pc_dVY-kNxQ$1JOX)yU)blX4HbE|)~QM0MTJ(a}CP
zao<lEs&r>cC|k95D`~-t%Ef{0J@Y)=YV!#Ec2N6LCz(jJ1jDkFVqLK^<|@)u67f&5
z4T9A<y^dE02ayW|Acw;dUCL@GtEVV7cJWlH2czNBmZzT=EJw0m)q<G5rL3hYvB-CG
zoDsAgAx9x3AkBxX#aWPj3Urti-5i^AvFnGy1Uf$y`y~E=?)A66t3t!U)`GtGP)$e5
zs6{70-ajQuHge^um+}e)_ZNTq9jK}<U$x`0-I^=GWZpgpAdFf_RvBPQiOXhMH#m=u
ztWj5oH*>H-A&Q@m>@;e6<~0LM5nd0lrf|6rrTTglVx&^>Yt%Q#n@T$0sW7>fm=vfw
zXrCNfDAH+HIcWvLkdT~vQ~Du^n*6SuBK%yqgNP!hsd{I*x-8J#R!u*5?4ezWy=t74
znM@%nrmHdrkRPT}U)=lEuq6E{K2|nX_*@#$0toqE9_jIi)w>%t&~u{fDvYkC!wSzD
z8K_oocZF*9fcpx2B0TFvog2>irbfpxiJ4$i=Oi%``O_T=)`Bdtf$I;nK3Ut?2J5vZ
zA{yAOD%%DMmzcvK2-m#5pOnNo>|o@~Tu=$6$Q9%R0!RRx9nvO3nvAeELyv0O(57U^
zXc()lYQaI?5vai+0qjD6u&1_!eqR_<VTLej6upeT-`&A4PcbO=xr==2LQ*R^4w0T9
zT>bu)pWuH>*a)q?hn}qYg1RYB%J?3&xuUn5U!PA~iOOP;=(~kZv-cqfcB@d`1<8t&
zT<h)t=+}bCctV^>wI+}K?ub=vEI7hmVV<`wr3#0Ln5wq&Ib*9q6YsdOaj`!0p$}ON
z8eRy$2Z{}I*6%yVGPA5qyz)G`q-jYNt=Q&O>#3yGgywGpR7?U?Dvhbnz-d8lKgVRt
zSp)k~PI>V?$8-7D0L8zW3UL#`QMENw(~m;|BnTm4^m?s`5m?e1orFU4;$0G^zMoo5
zFD#kK0?zCfr@~9#6w>w0!8h}5kOh3028@N*5dLl>gu0OJk}prwkA<5>THdEzN$c6&
zwK%Krk~^b@%PBqE&j(SomvL#He-);bBn(UzS%jp2)Qo&$qpCI5(rzT=h!V(7JPU3C
zaJRER;D-BIeWZ~n$rsl&H)7qhZ)su7_J>_se>)@qkr7>fO9G)scAHN1WowXmM5?rv
zHU4ol>4x2RFsgvF)E&-h-5bFb0#93T!@zjcTy{7!a|79il{y#u+q>`_?*v-9+P$4`
zkONJq=l|aNAoBdjzRSkO!k&3b1TGHH*GVK8P0lca4%9IQ2!}HLa9#WTr^^*PFv<E4
zQC3OEAx=mTXjpb$_D{5TQ;#;uzjZrN{A5j?O@0w6_An@==T-dsFZ;1$(t+8Fn83vs
zr5CqW?sxYmo59Vdmr;9`*Qfo<-+r{zt&Q1sJRR*k55)D+EgIz1l4E~3Q)7Pv)>h)Q
zx_y1`7I2;D96N&B7;9&GdtWYoJS%Ii>tYi1zK+^GCuwNP67KK=p4WSRh+Bj=@7;Ah
z*BRykxWC`^K4jM50;7#``g*({GqrBEkUf5fN2T@(em{M3U3Xa1jYtq&K>H7$|IwZv
zES{*_>E`S6j}hwjp2_yF*44@Z{CxS<@G`C5f39vut>(C^@I3MEDBuosJUb4Bbj8AM
z-)e`|(TMGgp1J0Io>iCUB;&u_8b$10(Z)5pbnGG>o4%(?7*D^CZF!VtV$MUk+Ym~7
z0v}?ohKw)%l+#yqw}`h+!<Pys!DmBF-}9LItd=-a_hp^hd2{lIH&ku`MBAk+xKwtV
za-5WBR0*Tq3L!J5%aBXSSsa!AIo@l@$bb`ViEG#qt3vo@GZHhvn^O06s{COEu4u^)
zzc7P{J@f01i0cRpqD+L?*jC}72Np1!u3VI0^s77GWk@^ia<*k<df3>z@$b`ZPj%oL
zQhshQ+pQyRyiXJ1+Yy5gARz5XgU>BCBR!d{_k9kzTKM@gZLMxTaOw`zz>snI<?qt(
z!*7tzu+f^znrzs%7Lj<nYIn#$=+mdG*R|LOuGFjgi)llDArmX6ubA(*r!BdcgO8ci
zx@p7QE|-7%iDi{AVMmElyYPn~QeG5#$J6n>2+J$~FQI{5alxlF0GqH-eLJlkSug#v
zP*GkW!TP)0M?Q1(ui2L&g6%wf6{%N#y=$zQ;z5LHhqleXZ4=Y91|h+=SS^BGb^`0x
z!jrs$0Z@1eLojkff91Hy>#CvjY54y+a3;#X^%~D<gETF+@<^<AyLNUw#IXB`NYc|f
z5nvd!37=c_xItaL0W7dBiDPsrEZYlNC<s}HW}#rK85G}Bo<~MURkrjBOHTRFT^ey<
zvqzL;yD}(<nTR_^VBKBF*9w#z!G6d5-62sr&P4Dt#Si)+?p6<59xn=<BqaAA%meEE
z)VjBu2Pekld-zd*jB{Ali$+3Q*|iSm8SO(HR=J-}98SPV0lisIi;TG~%=KK3h_H~&
zgyE`eaQlWdQ8g*IB{+Ax4;xnovl;4t{XNi2{sc4S;O(+gXlx_2WcMp;4%Fu2%GQGo
z=-+aZ8k0D<fGTEJvCt!ZJDy@+b?-o7O5?IzxM}BO9R^^7=DCX@lyBIFG9vj0vm9b>
z<A*)p!uN?J0r*m5HY@w^QnnUr6wN`WirrGM>aFb#)|c0c2B4Z7i#5m@QHAXn&`i7w
zuX=ky0TgF`LFLuqez<=XHilt8=YtVt2q9gY^rl-sZO<}jcuq5ERPcMs=FAtL1vS^`
z|AD7{Fx?H|iSiAT9>t`g>8m+5@=Cs0xPSp-myd05VV>J2NK(vvy)mbv-~FNDTT~
zhjtyrSQ2h$8V}>LsxlRqR%SZ-i6ppU40*8&S8`3bA}l_}ER^9E63xb5JFcxVxXxtj
zov+B7w}BZ%2vrXAHADHJhDkIWb3dyLA=eA}l3&OHe8^Rx@|8MB@++S+pHMZV_bwv6
z>is0h0Aea~SPA)0vrW8ed4-Mkv+Dy!ymUT^G~_U8MUhJ}E<GPTXdvi{!wA@5yAKJ8
zvr7G_6s&Ymeo|29*Hc1VXp+xGIxR@SKFE;mzgUPc(3*lEY-dz|TAy<o9PYQ1t-S#F
zUG4yIxhK!s*=bsGzge9uUa)`1UP)OywGn}SfHr5>bQ0$%92SPIJJ~c6!H#nAF}xHs
zD-gO*k1h`(nc3iy8sjZTPNF?yr$*BEc3zBETYSnNG&1*ss3Bs%!U!s{Qn(E`CX@PQ
zRW3S#QyT+pl=b+A6Z%00{m9EGrvtp5d%ZiuTOhQ=dKmXjVOU0-C-z5YjP)e5ivFGJ
zfWI5Ha4&j#F@sJ5N1!|wBf5r<_x+Gwv16I4>WooaKrATH?O_4bIQHEEh(az0;(Acg
z0D+N+u%AUTS+A7RG>s4rC7x!|S6W>TVJKqVw_(y;A|>_48TL!?*`biB;C*n>NW<b1
z!hzUkid7-pbx4EIow%98=2A<Ljj1vvfZaJ>A9kMNOxGzAI2u;R`tmJ$X~-<80PbWN
z5odv#TH{)2e-KBCU-ZUo6ZJnijq$rO1vzyZTesc2E|${dmB}+u3<;vapn2R8RS-0h
z>nrAB2>gby#o%a2aepeK(b%5FAs|Azo$us9T>l#B3wcoY2NT9t6V@RMAmKoQ2S6*e
znLmqpp{Jl=uu+_=1aj$By;G1nycx9`RIm)_>n6(E9dOK)$PJd?p5y^+#sZ1z%$Z?<
z7H7bylX>wQqmh!B(n}juH#&VTk-Mi_1E}PvWcmKoxCqeXblogsqpzwG??}GeK@7?O
z-3xuuAgCx+`A@kPqz7T?+@K9Gzy)!o!R1mzR+EOiOW%`FnkUT1WDn=jPx|Z>Qe2dQ
zMQTI<9J?ZI6~l;V?!4LS(!6U;>e+!PlsQTYouhmvRU}5a%HUG@hjcnu#=3S4^-1zt
z_OQ*e82nj(4LqzI!*eC!tmYTxvW?CZ&BqP|&uJR7=g{tirEt7=Y211&;P0)c1C1F4
zYpq18=`#JCr*G%&Y=)MXXVaKAPlq`Sh);7)-NzphokOwGW@;#n*~)b{k|;I(YIPXv
zw%!+L=eWz*)|b!RNLUg@c~u$zxxhGaqyo+4g#<LdG<C&n@Edf6Dr>db-RM!&cQ5-K
zWx((|$MWCeZBkIZ$Y;`DfUW8?V^h}({9>Zncx*Hh;=^|F@#T%cx$gyZI&7ThQ>i}f
znXd3m>|uBk=;k?3{LBP|6yjTFV9ovgJwNfNdiK(}a}J)kvun<cKM91dNfE+El7MLv
zmFVNw5SOBFm8{;U-ZRfE`nb9OOQz!*VlzmPxF**j*F-;RX`zT9fPS5n+5A=pp4N=L
zD)Y*@$43<mX*FXnjN$iNS53Vt2N>cBAp{pFyLURJC?N&NL=Y~{G|exEgXd@?`;BTJ
z`jg-+q*a;J0uxl64I1RGi_ERRg12mx=smc#LldnkbF7?m1-JT=XirF6WqsR_`8Kn^
z_fM~ckA8?y-X|Ka0JM{$yH1z&bk|J;=r_bnwZ)Hv@)W^$X{oOY+R}`8*vd?>)iE^0
zUFy7uN|~9dgWyxw;w+sy9fBN|$JErBm3l-XVDVVv=5v_og5{brDMknyYR#t(PQ$Qy
zO<rd|7pGcDL%~XFD?QWxWVM#@PC6oifQHWGKFE{y{bpT;0gz@ik@|9$nCr+ATe^%S
z7cl>6QAA+K2ujK>K~rA0e|l|vx4>^ORDpQ;#e)~tU&d3TYVmN5>l9%$?hRUAba%Zh
zva*RXBgPj?i`4JBc`R^9`6EBDLzgnW!wZO#*l!Lh+Dr*#kkFY`b5;(Q#D<PWf}?d%
zK<Xsw#Dyf91b|VLCKuRY=XBIU$e6bvd77hTBG#WdU~@+~R#4qfQ9<Bs;IK0G9oEo6
zqlHUA`!J^>l%#EgM(%(?K-Po~Yfv5_zk>^?h4b-C*rwvh`C(7rgLIila`NIAh;ig;
z%QjRgLPfb8da?DZBpaU!UcIRwf)t?xI$*7GnbnRh06vhiE9$|bLvTMJwPHKJJ3y*?
zBap0@v||GM8QVzBVfaf*;6_NP^$>}RN8-xP74{11n4fLG+)(_*L`u7mB3sKu^2wU0
zk2i5zwD#~br#kZmj?%Jo#t#;<!W};~DNydx?%PnK?f2b(m6uV8y`Z-w<B%c{CW*ws
z#zL4y0r;SMap|?j#GO9nTTq+twej$=;Ri_ldoUItB~)tvy2_Y!y?PX6s&1s^Ig+(<
zb}B~PvUvBUoc$dc1-FV)7Y4R;Db%!qr2y5P7&I#u#F97d)GL!on5U%;hEA+clIE#2
zl*N-}T1-eC?cJ1HEoBLF0xXHmcxvH3ATzLp08B|Uy9w79?k~-2t^E_5B9&p>)X)B4
z4g!U$B~|^qDZX1VXT8q_JNDQL!7B<~;Uh<3!j1f46Cj4_YZ6q~|uND*$-E*Mop
z=}@9y>66^yGA1<gk|hr!5Hk|eEO*0+q>IS_#1#YnP%hJa9TRYoLfI^pQu1Iofg39n
zz!ZV4uq#+j)b1LfAWJ&(cUScpL;DVIHv{|6Aq(?(oG$CRWDcS~N#qML@H*JxQ70@Z
zinbqT59-3|v$)LjB792xH?2${c9S3yblt5MZg*QCDvsY8y4hlisq4cr2Qc(!7m;mQ
z*|2%O$tO~Rlw5v`{$J@Xqi94sCBvuHfcY5yg=jR>Or=D5s6mcsApqS}gbF#&z=35o
z7$Vmh3Ykx6WvYos)80dNiWW}99P}2`1<0(bnqa-IXTuCAgv^W1=7u)-ipB4rHD=}J
zVO;7<qpI+rcc?({t_*F+lEs=IGK<L`x*q_7WNXa_v+V-O9u*5I0kWu%oc*110PGwF
z1<}mtRT>g<7tzF#MG`28IYw|yl#nH7^*y(?iENOves3^8+W|v((aTT`Y>*G}fYjo&
z8N0mt!tur{BWGlV`i}>eJ!gCl(^>(G<yu(rQ3rEsPt!gQYw<$?H*}qnph<5I;VMix
zNsbIm2O@x&b9lIz@cImIzp2_d0Q+SUg<@Ft6DPtKEu-2y#me@x-}RZyogUR?Y-$0P
zKi7=Cl863Djx<0W+FZIsa1!L-c<LU)T3C(q>emUKaEdl>@DqeTzX^V}L4EGDGSBgl
zV-FHM7QIWOg4QyBmQNKUCLt&YjA=k_LJxe+kLHuOPK8AFSAqk@+V_2SfY%^gFL%0I
zdd6Ln7wn~&+%_i2Mo8}^&M@j~Y4l9sx=Lt*tUWiyUmtpg*W=mpd&bM4haNT92=@Eg
z1BXu(D><vuBuZ!LWwiWS8fetk@y{!GM5x9@b7rZ<5_Q|E?**3O@sK$bi?k0%H6mR7
z>?&@So6(d%6&%MdGGMxDfMsxJewlvG&cz%d0zK^r+);(@Wpj<h)jiHdJ~;{<*DAx0
zjpzzVP;^AP9GWj%qN)b)uryWk2poPpUKd|_WWqm9G7ligpB_yPf0{&UO2jfor?7Sl
zWGwdHy8^L-r0g)Iy5MP1GOS=LtR89!j~munY+eN6$AM9%QN!fqfGXsG^>B1vVf1vk
z>+r_iy5*Ob+F{hnLoUW%=>rMnHLchHZ3aJh7^w;roF*}JX(@i|&R+ZTW!j8EbW)Yd
zqe38Lhp4A$jKS0D<4t;$K~i&{2e<o>Z>_msk4ObjbUA<N+UQveJ6XV5cgXgRYO#|t
zv|rjP(npJ>bsIemFhWFo8K}_nKpL08LqOP#^W)h&_eLU(EK!a!5X-a{tWqV{Ou)(N
z4nqlc>k{84Bi^9S8dAM6|7wsWzL?f^Q9h!z^1iC-M(=R7x3Jhc!RY6>-(+Ki;dlk!
zR%CN{gL?UQquvkU0^Ds~P%NE;{O>BgA4MZ(EZ`3Xw|%F}09jav`&Look&?IrY<>18
z+_8@kxlRRBg<Pulxp>0b?iWoR&|0bPyS0sz@EKVywY=AbEVDK>9M>AjlV>%?qP=1z
z)mwv`k9a{Z7nkoa_LG=u3s?0<=yMB@?F?P$kNLbX0#O%Up9iXN8F_L=)v=vG-c%2u
zI3X9=3XA6<!22}Cx+D#Q2l4e?gv41<-JuUVqaoB#dk7<(<>a*?5^<M9<Zf?ZU8u_h
z)4g9!$*(ZKcW2~2L|W(BhdyP+w61T;fLAutkP|-$9iUJ({VsG06K-;(lIRZE0X4P}
z$H{x$MBI7hc)LQTf8k+kOXFUrjE(+u15ACuR>D*QV4~Mw=ioWP&Ew-znLn=%aR1?y
z%~kI@@^~J#p!YWWhnF--1Yc1rm-JzrCko`XHBYf!9Q#Z8GK@fEn?-;S^Ah$DkMf5>
zMzfnLl3GrwCrx6KH;~q;7Y=(^GV}g;>;83b;jzB^)1?XV7aE*GFwF?t$DI!fQc_&W
z>)`Y?;O@vwo0ej~Z)}fm>j>PQBy-X+%0z8?0I{LlS+geGBp(qMT!**i{byN{wpIR#
z27D@pQtPzph4vkt{-J<AYH4>IVul~39)vPn%D0YXb8*cd6_-6m-38jmMs9Xx_ExUj
zXkBJ4US-{+4jJ=X=o^2K&yv?A#;~Z%GK))20P}0h*6L+(5G;y@+#iqdD9I|*wqRSh
zEhrtgg~qOUXf<O#UDZo?#(b^lF#;4#ZU48mYDf3uUU=m{s+ne$!|Ls}c<n_PvV<kl
ztQL-Ki{IvUbSs3CRRq4x%LntnE~05r-sO4ksOC)OK$PmwjDMMPnOW24lf`{$g1Nv{
z0H_sFM<StEvF;T#+;mqWmkROxv)tDhh-QaL0Q%8j#Vd6xWW5=0L~sa*%sPs7gA6p%
z+ck_5ah(ONbHCNASS=}Mrfj2d!T2fcKx9!x>ugm6APH&Fmen&7(s3qE6;L$MnKolE
zNJ9clHw*?={*9Ruy;#kp)Xu+OMtR5Z0QX+&SFF}>N)IwBz%2xCytzzu1+rSR7%#Xb
zBGCIMm^pqXW)KSeq8z3j=-GytX}Un~6KV0u+{21HBb*4Y&w*9;!C9x7ypd|T_-}87
zVrL>_Wk$cZ_Z`{maI2s6r6KMZswZ9*JA$xSq-sgDF%GRUAIxIM4jZFxF*VUafUFW(
zMwhobY?T5TILw18b@n_y;->VLMWhAj-UO{P0t2!afIsr`_%iUb%TA-rp9*34q9oAn
z&Jm1XQt-{sns}deHE%$%M*bZp0b$kq>c&6J(yEvW>J|OtG&}dsly%!7Iy231+e2<=
z>QM0qx}M{E0bO3qc%9eG(3cOLnO8tlH<7AEm}|?5Mw(G$8ka_tmV)WTN;P7*v+SH8
zgxCN$1Mn@JbB~lF*VexKIs>ZbHCKtTe@9}Z-|Exy7zEZ?tV}GH&KM&sv%S<Spk{e@
z=Yk|fV_IhFW#${4F?&Td(}5NoAA*C8nI|)j7F-OV5zB`($c!TXF7P{}P^UW~chw?_
zJ{Ti#{1`$6Lz>b58wy`OxD4lP3K$lHqaky}AQ}?(VbZt$FP-^`jqmRv-xh8fwLfy4
zJ?10c`*M;O4Jux_=l!2v7C`TUdHOW5k1!iiBrvQas+DrVO$&Niy+BjP(rE9sInE?I
zLarU5R_<r$E}`r;YYr`8rav7x0T??=W;PwTSSF_rxD&)J@aU?o!Ux<6hIg6}Wcuw!
z(y11!uJ)^e;JwnY`>owPR!iu;Z(F}FoLCE>_hoW-O_$^TdN4nJwU6bEJd59-@$R4A
zCL02N0}7g!$r}bP#f~cr{(bTdSwo-x--g2M%>VKJvhpyq{l_NG&cd2G#}AI4iO%-#
zENx0pCvjs8RnZXo6;<4@5nkMVXB5omcHPjgUW&jED;6Yh&zhSp&O@i<(jzdSs?OF{
zTsDJW7XpgDOTtrYMQc=R=@&92t&PZL{tHj8k$?M(va(QyVA;d|dvz?eQw6QP4W?RA
zduI;}(`<;Ws;#CqqpV#__3Ll0hycGwVt}_{)UOlVAFyV((@Rsoxn>Ln0s<cQ<NcKH
zRduWOvC}dglaf>LZ4Y+szDfKoq7%fv{a=sIW`vBs?&kxFMIdT@KF*KoGG~lF++QbR
z+eH2yUsKDEt5%y1vLn1<=e@1T&{7t=BuE%|7$WJ?*+~%eJl$vL>RRs4x}q8#rvXYv
zIe!tGmClmId&mh%$`z}xi+LHni)h%IrTo2ktF`HRw0cI&EKOG(aax~o(3<(=22TgF
zZ@(PTTdP=ysuh346}k#RzrxN4({rh`gcN@)(AmRbn0se8bavc@wo?2lBV6qBdh}J9
z>Q*i*!GNr=^qTNk*qZ5aMz{2!#Q-o-DS}(-iGxiPL@n{2LU>L);OWzM(V&>v*lYaq
zt2^*?Bqx9~-cV`6s5sVf>!~fuu&LybG4cm1%)}Ss&?-&hXYe+<BKvI6*_7Z=3sECk
zHg?0?$$Jw~u?^-8xQTCD%qZ9+M9cW8s;oc$9z%y%L8mi>3~KhfR2ELVwh6#bkX(IS
zt@G)Xh(!JGKLh2Z*Iu`5iRoNQp`OcdKvR%;r=+rIDuPOHd$%RTAfr5yaru%^bCsk0
zJ-*D9-|b)3th)hS23|E$won`5W=$uqsv_X<wLfP(sH2np^aw;z==NHJM(S+=4k*+W
zN7GTcxZE@lQ6RPckk>um0R?bHk*i<Mt-E*p+!~Iji(o0QUAKJVA%XrH69yOPdxLP)
zI=D_-v(j#RET`e%VukhU()mXK?YPbRp*_yyd(!z;Z?pWU@Yl<PnfsR|>3Q(D^dAXg
zeyd&FZeV9_El{IP->*mb$(VrQ@r+>@T__%cEwjA}KKhZD7Z@aL76;h=EqY@t0%@8&
z3z-hf>=`;@IAuA<Mw(8F*EVNCu@+5koNvyYP_JsSvbjvgq%-Z(vup3_Y`7>=hj34t
z?7#6rIfZw*R;giKPHR2X#AD4B+X{bREV7wo{>y-wII2;UG|b>pFuPzJR1n0P_Jn3`
zYV?KCEGwZpn0-~livw^x3ytbKNZJ<slL95X7GYes0W4`3OpsJ3bVd7RR4ETT%IVva
zlq7I4)1{X9qQLullY8KA>#Nh&$hbKuiYVM;szNhudISwK=tT<M9Af{L7=$HU29WBN
zKYwMb^Ug%HLp%!gO{b}|Zsm%kt)KuCF*`d5U-^-Q$WDEL_Z|SQz)aNk2{|yxKn|N}
zV~8S+)h^*{wLlfBPEWn<>2<Hu(mO#43X128foKH3Xx%JQOk4C4Na6`lln*hPCeStE
z5H4D8?Z{igp>dl&vr)R7GxSvWJ<D-2(JBYTqWG2WJrov-$!$P|?*Dw<dA9xnHp6t-
zJTK=5T9%@l&<pT1(yHzo!T41oZEKUMqMwm^Q>M@@0$M!K&7O2lk|{4-V}0~T+64t9
z3JwfZdUIAb*oU==Ha-s{(^4SHAS3<`W|9wjp!XDqH^T&17GvMNNuIIiDqLO!4y+Fp
zMD@?T;h1O7tqr_mupuZtG3!KTM`1*z#SUU!QMk5o1S>$|*T#{3Yn%!?$_xgxBdWU0
zEJh^B41qel`li7H3s`cfWR!GXCYjR=?#~ndds=4jA3QNl`h8O1;@Mt$3SGOf%A*yA
z_X*de`jS%UIg~}`9r30Ci@{lL&21-jdEGwm>{Nkr3Lyb49eI!#Sss$*z5NI}3E<YZ
zAiSsj=2d{70-2V&_Y=rY6JuZ{!cgd>?g*hIVSaxhOC*uc;8`g)<}xQNT{m%iXSbMr
z8}$R}SGa-~f_@JA3-Cc=pX2^D9ZL(|a$#W3rT#(YQ{&iWY3LEm2P0jDKzZp~NPT8k
z5cUf?9H<O?DfPyyll2uUkCEWT_a1Tr(XSKq3?&6fP!rL<5*Rdi5#fB^nx*e&RWZr9
zV~;-<I*7G`IGYKTdp!Bc5TWUM%s9Kf6Tn8s5{B{x@-y-sN;GowY^!Y#7j$ogLzKp9
zk5pP;`A?7st`>1of}uX<cjt?;u%H(W3QR;P9d{@<M19aWIyPSUL+lL`Q=a~pzWaqj
zz}+FBEyR%D=jiM0>yhoH-QV!zZ2xy@zD>KugK*Ab(_VrPoHle8^Me4;BtCQiUeub!
zg@H(m<ZB@2+YFUpV3vc?xCEILKT;Xei$^Fdrh{=ABy7Wgx2T_kdhl*MYKJe=(Poui
z{j2-17MDsNeP(pqqJ{|6|EHJ?y^g0DPACdM!J~mXLZrJ$)5)v4KNEHoCj%$C+Q2ng
zeUv4;iCnpGyvA_T<5_T>wnClx(kQYF(cIe>a)WE4yHk&S>zE2f5mr2c#15A_r<=mI
zJ^<`DA*z64L&92i_OCE7O61E#t3jFIH_{Ha(z2`?$)>4<x3-0uf;SV(RXMa9VwO+<
zOaeqEA`i5)nPfN(_n1W?fjk&87y?2B&-+YbMzBu*w~B>PdT$#Za=)<aL7`3Gg%5c#
z+Ntub)Jax7^btD7T&;minoyCMn&hVV;HYI0Au<4Bl*qB1Z6*=UQNgwxoY?RFLxY|D
zcXG<_{S_Cb1P4p4k89i4T(=y~c7Jui;_`6;j+Kg>)fPe6Rm$`8lO7Fz`(*q9LLZK;
ztto2mD?yTY+jOXV{S|dLJAs}^p#kFLpTm?7$1zy@%9gOd0)@LwSoeA}2CZH&9z5o<
zDu0OyR=BwHomO&-Zdl+?`Wq6axI?j!&_M_Ii^G3V3vtz!p2Z8RdX6#AFrcphn$?v(
zpGs8wb)}AELGs8}Xo4ct%D?NNXN65%%xm~Sg%M+E>*#(>ih#_}ql2wx!inyRfG8!|
zVF)YyZP?~VD4@D@89TrUn#X0(YHl{vpl!I3xSbUBfglaBtn9~b;f2|SHH`<OiRWGh
zMuMiT6J7i%2ce-)x(O;cEUpp-K+Mo%Y9(YvGc@S?6e62?hZq;*z)28=pSqA9=|me2
zCxOc$nMa|za3|#H&<!)kN(65MRR&Oo&>`@DC%HXxt4Fwb8q%RNhn=rMEcch-P4PtS
z{VWwlXwqIZz~{b<q=w;)Aq@?ARar$Km(p@9H$JVsfY|Sk7L=F%SJ@Ph^}DE6s{el%
zMl&OhobA{Af)N$l6yPlXA#%Cr?rm9!BAON>yPN$)5<)%35kb-<o6EMStlUkP6=5m>
zk-d4?a6FOC?|B;sr7mSoH~oMcKO%OAJ(Kqe{ke9%EjEYMC1ZI)AR&7xGCfp?ya!eH
z?od`JP-t^Qq;(F^K72@hKfV^sxpiLU9Ccf6)serTKOBnX*0Wj?8)e=5i`U4cvN}`K
z$*50Z)}MmA{qGzwtSy7N*DBFrC2WEbeOj25{+Y~)tI3%%>`oOvmzVPKrn<tX5QoT`
z;amdZC#`)$R~O?FJ;9#bN~fGrxBYwos?BY$bk;zws%|U5V_||Tw0C!Ps-=gRsH;Oc
zIud2|knj>(WNkWKaIy86z3o@mYHJzV6)Pv@0d6y;9wIf&a@e`(XljGT%oXN%9-Tfr
z*yPXS|H0NfMMoMoT-veKv2EM7ZQFLzNh-E&+qP{d-LY*u`Fp;Z_nVnD|H*Sy>#0>I
zwf4U6y{{eTYIs{Of~$vyPL0*ZuP$zZx6!)Wer5EBu1HNLMq*;&ZlGS5ujU<N5h171
z#WC1ceC3JOKn*a^<#lDQU$ZoV56pw)`f@FC1NQc}*SRlDwkFP+E1h`{1>#`T2anDy
z(6jpO&h1#~EPl*Pk{f4oL76f-HEvB1VjD-zbv4JyLnCeBd-eNAXB_$R_)cd$TGAq#
z!pdj5U(fcHdNvm>8_yt^U?;$oK1AHUyX;)L)XO}hJrHnO>SaL9vh62(nnS#d>8(0n
zXL13}r(u=-1=Mfl4|zNKaS64ZAtrpQSbp~o+`uDN%5(|E=Ur=b3B_2{^c$ZLBAT6*
z_t`ZT#nU1+B1k^w(6{3BH350hBT|**R;e7TxAqKkFDL>(3j8`~PH<A;s#4@MM~74t
zF{IG8djo(uz#~=8blc4T@0GW#mM_(M0K{BawSh^ZCj!x%X=WmCtxCQ<+&vz#N~YIj
z&VQf!_q>^j1<Ff4yALvbB=oUJo!BBKQIvWrc8(Us2fIb>7zIkcto{whM?LAqJ^za4
zu#=Uj)uSVE|7kOQ&h4($Jktk%&sP4Uw6vE8XtbJYklVA_V1H^moh56jNkP<@A?Gky
zpV`Xkg2DyZlVVK=!>4cZql7u6cXS0nklCwDz)$^(l&f#89lGJ((mVe&iCeMm$quFm
zq7|<>^#E4CC_O*dwdfM~0ri2$RsDZm5z~KK0xZlN1g!tt7X8O8{cjj7D|1pp2RT4{
z!yaei*Gy9*fzaUuY_+y;AMbl%b&M^@7&;Qz?Nm5!1WFRFw>hQQ$5TbG>dZWGiDUx^
zF!_A;S?yGXN?GPN`+@AV=O<0x!_!1tk^@V^>aEGY#nTQ>u8-m;+Iqv1m8Phwq|d<g
zkpAvmt`e==rhhw!GzIBK0tTNKqTT@VAlKXFk^RG!kq?EFx}6cXt8^st<fpm1A0NNF
zxpu#2sn;{;MbFYx-@1L46O5+5pnyrN0n^4^RTfX0el5S_cC_jD)6pzM3JZd7Zk$d%
zU+3qz3{I}!1V3I6cXU2Jo*W-T6K`S7YCe2dB&1=!a1TxdCI=@f&s?}ozHtCXb736_
z8g|Z7<!Syu4|;##7DPreP)9N9ZuS!`#2u+77wha=GJ}oh{H%&&fjzAtjjd^m9Upg>
zPX1WjY?nP!o2QIDewWD8OU?ojW4mmB>Zhp<!JEHMRZW?n_I>(Ha~&nW0!$@3`irx;
zJ-(mqm^E1JI==66t;%5i@~#1E3Ci_CUZX!R%KpBpn>QoULXw;--uZ|*GDd6e6-cD>
zU?-))j^$l$+G^7}WR&$)oi|IJrh`PMp=K>qh%z>+S~bpeQjiw%Q&Wt!?ZYLV=dlzp
z7Z)W(h3&?;@$3<>jQ)Pr%=+uJbpCCge_5vP#}vPCt6~e*Vao>y{H+0VLn=5UNs2Ra
zmyxSd=AV3;GG0)t@&bsf0$amuz`;eJ_F0_cOc%+Gh{9jM%EZ-uj@A8y=z-}FGMHur
zBk!<TXbtv(TP!r=5)I#QRk21}5Z}w@jz|})8)fc+Wky?pPpg6U2~@IuEm;>}DuP*e
zP_0qzrWwrrcHw=|zQBMi=dk&$p<X!1dInY_K>1Rkzj^^5JwL%218zn1V~?hkOSS;?
z8G|i4k?&l!M8g004x%m17nAkWl>C~E#ak~2(T4o$l+s^hQfiEYmYIsFdU|xoo<L=>
zU@s@<m9vYwEEbaITX>mT@*&KOP!VetsCV<-4ynProupFj)&TmhN}1n+9)|&ug=eri
zI#8}!8_j1vdqp;?NR~B$+)OaAC6G2zAmAynqx#p5VTP>gVg@Ix1?lMcbCq4Z`u!ie
zV9k{ds~c+T7>rgmBY$nXy!Ed_OSedy;LBOa8j?>sOb-gQ_rB9QxO1QrW2XmYLmG78
zSN<4hB4RcwUjQP(iOxFMYjdb2V?ySEge58<*I<MV!R)V_gg0nmegm=37a6k{irx08
zLYCr*2ID#~XgqZ)B-KLrgEQ?zJ=pOcbyd}6`B6fLbr54lFRs|LlmUSdcOaeW^<`nC
z)wp5Sn6ZymG5M<*;Hzv__JCg4bF)1(JSK-!0{IK=^#N=>!k#O9xx+G4eICras=FBK
zm<fiGL0Bb_d#Yr_vtckp0>4$rKvCj>WbgIC9i7TS+Vf%lk`@E;K#6$iX^2E1T>=I4
zdv4QL6}U2Dl}s%3E?!?dbXsZ&^`Hb-B8tc-1Z0dBw1r6*5KOuV+4yh;;X;tXGv=>r
z*Gw{vssNner@Zyx!crsE_1&&GdCtPR&!iuNI52&I-rY26KC%Os2M9qcn8-TUSw&Q8
zGIvOVVZos)Zj-&T7S7vO)APh)Eb%U06)9`iqaiG3dBYb*(w|Hb6l+SOAc7J4ZG+`o
z?aMK!$jXF4SENCZ(5ZJt<zZSVDpiL8S87J!Cjg2>Foj_Ka(oX>5W?|2J%bld-~0$O
z$a*vuGtOQ>(%LjPCh){YDaiMPQMj+BK>h=)^h)yLYKBY4y-<>r$ejcj$aO2VvFxxF
zZc=<*B{2y$^BJd>m^A?d2&@+LZPvK8*3%S;DERrXL?E*|uNH!U9C!dvyaSTyv^iSx
zBH&I2g5L*6q89o-?ZVn`*qjmwqve;Z>AhG<TQd-AJr-%k(#{%gp9-tx>QFXX!<D#P
zudSjL%{AlEMd#!U)GK@Y*&`Pca=93r2G@{!46Uk0FqlXk!`-u)=wNU^cr=XY?i9!`
zj4@qq%YO1Qw1W1Yof8L+5W$wDuygA66Tk|Z>PKla(JqMvg<ZKWSfE*dmZiALE7m?9
z<91Q33+_wJx8~fPaX;)L#+V5d&LClAU7MrNm^AD|QESoiXcV}#T~NyyTEtXU<(aw%
zIMYDF5XuB3VJhjHeU=f|wXDKU&7Y@vwui#7M^Cpj96u|<{y@T0$uc{1GD+iQFF*p^
zIc>H7-T|s=uV<XEqI5__&y0y#dTa_uNH*=nMCV5dt2I6J7YP7T{`2dp|JL&ln^|E@
z5E#`_&?w;ZvCTkcI-g^&=*zxKtd-+Xq2m`wwYOBn995*$DgwuqPWV+LW&z%1^`(fs
ztT(Bst{~it_cK^lV7(V%d|0t#BLI_DF_in5$ZL_IfZznx`LswB-el@2m3>@tYD)r~
zJOq9$#+oM^&L0QKSnbb0Xoz7t%;Y9cX)<B=91(j6JmI7>Zs_WYJ9Hu_B$h~lRo8;h
zrq`mtUBi~*PuFPvhNLCQY}vDy(6bnt$8IhnD0MqtN8{Cna<OqXh?VC!2!P_-xnO!+
zE-z~acL%%U%#J8PX`5C%nInKXNAK6&bJRAksNvK(zcd1zj@dYiFx4i!rB_pVCn^T~
zNwmq4$HY8JHiD$B<F2MVA_gYw!3`|jCH#KBKi_*xMd)#;vq+!D>fal2fl`t3EcA7U
znWOpIldUax$+w6;`PdGgJ^+>1ZR+Y|G%RXa_<ohHv*Nh0EDI*Fs8o!;x^GW@uY#&z
zf~?T9V!OKl5}`|w`wk??^X&(FNU=V2EWDg`(r8~#-Tp?e1HB9muo0RiGa(k`SYafu
zL}cD<UfYFTQy~HfN%$Vg@E^4T(CgRjV)S%oT%{#l2Whx|7#4YNNkE>{VL`g@TcF1I
zW@4?ShJTpaSJ`4}GX`R7^aipxA(izC*4Y{QSacNGo>66Jp0d)CO_E5Z9~<j$4UTYa
z%u8tn*CMWm&YO)|)*VkR(XD$EuT3BV$KV0Erv5GjhO_OHSIZ3ZSK3^0yshVQnxImH
z<H{@dm1&wx>VZck34juGlptBRJuE^r5iYHJRV57@@M1>uZRwUC1w1I4%_#Twb!Y*r
z)_6VI3waNeyYNKih@p$Jkk*&KmdV%$_hR`#HY-lG&j|r<kxgSx!~mQUA#z~B4@JG6
zTF9wfFz#8bS(gr-v<$PXeC>Gs;(-@yNS$`)E7Gi=0cis2H=s+11CwiV{6g+Qr2}R;
zTWV23L_G(~e|dsKlT-+$E6MOKsdlri3Ws%St*6kD3UoN{=m-pck!fj7q`haVsK6DO
z{+V88|8|hVu6QTq7ye;95k$;A=LrXMOqnx{kSv-Z#V1<_RI1=yV6c4U0ITk3-w#lf
z2#Lr4)Q;@`2V;emneji26*iXtW~{I>|3^~(AKEc(fgOxIO*b190gzoR$BZ5>O{Oi)
zL_ujRI642pKuQKTK9sioVQ>$F3~kz*D1%z18NmJ=MK%~P;ztgN?^}co`iZ;)47`F|
z15yR=4T&puG#$HB;V^ArK$R?A0xuxu#@mJx#)V-M(^6InwU}OzSdRAwQdX0moYtCe
z!_hW0AE(F8-jiQL&t3WZvCQ#o%yEvMaZ|Jx@oyP()&DDtnOXnWFJof=Z~QZBnvpj!
z3MeZx=YIhP^>RRw0N(F@Ud`YpMuZ6UvxEa6An3Re*iIr5%u-&=fIcyIH#Vw?T(ALN
zxPB}23+MCYid+WR+2KG$f!E(I?H|rBW<;YFXMc|CJ%1cMe%Ahm98POnVIX#Oy#{Iq
z_jl`Sl4aaSg$-?Gt@Ls}nSDI(0Xza&PCCL|5I4Fwgc0Yi0Rl7)@z~$H!-f_a2y|?k
z*od{62Z#zMt=#<Z3{WH)tOzlvV^_EHl*ci$sXKX9-ce&|i8|!N##95k&3|sD_88V#
z$YKUP{3`J`3VkE!wK|Y8so?t{(-tR6oTjUg=6%V<S+MzQk^~6iisCY{h!S~xH{cLU
z45h(i5Zg}V00wMhuY8=?n*OrqcfawK`{jW0M&hUUUPT_Yq{(@~4J`6f%r|dQWmjVK
zq0Cd{^)DkUYsQ)unQ)p%PA*zMi@d8P9wr%STqQevaclfp0w~(DTm<;xWT#Axc6PbQ
zPB$N3p}NryRpR)ugrs&*C7RLOrDJ0a*rqcC!SQl}01DhCixLC{qhA7Jj=W9sQa*my
zlfQmBm*=6lqyy;(AyWA&95vWRag&=>w41L_jUela=G#`)I#i9h7}&3!F2{2w*!FJN
zR}}=C)V7$dh98P9#Nxw_xk5ejI1xz}RBuuTDIkut4s!#8B(=?{^%3MzLm(zCH2#e?
z2n-u70SsQ5bY?@T7MZ+dGnPXO*lDGSVbIiJz8nJj7`z{+EED+3ZD`YA6SKd3eIV!x
zp#f&o<uJ0;mN@l1XFTJP_xfA?^}()YI0g-;sn+`VOzQs>y9kO49XzXlAJ~&7`%wU+
z>*O`$bUNPb9P@ETSi5rb48mQd4^(m*&M(_@K;gwdj*v8?#YzeA&_w^W&!*|L;B1T}
zeVINc@|!gSCwee(Kae~ulzSBCbF_?z)(*0ZuwRGjp9W2-1~|Qz5m$&k<phO<0sqx(
z_Cv=tx4){BN@Y**?*9gwdm?{1svU7gzK#QXlrnfgTF!Iw`S1HE?qhQZ0%^zVp~nEp
z0aVEFpA(P@+(eJTNTp_7$tP46o>z`_F(gwUIE6w@A=}M7YE4p!Frm#d>qly>4t%h+
zX*>ELss9qQMk{+C`>MHLKKC~Oi5Y&AB~PET+8;i(XUKEgq$dYwgXoAAd;ctAAYnVF
zIP;envA@zoB-8`<I*bV&9@-)e9HwzV0)BaBN8P0f@<9$s-fFVlFpF~!W01<sIDys^
zIbTz18!Az?d(AAJ`0^qgn%79V3F|`<J%9{^@&wM<CR!58Wjc0D6_?OoR1Q_pci~S^
zamtXqgv;S}<Ym6j4=>H9MkWPv>rpgXeGtRDz_*Y{Aea%HuxhGLCc$;!qmAq20~$&1
zRu8}|`p+R?oY4&1rOr7rQMU6~PaLdj2f$Ju5+TUR$@FTFq%)2i4oG3K;C>=c4uPCy
zUf-Q-<xM&TA*5v<6FE^v^B}6Iw#qtB3vv)mxP*Q*7vU1nfXa2rab~b|?1+<?uPNxX
z+_pMo!&{SYvV{t$g1Sm;vuqZ90HfHO00`wwx5~gjSN-q)26>uo!?I8lDr8k8&Ek4L
z7}Bm?M`FBuOpiFN5aqx&E$MBcYFIv`NcqR|)Ad2SXaf^b^>mhf4&}fFl#aG=j*%zE
zhP0aMWnPVVEyw;WBy4!{54`h#`vg3$_{>3&%UKkvQ5G<d$wHW|DINcs0>-4_uox}N
zi^Udq1~#U|Ge)`?gf3d}Vo?#S0qn~27F^Mp8FMR6DtT>3?^k~nSAhvD6p%$kh`5*@
z(N9ac(XEdB@giv!9XBfJIDD7L-(mKphdh6afN_1r41#+UIR>cgksHxWMVIi;_#PZp
zJ%FsclPXwmaBcyaMs9Cm0LCbA`xT{<%4C|U@Zew4pfU_S$sy-o#=Y`=bQ?SLi}C~b
z)#XW(ju746NJN<Ig4i^kptQUJF}2!b(E0h0<je3y9AA57aW??Jmow1SnQ_%qxujIN
zv@jalEH_jhLQF8J`V(I)x5oWjO#@b<X`EB{+>-b1>~HI)><IEifREtxbxNie#717H
z<*p_np>~FX#b$eVgYTyo+e9$SvqC9|X?&+V_%Q9V8TGNZCxU7Xbh+2iK_EM?bZ~1O
zIdR}0-DaNBpaR(kA#&6nnV8e^?~Qh1q4|NS<s7rEY)itVZCV}b1O@bm`<nZEcr8xj
z$?Q_P2i&w_r)(|&AfbM5PY&NdBQxM(CX^*WMKocx{zULhddjLuhrn^#d2Hz|P42__
zeC>Pej@OiHdJR93*GE}aW4^NFm+TbSC5M8Ylb{=lWwQlRrL4Z2+b5rcDnCQQ$iH<Q
zBpl4pR>B=3I$xLYZS(|EL(`yiP~mi-T|9P-%QlYSYBTvQ0BYl{Uwh)FJyiUzwg<d8
z$Vay)corjcAJMQG`o1dxlde>U3=?RtITt3wNa)l0{Q5$gTcTX<<7Q;Bo44Bvt~?sO
zKVwEWp}T(HTf276PT?r)xwEb=@ywj)M*hemd_f?>{`yvX*(**UTx8W3C6&Q1(<!`j
zxG^by1PTu%0DBcX4(=_G^kRb6v+hJ2BV&H*(%j-Rk1n&)6@@mP!v;!vc=w_OFl1L5
zF|bF(`7bUIZ~h*Q?*=LbJ_I}y3Z7rv^a0xqu0IK^S*qfhH(VLxP{Bdu%pkP&tciST
zTzU%&WO<MClSQMECEu!c>!mjCUjn13SWNXY_osg<0X!IN?|Et#AXfVKv<JALFxQQU
zKZm{u`D${f?lOTNjXHHscEiC!EVXqWU<`&Nt}3>;DC8^oQB)&4BZmbaogEQ9dwx{m
zScg9-;4Hy3_wdZ?>f}4<COJd_%nS%0fv55Eelb$%t<3reQ4=AU2*&Y7?#|FD|7L)5
zrgKo30r?b0@nsASj-j)M!>|b|$N6k~1l~rMK(I7QP#7Pd;jSQx_}Qa7s@MpkxlcP0
zWDW(73ZciFiHSkF3Zau_27Y2+XJl+QY~e)yMm7Bnsbt352#aQD{&t!L=rWoo#wcDa
zyg#?~uP<A-4}k0;WrqJ-Dlr&a!~D}j|51Vek`@1bg2?h8Nb~=p0$Gy!Z^-~H+By!K
ztG}+B;t3ig3C@8Q7CH>@?+w>#Yt)@|bwYm$3Jz3L(&1b?_iVNlKF@i~+97nv)THEx
z0K@L$C%SwcXJPr}Dh--1|HuGNrjq6;@+@d|rvS%OYi}zPYroAcVmW78vh}udhjIQ!
zQ%S?+VG%_%HB}u=uvGPRy<-5f)0{o^ng12h9OqVMCYmrDa{IcxpSB5910{!C-vgxf
z8Jwk2&FJ&K&#nv@^Z`DAyXTgl1<b(;!?Upy2ZK-^)CTz@o>>8X-Co(T6jIe7+q<+X
zj=Di7DOwk5z3y&Kzz?q^39XUt;n*iG+k*8drjxW&-9!aaB&U@{*(Si>Ps>(5U4Rar
zDKg^GpI}EXxQv+?YlgV{R9)y_FegbX_^Q<AU}Mys-z*u$Zu&A=3)$db6(5ngzDs2-
zA5lm}7+eg;qsvitP^Vn>Po=wx2FG5#2C<H>QVB(*^W)SWiVa`_c`ta}L!Z4*mn=-n
z?qS9L&7?&S%%$HgEEZs^{?%%|@lO6#jMk>0C<vQutq;Dz1j&!~w%yxVvvCV#56#Q0
z15jb;azvZ1Q)~|~Hm}Cy5I)3U+YlkyvF|j4!6$kcxFX*4rEVvg^b)vp{7TbX+8#D^
zzctMX;X@2$7K1~3`+BhNsMeUE5iiHx*f4iXtEQ=DKHy*$Ne77PZJ49gX&Zw}{0@_W
z6YlRc@zA(<D%EkwwALxhW{o~3NL#5pn-Ja~dCzL)N4@e}m`(yTtFMVhS?b&9_Tmg0
zHeC&Ug<9G)I$dXBvRmBjoif6L1qYZK>di(ha<%z!|7=uYXb8~$nNdCOr&|r>>DT&>
zMVxWQI{=%PwgDu~blX>XsfweV&8rYmWlK<`!oQ#7<3e8K^HpI|1~OK?@Ey{bOK_Ln
zI)RwfX>Sqka|I>*#@?q8Nfd3Ti97b${WM@-A-C|SttFufFX`7sJgbaQ1W|BPQVQou
z1;5>k9|o~8k6O-3HjhUioJ98SD@DB(3c&&rT48^%-T=5(?OK;WsibqnQFH@!4+Zx*
ztg};9>+-+;zMVuW0W)83mBHGJY^!X&QJ%*R5=v+Ztdd^01)iqdV+4scGIaD0h8eCO
z?wKn;l!>3M`$$y5OI%s(c?Tw{W}ECPe@`CBq~VK=0usq=0ufoDg@_K**In7MRk_xZ
zZ^GWPg8|r!>-Dnl*s(wWGb^RW_%7jb@A7Ag2feiajZ#0LWBFAhjC8KJ(fj5Rb2{K`
zCcExj-oc&M9Vc`NA*5Tz`D>Udx2BPQxpzan_zBnyx6l*R?TpCCpHY(Z+taN2_@NWA
z5LUWe%uN{#!tFBn0oC-J3Jfz?ml0jiIj;x2brKK<JWUdjbBpx=E+yff7zZqOH%!}r
zlCY2Dsf~WS2`cMcs}4kA4CZ4f36_HxWsMTWt_lI^sYxvG`#!$SGm{+jQ~5Wmg1#;O
zs*uQ8g7#&aH)5e!b8^)!+$5t$Ss?FmuSx&vJ(Z$oR(cxSK4GtDL>=`<Qb8@>I?&&2
zbzy+KD9gA(;oCdbS=Wt<yiP1z@MiPXix#AjbMeXs7t!H6Phu`uMGo0#awV~&u7uL4
zS{t{V5=lVwz0tCdwK|hn0WM}#UGGhj1@OW>8>QdIhJ6#9fK+{S%7-d2b0B)<{7cu-
zdXP6GHz8FTRz~NvY>KM{LF4waZ%?F{2GGADT3vjv;eW6ad|*_d3;XIUBz$F)t?ph3
zk6}1a6Q&^Y%XJ5otNrYh!&yOT*m(I7Wzp#PT+~1=lZ(dA3aLp)$-e5r6_DhqQ4VGt
z>_G~v0%^A1noRh8gk787Yb>K?#&k&B@Y5D)d{%_J(}T*lt4n5ea>5ndsFmxsrUw8b
z!;%Q6n(fX}12-^|^`!`Y5o9hNOEsFLeE*~}rs~}-X~Y|h<uD;KEEi@;60(6p8N_~V
z?qMkQBn?Iej&iD$O{r`3a{H1F>5e5o;J($$Mp={_hy{z8vk=RXD(!Rgv4VR^m>e>=
z<aSgqt~X86U8Y?4hYl^XOKdTe&IADMt|DnH1*>KV1|3@{i5c0J4^-dK<}V8Odeu*Z
zDtTV4(H~dpuPfVrv}wX=RTXaraUPQ|S@%x7fO5|9!mAK>9kLrhuYNm7Ym%*`H17q=
z>ynFm4VOCM#Od@DzAI%9#8U0Gc8Czpm&wakzsHwru>eeGQ0fCTGxn8+u?#>jWf~Bi
zbN@PqJA^jIR@i+wv$;eJhOFo*MbW*1DW}hGspFV1MiS^`Es_9l@TQe)%53Y(;!Yt}
zfRD@}2n!2ffmp^8ezgqilLCU{BYp2~hOZb@Jm}>=@h>c$xBV*IXu;AGR23cW{X6p)
z)C4=q%!z@kf%oVT>=W-%+5?bfjddl@){qEq!_*3=Z8+uV`<1s0CfGC-PrtJ);JM+8
z0|z+Qu^9^XAeQp`<jN#q2CLw#oZB2o2J<HH7R>3V*+e^Mje$2fvCc;n^GTn)17nc>
z()U~lqV;|L*A{#4(ltSAm6<5tMzmb6OUMoIc*rJlrcjrDj|%JhFb9Y!Q<Z4OF*rX3
zJgo2SIy$F2Z?xEjEu*=0DCmCV`!T_Y>5T8$9w4gLdByYo-Splt|MlawRNCbVy(S?Z
z1A>WO&Wo9081rCvW)$-<B+vg#O4x`rCIG$N0YvAbjD-`4o0;<-ZE~-jG!hiMQ(01_
z`J(}Dy+o_lMVW^-Ru6#N&nQqOj?Rg|ua60-SnS#vZH3r8(E-CYM-5jr_JC@ua_{OD
zKH2s6GQg~3;G8*b2(x`HS^bm<C(!wsO-DpU-!=xXoC<Xhit|GXCGep=w^JC*K2wfw
z$Nh}rf=2ZH=))Gaj3DKKVIo|yc|Meq{LxHnx>slQC5oHb3LFq_=$S!x;%tueD>fCE
zM5)T-4tE%}^=1x{&-01=p;Nd7R>t4&$Wd_WN#9MJIPf6fVZC#V+XSH$4D=|@+JwzI
z>D<FJg|xAn1^?w&M8xq}uvQ>qMw<(zWzlitm7^*d=^$+?P(I2M>6C@cAVsCEpMtC<
zWCu;m+RKsQ<TF6^eO};kV|+x=dFYPsqB#M`)&&&}K%7SjzM>`DKZC%)tu)$E!3Yl_
zPNhQB{buOw+}#V36yMu2=!#hnw}Y%4JAh6x4_v@h>3?dvNx!sf&cnyt2=ubs(vy$?
zC+5h?tX-P#x@azjf2_6tKR{pEKDko)7%Y7_yx^kQPJohp!$E@~BAn_S#$1E!Y`ss;
z4SV;eiM28;9<JX9KRkdJkZ;}Y?60%K6*14nM{H->-})lX@aT}Mh&KVnu)oLOuJE*E
z|8T*aoiB7wm)4?t-ItTvvn)mqA;N<(F!jjZ3Bd{yXbQ~-z_%-X^UeDT`hFSwHS|WC
z3LqBhd<VP;&MDj8+U<)@hcC*G6`KSVcg+QWT{XLmA6?kRNs;&V)&%Wh7RzC4M4zi~
zyF$zlHdta-N(;P=aY?sWb?W5>Yk<Vj|NA$Iw3}_HY<Wr}1v+U5s@f<oa|S^%*P7wb
z%cDsjwfd7DNN7ue3TAX<$@p8BW2d~SXYDhcOdc?kvDobOIL;s!$Yn{_qRctpIfG<{
zC~o&VYQUtcpy>sOsc7@IOCbD0B|n$jxxXFjg%3rf@#X#e#G|e>i6-aa;~b1UNC=vB
z3?;$r358hZHDG*+c<RBv`P<l9BY|G2sjVVi+CU~~DI>^Q`X}zp23R?Nlj#JQz1X3#
zI~dRkV^Lja(EausN*{pTAp~`9Xab28Bx}kTod|(-lO%F8kKwe9MeWk68z?U@L(hBn
z%ZvG%QUhXMvC`f+QHbR-8IODoRV_!N7|0_(Kgv5+mQUvPf`~779fHj(pIh+3F0&8_
zS<soty!QQ=e9jGT<)aC+FP4UH*Pd-`qzn)|PxsMxUVCp+EIL;`60x)qmzGAVR|@lR
zNd2JqgBQS!Ng<-827264aRG+jYTNk1U41uc8Gg<zJ7tH^oGF<~4mwxHEA_5O)l`{>
z?!=3*56s1UlyX*)D8p)-7NaLF&niA_I2xR%4-^~zCFt&_|2Ed@qMcmZ&N-u{GYVj6
zTdAGNO&EKT8Ee4qPr5Q`p?C;ixsVHD!43_I@3sxmo%g>i(k*vBPtI9xy#6?+cTf^U
zXmGHckhy6N`6gi}Om-xHHlK>`%S=N=sw|z0GVqKvE-JWtEec1(sLRV6t1F8(AlNHY
z?;sM4zsl-TTN%X+bDtty8iWCcQUr{`$=OrocePr!(XZvC#h$>DnyZ3*QelOD^}}$c
zL^`2<V5>bJO8ha5z*M?r^CMCck4TJ@c$Xm!+T+Rm+&EOcei5xFcSjmn0cyX`+1*K>
zHXIW&%R&agDGFx72tLg;T2(ctA{Q+HPdF#@GnEPK!aObuC&Me`gwd(rkO2BE`F{0g
z;oJ}rgS{#!qs}p8>Q+A<CE*L4j#%|~p1WvV(enMxg*PuzK~9ONPaGPt=vmVjkU5Y9
z=kf=_nZ%P?D`b^-LBgrY6TUGiA`roAfs>fpg=5qSjgp!|J@2acsQpT`23~?XIFkY0
zd%^Z;Tx}%oAI9(2uXX9O>HuKP9M$|RBUN3+gS6iRn`fklH%@9F$>LSB$uNSVTd3t}
ze@^{j4P6W(X8shvzH@+_-nEH^K38<$)nC5D>FdY&>iYqS;S$yQzrEo9u!1cASvzK7
zWBlJ?5|;m<*#FB4LfKomS`xCdu>Ti=z2#q?WK$e@%VL0lX?$v3Q1s>No-*#pv_3K?
zg#w2mAH!SJsy#PLDi-bP`%`_Vaso?Q-5&~~FhA^4X60X=r1H&87>1kZ+TgQGGtY<b
zjl00_ACR(|!r_>rjv*xd?;v&Qu&JL5vVJ~_4J-+HX4GKjgpcoiVx%y7-SH0>z^K$P
z)ymV_&-dQ>`=NsXHKb8}bl@!P<;Gm#%l!<X+-SHwY``ziV9__bb$cO$c}X{2P8-~C
z$5k}MqWhA^b(G!ZMqVa6R1UcJanVc5s<ay;FS-4(W$yF$rLQXWetJPMhZO^lno4Gb
zs8iBognkGaz}Wf3q$=)5c^i`j5K*02S?bYe))=5glV(WjI8>^wsr~teM3}l@b!dBf
zXdHw|nbvsnU@#SmmK9jB>#AEPo;4|#hwXC_X;jobca616Dm!+vRrA=YjGRq?c)?43
zTxt|9qH?dl$g*pC=HWUDMpHeVpfdaZb8$XW`o7R73TrK@efascv9|Ubz~RTA_ld$d
z3fe9&W<;(U^c9jpNoUkGI&eF4dH8ghCiUmCD(O$3!s*0C-WFi{lRHG9sV%85CwuOb
z_dt{H)_#~ey_7Jz%MIujp&Fy<?Q?%~L%x0x$)?wa2c}hU!?)JqE1$ZY?D4N7YCV%R
zClO3$!EOz@NhnG|t}&}UAjNUi+rG#t+z}ytQv5f|M@6_}L2x)~!_zyfV4%>YQ%HQd
zhFMeR3j<|1RmQDbTQ$3rY82~VI+c7a6VA+&(#^U~OyTKs(=(nqoRE}k$H&AtN^6(`
zQ)W}09}ZbqA$T6ixPR6(f0$eWtPePhDwd+FbKPP6-5teP4G0nn5WTYE?(z{N5JJzH
zjcdZJ98^Lq6xp;i=k{lm6Kyb(<Yq(oxhL<E$_N|!xj2OByKKxjLQGQ<sKjej(>W{T
zufH42C@($dZ<ef|>$x)6q6HZO`knWs31JcrqF+jduL*dv1vCFbDpr~XygyDE5Tb!&
z-eYR}XJca3K{Qg>fM~<~?s@cq(qIXxd>1uIv!!kpM2){$$+S+BzWG!jtkJA3h~>c1
zzcPw$xyjIy0(#cm6M9Isd3b~{xPzER!KpY${(SAP$J95EVJhcSz=fg)KXNaEV~m$l
z&8rC|PgI<`sIb2zaA%B^_f~0Cjl*giD{p&jxUH>3IitOb0hD$zQd+wm9$?ma!DTl=
z%7H~;+Ml=vhHJq39oytVmOdVKj?*kKw%y>=DYA<$u2Y{t)?~;p7=jiVxov2hk>MUp
zOO#?ikz*!W2E#XTgBqeA0(d9v$9RvKysbrv!W-?|LJ)9rud~Q^b3hH-WiQ+Z<oas`
zU#+&H-kbh-0isdGGY-42yw^8xczMCWVV#|P#DN=ul{VC(=$*^!N#!2Gl=}0i&{W_O
zos$}a(bQk?)%Rcb%=^}svo<gjGH-*Q^GcU6msP8R>l<U32PmJy5i1?x2+Hya7S`_E
zAo>N3akB?c7h<dgx$G~~;(qRNg37SOH=Cg*G2F%U0F;9U6e&dBM1KY$3}LW}8<TF8
ziZQ7a2g1USuAQRG&fFjN-3gW(AfBu|y+02MD}q1~hjx=eBCH`c!K8&6S-p}hCDur`
z=!pL0U(;(`u@7VuU)g);^=uVCT2soc{*EUZ7-u%|{Y51olzVjMc}4G7TM9xZ-BRul
zm>qCg0${>-$h_i?g-L~w(6V1>%5YqRJ!=xn^7;pp?iZI`pyjKpU1egA5I^(klT>06
zb_irTDTqLwb)J)OaP%pMuF-*%-8-{ua0sZ1Izk-r?0_H=4Id(On%K-aRC$b_FK=00
z@y1C61wy$^ieI&T(SvVUpj;	MZt1os0r0Cb(q32zssDm|(|DbklTOVl2K;VsyC
zI4N3GN^>C&a`tp19Llx}rM#5el%o|J?h?a(`^>_Old+fI`V+(Q+{%I#L1^HP<Q8E5
z=GgE>arqT2&n#0n3?4w_?FKIyt+`K)k(929Eae>J|NS_%HZl@c!GKRDi5!LSos5@i
z4#>^b6Lo{*F(Rj!VhyS)Uc5*<@iV_M0pVK4Ee7_7P)Ud2@9E-wfrlQS9nSysCWQ^M
z1Uif7EUH+)I@ghggLz|Vg=jze%wIeqOuMaz_JAm6+P7D!Md1N)xFEX6jPKwJzS?#B
zyNDpc1WMQWuEX0~KOUndD`TjhpQ69u1Zdi!<sAuiUPFyud|dRwqQ)o044*P>R6|3f
zpNAKb_f3y0$W0y}yZUz7SlQ~WGF}nOkV5&B1w~-ffWpdchmvLiXCvg`yo;E%;Mo=-
zMCS~iHW4~>4Nl%I%02)^4=6~nh=3AJ<&DEjJ^MCtX~4L|-`!*hKzT$Lq0a<L1T^?W
zLemOfLX!hEE?a`QdKT-}R!mZM#eK6c8kSw8Kl$q+-%^@a%o*irALm!3l1Yn*PPQF9
z3==l?5NfX&FasmLJ35}~6VOY9PS=FAf+A3g%mH;ngDb2bvQBXFDdzxPajx0SD~RX>
zsL`&&@PQK!Qq~v~Kv_ypWS^)A0$4(UecNceB+0c&aGr4c8$l}t+!GoD$QHqrFoPTh
zqOD4pQ*uQs;3~FyWoV1uib$cAfDkbf$OF=rtR1dRXr%&_ZwJ2RT%q&vCDjoAmKwk?
zQ=D-TQ=57twPj2>Z-hrW?Fd^*BKTZ@pkXx<tV+CtSp!SHE?=NL#q(-a16qF#Zd$6Q
z5H0(oFfI3jS!!2|B%wyDD6Kv%H3mi~<3gYg@jIeW2Qaw-caE;5;27tr=>e(1IFeMW
zNY>HYS3#o1!5KfUy?{wrboZ5w^ULaxp4D2{>Ff7M15?FQsc4Sz8n$rLVh|Qs3~DE9
zW<QHh^=rwV_;96Tn1-r#0F1-;5Xj1f5UeWeK02X+oZPe(I*9MJ>IOAS?Bf&z5eg&&
zxR+*oi&cK7M7eZsmAHaA70C%OZndg>U@Tf|BNMKb9^=ilf%BP-=O8JtHo){dUO@y&
zzweozMP)blBs{XEQe~F*$`?vmyBRV_C>Ft+Bh@2ApU>eabGIE`0x*Ud<{>8<PiwDJ
zy;Pr+3co5Sy?xuLF;=)Al?9!o;GPA02$%d<tmH)!d`m8rqZ=5)UU^M-B&1Z*Nfwix
zNr?j2+Q|V#-=jtJ<+2jF!W;jDwN=(Y?Q(s!&riXeL~J-SiPC}4Y(}8-SDj(;p1bo2
zt}qS^lqMwH4b|Be;Bwz5`D0HBzIy%SyX}Mg$w!x7Eeu}mYTeRPpruX&IG|p=ce2t!
zdChnpLuBev=Q95USHz_-_o*=A*N(2s#c))qDLRy)<ddyGFi_#5XWM?)YQgNIhEI>R
zWzt3B4SSQ&1W-`4OY<adOe8{N=1`}N;kTbZ=hOBQO~6qPVEcr6C$F$`@4J+l_sclM
z#lnsM_ZQJIba>g&b-4<JW&QGTTMs*6QWZg?gLMjd&0PF-_FOn~s9g>`=$JL@6I%=?
za@>2#T`glBG`djL;o`|YWttp*O5=E|cTE)ddY!F0FQYV#Nu%87;pOJ`*8oXjIM#DF
zh8Yr{vQ!%afc-<@6FX*rQXM0AaIv)^*S!-3x=YXgg(&-Lgt^mBtHyl-r?U(T|4hVE
z;vk(E9}en;Or&>9YbA>zp(cV^v$N#5n6v}QD$_0r2G^W4H@|B2Lec=F5;elb<RclQ
z12R4ZMQBfve&2aDfASSMiD;ZY!-Ps*rFJ6tND71nki82vUE7p2!0S$cOyAgjIhHmS
zxpr}p{sM`SF%*?_KpbTGf+krvp01ybcvBhr26L`3HYSU7{|D$bz~@LBV5oX5$q4j%
zz`H(r6ztjAbV!qfHY6aPl&MfxYl6Yw82|}TV1<7IJ?KDDFMCdyEoLIcipR?^P2}F?
zbDN(6z{N_xI{nr-M3^OUDWdoIqsqDNzTs&H%sGKkWgvcd>N|-A$AfXvSe4nSE0$A)
zHA)#+NAVkSGG!0Kn3oeTe6Sh=kvdAGo4cuYAw;=`dTFJ(!857_G3H;V%HB1NqkgL^
zJswL)8>9u35MI<8{`#fb?&TtWMo`k(Y^{I_kn>%#gYgq2uXTw6Uw*#F|LZDY)BHE@
zM*ft=1KV9~w;VAnDd~t@q3g+YRasCbaq~Y}@d<pwi}Zb0kgM4Pb;8WurhL2<_U0e(
z6%a&e+GlYD+6ISWpOZX)d_o}6x55)5A!Ll;je&Wws@IG+!Y%3$`($RTV&!3!UCk#B
zXkUTI!|@q+#B*b&kO&Yc_wEf@7qtr1@Gw(xc(L28sDE8i)Ty!m{+CCqJHy7uR&tRf
zU|$+rnaZ*|A4U#&S&H&*tIm8LqYOZOX4pGaRQ$m#K_JcEMjNYL+Z@#h@4^@v-lj7~
z1T6&RND<H@eZwx>rd9t)F9vfu7IMo0G}9%EjFBgqYHFi8VdQf!dh`8AGann+#eVWw
z&I{}tyx{t6H%#C|P#IzJe22=KS$p6|<<W9SFj-oWq6C26|H*+@6iIEbL`(*)>=3Ut
z*HYA@C^gf%9<79><vGPHP|ts}iC$3PYW#G=C1M);;@X47xi`=e#;eSG8WN&ll#wj=
zc=K?r+bR8c0pM>c{9_B4y8K^DTK}Bd|GM8}VP)k^Qwjk?gO)Y>pC*p=e^vst9B?F%
zw=HS_U_0!ip$ENj5_+-0lC2uXhX2(F$Uu3xpJr^lzi4}}#7`t4(-(~bQd+cqR(e{|
zFi?BA2uF1l-4wXHarJt9I=u*gZ+Num#Lbb7-QHAWX$(=5jaWGRrt}GjEhh~zCz%m5
znz3x;eIH2wleA;li}dvd2t*fWg4oHJj`id0;rwRg>T^ONV+by#_7fD_gTSI9EnuJV
z`?<b4Qs~>%?fsbWEq5D$D!Usx@UZyCX=GF{b;$m7_HsinlTktfw}8!)rJwzBRl>A3
z!|m?m?cjPY+bhkFE;I9k=h*86Br%;d)(=LH{&ReJo*(VH>Ut^wg|E;~B-s*pg^QVP
z>ve)H3Sso@2G>6?Ro0)o9A@AJ<nU>JF@e%k2jfLJ4d7|or<|@ztq;`n(gVQEzPEeF
zTMBJ{n6+|ljmjOFZ#F}^k)z-BJvzZ8Low;~XX^qQeiEawBciy!FT_;`I4P`VuB^G;
zi%bxvunWXZU;r_IpX#bVRqUD$h#aN6hD|iLVCf~^Uv(t%FtcL9;{VFzZ0X|FTTIZj
z#8h$*>`|3jbvQo}Kv2{P<aIY+AaFjx9NMW%=3Ap#&SZ<PU!8YJY6Ws2A{+`7^TVVV
zvcL7gqM?Fkd3ge9+M)IrxeCQ3C-?-A!qKyQT7?9nxo}4SfkYWUyE6VDdtf9K?GS^a
zOu6<xh`EA6K|3L07y{EngUjgB6Nl3s1c8`Sm{aZ+|E}~5R%eI}g)k-yBQ~s^1ZsQj
z(2puFS7Y)D`WvE)vBYkLKKtSx{;eJY#}eyWhzN{olA_NDc*bizS*y(y{!|YD#q@%J
z4SrFs(_s|@beD75BEbFg5kE^y6%AK7mD`{Vh097VR$Lo$M&$NL29_?_F4uXN?a*ds
zN@NG{TU}tKHtA^*R>`%Cy{g<ahCP!ZOgKb?aUd?wg5niJ5-k(ld#Z_Vepxl<u=`a8
zGfE6so3B{Er^nmK_PTY|tV8h}%x=c*TEv5vC8cHnPGTW3;7UPvCGA+TR}@MNeVR^0
zDq#m1xAo~NiLdSN$Q?vDDG7xi#ZZFqEK?51?KEmj)r=*KRPRUX0!DTpRd?^Q+%^qd
z4v)i5S>%^0<(}MhI0p1_F>`le%9666Or{o4w%rT!Q=^8V9vbyms^%g>n&n_=hk!YU
zNfIvrw73L`@B!mf^YlTW>9eYyZJ4iq+j$fczR(6K$&A@YRx^3q!hWOv;jG}R7;skB
zhBjk<OltM`Rin2w5K9!`uFlXLAgAk&6%!Jh@FHhl8&eyw96tP5Uy!2EP;duqV}HLO
z8R0!7)xbuHss%f;b@6*Ty7Ap+TDiR+oJ8XQ+q&(593RdQfi#OE0B(-KdrIih%r#X~
zw-H!*kkj8VGGCY9zCLb8HLwsEu6b)jX%<`$Ul>7PAP9iBD5th=)~_fzVMk499SSEm
zXE#5d<k7L^PLobmG~~{%OA%Q)){}jWaKu3*f(U!~IaizkvENj=%q+dI(UU@?Fd4#t
zhN~*Ny$AXGL61?8B`ve-;Xrgu*sbnMVhs`63ybUe2w7r6OjG888#h^ESuVLOgj+?A
z2W~R4q2$3W<gE2-e)K0jl~7jL3L(Wreo7DtPhipn5^^VaL>^yHzFqIY(F&flnWCg}
z!!E90rP>8c1p;g<ZSVF<Vhh%6oz2>Snzp=?1+{2rRFw<KSAXck1Toh{SBNbmT?*%g
zDXJl-zffK+Hj`Q{-xfGajf?C{euuUth|W=g$Urq(3_`s0LBvk`T7(xKWQ*v<qVt-C
zdB2h(fjtEq2a3O#%n_-FlZfQKr$?e)X{5omqCW9}`E}Eo5Y~kq|3dZ?xo5xvT!B<X
zFFn^Oc)EoY9HHB$jT%$2a<5n+>KL^sRhzDeYk^vsDAiwr{vg3^(|Rz;7H%GWp(R?T
z$@7pg@XqiNA_Tw-))wFXojQ~@BsZulTrbIgVI0RKQc3^;FRAd@tEN4;X@HgCwyOiD
z_aXolOw^50oubUdgGPa4K;*pwsCGyzab`f?2x>QgRdGFHwwyLNV}pb<5h*z>uiQv&
zm?lHk`O9&QGz46bmV}8yWzy4|$JesUvE|mLW!Yh*#DJs@Aze?ol))!Ku3zc>Gg_-+
zSv#1z6Sw4dw7xMN2ynG@Vg|ld>!bx(Y*vqjqI}~^RDN+18&B34bQezmI_qq_&8SUi
z&vJ|?C=ePYGP-rQN6w?u>^V6#cVLPB5a}X%I}DrQ!QR<v_N*EvY$jm>^@x#d^tCwA
z(&x!#S;OE83QXDO3&!T)S+NR+3=_Y7EimFoup14Q1@?}P1{2AW`S`ggu<$I<C>=pA
z9{;SqZdO6`^Lb)w3}ih3^joD|Go6dlideqjT`*BHVIJGK>z4bk!Ae8&B&bm~70f^T
zCrQZ?9lV4<<(}Wfz({s#@7~i#Kuq?b&RmRr15j55tbYKYd#WM6gntuM)Ap{x<TF~g
z#l-_k7(K?`=Paid=Y7}Q?-&))p&!-Oj42DFAf%xP_pgXmhfGodldmGf*l8i(C)qTc
z3xp@a3(qg%=M>Jh@wEfMAMt!j@Qn}|kYa4A0hv?2YP7ECx;>Qp_D3RmMbAM5Xp>0P
znCwigcKX0=7a?gos!W{l)N2YAqtIAtFmRz7JB7pG73PhBvLn64l;for;Z%tvzUsc-
zcwbTwpdMv7$W1Q*+H=gT6!+!K>U^-fccf{D-^T_V2G0AK(#?iQohM0tCQ!5<eR_nH
zW{HG|(3Og-g~f0B#V{59GPf9mw`2*_q@vi%K!fQ)o$k}nqU{rWkcU1zlt?8>Lz-hP
zlz$Pzu~3QEo*bIfLWgq`-NqlKQEd6rqW+fN^L=kpIK*EAT#D-B^a~8V-9M<w@fBJ3
zJA!<zjr+D>qG<I+VL7d1MS4uFXM~u+2hFVoY?OEZ0K*DbhVqI&%7fx1Wt@q<8a@vH
zPT1_Rz7S9bFGqE!^u|I%+P-iJG=#R@{Rrwv#a|8Xr|WRhwl`k5AW&WW-Z?j0QxgIe
z3L&eJN=sD&$ZQ0DW~3qrRc5Eh7Nxx`z^+gFVx6$2bE;CUM*>?>7||0y+h;NJ2D8i+
zKlc>K)Ew332mQMWLzs;s!y3%4*yIP_s=6RVf4<;O>kE+=AIIizqlVN$;F%C*vc-5z
zj2Ko$H0F<Lp(P5N;Lu7j(O~xmf~XP8Rj6@=_SWGAw7t!zti$W;73)=MzMSTMZrdkf
zr+gekIlxGh;8Q~-kI7MMfn`S*O5<3I%vF}197N5i&?%405yI(4vCac`de&P>(g|*v
z!Bao&fcET_5+!GaR6&N=Y<ZsM^a}9&JCD3Tgqf!amEIvhh18D4M=pJ+X!y8dTOYcP
z#YE-;92pi#wo5zSV8yp1JQvvRAJ)ZJCJB_gY~+U#wLGCN@lsmBlEEC83_pD`f?nJD
zsQk2MrmPS%*CkjcE&D+(9pO6v{(SyC-oclteWG*!NIk<Fb31ak?)~H?an7`@oGHxS
zKR_oLPpoCYaznDj|0l*eG{Lxm4wYi+vga@Xab4DIbUewcS)IBgHQ~ear^2#=ve<Io
zYKmF<qpI}#y%uV+P+&E@rWq7bk9zp9t+(>*AFSrM*1z=jSoMt!UpnMcN)@M{ZyH}#
zaeQD93KNMC13s@39Sf06&e)A6a>5Gw3y`W6Rf<&*R*L4l6ONVZwty^&%>tYu2%Oph
z0dXD&>%H+`{_H6Cx}YmOP^=hZ)<5q<X0mGBef}Y}K<%=Gjg|K@pTNL}(44iumEjL1
z!6aD>(MLac(3WpX^xk5Bx&OX=F`o6e+Iwl3I6+wd&>I(VO(H*4<QybyQ@X}S)B3pr
zEs03}i|@_*c<PPQFvHxsMZ>L*&)!B1IFQZQ5d52KDo6q~Vwd%<Gx?=2a=pEkV9Wq;
zf9pU9`hEN6)Ky+oo!I<Bp1Zg?|6o^lv6x&n2V8XR0oqP&JcrH78}c{CV)5-!bLvcY
zim5^}+sauRGG5|3sE2b{FEXiYW)2UQH0uz^3=XteyW~7rWMycDMQBxB4sQwt0M03)
z$G1!f<DezKxEm?5iJWlrp3<|)rnn`H)twV+0%C9%K+lJ23mPX0<eNZ4qCtlm-e2&?
z9c*`rfuon?uZ)LXA>~9v->Ulx`FrH);1{>WC4dXnQIRx`2OHYp)$GWn7tuC7y~f?w
z{r9Iy@_nXBzkXg`uDEZ$Ga{b=z}zKp?eYDRcwgnvfNqoH!c0{2`)Enf;&Oqei{c!}
zKBNxRpH9Cy_(Z)+WPqPH<#x$#qb5zv^VyJIMdwdL^I1-gZ(K}W;7^AdCu@h_{_HfK
zc)NI3ynJ}CZcxnIEV)acy~_8j62`}vOf?K79&~9yqw9C_2H~<Uzt<TJz%k9^au#jf
z?tKN}pd7f$ypwW+ojVEJgL1`#oWSu|%ekbCPBpenp#%PQ?-~Y6xaU-dlrd@t+~?2%
zH)+YR3OyP4O#oM_eYWhBAQC_EH=;yO?ZN|RAjsdaL0E(SpHt=MxgQO~Vj%>mg|Gxn
z{{=a>wi=AHyVMhcjc+Yuc&t~qK#qiulRiICG1s()1W**3{}glnSvI!+j%2d_{}gjr
zS<`-H0+RuBb{udxkb5n@&^}hd%CQgt4-M|V<xU!`Coq%<r%}WXwp$~OBsEco-|sl|
z6MB;q(lR)tAjAI6#C;B&4^E-kUz>^`@NPeYJ5OKx5Bn~lUlw<B@4Z|G^xJwamg$7+
zmX@gm7~hcdnljOr$;H8q=3afCE-gJ)ecgKBkN^O1X~QseY4Ar#KSkD&0EPp9^>Yof
z13*)kJ`1qtx;f`Ue*4={9mxz^tb%xyQ}je5%0r`%ee1eHulu7YV5G}n6L50Fa67j$
zH?xDDrt!tO6Xpv=JP0uhWwCoqG!5Ek^#>7wL$k2h{PpkssPFqpmcY*UX|G|n<$&3%
zunpj4Eh7~Q#nuI)`iC=qs4liXX;jrH>_OE1>N(|7lF;+}gW&5xkQI%Z_j~EX&sH8x
z#VOoRRSc+le~-lQs~iL>NtNUOBkZf=;#ius11v7V-Q8_*0tA;3+}#Oo!9rjmSa4^N
z;KAKJIKhJi2<{dnI0OiM3*@|S&N=tq?~nQI?sQL8bv;j2_s&drTk_FuOr0<3e=s~<
z%T8<W<?uO6f?biCfpQVyq!;53qXLRl#Rp^sqZJ=5i2fjh)?#2FCc(bRe1{MNVm`VO
zzoUnXFc)~%l&<5{-si|P!Yszruxf;Wzp+W7CJ9>f_TCGE#SPtd+VJm)r+&`wMZ!Dk
z+Ta&CKbl(I5HmfRv;Cw7T8QyIj!^4d-P{d#^jfTvT+TJ{AT1V)_3Q2j6)l6n<O*ia
zIWo?!oj{Kfl-j{@O-`UvaB>z5sM@}ESH)t;(RDkzPoAS#%Ju5nQ;9B<S-_!g9gz~}
z{hGhU3sQSH`2zpZpO?nt+aH=2<PoT~oHfM@FrRF7Xln=cHrn-vTV!+uoCwIzb1{pL
z9VfFFbOns{trHzVpGSBY9~+Hrae64}2E%j5d?qf;mhc}~=_oDh^w;G+1SL_(7nrC-
za=n3<Xx*3(fd7$)quH09#6WVBBJ<kYK4^KVwm#K+`T#Pu%U0&3A)F(pmJTm>&*a2o
z`rwTXdv;?4HR#-W^)vL4US$<xNHN)qH9|R{#fu4;{psdm(~FAT&tmR)Luj%Uils5|
z^vHCdn+ST5usKjet42$O--3=I`!*|2b?;-yi@+M8n&%4e_iUW|@@ifY*wurV%idUj
zFx0qiCPnFOnR1E_3*IO7HeRqJt@}i4)DWvf%!(BX=#bxCCvK}>n8>*>t3N}VghMGV
z4Ug(mEp9zMLj-^5&9%B%u<+WIhNt9@Izk&Df{sJZi#=Wyuq~GB#|Nq0`LumN!ePBu
zGVWEOl+ysgsX~XGEE`S)4{V&d($9X=g8$|A%k&Z*4%v6<4mESu>P#nFXPTl&o%(7{
zgp$t6mn2pt-Z7=%tmjz3gUNN^cr_FYW}KMp6c#6+(=poHwOJO*Vj#B#rM|C9J*j&V
z&z_XhnNc2ZKYA}FKN)1?t7hCOZ^p@XJz)6`$uJP{jj|CZ-L-QkgUc%=<zP6CcE8^6
z^}#f{JlI27LM;)EEWZ;JuJkQ~cRq9%CiL;YjPVP|Q76;@?xCSRxg@!<Gq@Kg=su^f
zUn3Q4N1+YENS??hLoe8pP>a*^@@(Skd!>F1!N=A^YtB4hG~)n$hT_gM1x`KxE?`6M
zn#toD<YkR22NPk#{-m@XPHajWhS}NU>vVq!e7%i26xIMj1@^?R`YE5QuXcHka-~Jf
z-EUv4Sx532ZsYpSi8)IMbusakui<D-cv)o3?%TQZ5(M8WRq-+V<@H2Z2Aqxa0kR8}
z_;D?jKCdQy^RkWtDNZ=O_arIyMYOZTf5E=dn^kHmIHVgGk2nHu4BT-bmY}Mk;Nk0y
zA9Rts=BD?K2+I}Z(8?t<SZh-ALBgNTMq<~bQBH=wb^u`qNRdTt%$4t)F^PrYUhwu=
z67s%D(Zl~x<GvHN@#;rc*apElD;o1RK`4!$MV-k?Ui+Cb(4ryfHL;ROM2Cs&X|x(a
z**B-3qDE5Q34X9F2#Fo?Ap%43?}zeKnb49tLXk4@UFiZC3Vv;ZWTODM1Suin6DBF9
zP~=@Tv6CF7W-&dRw;aSgR>fO_5rcHLkrVF)oTE-8EG~+LM>>`_xzg7ZR?Je=JNg;2
zUNr!=WVtcjKx#S5T8RiU3VaHw8R{w^p7(pV_O&(+v^`{GYB-L@P1%)VGET<0qqKBv
zz4~8g#IFfuli2ys1LdrrTE}P1?SBL|`y?S1B$1E5$DUlU2Jz0~iux0O6qi_nO|6X^
zm%Bz4iaz(2gV_)z8Am6SR)J@cpi9m)8HoM))@-%O8Zwb#y!M)PA*Uqoizfp3n;Cs0
zdkq?*I7~>}C#vY?;m_r9iw-3xx2w<j(dCaZGxO8P;<)XNT4-Bl%4vrq&Z<qb<c(cy
zmdZcM8^t6`eP2O}Sk31j`dHM30@VAmw^k<9_YJ$fqH-30a@@Mlm_mXC7r)>zHk_sG
zY2u}Zc`4+j*isEYf+%a(*DsLwy>dl4zPh3z7Ep<j$cH88V9RYJB_>Rb8tI&?pl+0i
zRI;Ld)fb0W^c`WZr%6d>M$Jv&icir@Y33SzbpZ8B;V8@7xdawt-qn}fVhvPz#n}oy
zp0G6^->U4$M6NXCl<pYY*wol)qsiOfPcu~#8ubf=&1l~z75<6KKZMmwO@w{yZHuAM
zlplIiDqz#CKNSJ^zMv|25C#J_SR&66F_X28ITD$>gHXnC1Fjgdv`H?X5^DFA=PHYs
z*ImW6z$x-JefTGLR)GKqO29PN6UNUJ5;Mp@J1DwG`421Xp3W);3kIX7VY+KrS9QjL
zTgOO2GKcHmTV*_|<U;$`DPmMtv<Wp)zCcZXFKo7{7at%^`!rXgxv=h(&RqnjBMJpG
zM*S+Pm;T_>_`tVYLaNEL7MtWXA|<P*?~a;0;=bYqy`nO$H#t0Pc^R)U>-8#rgbJQQ
z)F!~oK|0c5P|u*d-n>C~W!`PrQ6X}qBo-~u4J33%_#_2R%+l6rqCpR5D;aE9L2sn9
zj-k8(TSAw;{*1<l14CPQ_6;Sc)LaW*Z<3sX^4!^18~hK)!urP9uZLu@?Rke=UPtLJ
zAsP@SZWo^bG^f17rs4b}GvmTq2&OD@;}{(5EVlL+$7XYlC2gKIeAgn93(KqLL6J4w
zR0lPO*5~!sid&%P<Vt?U%25`NB8ds|R>82RkoIg(#2rlsD7aK%#rfB&lULp*)MJcS
zT0l8y_8=xO50>SHX0LH^Ab)T=F8S$F?#?#-WRkxdsXj>BMBLKDqS$wXoABF0YHxTL
zz#=g*2=BC=+h~w@4etOks+UZsQ;`d)?-OW`ITGot{Z)GBRi5ILxQZ-A@;$W_nM}&h
zO@X?_Ij+GY-*em<=fA$X*eokVByj<_?q#b<x8X1{!P75@lduTZD3LYmlGVwvoWz$q
zes-YlFnDtwBDdHqZ}s7zl{F75^NYUJ%oZz5e3MBtziF(87m?to<K693_02_E$Sr?x
zO$-b=%3qV7Ik~ym!R5wqI0%2;=#M+XrUkX?%{fB`i3^qqBJZLU)KS)aJi{q1OG8P#
zaO|p{dS(??4%NyIP;W%s`ZPPGWpS^Dt0g(Bt5F2E^GEngxx*xt1LeMjueM#fR|@=m
zbL`rCW4ZIigj=xnnWtyR-VjE9V`BAS6x|BEZ7()W(3kM&?wOg5@9T{@B6_!Y>0nUR
zuNI@j4;zQ6gT--MTWx8rSBf4bb9-T@^T_tgs&|gn3-)!FhsA?4ZBNn>8VqDiEQcIl
z)}#?wFN0V(`GiC~J#XFWmKJ&F*zP`5#(~R^MDl-tf<(3~A+N}`2wd!kXIo*%pfpp&
zd!<~zB%@{`$-;VG6@+g-o8)%A@9YiwHGR_NbBWP`_@d-1>+A=Pn>|?cN{v_S?EVhF
zc)v_(dh69xzA~^&psmXDWT@=D5Z8(xGx0nroUveyefLW{d-WO4%aHLYPex^?@~vjY
zOOjx>aE_y&#TND7SRKwqr7*Fn<YQNTZdYEcH9zTLFr9D+IQ8a}4#2WFe|H2g0J?+~
zQ5h{6*k3HeyWX&9Mc(Egi!A>7nix?OTm4A}$5%w36NWmU^6}($iqTH(c+J+V=l~eC
z?O=qR;MEy0Z4`_GFDs@j#WSo!sBqoH2(AD)-ic9P<p?f~Ve9HvrqFlVj02AFv_V)j
zPHr{5X55CSu`zt97AXwU9xpkAWI!wxWS6`BdUjLhO6@<L>9DY{XyIYrG$FVnpfcuV
ziArW4`PSG*Cz6X@%W@_KIoo0qjw)tX>akq}1_$EER~|UhOJd9Te5{DittnfIPz$FT
zKue<GDW&M;<hNF;Nec?$3F#l6VjGjkY|o_fm#m&k@bpK1@3asDjrSa<h6@z*VSFN5
z90%6<+G1LT_@-BBfrMJCvSWJST<mT$jrYCp7_eXe<~8l*E;g$S3}%E4^V3qt&f3)(
zLhqL?h%fOwjnK%rL_^|6YH~p!CLLjd_le@ZmmYqccMH1c-8W4~BG9F&&z!y_P8+R_
zrudS}<WG$s4~L8~&ua2*watM7p8FE@#!~6N-9{~|5u22OWh~k$=aRR7-<w4yw)TCD
zxz3$e@;N$YGG@~uIeCN$Q`l8bfvhkpH$p|z*EhaSjF2vfPaQx#)_KN~6ooVp_cLYx
zcuk*73933!;R$xlev%cHw<GK_#i<2!UQSe8IystXJ_dY)r%raBuv#SOO1?^fk&Yd6
zJM)bP4_ufoc@B+@*O)Xx+Ducj9;ZMxLmZLG>1;vl7;=$?P&+Jcj)>@{nxd%_`v$)K
zOsj~jVyCP>l~yXrsklVyJO;cWk>=||*r^-0yF%^HujH$-Tlc_WKR+qn>UAX@A+}pb
zx3RO-zzdW56Ii~Mt<IhR`MvKOper;q^0Y?s#wRQ!*)(}V9r#-Lr;)9d9UY$6#b6;w
z&*Uu$sZVMZys-=FKBHP_QqXe_Y4C@9l&8mAn3;<c>(*GN8o7{tU;EKb#M*lq*b4hL
zP1_oC*}ft|foyO|C|bo_o{LBvQxt2mqamQ{weESOu9@+b#b8CRfV9pCR{5XyqmbhE
z<{3jTNYG9X`}{05YYJsohzoD*V@M$Acqhn<h<spcQn_2@3y>NR#|>xaRneX&)Zjf0
zmnSb76PViEn)A*#30A)>gZE2#Q6s(HF#wt3&$nLeYNJmG*?;_3pTx(uV|pvr!575>
zRGhvcLGjtvs5G2o(V+Ud>(Hps%~ew~Xe@xmT?3S|Eg@mU4~r;VGJPAX@f?qK6&}Q=
z##m8ZEfZoUDJLU*lyLR>0J35hdx=SM>KG`T#+6!Wh8O!BDA*n}40GIIsQILnAR<Sn
zi$v1Wf!xnr4&+!_TE$F6E<Zr~uKfd9qvVotu6TF|;SKM6$U$FG!v?RzPDD)JOX-v5
zW*kx-!lB`Rj$$>0EvvXXqL#^hSM9HnylcBkl5efO(JB4WTAPuh<?do9^(3RKCAJ~Q
zSq6r-Ig94D?dRS`So(af-C$3dW@vm4fC9IC5ZQtQ>r+N|*qK-r+~*ttYWB*Y_a9-c
zfDZO=;#66c)@nh@#?Awf1y-`&(F;L#k5qW^+-p+j32XynOs`Jh`))ss#yvB+DAgd&
zgfCAe%<1E-$)yvNiBwdi{J10t5|qu&vDKoF!&Tq}m3mc)gG#(hs0YM~I;sj#8TzxI
zH_e>Q_II$4AwC!F47|={Q8N7{+1Eo%CC2|#LLGr4f-wLeR1!KH9m|OH5vr&Fm9a3}
zmvEN}P5r1_J)pX&wwoFSLAQrp|EpB|>lh4g(;`jWUc5LP(^U^@$rIeXJcnhzfJuYG
zS_<QlQl0mtIQv?N+F@%za~x7D5*F3bhLqLid|xAd{5j#vnS52heEUm4G`Ul5v~Ugi
z88Xi94nm#)h#q;taS?8^SZ$>wZI!t4BYT#h8{w{sxX}oEB-Y*-E4LL6CWbz6S3##I
zAh=&trxcCBx)ye)L8I6|RL9P5cG#=-`$v&@eS)|Eb@1HCw}`W1&alZtX<WQ2mC_`s
zLJbrRYdaa)LfG*qxl?cn@jA~*G_B3$wF_Y<)+i^lL0{>b)M20$d!Q9@ne0sip%u$n
zW3_C=<xE(jHx0|Q3*CX)4Kio;RH`$|1V<8|Gv~SLdV#kvcKSprRjz)3x=rsojf+{x
z?&zYgjD=9G7<D!LnJ~U7W*@b0n#_Ay1~4q}%RdVUfoz^r^dT8RvU_Z}r(w>^vDz2`
zb)F^l9SDw3+Ud26a#c+u0?aGvBO_ZvQgTcVGnbhB;U14t<M6t8mof|I)ILZ63t78x
zj0rY;JM?MR8*XF1IC}dY$jR`POs-CXV_?F_Fi4*x3-B^HK4rnD@zV&JG<GnSVoCOr
zS#~wI8)R$AUyupzGq0JgeJ0)S(BGl1uxa7HEC%I;Mw*5oT|sf=x1ezFo8V8&(p~TO
z;vF7gGnkXu$WrRkHMc5bSN87gwVAMlXWQ7LcDCa358~m9zX+E(sJcVAB_6~XsH9@a
z5@!*n|6w4-)!>6r7WGv5#GO3y;)@62)-aD=lu^S%-!ZA9-Yi9z`7!?324hWeh|^}e
zTN>!5O#hI0mc+(=Zm8TR+^ZQ)Yz<~M=#|}u)9kk){czksx3m?ZS6GRf-%I%44Q4<O
z)GufWA8PiB%Zx;ERViMm@X-y$<8b23K$$X|)*k$_P2JtFUpm###vOHQcyGd_8PeXd
zT8f|*ZhB_g&SF?%9keU{7Mq|jpMuJj(tjFc5QdBkz}(_8JL2IW)xfEuYT3VP;%!&w
znwN=o1qvjgDOm5(nJZ4eT>5E!xb23iq!qmT?h5?_BQNW4ieM7rekNEqA<e9%5Fs6F
z-T>o^lg%1MIzvfB9It_VIw<l$p|7gxoHb+x+ST<#!>7zo$RnwC*Bj6k?A0Yd%<Pju
z-{j0~43~r9p7LzLFSY)>rGMFy{&_`qOCW5_8&xj=&Zy?;j|)+cfg@r?(!JZx08C-`
zfP^gjpd50us#o%9zz^_0@<rR%iuoq}eyS?fq3*dP8KfawyYD+A%J=KBj!^*o4haoy
z*gKb{6igjkZp-24@%rJ)QJD!^o)DQkf?SObt9*#-8#i66OU+!E<Ga0A+Z@hUs$e8o
zQ#LPm87E9f;D_|z2-n$o?XJyZrv(u)qcOx0Z<I!y5cNztiB;tWTCWjPvdz?rBqoGc
zQ*8v|tfc&OAcU5w7r$-RH7NJmXYp)+S0#w&2<U*;cuoQbD(&HT^FlnNS}#(W7c@PQ
zgd5lOd0r)mY|v3PpHm4z3gF6;d66_noJ17+n#J`R{rJc5s@vRK!wO$!rs?_t<R>Qb
zIfXx(xaoY_-nt(#wsJ!`6VRHEXq(uv`6LAi+){Q6Bkl6f(Bv6*KNW0~VUyq+m&Vh2
z1KU|)f1pup(WZYz2?j+($+unBHiG7IFDPY`T?}!TV*S`&Kr2oRaI)Ru6{|4US9;<u
zB~lxW4dS^A&$G5&hCbD-Kv*A69)9U*9P5jszi}<cfo0}#-0iw}@w!<!5lv@h+Fb!k
zOC2615vMmJ(&=eS2cw}R3f%?^97&xT5bnfy>SbrJcIxFb_6@N&yDO`0cQ63nmL!~q
z+si0_&G-khb92?BC<7E>!06fllzIm>00R{GNE3hsE>;I%Lh*uEv;j`w7<&LV7VrH<
zDoDb@f8CGf;{ZFE0<56;z*zwREKI)pxg&oo2P=C3oT2!C7vH~y^k*^uLoxV=CIA<T
zryfoVFaZr#vIJm5a{$491^{gEwGPArE^tf`z!~hT3&4f!K2e{f3m}IAQ+PoP9Ml6~
zLv-Jp09Muq;6W5w=>r@dWYn+g11O>H+k^@xG6V!Yo-8%|&&hS8zfQUt|8=sy)C52Q
zbzc>ye$Mo-uV6&;$ErB>AIt#+4?<Du`z-)`za54B3StK@_{bLE3=R3)MWF(~!Uq1+
zSDcWYGwy3Z+H>zLEKaU}dW#dR<N<Jj=HvpCs{pX!xgOmGUj7Kc17F($UO{n#k3aw{
z1WxYzX9FroV3yoJN+5{gK>qdp!^NE3k9L7$Z6HqOt1q+xpu>ZG-vChSN1Op{Q1^bu
z0;9hMU_o&{_!%0=35I%g-vG}0<sbfp3sS;i4ln>e2LW&(wIL8-V{_h54ElSeM?j!~
zKrlt*gPi+?X#Z9P2zD}p$ho%y3J8u-zOMzmf3oq9T1QrYX?x(qeXaXlq5oFvksS~*
ze!38IfL#AFn(GgvxgLy$=Xx|6EUFHN2Oe|+yaIQ7K)k~bp7VgP=fOFKkQKL~9$U)u
z7!6r(9zgDJf`H7+4z7fN4A1ijG8nZS0)&?-zz`b9`+zPskoTYHLP{XP@VnK#;0g%D
z*u4LY2p}*21D&CPe2-WI`F>-~Q2|kLZ!3iG_tA+1<ohSqKtA4wi(!EL5EA+Tu;G52
zmvMjXqj`^^hz;cbmw6At=mJ&;Jp`jI2#^K^KJ*9RfN}jG?7#m8#qk(+t$q(-cb^xa
zxgb1<gro+Je}W7tcmVl6sodAPM;YsJVYxr?;{qR901O{e&wVZ95Qr?!e}c>fAxRLx
zB@q&4*jx{*lKf2s@DX8%iMS62;&44oSNnS%zK1*p4S87hU@!1r_Hu!h!vHS#*#=@M
z0@uTnHb{)cm_RskV+BxsbcR(B#67%V_&9(i?xUG}kBsAc<P<+QI3NzdO33vH8wb}T
zNE}>`P;hYbfrsJ%V1~zQAvxiJ&z!#*$;tI-7AN;(G~7pTcs#&O;9;3Q6(r!pqIUP6
zkK%w2v-KdqA71c;eEwDod1m+^7YKRV^H~Cb>|rx?NHOoDIw0?(u@JUBR^xkA2O-eo
zZ~ou)Agzf{0MN-kYUAR3Bn=nmBW<~WkB#I4K5FCoo%6VUXEv_i8BCv?P29oN{xvy2
zdwpplpcCpor6GX>k^ll=-)aCRG%pVrsun<j&dZJTXc?OdFDDW&C)lq5AOPX}N(qF&
zc4Yu$FnT5gW5SP+lqDMnhXO`!f@JsS$p8{)elBpwM*uE5KM;xkp)qVKkd<s8agcSd
z<$E#!4cw9jU<YTGL$0t%1E3N9x8lFlj->!-z)PtB8c3FV&@GY->5QIcK`uQ{0Z4#R
zY5}-Je`xxb0EkkOho;?!ObLLB@PDrij;R6=-77;y`ES3<0Zgm~Q2x6y5W|S!Ie>gf
zkOQoo193xi82|@|<Il&!Dje)QNRR`JQ41+IN(117Ei(X&;Ljfbbl|%p05S;&J3FMp
z19lKE{o#jupC@Jkh{0La5Yi*p0`OoTior)|01_;2h*<6i<k?g>xPg!#kPM#=Abju?
zxI7I&0FD9!kjNhVe$S)(YX93c*clMJq|yOY|EC{~Ga!&Pr9=Ea^bvsk+Zc#W8Zh(y
z_3TLiWPA<|ZY0QYuka5C^71}V>i?7uVHf*@=fQ3F(*95}_7Tz;)l2}vZ<Y7Ip*i^O
zLHR!=auflm!9$r4vi(ySFbg6PVlU!7_mRPFS^uAw|A#@~4ak*$nem&Ks9=(80M+A3
z2wtRMo-zp3R@s23;9*E){ilE!oRbYv``>e52!YtZo7s?%_`|^e=z`(o<bMdG-}?SS
z7Zvrtp5+8S1}pua#Q8_uK7!8)<VJ!V_c|Y<>FI-+kdRs~0pS0sfvga~2Ez%-%=by)
z|Mc%Y|Nm#eIU$+uJ^}oetDFU(f#&A?^VEGJfZ^ok`STovUu@u@TnJwKCI8_UgcgEe
z(mV+1AaRa=A3+5FSF(V}paDDN0jTa>iVbE@hroLu&ftSQ$kqSfRPmR0P{Hi^5E+mx
zM*;S}|Mp+9wB`TDUywi~hD?$JFo1Cj00jR|5D;UC!O3ZmUfcA4EQhp>?y<bN06_Ef
zzp?+AEbrqS?ssUvPlGJ?s!#~=&HuLzf4Kk$2FU)HhkwHWi3b{J_P-(X5L)U*|K;?3
zXaPCyLrd(B%mL)!LxLQSOoA-n%Jb0m{3D}4vdcdcl0goD76!-(d_ei%{(0~=b0L5V
zn)5M1{JYP2uo=j4FM#YJ=l_wHA!FM1j{x$A(|^PS5cs#Sx$m`LfRI5;Wg39>-!}Xe
zZU|tz8~`4qBJZD+yr=jhLN81Ikw;P>x%Q#woGJYynIM5>%YIk<A9b<+R>Ski{6FLC
zPk-}pBLTt2`H(^FU%CCB0QckB`yTK&o)F{MV1T?27&Ab={0-R$Za%L9kir1@{uX(U
z{@{Dm|8E=b9S#|L->dm|;XPd-<JrHl>MsXkf(a`B!=wK)KcezCXNCVrQGYb`pS|^O
zj&URLJai)e;n+jxh6wrjyT3)xfOOQel>kXFWH^BQ5QQ*Y9FH`@{6jt$2M-eD_}@Ft
zd&fe?nRks46dwjJkby6RR*W!Qe^0-EwG$ii@8*x(_TWw~2ry7hkYN!-0M>od!GR2I
z6Po~(_d_Hy@MtB(!nTi)1f<XeDZj0GWC$s^u?avAry(P+pdbz2Y62tx?5*t0!T!wv
zdl1*--%4TO-;;+tKGY_7D`9UDw7c^+=yyou+Dk{wG@HrXJQvkv4$a$+ejiF1+KY|h
zw>H3g(Lv%Y+Ul=*u-53mmb%vB52K+hK8nmpD<+HnRjZhXa9AQ$W8$lIzV+<-!tM*3
zi*7g0G<nM_Y0JCWH1EYNZ=WBalN*Cr1T;#S*tZA6+`DmcSX5X%wg$vRm*g9U<UeOb
zZ^E*n^-k(}ZxSeejO4W;NqbHxbz)-+C7{QwfB#qm2vo@*`7%5qvqd`;$7)c=tkG1Y
zRW<@PPmtj?vpQby(I#BUl}Raz-WcR=qTeaXrrg<lE>ZZpx<##wHE!z}=w(VKy@oZn
zbM0$?O6f9I3Ixixtz{B1neoLhxPR&{GLIPG*1jjl#kA^{q6~ab&Vx}LqGp0znV==j
zOkomYM(LL%DNm7yA%ZSPNx#anN}4Pi3EKmU8b&Fxx!h;ude|796rHo0wu=0fkTIj_
zB0$f>{ridHyVbT<=no>{R3MQy>Q(Q8$gz+Jmy6XMKGJRa%AwWmghRSQVXq0)slkwH
zmN^QdP;wl(y_(RbaTJ2sqcyc4D2-}HVep$<#Gf0<(jNI?ZG$oAhM||*+rksxKJA-;
zl$?Q5Ya9M}QK&s62{PU}Y@-0V7p}FWaSbkTXyP!FEJ{!7k{1=c@IZsgxry>h{+LLj
zMDH)rzZdBukF_|Bg`*G`>9mrfWR{IJ3huvD;CoIsTE9O|=(cP2iv}jgo63K`q#^?}
z9}E5Yh5q`6aXgTD6%;<gDW1^Qk;POMXWp#6OT~f49Z*nE+52mb<`RL1SDmhsv1rf-
ziEo9#mo=>7j9Rr+@g1m6354J1eD<bmcAuH&wq7K#g{&D>ikEDSa)t7HBmF9t5|n?Q
zv=BBUP0l8QZ`Th=O3auG(o9EO%Vl|560=|~;WJ-PfI<i2HCuz<x%*q`;DErW;^yPX
zk6k)`ZzIifoSRLgEgFemtz7D{Ffs9gsHHnmKh@~3)BPGGsGkJYEt%DRzo-;6onW=y
zyJi^bKH?*kUbX$;pMCVU29u>F%HX*g)>jRJ4n6Y({L0rOnDS44Aw~WI)Kb!gHeb<U
zJA08PdQiIwX%YI_!!_%2iefvgjbh@p^^s(LZ=n~HyCDR2yrP<na~0!9Iqi~mAG5_K
zJs~$S)$x<3Xp~w3Re=0S*=`NqhP)+#QP@5tart^qN(#7|ZIsjs?~zqza&|#$F=U?E
z4HR%hOo$s6OpxLougjXwpj@OQ-sk#gX>HSi_VRSC)X?PUMP>Oa!)5RVRhwu>{->RS
zrKgGB8exmw)>!rH4*v3edn)OSgzq>!GU{qM&gfS+$1avRK_3*VR+gVf+U`_ZwgLkR
z1}VA72$J9-E5+1&TC^^+6m3>i|6XWob2LRJpz|%A%&>y7T*XB4BmTtFoN|63r<V}|
z8r&7N=u;S|ltwEODZI9?vSMVMry--T!Uu+Q4Z2@aUaBWps2V#2?b~Hm%G6m+tbR5Z
zx~3ufah4+Rx)k)L9M^fLWW02YLlS)OU8@?)Rw^?>W0w^%GV?W$O<I?Qjbnvtgq^<Y
z%l!d&b*krgo|j!;g5u#X>SRKr)+a5wZLK`J5Vx#Gevaih>~3PuYU|c^>A<|E`br!v
zZ-lOsyfIqkc09svvOtO5|HV8yzDuP>l&(%<o#i$pu&e>(?^WpB-tnGvm!x$heKJ?2
zI6<&V&TQWhF;3>PIUk9uD>4hu0r|NkeF~Xni$Ii=ZrQ}Eg^e_WsOGqyxI<bg$q23+
z_~y7#RQ=JXX;5wqiA}<YY<aYB&kyky#3>JA`^eS}JHid|+9K2`?46iGUCuM<9g#<g
zN=Sj*qT*4Y>jJ%MV}@d-5RnSh*^zbv{2CvlTz=Tvuk*|$-*eiLSq^65bfeHiaK&_G
znIdx*OekhTu(Pwf*l_ZO$*5L;9J(h<mG7>X+jb^$;U*XrsdPl9_!hzqpFjKd6z)X0
z8spBk#R_g@^LpqE7oN|8^zBmtKs}DmI4o8XIf)z$2qS0I)|x>=9Yklzcm9oecoc=F
zxr?DDi{9fZ`v*O<5yzcMhl#(s;c`XyDT%IYiF!#}+NwezPIOv}uGAgq<GIL=Vsyah
zl!!A$Pi6aQ13-G{qTKXTv2U<_(blxk4jr<z@n!&X9^36&F_9bYI`)e_2M*|8gqFcS
z=HGY0fKFG+nGR_`(5k8H#E)_6&~tbM@Vif7WtVOX-0n=X-fk#hvQnL>V_Y!_bQx`A
zcPFHLCCmugkSC>kJpo@E;Z+o$chg;&t%x2-o8|aX0^aFx=CTpl<dFH<na1fFTcr27
z0#;ZuY&hn6WVVaBFdxflAO0zsz{cM48)-kOERgT?fC1ZEE5CJZ%_Z8EI)t7x;6k&W
zdGi3{*YD?{k>_Zdyw|oM*1Mtn#3DS_ce&dFFk7Xd{;QiUP1UCQ4mX*p0W347m&%8P
zwsk$kAtD4$E{f#)>WX*2x-_jFI=Bh*S9j$x`$T44y4c~`{4p93@pQj<`3QFY3@F6c
zcw?SeYhPFDw^4zXxT`wAo~)8iH;*p1>4A4%M=t4)Z^@&gx9x~eL|CFKpT2IL^31cr
z_1Fb)q{xace|LXB{vT6*A3Adf$cj!J{9Js0-LHp?iz$Wxba0Xi>I&Kt^~~J>Dkw<5
z|8TeGkA7c0-b+c<9ryE(;lTA(%4|m_4KJ+O(kT1VO#0QF1gXNXRU{Opg2X&@&p3R8
z&=yg7K3Q~hM-MLF=TB(-vLt&%0ZcjsQaWLRnR{*vcEPZDZnfunS1zAXt6x~U`GC?y
ze6}w5m%ccly_^Z52c_hZT#z8~V}H7MdhAR7BT$F7BrlMga)n#!Wq8{yr=gL9HdVTT
zpYfp6H0S)bJO|hQ78$E%p`!JwiHWND?go)ry0Gvf=Mr@;EvsA%GqTdhUdA}=!a7Q2
z+>+2x)x7k#(wnJC^vF65F_g$EdGy>n1KWYT8%5NvIz=i}$RH(2ChmT0NtUyPszsZw
zDZ9lv?`O|=Rln}WGi^L~`il7-$C_qCsx;dmH&K;|9&ezZ2Z|<3?p3<RguA557&%to
z>CCS&`*EK(?}Tr+G-<qET{|=`%ifk1CKc))OA^QwCqDB#I(9!1`JiUAC-VCW@l@@9
zrVPm_8kth3NrizvVZAZBkte9oko`DdRyIl`$CNwmm@MQL;t*3CWMYbeU9J-7n-Uds
zN+gAXyX_A@TZB24LNW7HGQra#5d}$|xG5IV%UNOXRAt@eMyj``JVw+VD3^{_J4T|Y
ze1`1La+#FcKtM?~a%}3StXmX>GcGJXN%P8xEsu+)NG%zZVgJ?*0i6BX?W(`q50TP(
z6?Aam^Thp|Y?N^)x`l4vNJB5yK1m*}i>{P-wqLy-Y4LaH^MM5}Hp%m`wUBX-Tsge5
z$?exldY#{qTs>#DG8Mj`#(qlwDv5&H2ABM*;WPONo+I`97D5FRKU=`+Ev&LJAf^&$
zQb|9L8$00zsGsq5c)L5)FR0Y??76QVR)u2-mNVb==-2NAb6H+#7NZ+yJ2}3?&~X&B
zqzOl-w(>o$nFmIveTi%PblEKocm0;yDZ1HT^YeQ=&Kfbi@a-!|YGRpznoJvK=(jg!
zxe$~1PJQ<|wBsV_hh2$eW3;aA*F+rIyE>c15;zrD3DAxr50<sKg@r64b~TS;!Xz-K
z;ca}|4VdTS6OtzjI0cj#^rm>ZH@k=j+&P1$S9v&07WnhjC{EKZvst)WuTw8S<rVd5
z*$ygrNu{Wur>r0|B5+^wZe>i0B3AH6yUWRy$#PQEpMO|X((k`OTPUn(w|n(#+t%3o
zZ89b_1tJKIPSV;$ST^Jd=$pf2xSNfLO^`<2g_dOG0Tsg0hhqup*OJWydVc4+85moA
z70=A6+hph+H-mwRJcK^oSK4q(ox#NN2~qA#JH*6$gnn+@3|xiWO{elQ7Tm5@`}=2k
zb-JN`XX_VcBu-R_9|_akauCwe71!imYhNp_Rscbqr)ylK)6rgfd=mA!h9lN&d%<&i
z^QG`l%iTUan;J4y`i{eMPOemtqiTYsAkl7Og4#LiKFRa6e3-pca)qv}iV$VAGnUW^
zdws_=+&H(%*^Y#WE|TWxJk3P><;E*JbIBR1f=ZecW(B3U_|avQO#SJ4Rj_E)o{lv?
z2=(|uUoK>xh<n|R30|hAc=qy~+7UM!U#DF<*k?DlJ?;J0SPSET5tDzjPZi;GM)21A
z&CleOZ_Dv#6o&#Y@Z$lQ`1<KWV%A(&7DjX#su(r{Wkw+vDDEv%lSuk|3l7Z(is6!b
z3pc%=1=17@b-D+CHKZcKB|RIDoph+~IhgS=1MTMNcd4$48!on;rUr)rqlP-=h{l<x
z?)nhs4h5u7&61B5t+Im9xbHj*E3rl@hm#{@W$A#iB9|&0!4AvTb0N|~7(%pYM?O6r
zqHp!ys&RQ#b#LTHY#&x!^d``zH~d)3Uis!ZIr)|K5;|xZ_q66ruR_ln-*<O3UCFCO
z9b`NYU&-uguK2A(lKkYEP2LK8%}qPP){!tg{Xp`wE7#RY-}JQhSY~n-XMS`n3uD~O
zolo&*F&GE*#MZ+}1EfI=_`wb<U%16l<ET(Gy2w$wr{Sl9wl|hxKP{)auy?Kb*Az(Z
z8{wpsg6(FP-gYl9ZKXA8q#5*(@og&~?|?cNTb|^wn^_pfzgVTPBq<NanBH|tu0$4i
zqWOx*u2`8t8-9yT_HKG#@Pn7IUG54$?g+;_s9%kIl{_qWjtV|2JMI*7K_I1@lbW8l
z%?@up_L!24oeHn{oM=WC4N`^oSjt*PH7rZnssfHkmga5tV9p`?oRAnm`5<zrIH#y#
zujBcmsTBjBR;mVB-3nnr_T5;Q<4{(UEqOr;`pi~&!ox3+#6(O&XF~#3`3icXT4~Sl
zKXrKbz1TyC#{+o|hBpM@fK!u`l9tk}R~Q0FL&I=EZU-if07yY{lyB&;cUln&WD+9d
z(XBDZv1G&qcKScc=Y2?){Xr2YYl#{A9HI4vax@MG4mw7BU1)ZRhy6{}?p?F&^Izq=
z2i0xfo1U?j7WO|sxh!4?{or@EO*&Y>Cn8E+v`J*vYA{;Z_8iny{6Ox#OpjKBVfdZ)
z6Y~jWUdE&yLtO+LD1yk0j`c@WkGIoX5h)APYNMTA&khO>W8Iq@Dq`s&q8&b`-f*i(
zmv?VF>pVPdUGxqxR(@cuV~8#R1O#Bc?2ba-6KwI(v5z{{zLsiOv(9kLsMr@?B;ifN
zBgV!gSi#zCc=m0M&X%aFfQLC1t9sbx*KuQI$0E^UI^Jrv6R77#X(_=W@MozG`a#<p
z<8Iu1$r#;f=0(!w7HY;()BW*n@-MEeaneI6oX+Q8mHl~J1)8R7IQ-u<E07WKn$Aa0
z_ckjg@!4*ET={agV>9<^qB;c8+M;g1&eJ~XC0h`|Ac_SKCsWeTAruQ@V8BdwiP@rw
zfoU&LJXw7RdK2Vo0eym0oub_*Zx+O%FhpsA3H+el#cV+fq{6qfKm-O7^p}_?a;hdP
z4+&ThoG=1Yw7)Q0ZgNf}aSXw2+F6hS(`GuKeK|EECP?4uM=>!lN;l0;;!T2*XQO>z
zY54}YkYqQM8V)lNjA&tCcE!1n>?bc`fi{s*X{se<gbhNmoS4|;Z(5JwayX^Z+^l=4
z#;eWCHX}1rcyQ7To^h+@?l+7ESN-}Xmgs2H7(~i;+V|t=#h3PU-VEI-8<lde*6B0j
zYy4~0-RqZa48J(9*!J!c7WA40dIm#{dKR`Ozucv{dl|PQ+ZcH8wJ&_i_+=ja4v)m}
z#&$W+?=lv2@`9}G+0F(^hjgLR6d#(4-m-^h^jhYLKOG7h!MuRkS#$-(zIX<ifb(`%
zRz_>pZh}`=eAi9z0)eobL_G$w^d8aCU|(ELWVropk459jfUsSiktAC+y_Oy6QirZO
z=aInXiLvt}6XHja<fro}jbW_Kq6`OS?xJJUV*cu&gZ#87>C33Vj-_r`jVjFuMiFx_
zn%#WWR)zrhP{DQYS(R;dUag)U3!+!4R9Nu!ENc_Ut}{;P@H(z<ppUHYW`!+UHCw9F
zk<FM;uESp%1+F!{5wbMr4NzB4Me&5oIVMM|kc`eCH$^4PA>=|6RY0c%RK3i5YRtRm
z?|-EMBC(7x)_g8jSL8>9%Mm55>pYw&F>rk|Uizcar@O0a4Vh!y8pg1%yWb<YTo^Q@
z1bxbi(PVdp@E!`!^rK%{M-f{{AiK=e?s!}fMypUvmSkN1pf5`BcME!~659fwN>*I4
z_Ca*Bk95RAob<<^mG^nhcR~<#CqrUv-r+F^f?mJ(-6oj|Cq|BUoE)RUP>u-^wJ-IN
z{_;b}yGbRpn9wfeiN;tR_qd7s{!P`3Z5J!wY^dfH@$~p=dqyn@-fyq?EK2;W31jqC
zBybCteKEn6pyr#Az>}XN#jvr5Y>|4>7nw`_Sy;&R9faTFm6|47kT&0ic^x_{IBiHL
zqJUIp;Ht<rKia9C|Lob6*+x{y;hA?RtMW^2IQWDTatZyTP#s>B60eD>sBTuT>BL{#
zYmxfbXRM%8sxKg3X#TgAq+S~vH2yr2`O3Qic59Gr7oqFjj)gyjP6#^)#dsO~m@e3R
zE}DuO;XP-a%olEeZz!et;#b*~ARIi?ZmBzHEYJ_n7Mcx-s!q}&<YVQFshx2(2?dK;
zEYdXByi?*7DEf-{1K{ZXPn)fGPXV3I{%pgd1YSr3;{)%U2r6gecBq9Y82eoD`ILO|
zbs|tlQSvioUnsh8cTcsW^>Le<ZLJxd)_#_yo-E+7dcONaHm33b6N%`hCVhcU^K+b+
zAn`^am*#}slQ8CKoyEqO&$T8Ss02lGQpXIqEcz_c7H}E^f{2;s;_c?Iq~#(<Q+eAl
z^mF24vm6Vg7<dS@)b3h!Ele!rNcq<N8R)3U&g@$EQTM?c`a?0islvWOr)PMt@&?f?
zm%eWBGW5vR^(TSU3u<DMkCmQy>!2XogG4M9vtG}7(rnB~A|F)F3VjN(BpvbQdQM@I
z^esYKXwGOznA%9>XIHQ0H0uIiL|^=c%4M)Qn6>@$Ja|onjtyadA-(idtoqGmd^=nJ
z*vdg#n-BjQ7A2DsE8Vo`c$+G01)*luQf;Iz7ib|oOaI9`#v{)#)b~PWt6{55Z$b9L
z_!Rz3@`3n%dNIX)YIBU9Q%}u@zoGKQ56XIb{lLcACSRbSNX0~U7<l0nXqWUX@O1uD
zvLjcX(1y1}X_4FqqZp;elRSBp_R?p<A~%RTFR!8~dDN0G+ah{Nzg=HDC{si$t#&qd
zZ5~Ja8(**Jzsja~rrp@Kxtw*3`|T;{nzDGIc)=J)GLno>+CK92T#FryW15<pHl?m4
zJn~iD?3h=AK5^!Iyz8`8ylTE@OH%`%5>mV+7;YnI#52Z%09Bz>FX!fq)8J#%{iQL}
z=|7S99V5fLO=>b!wg?^>6_#wPRf?w0Q!aF%-V}AY2OmtP2eppcKGSs1oNsCdtx$7`
z*|bcuh$Ko;26;*0v^eY1-ctK?@V0sJ<QR+>K2HM+2Z;G3aHx$Jw$h9#GrDF=l~My`
z__f1>CyrmW14#yoInk67j&o3s;GQ~idng6%8HxB3tIN_~#g^~)H|1lpIB@D8Jel1<
z^O2}<us%7bA4~SGLkm46sO1a?Iiz;yV{fC5aWOf-P4$O$l(0={zCwNTesgy47W*jI
z)}l!?BMbL)jY!Rxmz>+xeoXK7ICDJ$O8vy6c1(Vq5xMFbGud)oz3}ovVWk*2*Jd6b
z+SsY5EVVN&bbE#??lv&nTQ|J^f<iZU?72!&g>j_A#8pmChhGV~YQNd40;uIsofBiJ
z*J>#nv+-G<f|{RzcDX!_II$%<(efhguKNndv&dby)-WD-+Gt~oTn?xj$@T=_LcN&~
zxT>j8Q|4@O8?A(e+80{RF21X9BVEmJ7b>Y-Kl?TxADEfEc+<vh7YUB?ba>C1MT}y!
zIraKWxQ**={OWaMn|IhVMk$cDbkmp9Z^Q(-YR_7}!KM$+d><ZgyUXuv9dw-6LgjWW
z0a~PC-oahV$NLXB*~8zevZ|OE6FYE-{&XLC%5dIzB)+qR2O<t+KIiwXs%lX)eG{sX
zR-}6MG!3D@0;<JLiVL13C~UNwVBjY+@lVM~)@9PI7{A4FjaCCBKmApZ$SV&?fBE^P
zbIgo1Mfcd@gaQh=SBBzNM6y<?5p{wN%deZtLyp~o-D2~gg+2;&TZlE1zfoFDVQ^3l
z;e5lat$@LqhO4g~<?@TNcrH&<HhJzwYiiT~!t*s<j@7%w=s+{(WU*%<@R3wlj!>)}
zV|)Y)0Ozo`JyEo5K7o>2Am1+GhMzQO$%@YXXvfDjN8|7MHH%n{7IAT+%p&ZnFGU<l
z7uGM~kocfASFJhG>0-6zj&GJoek#CMH>+Zh^)LCqi21zvLpND4;SD}zn88Xt2cy|p
zkugaMd2)~fc6d=J=ZkD5G2~O!%BALK+LxC7Sc=kB!dSLAPi?S-zJS_<qaFRFWAJ3|
zg1e%x9e;ch2pbRZdq&VL_FUf4%)><N`FmtXm!(hQahLPKydt+Ht^+!<%5-kCFiZ+R
zDL<RI{966RX5R3ecpzt9?hQHJ-S@+lUwI}nOt`UJ93kkvlJOFgUvW~IQoV_$KAnA^
z6@@llLTFJa6V~4)?V>ORvDCCvyvovB8X1WRMOt{3_L^#5KVmDlV0G*>XL#p}XCv{Z
zY-aY)uH3pc*Uf1>k5e&^)PxCNl1->I5()eD8t%s9zVIyB4nHE{R|pa%()UdX>Tg@z
z`+!5_CM)b>nou%a*<~3N<AmYTZyQP)T!v}-X;66RsfW6DpkU{^DoEWgCm<w=_6M^?
z3-M>M;S|j5^`i9-e5*O1gPG%jjE-f~P;sINwVGzzsUEs|czU$uJ)38dIUBnp`7=_Z
zM6jj8jEG{5%f}vrkwx#WuG$4I8hyg%u>d{ld%c(&<*|mhTOHW7-PO>V89%e3vpUft
zrM=&|h*&)netv`%v;wmAL3&nH!0{DNlfeav(OTE{8Z$^bU>jz&E51+`qr;#*qHpB_
z@MAI&>SB33w|LlT*cfLZPyc1IAhi{IoI$RvrYI(!ZjxH8W}?1wirNp7TJ8NE3J)%i
zBuYP`dZUiiR2E_NxrC4-4&9Cn)f!QwtSD}4Nn2k*52uq)y8a;VimjzceH(ecx=$Kf
zy3I(7c^YFR<0w!BbEQg836zwrH<d(vR)Sgh+*X$lHh<A>X#cd^LsL!La=<U#Tj$Zf
zzEr_EuYK<tzY<0N((#TeS?j~F=@+c}L(lfHd6CKmROz_>hVI#<1YJ7pC<em2Ck<o+
zqbpjZ>%}Ukg=+br$q`b~gJo#r=1w+8GjG-(wzLc7PkNoT-beBth;)PVVj+Kn%tkYl
z#nuI(q&1=Ig+~{FAK7O!RaY;c`Mh}T8zg1o{k>zg={QJ;j)k=Nm}Z?|<SeI8(5%Ow
zq)%5hQ2Zlp{yyrbU&|t<!D82hrD0wx2GZv91Cf56QZ(NkAnWz63-zqmte55l7A8#w
z_8T}8!>TLLNMt5`Y@bm5S@*s?aYj_K+c-Q21V?|6$y>I;lJaHEh_rrj$!3$QZK6IK
z)-Fq!il9M4CQKRAiwAf77>F8F#o6%+uohYMixmEJL+$O1Kj`PS#OTOJ=#8m2KZv7<
z6`Up+K*}r0cp#$Ui^X31WGtA7cN8>WlR&0`A<m795;evN*XVfqSKR#!gr$n5bls|v
zXGhxW>xP(mScN4|OVvT~?LxcK0?g6F+=V1DA!SMZcXgm7xKz#VpH6RX3~q_2z8YM$
zS!-@H+P7k3T4jX@7<a6F9a@wUnjLv_^YZM8B(u~q7AXi>t02?cm*I;Ryv6c?i94#N
zx#*>hS-`O}<z2<`Y_ns;bx>a$c^B+4SOmRv$t#_8tdm*830vC}k^446*X>$4rxqd6
zciJGM)hGX}pkK4bm8Tu<x~gDItdz09k_asdkJ$Ih0QiuMna_IPzE$MOTVq_2Wctwb
zgd1xd;S_^NSiH*@5evXA>kB7ujm^R|g&iBCRZF@X_tL|ME($M>Cd<cQ$IiFZ4|Dbv
zg}kOe9;>sO;{?mNXUiZOi1F~aT_&KSZuvCv#-Q*bx79Kw4c$(m!G0CYAQs&pom*Gu
z4DlGf5(wn9KTG&h^yMHnRBl$2(V8JBmE&9J#4r!2o^>Tmo$~`#LIQ;bCjcDSe+GO<
zEN$J;r~5II#+!_qTfeOJttcN!T~Hd<`dTx>LBjavWDxk9ggTCwNTrSUF>dYP(?gac
zyL3Le3J(#@mp$XhTr+1ualLZZuZaZXTD9UDr3){G#pj2ogA?H4rGf&2w8Tnl)i=)c
zy*X+@Z?UZRGX+keeH@KhhJWGQh}LZNpG<A^EYhuncLmcewFZ^z_PwrW?#P65^}$;m
ztED2gdgHB<vfL(6Fyiuqnh<TKrr$p=Bgu<JBDtJD@zj_(-$N;`4p=%>|BNf@O2Pg%
z$aA7@c;H!;hL)>}m*~>RFE3#CRfU^gA9BnYfrh@|wi|JBf2go;Ty_sWuKaAdWKu63
zCX!)su;+9n#B}gIDTBC;3Tv*L?6NHA<w1FxcrzMV(yuvXL|N+395KHpOmFoodrY1w
zgx=jGEphSHmAXv}(4mg4w(s6Z;06ot+P^ZENJP1-{l;RHZ>z)Sp0YXW1m)oB?Sfhp
z7Y{PS7Q~`mPI5n={-jCw`VG#iF~d(elpjw3^CGuvm`EWRW18=}@prn58)H@Ys_Yq5
z!FkfpjSG}M7_+`3EEDJ@CML$hX*x(-p2%o%UrEn=<v=vu%G%;QS9f@5H^<nu`<;;~
zw^^q3NzZ(^^M?sr81*C<c$Wfi{AnJ42Wd~x>tJP;&cYs4zLfLJ$>@BhX<sBtKEf`R
zXm+hbr1&4)zn;MF>~ieo9vzv$i;uAuR_4j6)KF1n$f*#N>M6C<zL(!uJ7W1t;qGQO
zL_#1X$IrcCh*y;RwpFxx1J&X6dT~mt{r3T|##s<L<HoAMa5rhgVoaFQIjWr{YeA(N
zC?SkZE?rQRR-t3=t-a*Vr?4Q)>H<ec?p`@>rD|aj=xhqf{ILQ93jXttf>XuFg)KxR
zMHlU8jHIG(==8hGs|!w|vsh8OvjF?mnBhBtN(cmv1fKeCiEvS+T}nj<c;?^U(X=ck
zrNh$pHN0hI+q$XLFm0>}vYVAa$U{AL2ARIA3F7olN5Z6Fq+sBVK%w;B>p?hwTHEF)
zkS*{Hk>v_^L3JNAWWeX@s#J{C%_s5MI(tXCHmJJSxxin*JMDEmo5Z^>h=u#P@noZ-
zX*|VTZ^GC5mzB$-oG65f9c#(Y?|7MahGRwhFo@nF&NM$&GGI&^ibiH3HZUey_62=4
zz1rd3sq+=F<-8Kw<*?GT{iGtPGh*cKB={1+?Q=}Mxd)Q;;TkVrsXAK#(5Lh0UE1W!
z4#+zUEQqOFdInBg!AxX6vE^LrqtEtMyA$>nDftx3+qAcG+_O+G%nq}VZA{t%B|zqM
z*3IKAsLw$if;W*lQ=L)_Ut_oyVk$tW^WkITu_>pC_*V+3O{d+6)YCqIDI26y6-C2p
z_@PtWxzk<O6?DLyK=lF&O;by^ysM9r+o@Wty$Ia!4(#~o#?DdN_Gr6~f5z(@W%^NE
zKqkr0eqmroJY!Z@QiArW5YNor^Aw=kxHMXz(RT^?{O<ah*PR=sbu>3^GS?tPQyjIi
z#I~Q>{op*FL@g$``005e+e-i9)PuE}7n((I^s8zf*Q&x@#l36jjvGI47nD9>ZFZL-
zsTS8+qnROXcaC2*e=eW#`VtiTvVB-<xr(okSXaNfOHV&~aoJjFii@<r9R8rs>W8eH
zp-z?hZmokA7<PCOvkr~NrCbPvA_zJ%8qDIPK+Qktn&CL9Yp^@DefFm4jCQ0ClR7D(
z9yL~_Qg+IM%4Y<Rd-|)l(RNB%!1$=!OU=mLL2(Lbm0Ihx6lS|6d&LhDIZXxrZ(Q@U
zicH(9d^;Vn8r)ZRysc37{EzlU<}9Txt&y{^!;_OG_40KOzH3{l<1;FN)|@a#`uq8v
z_JX)>Q6}M(pszcuzm4<X4u$$+zki{S_qJIka&B$o&NMLTGiC6CBL~A5x&D^{)WPHq
zvvV(86s$ZJ5t;=zKa>D%zaY%s6{~%7LxU|)qCOII{~@fRZD%*D`&I@?qky%5O3Nk!
zGFyJol|KX>GKDy)%s_a;2ef&?Fiy=l2o)OUGEDM$7jJjfNU#B4jGEX70q$28&JxDr
zqB-ogo`!=?tx7$~Hr}LEaaKyGcyXCZr^-i$QuNRcmFdF+Y1c*mA|WDYwLqtMG6set
zit&$b`70zjfo@A)r-Fj+=%(QXag@T+DZ#h)HH*q8gm;<~XLq~A2B71yN?}C9k$!hC
zp18a9yVQR7Dcb~X;#rRP7B`GRdo(5Dju{gNQjwc9IFSMq)SwU9DdHa}g|i!6yFSBY
zjATgpNUsAI^i5XdX;nIN=w2vW_p!~Kj1+#5<9qTlD?xZNJ#TUu@lzAd+<YDUm91+c
zZ9>AzFyclH*Iwq>9xF(2x;%_WBzVw=RKluy?etTN(6|z(3|>M08^8-es}sCdPbL;E
zYdgl=;Q}{BFHTAMua?_Y1ws4IU?xdww7>ZoyZ=A7&aul5Xxp}_O4+t;+bN~IQ?_jz
zJ7wFpZQHhO+kQExJ=_oPPpsAEoTK-VU+gqwP8AF)IIj65x+)MXgRblmFMuoay>|j2
zBJJ$K)LvV^kfkm<5YCC1n4%iMHYnonTFP2{%@sK=2I3_W%e(nGPH^b;u3})Tgvxn2
zTSe+B3D;@RpE!GT5^&+8884Uuoxb>ueaW&Y7<l<fwb{KfPFwTltabOJ(kwuhyKc5K
z#IFg}JyYXs&A^{NzB*}mHFR}8L3FzX&u@Q#>)R22jR18Vk3?Fgyaiq}XZuYmQyLdh
zv`yJHfoD-|LLGYi4z)GVEuF<AloY2bfi@}-)@yn2^TlWV&gL;?fO!#?Vl&m!x?H6d
z#_taIU5UFnKkM{O)8wp2RgNM}`kHi07-m~oM2Qu?-Cl!+UV-PU&zsjeOOdg_DV@J5
zV?dX@U2f8TMhP4Ms!aqv`R6Rd4^@yT@Qij`;IV=3h3-n@??}l^K6_&M3bdto8%a^|
zSU%S52LUmw>DaF3<O7i8ME$WOp2+fr3jS94sN^eeA=;kLJ4)#?0)-D08DUaHv*#NJ
zL+8lW4rq;5Rvpz*i9R~r79(jf;lP4NNIs%pHCbGW8&cX$@N^G4*qErO`C5F84tyPx
zz}8yk90sa@4Sc`7YkDJ^?`aeH1qIHpJmm+bb^X=F*JMbluIfQ-z9iY$tlA0WCTW!$
zu1fYwyS#oF7g@V5uK^kYwczk{HCCg+LbJlEunfy>gK%X=q)NO-1H|?1K!oGDmBzf#
zU`v{dP6%sNz3tNLc^#d~*^<T_+HiRvAnzVqD%=3%2%RoV_5-O)sASGh`r@e>qr=V5
zALyomhAWjnjBmtLTmPun1cNiCOiO>0SC4D;<w=hyjSgt$(dy=MibB=ian0Z^tX3T_
zqr3m)beiBY_<hku@ceSH+qRTB*5N#y@A~sud3HaWDRx2_k|mLjJb%QfF0?|_7uXTX
zFwAI#sryI8RKHrBYWHrANKPUbbMaT(lXA8FuAwif^av~$GG-nsLa(YFPgg{}1ZN&W
zHivz!ARes>1J{TMoEb`!txl5;KKMoldb4~`U43))0%4S+g#w27yZ}wmxgMy?J4Uj)
zU5_m9i%mRw{x#g64>F#7+UV&?H=t;W?3MkO4``L)<XI4##$N4p@H0$(L#nw4PPvn@
z(%4XmSc9y~qzg5G{q%&U)kq>zF^&`szEo^gTu~(`Mt9EZ4gxQjW;r7TMK_<*Y6neF
zak`mggLGq^b0IP8@(i`sR94BzY<T65hO#=gW+QvA;H2|eq5Q&!y`Yyr3~;n-=l4RL
zyg^7)oQ0aZk`CSY<VX-`u&}bdRvJQ{NZ?J%VU<4f;7gIWy@8HF1`RcHYYfzogzrOp
zdQ5e`^BA!ldUnZ}1ih^CUe2IsD;JMgyf|zPf-o+a(}zG-hdHipik4cO?w^$85WguB
zyvO$eYQ^+Yc5_Fw;A~y36kzpe=wxitzZcm42{ql8x6rD>EnN`Pr)N`;f{d+!tzc9u
zAz4gQKfhP+#}pKF+TRBE@g&-Kp4g<M($R_TSL&yPf{SkM%6SA7#qnuF4XYfnAnt*I
z=7=}<iGGZ`JHfrxD6nvUTAMA)TozZ%&TGb2UZL5jCpZ6UBWBolb|8Mam9lLu)UD1A
zh8ngl^=fMS@y1dA{OG+A(XM2P!YwN^Dd#uHSl1UVKY;lZmqhcV-A6Iu?{qBS#Tdy+
zP8-h=N+4hCRO2(hog7lXRe5C>_FSK|Q6Jaf(@&*kZmKR^cz*m=2$rA#u5*P1b=ZI|
z`tdH0g(*Fs_?P5aE%28Pn6bP(QYKLh#9R-BsE88Uqn%X2^#L@JHHV1$tS!NUrsCwt
zmU-QZc6Z45mGtMOd<QkcA)*PT2aV)lHnxHM5K4OjSEmv;o)g*(bPu&nT$UN__m#`I
zCvSQj>4aag96p@=#?sk9U07ILrs;CS6!z~dO@I{`$@eDFH!%9@uPU#@ABHYq<KL^+
zW$#oh5`kSu@=b>05OKM;zg2$}hXO~NQ2=Yy=~52Um>5Q;+WFc)f^{5}H*g0i9L_~q
z>}citXcM$-AQAg~`F62ji)D%(<V=*%Hn+ZYR1JkPcza&h#rFD8w)AEw>EL}l>%$c)
zi+C5DeiZM#IRlLt1Fj!E!W!fJDl$5X>q#|m2Hd1-C|R`TIg)IlR*`XVQ0kRe=DS9b
zY$fP_1oJT&<4Cpg8}$*MyjM&9id0{WMG;Jk3C{DQIG83S|MGuST&J-yEAg<101?Z|
z0kvVOwa3Z(nBI%<QOU9@EcLuO?TvP{Bq~&qm>nP&p#lyZ3?!GeZrdLcAC4U~p=EVk
zJl+r*io5TQ-yu{rJQnhC<J1zCKmW$V&uIypFR5z3TDb62xY~TyWYle~vDvb?mZkjw
zm*)GHzmMIwi)|M?eF)gCp2Ws9bh30tzKc)mFEijC%v4@4;)!&#pFs@w5nZpg{aPsC
z*_o#iO$H7h(p&EadEPYE2KymEE{PMu<P|zjT{yEAO?h4)rM|&7BS^NYU3H+SX5?mG
zBVaG>!hFH4)=CMZ97#mqv9rkgb9WSKqpnKc7QO2#g@}-cF}6l;xsrn??-~pIB@Y$R
zQXS;Mbq$1icRZ7-+#QUy|3$qOF6Xh8C(wX+IS%|u)jun|f=E%hinV{l;MOMQ)?*d*
z@NGfn0(7-KPlch$u)VY2f$=>yOxvZx^NqJF>1aJVx#|<=f`ZqS+JpgRN%E!T^d2u6
zosL<6&O-$Tpp+sLS&rXY!A4p3I?hGMbQl{z^W0$FD#7g~4glo3n+MhJ_DtWH#C+g2
z;eq0cAeTk=iVn*5YoduNZjl{^(kfr))g%YnGzt}>f~}a?rqU*(``OUrXs<GJWy|LA
zLi;&mvZIX5=tt=RxGz!kRUiG;BhoMM+qF%J_^O_5#&B0_jVs65&9YUWy$>=A0*@Yh
zKT=x?CIhGG5-tcRFNuD|XH=k%=zcSE@&jX+EVYMW!dUL^WVC<znB*5~ez_88_(c~^
zcI`{LOv$F6M5(&H(0#IgM{9Sd%I|^D>e-YWxBLY^W!-g7$z-;_uJEqb4vizaF@OE4
zK4&!6$>&IYiKXq}tf&Zk6?aCs>Q`_1f$1ohwCk9Cpz`adRs=O}>@irq9`<D{W*IPP
zC|Vu=075GmA1%G|y_5yvMJ*_JE$f)J7mJuqmj@fPU}|25(YYhdlCcQ?_nauP&{<)3
z0LI%}U4Alx9;L;7dOLx)n8u*53SDed-8&ybMW171U6b)j`f^vTQ#meIf14plJ7SjE
z>(0(2Kjt{@wFG@l^^|&bkrZoXJvdN64IMuzBdchcW;wz^^Q4QTHf3dJJUy1*{mLIe
zy@)upnbGYvmG+B3{T_!BT0S=G>KBMjRW9+)gzT%=s%!Jqm8BU5LnRlkE0#dueQ{)S
zs|(@Ac(7Ly|4)^x@T9jPM<&tcmqzN{T)+48j=@4Mv+cXOog(MSE@@Rp04xx~#$%vA
zp3{XrlW(h$+9`%h7@9?8i33q^KU+TcGhO!=y^rkD-L%{M*RpOcec%ht*USEMgY*Y7
z=XSijDQ7Zbd@*F9wOkZHS{p8QL5?9#&^-e650@(n0e6nqo@oJMZ6>Qv+`K$fA_vAr
zWmM@CV9{5HR;dG6_X=nC`~>Xe*nfn#tx&Hbvm8-Ld~nRQgN#jd?Y%1{kIOv<o(7wd
ztFLg=)ff~#q~Loq3cM&#RK*g6)~IOYaldBv2P1s!#y?SfYs=AczMIVjT2IQQ68A(B
zZ}9Yem^y=be^2JSpUG$4n2ig3bUc2NHqH_anCBPFR;(eZ#OKKdpaCWJpvJ#=u1=V!
zo^jjC^pk&c7omJV5vHTrUW&`oSj}-!b?H6uSSUh#c}BCiH>!F?AkCiWZ~fR%oAbv>
z`eyp!^WC(-a8=e2-L>J^RL9KUB7U<}7$AZsiZO60@jY2^+{}^F5AC(gu_x#Z$_YFN
z+X6k7*v`51%)I0G#Z{0zu*Cm9PIq_9e`G9dZ?In!u47;WZxZ%WsUTOTm0eZFyCS<2
zbj4H>GgX(6rM4MQMx6#-TDzZf6rR4CpXl^ZbMSm@GrC$#*Z(5imM#2*Nq$TJi3`TX
z#lf7cd;2f<q9O4|QbRpC=@u*($H~=}(Ztr-f$=|}2cw~_m8}h<z7wM;BOqD%?jLyL
zoa}xFrt~ia`d@1He}q6ARo#`8ma&1+zV3`L%tIY``49YNxU@K8cAQxyLSj%kepq70
zgdF-SLCQ!$zWOEt;z=N2`W#4DLh9Ooi2WcUgHi@@6i_SKWy^+A*km2I59W$&wc;2~
z1^F)tS&t_&Jg?igpEbL-NufP?fqrC?#Wk{;AAK$i4+wBiHw~Y=ebeObro3OKd7@gc
z+G&jgxx?;5Nv86LG7ZKM4#1#))W?u&e~04y9Sh1nsu9C|=cX2)O0~{u9kEzkEEX!c
zGjv28xr9QVQD3xCa?C=CXega+?Re0EQL^58luWXoWDyyuCd&Iw?p7%^&|IBGGDup_
zqJm6B3JENkGEy>9Hs0!KG-O&PhCIl~S~^N9RHx~ya4~$jh4Gdwgvo$)SHz0gN7jm*
z14TLnGZe`HwKnpGR2Uj)fL)uZCI^P1BZ{;u%M?JnD>^}Jg5(%#8j?Cd*C$qzkrN_P
zz?v$()v#{-96F-8U}kFy%s#1E?WJKriB@zhX*Ne(69PUcJv3y?&dauQdXL1~DRH~-
zY`GX@MgXQivNo_XpB|oFo-j%53*-eyF*QfR5Jfw1+a?=yxwZ9wtO-jl2G(F2<pd$o
z(-*!iG_s8NqcqlOeUVh9MT(u+sgo*+48mIT>lx82wei3y{35XeLN!@qL1xwwW4Fq#
zPDa^*JGYVulFOnXI5|`iaGjK1m`_@dj87*?lY86eA4kLM+Uy6=+Aq=T?Pf+E9Ds$T
zBHe1rbN_VB5m}<gU(wElf)%QhiWRZ!!Z18GfTVtms$z@iuT*kleyLX|ljViL*YjmI
zQ-o#j&;S#`gURaxx<7vuN=NegscAhBs$2!Y%{a{gfB*yroW%6l!=aSa07*0-#elD&
z@YFo6kSVJvTWe-EjjE5g37n6GJ>4DCTgU8nVo0`jRPLpvB)>Azd>RFNb%9*!Tp`Fx
zY%#`M_U5R_hiuvqYveN0>$AB7ldX9(-d0D2f!{e~5X?3}T|*q+t^*6+>+wK|h@#DJ
zQ2y~fGQ6pQUvBYET-FkfAW<TM9jojM_IpN(h;Ti(9ZxG&{766SV}AIawkx_`jwb&2
zED3fXy|xhz^>2baWelGwamK$dP(M{_BCn%_GL!ipgBJ`o-E<UjiKqMx7r7x0)4Ig1
zMx`q@$u#^847|&38-mIyhpA^l%`4>fl^YhtU-Nm~$$5n`y}<bw>y(~B)oH%g>-yoj
zwI95HiE&_afSGDd#336NgHvrn@M~A>lr?Iw3!E*lt1TLf&2knqMXQZBM{7_!m&sJ*
zq4R7G%7*5Y(q3bDnOW~|*jv$5uD*!i455~m-{q|naND?=Od1!CJENko2MS-XFU3S?
z3$eYjg>26>7j&osyk9lfwH6hF@sr#KV)|<yluUR&7)ifOMJ0)PL8>rKTDMga1Keq$
z1EIl}^$$9Pcrc&9tZPs6pGa+56l-UVa*}$@3QO>~jotn0kc#Tue>QE1?f|}8%&m~k
z8y37kAnA<og>OeJV_I}l9zR`Il%TQBK)vAaMv2IlbXUTh*6~^tPCe6SaE>>ik2@Nj
z3M8!iHP82lY2H4^O2oqA&pR%gGXF5e(au#o>NkxD9dXAQP_z)?TdjkrWxJQx?yro{
zKg)Q#FZ&C~){~M?xVN%yyhkb9F^CiXSWvTcK$xu<v_@`^!bno1-a*Z1XP4LYbCTT_
z;iIn|Q^K=`oKhq7!}l?w$fPDTPV7kd%S?0pSlWWCR^tkY&;hq8z)6*eCjw6{{#G!?
zFInz{<hHJ7=3V;)=)kP^PH1!4gIU+u=k}ld!u_#?jyXTDz#W4we-v~SNYjz9g2
zfw?d=)`X26TGYV?Z8cRTlEu|5=dipeI^mm|e@2QL$k?FRo>vaurR)G&+R&;>F_eL7
zD{Jw&idU=Mlmt5YoLlhXtTPXg`Gj~3oi(lDo3l-*Ng_xI!dbs`R1JQhvZ-<|v(F(O
zOenmRi6IWBt#kVq)=z;wP%;6MAZK6Afm&5;Vp;G`yy6qW)w`TdYrbC`QyXfq*C5`g
z+&y*l=PvE*WpwJw<WM$&S^xS`ILU+w?-^M=O5$i8>ZPPs5Bf(JJ;58f2j8t}g95(5
zs(2sG{<Voa4#Jo9bHDio(Mc4NvbxYet}lKYV`x?d!^j4<)!``#VfwQ~_fIJi0IAN)
zXlP_6t(4)-5ZNEE3H(iRy199Myy;5Y3zEXGrOKapQxq;2p)gMw=1T#{>YZHb<0@1Z
zJ3nR~{}g`z_H0z|2imP1BJJy@$XL!~4@85#BArpsf6o|z-$8S54g0BJk7}ZhtkMZv
zzPiIXH0r6M#gH%2h3U44iXCtC0kzREwBsXn1RPFj-o=+V#x!xz&tYBD)OQoG6=Q|z
zABfVNb@ghY+;0_SG+m@EJXBmXq%3VLle;D-3@{*}r=C@;Q-zlM1?L_k?5aJmg7cfw
zUz1hg?K=1$OMb0ll>g?1-ak2Off~FUPsNAdCB4D;+<G1F7Av1{6Ek8j2h#i9wGCT~
z?IyrmDRW;i8pr#&Xy5T-fiUXL;!I<@vj2V<wBxVkC%-;^q?$tKNXkrd4itv!^l6_i
zyXkpD)xTJ(KU8J^&Bha`mlM5<0EBXN4t&ys*DPgyJVkgM(vth=)JuCJ+!k@M9SfR^
zva=W2eXMmBT>IRh{F}$=2COFR*h<zwzN+_WynCPu_xY`_iklUmb9Zn93Ij^q#ahb#
zsWy8Kn%uTqGB`K4faupmHSoy<j$~^&{t8afn;eo)cJ`)b<lI=LUvw3IZ&&26z7fJ_
z=^0CT0$$;4kzbYvW%Q5`C>0>g$)Q7Ywd6xDQx5XN>IB;vRlJdN3#1y>q~fZmv@TmP
zr}xW+UANrFt);Za5CmB|V|qbad{hA*QM#|>;$zSiql)M3LlOuO)QTtAa(V6N>3v-1
zpM*-*hX4t%v3-O6k$*yO?nWXDRU<$>CgZ?pYNV%YMh}XBEIWKe_#mAqVv-SP!392-
zEL8@mo-_g{-0m-PfxWB{O%ATAAJ93n`;mn9$MwP`J2GOqVB(0iU;Pp3stQJGPS@CM
zxSb9)s<bhR2Va+Oz!7E+tqS>Xk_Kg@Mt5DS-Qe7#zu%e_uZ#<?fLr}LmO0p;ABRAY
z-K^BI1?LE*rG|mbn2&olOzZVb<irtk5o}-NwYQ?Bt@tE;U=D9Lb>BM2Xg<q+YsNv!
zK_(ImH2>@6yR6?f=X|u?PgnzbuYg$5qGqv^YLzHvA>~|Qa4{H+XxTwt3Hf;x8aeuB
zl%SjzF;DFlAf(rW+ksp8*;~tWSKUPZha08I7<95?^iYFP@TvIL;FGK$b}VX%J!mW_
zwNL-G{zMuK5Idb}iyd1n9p-^Ci4KLOmo=OI?S4?vyR%a3@+lUN*m%Rn?Jty45ND3M
z8}ifOeJ$ixWHX6r2gc<|R{^`$anxCi2qIpdvvEx{Jt`)Y1;ZaV(W&iYdaiGZ2_gV7
zSOAeK8)Bs>W6mRk+P->|n_^vEb^N{Hpb&!@jPYCu@aDlRhtulwCkZn5SFojbalMO+
zedKD6uhv^Ei`~DH<ZghE0b1_zSgQ2u&)T_-iU&3kmE+vEv@(mQ9$%P}9~!WMW2*C<
zzb|&jlyTS-=ErD^l`jw2MQfweGB>w?`%$sk%Tj&tN<Jb3>$&l83}5amM-!Kj9xN*s
z_K|JPK%6%-M_*!oZ(Sdc9f<{NHdJotX235KE1)rTljcs8>HexKUsuPH;8R=d;B=)P
zDADC3N`IFR*G~~Uf~f}l`Q~QLp&j^|i;8&cem!us8Cr7KWP#e7cd`x4+`sxo+9qQ$
zM<Xl>2**tg>9Y8ObV7H-mM`kxT~OOi-=&dFz#aRZ2knp_+=7Y&p6dOnWe_udNj5R6
zv`^(yPqgYEr`sI~@8AUsjA-X*kMNLZXSCT)!)BTHOq^!{30?4?LB8o@(fgG7wjSyI
zdbBSR`znPHBR@e<YjTFlmreCH+fz+<IU+I|Bc6S7K0$}f@j|PaJ$rSt!$<bQnWzhb
zfVg&*r^5G%%k6Sd@;+K7YFkKfmc5u9y={9rT2`1b=|2DsHv(^03@Cm?8)A~2VqQNq
z#*IRiU&E~LybH;DV@PIb{%maB9cfxu_Gt!<zt-Of#q7o*2C71@xqjW@Q||sPz5L_)
zyNb9`6dniN(#`Z@0c@su>aC?3Y8~mLOpD3Xu1SOfpa3vUuQ-=!xkQqxMBOj(7-O+E
z;NhM0DV)8fHmuCw7md$H{q=!Q$m`|y|3d)&GsFA`0bpfe;{HF(+dp5)f0;KaWq_oN
zQX(CAF`S{TwY5H@nY*2tu}!j&7`R?C69_oOPc=sMWM5ox>SR3-aL8mE5O9TmW6^)r
zM*m|h%5;ZTLtAcgZlqT(lvi3q`J)&)<Q`(iHZ*`NiaMxnpYu;2jAooAp9<FQ>B@Oe
zcArB6Rml=U9%VnVvp9g|Jt}L!7ApBL<Q9KH65P?Dn1g*a`M&M?T`hPSeI=6V_@rZb
z*~m##WQr(Wr~q7L(5SzFe_q_zPHw44zo_tHks-*73x0~pR;?yU%H@~Er{<6q$<(^6
zar{B?&`<q|-6+-AvpLUB#>U`fDWq30kF{JY7jHU|a>ZsF418Id6zG+c_9FTD>G~o%
zN7%$$3A5U<D9CapR_wms%v-7CL)vFv2n+zaHFWDfHvy}Nd4=;yKKnD10$yH&Az5YS
zw4UAVd()Tc?L!f7HM<ws7l5lD^y8a-KQTnXs<g0LofpsL%eO-iG*Ig|hYjs75Vji`
zBU4$OFB+2HWwLL^2C%2%i&vg%Sa_q#vJ6u~C+tjq)<>jHPw43w>FDvL9!B8)i~NUT
z_g3g(Faf6~But1|Q?Umt40KGzS<6#7Q<DE-05~Sdtclp;ZcOtj_7fUIneM6T!*u#u
zDW?-)Cj9jY_QpE;5G<Wol;V0Gto~S@CXo9*55{=dnkG!Fe`^id9)8@LrC>*?Ph_aJ
zmQ?UxcxWkkmI_{R7Z#5eRY&?d8<e+Twt9QnZUM7_?aK=~tDRq~@0G_x0<QJbeFEPX
znrqKlm$Xf~&-a(ErQIUmkDma<8@!uX?T$=kRz*ej8RH$wJ_cVnng-xt*NlFQNJu~X
zFn&}w90&ZD`$z<FagZ02)Beo;^s|poa?6pb@?P3uQ}>fuS@{piF2>TB-d#6!1=p2*
z5a6%jB8Cu3#S!71-y_fVAp<sZsOVOIWtm_;=sOTnr``i*M>)CHbr-*K;Uu`E;xH4-
zbN2sgAY7%;kX-@-+@O3rOFj2OO795~%y}P69sfoz)&7>HoOHH>+X^7{(Ak4i%$+eB
zWle1;uBnDssYxECN{4nzJ;XH&q-cSRbONq&MS0OfLXX7p;G&Gr<$Ln$$T_LJ<`sY*
zEYyizks4vD*KI?*O+fV{7;**pCv&e2oO3zilHoj4;6`fnA(PJPB~EgOZknW6vCWZs
zq<Wv`HFIk%ansGQj<K5Udf9D&LnxM!bLN*p;k@=EFKUYT8GbHFb|u^Dc6jXml>k0(
zdozaWyx+e5DBpB8n#EQ3l+{cpJ8AJR8b8W^@Joh+jO=Lm@yV^UX$>sTCGm)oD8u-8
z_XE8OW*-)hepYK`kXhIe4<dC`w07E9w7Qv(D`y)j(+v(PVjulXJJE*BgGKmbSj?vr
zBF!W!0@Gc}{3N99EjF&*XIe=FdkmbFz8knbhkhaH@`8H3$kUF&GiAGw!|dPSH(Uk*
zH2lp6bU<@K1rDKfcKvy$i-bYT$rqy^9_t6o2-SZTqfpErtX+!(hxDyZR3rR^xPcH%
zfd@f@(xUDZH;kK&$ugNih1@$6(&>5R$d;(6_5pS4HA#W-b=o9F=pQxS69Y;qqQD0c
zbs9zxuVMZ4s)@3$ZJ6gH^k3Ig-a-1Ejh|x6Vrr5~|L+&Vn+Ysf?Z`7srzTjVA`rOl
z>sP}`%&O|nf3Em|jSSleLjYYRy#|y?`cc`D?ZPNA)*~6S1)Y#SK&06SX!S0Ew;94_
z_?o;`*tMB=P*34mF{kCkB?HM(gV{5q9SmXS?t5$T9G;913_4}-WVB06E0Z8+WOQ|1
zGgFunNFqf0TBs!a3hc6m9Hg@A(QvK*?M5%C>Mw5b5Ge7YnwCe@C<Q6?pc(cElBYJf
z)*VN==<9AlS&Xl>g4RD&6$MG=2d2Qa(G1xIsp#$vZx;dA{BJI6?7%y%Di<7gO`@xn
zAOb6HiJ2Ym6-bp|DA`a(MA*bG{@`f`St{rw3>NN@d<r9@oaw~L)hpok2E}QzWK|p}
z>5m0dZ(uLeY6{z<1!TS;3V8W2xiSgw^@S(K`G$((<aFc+Jpe=N!)NL*wk3uS<9(q<
zFF1d2Jib%rR5=}c0-z+G<hN)3Eqli6tKkJ@9Nr!S5<JnpJ8lMp`AibNd8t`3h^=G^
zT*V4Zd2f6+OaO6Ov5ZvxRg6(1x@tzVqRU7DpJ`0(^1ygBnf@pNS5YExCuIG)LT%i9
zExJ-Sz0n#9oBe~FC4$R~9b{OGTU}eRc(Z4Bj}EsE3y2mH2wcZMZcl?jtOdXD+$YOe
z2g+!!lN>Jgf}6pV!5w`=d4C`Tm+|Hu=mu`&;gvKbq)5w>_ozx-nCy#-Km{JrtmO4{
z!65W}8TISr^iYnE{DQ252CRA&_4sIEUQi19ceW}Tix`;UaF-t<M+(t;!Tv^HDPan#
z|6JX5{c+7-4jgjCpARSi&8JQy;JW&TY(LD%*m{-J$s1LJi-II-mZII>%b7FcF)M9K
zK}T4YsOa_~?+in%0N3>x!I9cSF)Ynhv1JiP+b;bh&A)z-Nj54-yT>EH)LhP6$4dcg
z9D|!|z;q#rzOB}Euy9@oOWi+VM1n2t6@obD%C^ta0POV{NxWtryq5EI%XdM<mU&~q
z2d~%jcwD1xgAHxofpwero6x-Oy1zPpHKmf+N#{-!H4J6PF8jM}%W}Q!lJDmx!8Jis
zKJ^bK#Tox2QG<r_^OC)p3GJIfD0NgxX<@;Oq8#PL(w2eT#VBQcO|0F?Zb~{`35tSh
zzgqF1kR(uhtPz3$U;{xg?EMXHF+2Ne$zo77{L~^*d6fRN9eY@P$@W<;G++OKD{+Xq
ziMU_B2`BL>PXDd|s&v%r+t!eN4lr+4<CnsmDUi+N@q;7s@5T+Dx05=LCNHdwA+VJI
zNX(0SR>5hAs=~46?VDfjW*r$8C583Br>DVK06{!`Q&-YK(V1-8-qjVPA=eksU){On
zH)jKMp<6N|3UE;5_Ck^(h&4w{obnWK{coxEBp#4?J>zKm9PGGH-gleIORsyi-PZ3`
zZ@bxbTU8vPw}Q@zWo_}aGnjEP{MNUq1z<b0Hu9GK*6FSo9&y4lDK!nxTHtNwBDcYI
z0BM8I?eSz!IN-?l{}ACeWHRtzJZ3(F(|G2$xbDWUxHJzrbHnb65tWHX6ERK)GLq9N
z6I8Ap;7S?aga+iQv}<lhiyjF))i3i6=)~0s4RfTeO;GMo@n?|aE8apop!`O!zBa`0
z^h(i;PlXP$vNu(*pc}Z`imZJ{TvTOi27)zA;z(l=8jwb%mA4lPE!x}|wn@veHo1mg
z{$WYbNcG4lxmfT!26r+vA9{VR#eBlL$97j<=e|t!%{B56#a@MpZsQ)E`84-f2WP=r
zw}%Sf*NZy$N|7C+4f!Y@Oto2{(%)LO>1K<3EBwpQjV3k_Lu~{tdktpAH|>*t4CDvU
z>ib7!ChzgfX+^qo`3{=bY!{|H9Fn{67Oj5dDahSI^NR)JKeCqb4yHbw2EO#2-NUQ^
zMKwLoz^CBzV(kxY7IH3K^JcM<fAn_PddpZ_dyCDlvNu|8a#XuUqp@3?^~b7y>)}v^
ze52{o>=@;vQ+mB;p_8Ux?pSgv0r$O>`uUsNpVG49m>^YQ7<(I=I9gn;2|BJ0!K=Fq
z$eTv{LPO?*aHKMjkFPgk`Vg<_mI!F7n2yuoPJ_@S_WPyxo~{|G%d5g{H(C^n5jV(&
z&|j1$@?)`TJ(ALGTW!4yILMf+aYg&5BH(3zbrkupR=S3|5O!RBXf5Qf12d&L5emB=
zJ^WkFc37|w^=pvlWYg>7qlBpsj4#H=cB|vqL7xoHXCRWmUMh+GC9>fu<+OZY!xAbw
zx&e~F#DGLVJ&R=DvAF>rj|oiXwqQ8(<bxp>!sTBYuBrkLD3#2;uE|e&Kq(vGycQ)h
zflqmI>$k@&-)w^x-IPo{a7^UvGH39ZU#8%j+8kO)awV>lijeH<>?c*bGn<=pk=dHL
zRP~Q89G3D1Li;eaD|VrZY%CS5lt%0q`~a2#A4hjH_l_p&8?%3<#2rUn?3YVdhyKTM
zekJ<)oSLYE4|z^2;9g(_Viuuc;eiQrR;(B0NTqGp^(g?bOkal`;Q5VMk9;L_q%UNn
zPvbB3dYD(!s0VX&Z;E8?rU%GWxVKG{D$QL&a-3U`_h64Q_Z9au#)#AJ^;U%|cXDRQ
zB|GTz3bo})0hwNVIj-Ar#ee$HhCN2mC4F0j;#5<5ZSd+CYz;g@dLrP-1MdyPcgn*{
z0v#sr`?vVW70IeF5PJ2pvL<RiBX5*3Z?t?}gAl5A2h_GF2v;-uxAvwq_-An+V;F5|
zZzKoBHHXE#bFVzF9(F-T@|M8}pwnhz!`aX|)3w$?<uheiQb7p(P13=3R8D@`p36(5
zz0<^WxTaoM`{c03Y9~C$E*pc>hs@sht+YX+DyObV{M1bx7_rBOvdO=~$YN#sM*~U5
z-@FmG$|HOGlfVmlrT$|t_Nhp*Iob<W@Y9pKpXe&OasDvRa!W&lH_`|NTb2VAfG0_z
z|FuhbR9;L~pln*CTYPw=3VobV{v{W`qN%WtFc=dZH$tUVXc(E#8G)UD{PRl=!A>sw
zcjvSIdSLn<P<@lfM*olK2#j01RIRUL-;@hG)${CX6+)(@?cg8&9*I>EA_l1=#!m`#
z=OPzJSUkUZ2-?Ya6uEmYKo<obqS?(Y0^Gxs4V;yAEe9U(Y_Wv#<ywW8tM-;y2gubv
zspF_fKn_428EKnrEyvjjGd%At-}ZiRqs7)BHxc~{+{GrhvsXn@h#Wc~o3)$|Lk)M}
zH%Fpqi6ZPexfu$hvVIQ=;x7r?VMn|gOgf>>f4;29wdnB-qIc6rNc|IKs3>MgZ6wa0
zKb*(laga8-%DoqgdTrwtvji8#wNJCgC;nJY$eV25{((*qU$bK#{0@Sk>UxoT7|G*e
z;XgD7R2jk@61X&%1bO`dd&0TV?K2-Jd!-u=PSB4yQrrC&<auQAb7~HZ?;Nq6-nyXU
z#9JRD*hZZLW!c!8-I~Sv72~^VtGosKoKMT-+;S@P<uSW!b&%T|?=kxGx<3;&&-yoO
z;d^E{jmIGWgH5T@0|{>tY`2VIzWF#=ZL3*4@R>R4$Ct}7K8yTtR{fvOZc*Kb%M6F9
z(7Q}TZZD8KopDmD<_&g4_a%i|Hl>xkfG}mNOSQ6bTyr6`;Sf4_sPg@^(?-C|ay|pC
zlv-6g{kA6YbMcV8z~*M6DY~(f>)~$Dj-bn-apRj3Db{>^V}o|%OqJKSuFGLnrZ-F<
z5H=SHPnu{tPPNz7cFvk^X>LaVdludb=!9%h?oc-tj^l;nh46krfie6y3lQqRnHR-t
z^tF)y{jbuA1Ivv%>mI^;=*oZv_9vd*%zoa-#)ah$m3{7;ora&Vek}Lg!r?vrTZU4d
zUxafE=T|MrDW906u<QhKyirphGS})LFatb{Fx0A3j`~iUbI<5fy)gGh@@1OOO*bly
zZxJGoqza+|sF+avMNUU)HxRq05}0m(Xu7cdfZAU9J`d-lMCJL6%mT~mz(9>1!gj$V
zKC^y0AwPEMupTMt;hiR5jW6c_9Ug4Gm9RpzuhEa-!9?f?s_htBt_I*0A-zxrE=`h^
z;|Cf3TjMS7SUv<^){J&ET4KvxTx8;B$7=nIVvmVU*1jXf;QEk&`Fg<qmPtBzKUQuK
zEoH7VjJ+wYQD86Q%w(gr;?XyA!<i?Dw~C^oCt=_XK&@12_naI8;ZiQOo^`lh?{iss
z0o;;l>ik$#Zr5*iDGl8#3@fe!dIG<AjV`1N+Mf$e72`ydG$;0YD?AiIZklntkIb4C
zjI*mLSE-E-c5YV$uikzuI7$~{MaKt1Z@fsh_b*%9@X5t<7oH@DUD#kM((<U0_h2sI
z*WNJ-tLTeg$?lAsX+&lP{aO321Q#p>Onfp*Y?K3vktuXCvy95|^zR#iaqqX<tO=*u
zvU{p{OJ8|oq2m(#P*H;qJFkmUty1@|7tga98d344PzgtEV+vv=_|j(5QpgDiUps63
zq0|LKITW34wt3X5+oN&i2yXX+F?IACuGu+^rBgCL{mCbp8Q38}eO0Nx#FiHhJ(g=2
zQtopaB<a3LA*p8>%WnyRW(5TBkmwl3#=txz>Y19Q6uHr^ExbITN+=jOaL=c?;_FRb
z@4SAs1FJMLj)@Z+C_f^pCu^r!PrOQntAVVDsA%{f8n`9F?Af^$mA>IY4*4v2VUrUq
zzSO+G-;tD8{Nd_u=WE|(RVRXT3D)3(Pt#suzya0jU&E^zfM-FVr|kPTPxgDqr-g{|
z#6@@3^k+6KObg|C+HbCE?QUk72zRE@Jw!$QLe&`F>em;>B6k2J0s7rNu+Bm|)0)pF
z{x^)<9zf&%&tBNLlvMb*o2;dU+<V%)h}}he6^F~-vQfeK+fE9UHAZfx9E5Amt<k0X
z*^;&IgY$gv8IvH;y5@SQfXMD=x8vx$*`CMJM&>(Omx!l$8Bl-{mAHJssH#38oi;};
zHuR5SPH#Agr6gya#SYm5MQm$kIbKNmh4Fo*-%hADRMu+XPP^7U6HCI!%|8y+(?{Nz
z{G;fn`rrwPCs&Si@o=_)a#})x%35pgWbO0qYyL1=y!ab%&NJ+V&$}2OAASMx#ow-T
z?+CnQd^^iA5sq|vQsX1dRr_SNDea9EbNS$!Jv0(B`gj54JJk5LX;a+bTR3fLS&yj*
zH$F1RXsynSCw}iPM~QE0&P4Bm2S37#*vfi{7;w3}k%nV-wC;Dt@d_4HmHuIe4byUS
z<f@y6*d-0Tj9jsv3~AjvPCTS>D@l5fr6PXm$)gqEV!G%?>Gt#ddk)w)y6`>oewU#b
zIk=CfFTEAe+}ju3lc5kpam9i#>d~JQ@i^4(^M3WfzTtLH`jGL4NJ+2}Urz>c>XP?;
zuK{MVSYgf3bO!%iY{+edxjE=f%uhT7r$p@0<g*42VfJ9;X&-g1+)D_{dTSfkA84B~
zg}#rc!OH#kP8<a^Q?nCOh_@Tbk65V<ygSOr=qSUhFYa;I37NrLJ@_15Y2e~&is5)m
z;Uto^C$8(WBIJPkDjd~zfMx~;&vCg!c=p6#qgb<D$)JrsXWFiu)TCmRWQC=9t+JPW
zf1CnKbngFtRn-gq73*oX`a<Jy@+=u*oF$nlx9%rs18fORy=u_il#ad?I58!VnaxJQ
zSrOR?QT$Zzj*_9^5AisbJA;{fE#UK(lN^tYQ$WtNS3qy;kKQb473PgbUSg~f9Guuu
zo!aBTlUvtlh2n%6ne-AG0`olacOv1jgPaH6!^0;K=XVLGr&)>k<Yi$rlU<HcMYGwa
z{3I~eZ>7e_mqh$vkdT^*<A}lu854FCmuqsn7-;2NbKD3{)|t2Paq*ok00ej*ffLSJ
zR8<y@aG!TF8XT`B6f$nRW54e&{MOB>Tyf^}GT;yWe5MV-u%||_>&tyglXDuj4PXHx
z#8jG1ZmH5|*6ZZT+WL3Vun_Sxpt;;=mJ3JWmu~?d%BD48dQD_VQ}d2YQ&QhG?m^9`
zf{{5-_#3vr@FDZ(OVSH$7id!U^FMt%$SVS83`+;0AMH@3-0|$>c)sB$@cChmBHum%
zn1BMrKZ+)e?P9PK1`WVp_VR*+*bhL)Ma=A-b1i2KFpJUcuTGBfeQp-P$f6-Ah~F$}
zi%tT20-x)%)fTjKuBxH8=DD{usn6x`^#rAr<^uJn)@fs3MgfGU<WX7W?P6Iodvg7X
z#HPD{LBrsGrS3M5A_jDLF^P}@I#wl!@>yMtMNP3B;oUo;;K^1O){eZ@)KY-@Q`2u)
zQf5#lwf6G0v-a})k^of}uo0}SOW6^cB$jP-fSui(1B>QZr;2@P?Q7{b5dk_EVkULF
zNvXYNYmAgqIA7lW+}xuF4dUqQDEGThOZZy1b!Uyi{*%!4B;*HRIXPL4ZnHH(u*kfl
z{RkszL&H%O8^Uc2Sy<Rc0vgD6!`U@r^Y)N%-3PC)$q61l+#iU$)b=m-`MuQ|StEMR
z;rLOc@XVVoI{A63$x)fXnNo&RAEo1YHvC*-#x!3D4=KiCnmdC<8JM;0!}lS<=5{wv
zNl}5<e)o{cYpRJmj*cv)Rgb4lFt@L(wC}m_C_sie><nJl2nyMtc?<jvZYq*lBBl{E
zP0NNAff+!Bprw#>y@7LmeA)P8kEo|3zoW;Y0BY?eXvE*g2U-6M7Emq9j?g!nZNM<N
z%H9JSCleIyo(M;=CwOGgEl&MDBp+Mi9SCiA-v0Y$7LZ)V7suKFzHXM^k?4wu%iT#U
zuJSs5^~=2CuGsJMr3-j76H-bRS%57$w!%yi_t(5-IO29Ylq^$1_(w(AhBxaW+z0AZ
z|ND*HRI1-Q=UrK8wM`WLx>8+W*b$r>_>||;mB+02GQv)KgOpr+l;TW8|M9|$Vz5R@
zKt~PP&kIRp(`r1B*`DE(u~h>u+cu>kR}AFJC|;Xa<h9fD;VU3^Ogsu(nTQ)mFut<*
zCaE1rm_-@Ru3yyRZ~@&`BPF#p1KAHiEj>Q({F)2aDquTl2bZ7~Qy^!s_<DdmJ~?|s
zU3*)}{VW1-I|WzU^k&wD{?bl~F{QoJJ!9RKWJM;>j#?TTWgiiL{AmL~`+}#tJksqU
z<a!y`wP*V4a0uL9c_wtY@BU`A>AH&RaBe+u_9{f->x;GbEvSCNmN$lUPZ4tAGw5#7
z{+1VO^f?BxAHQ0-M1qw}+7Y?!uvYL1mKGQt6RU<vvYI$5*cuU_e7fT9>;P03T?lx`
z@UIkCmqyd~e;~p<Vx|0l4oaB+J^%dYqQt?@@&7JL|JqglV^Ne+kOD|4Cs*Nse<xSt
z{`Xq+ziSBouR%Fe)m;m1x$eqdukDvmezS7k)L;8y@Z{sT0W9QS$Y`ocXpms~eH80N
zH04&T?EPI-=QSZjhDd?4dU>L#@n&pT$?YYx$9E$J26?LGw=v1C9!$)t+wF|qA9DAQ
zo2F+ArEgu;Wn>Xzg5o5xz!mq32eqr(A@khi@iz1MLC&Z?yHKXQY$k=aq=TrMkW<Ne
zJ{E(KkzZ~{=t}TCr$4bvMfZ+Q+nF3Rg&SzN$d>d!`k)c!kESv&Yl!%$G#Up5`+CO(
zImoCs1e3l{k7{Tf!fB{D^uzl7YM6o(_ZSWER3HYy#LE3a-=nm#fY@F13>;Kzy|gS$
zR6KtA3Po-V5+N&lhbY)BR=Z6(hgF)Lm|~Fag8>yz(aMz?c+DQ6JZuxd)2Evs*|(@x
z6zh+c`hA+@pV%fWtYND?bf#LV)DxBwob@58V-Y4QOg0g$tU>msMa+i(Oi~6Wc>g3)
zeG_^^td>}a|Ljq|K=tttNY>a}eLif)p}^FE3ezNJ*i`Nabi>I2R+ohrB^;(9Kc5ew
zI-$DmY*|77gm?(aY7J4f4<l?ncO4FZ3Yq5!gE1}_wCj{b!(#E$d`0_P@U!6DcenMK
zb?{oys>=#Wd!!3jkGar%Pcwv$2l-xNHv$Zylg~{;?@%ux@Jo#Jq4~W~ck>x8CE%T6
z)DVy2a<?YwIk~X?l5Bp|U<WVY-OM)5dPXL=u?9T^j^rWZ&i>l_ci|1Q<#V`G;1Gz+
zi4_W88M&YCw3a}pLOkZr*_=@s08!f(W&fP39|a394=?QAU+F(%Pp5*u;%0xx|CH~_
zSmA;FGLn=-2A({&W^x%};TV~Q)*l)bR;U9BHFB|i{5;z1QKW5PdEE~r(#a(g<cC$A
zSd8-JUpB}<5+njQ`+f)jZEbeBb5xYm=%D^u=lCWr=&CG(NUpA8uUUcDlDHo*t{AzG
zk%iB;h>(f?<rJNjJyv@-!;eqRz=}<^s(ylX)&x_J0m4zgdT1+BH#iJoiMXjnXf)oI
zd{c4?bT~9<*en}LlA2m4IOT$UiV{BUV}GsxeU|JF)FHMlKhU_KB)xahq*<MYA^P)+
zp^bV~<CA;^pt}9I`Dc*CvGRU{SY*PB+uY6lrzNG4X#<pq<_W#^41Q&yFqFn^A$3ff
zV!7;80<hS2yUC5lZUEVCu9lStFH8h>%8aE^qf)$lWJ+!gd^Y2|7ymJ6i65U6D!n_X
zg`NaYe>B9lc#kW?<wq-M>n0<HT$HU~|F7U13BDp|$a^wvH_piz2#Xp@nzUzFmXLXi
z{5ll2+cmHqgTy+G&+W;pul@@gI@%#V3Q7{ya-cts99N-XZP&A;j+BoD_=>8KkG&2w
z$KwNT5h^j6<&2=8zZ1V7#GB#o-7iB_`C1DJe>V2tvxP4sLbH#)$d+Pm2tD5e$aDSt
z3?HmuRfhIgkL}yuyv5-w7}R!7{a?5<z0T8J;wEFGI1X9E8d`k<Y!jN@RCdI*3Ng?J
zv_JwuAzh408mRr_Qjg3U7?{FSYPiVTa&gB9=~;0aHa)WF{^Bp8qS#edT~d*enX6GQ
zc+>4K5XjNctcsmcB%yL#{F`6O;dw_RwNj{FVD#%WB<23SkY26aLjDusSffk|<1I%4
zt8M~;&;m%+H*lyvR$7Zk;+$zc@`k2Jkife&#QK>prQeCSHGRQi&0f-|=ZOfx=zcvY
zlGprOz}2<_y*5vxot^uKhcuNz-+9wJ%Ut*<3M|fW`S1$&tkDPr>NF3N+fs53ZN5+S
zg=~quSag?XAMLn``74ljo{?&0sAct%+0&;(m9ui^#Gb`8quMn01ew?yiU9?dMPMC#
zPH@}B5M3t5Udxtxo{Ef=ew^%yVk7|s9FqDu)yY~Re<?rftHwxZe0Qha;_aX_EY*Tb
zJhc(rsuZXlXzE`aClQRxnKlxUW?FW1g@!OTme3o4`JSI9N>x0#b2uI_e-O5lwXe9m
zug?7U_U+JTmbyb*&gR2%5_q8Ac!1!O;Odrr%;K@KB&PS~MYq~}1MRyO>fRf(CxE~G
zv4F0=TB>Y^WVmM?Ou{xX`#5q~pM5*q-EcH#)U_9pVcv1XpU<z@wk#15>Mb^<3hML7
z6eQAh6|DK-s_c83-aAs~NigS3VbzntZ$%H~={#s(m*r0tIjR3T-Gksr5P*o8v(TAQ
z{8d!z;Mly4tCHAZRMF%Xx^0FL7{S>pY#Jx)PQmc>%9GbiDLc?;$heyx%$Hf4?xU6b
zKQ$+OABBFK1L%Dw4WVN9)lg&&MkH9Gz~c3sh@x5|86ceo^teySG2IYv_>dlAuMa0|
zPYMMlTUVb3XTy`vrhA-UM1iX(u4ZDTm=XTB)Q(H-V&y8d$G&b^+2_?v{k?rqV-rjN
zQs3iy7I*;ccZ9N0GCZLU^nv%|Tt0eA)YWx6dFPR0<{XQkNCY8^4B0V}#OWB_tg>vh
zx2FY<P}ylrLsYGICkze>aF|0kRIIUIh{n-V$+*%F8nRtpsupVqe}ImfX{b+&4GH+x
zur{vF6mvv<qr-H6bcg|y?rl=_3lg^SzxDYQ2Z-Xg#43{;4T@K7FLLbr#6MDon~h$E
zmYWGkSWhuh%TF>FTv65Yzn~jt9>H+LLJe+}cLkyq^{d`dQe=y0LO^*3Eu47i0O
z^<V94<My<|E*g&v%77H8O;e-{24S_I5f|-ye_z8~tnQLKGtaKco`)Qql6H-lJQ9$z
zER)6b%8aiCPfs_a#t5V>G#nW0*Xw!iPja!Mgd+AM!MT1`9)wb#@)G&NGF_EabE-6C
z-mG4~7mZB{#wHPzMohTZK6GFq$iIvfnPhBvH)6*lNbNuj@d2m0i3f>KdI_U>;EfZI
z?i7LTZX|i+t!lGsI?0;3(^CbFe4&chn_afsTQnlt!u8!OLYX;9kPF}#mHEpF)jpQ;
zYW70^7OjS!!cbuTbuQ)lrZPdQbQK33g1Qk|FK?5G)m!SbSlTqtm6|ZDX5BT|EY4$o
z2P!3g!rJPi1VDuM<9pWJ^Umj-^CxS&^#<q-6B;>G-LJbrvh0``^aS&MKR|O9FRU@i
ztQ-Jke_JBE>t#CUw)rY`_<8FRmRy!>YzN7yPune9Cws+kpZcl2Z<4`#)NZwNRkABh
zc$Xb}>aRy~=RgvLzxcNsr3m^)t|X}L&J<&TUnNs^HPFvb8yiProqT#sPI7u8if%g%
zAjX{`1IA*6h7iFUQ))KCW^&LM+dw+IGu?RzcjlaR_)L0;y{NH?u(J?@Urt2Vjz2dJ
z^YBN9ep}U<?m(mj>|OCiih7MOnq^3p1{9&}ZW)b{UR?)txOMv452WxlJnzv#TOpUq
z5@MuO8Thdl6heM<C}(s5v22Hous!ZmZ9w>4DtCZc+WzsUPTsmtMBIuQ9tC<KEJ_6O
z8s#Zefwg1M4O-xUAfipO<DfICoB1R*_1E`>ArgTBBw_zo9qCMl7V2U_p7pLl8>n1~
zT+qhM(vN4w)6P!xcE`9T%lY_*u!%?gGYK`AQy`{`tEp3wE^$Qc6VD=FZ6AgOxasl4
zqfTX}<W>$*%n-v#9{SKS8Qd8y<NRO}2fFJG5VM^h5-QNR1}te7G%(6gZEaE1CNv5F
zBmEeh$mCPKeAr{ioUM=;6pW4;?fkVJ2u8XB)U9Fo$gilEwP$+BPr=)f%5BNup)}{@
z1Y%b}AFE1N&GW4`Ni(Y{HO*46;HbWiH|%>4M^7JZwaOvXL~$B0YIA$Mg>}qt2Wz7c
zAUEMLEX;ApvQUa8{N5di=1M#BMKkm$@LK1E1pV2k^y?R-l67z-<l4bNB3&;2Q0lgP
zcX-pr`))?+n~oo<w0ykPnSQjy4uMV=C2$b5H=a;8-W&SKfilAMYP-8L7LI+yaUrMD
zBZ&3EL~Ntj)KYQ&U<`gX=rNdbuDqKAh!aa^v)aNbZ$D=W9LisTv@cA<dCV#pl299_
zUbICC#}=IpFmxSnOpHPOrhV#suc@9#M<17#3VT{u26mi^$Eo>dP7C^cL@x7_083Rr
z)+TqDQB~4@qjgXmu@#w8eXo#(=WxRpjpy3Z5hotts0eV>GIn6<k8}|oxWQG&8Zvg9
zzVmQgaVOu@)?75ZSmX0<+pcyr*Pj7KZ+Vki_*GYwTs8tjD4kVz+9azywS!=@nr$#h
zoG<(k<<qvfse48C;6YC-9`3o+fqasUR>|nO1veN`5LX`8_<IEj+Vg@1+PB3wsx1^!
ziSc&FIMRZcQw$`ZZ%U;}9Dk4Y!Z8+bu8RNBvhj3ktOy^cIFP+0BlI5EsIcVgdB7i+
zPW*o{W;0HrxcH56z_!S8{p0a<|0HR;so-V!v8Qb#%E7azo@&gP6ovUK0-1MjbGWz$
zEih*3k!$++xH64r8(sg*x_Fz=uOy4)c9o=^|1Y-QDLAu03)}42wr$(CZFg)NUu@g9
z%}&y>ZFFqgn4B|pre^+{+Bf@p-|SWIde-yu<k!W%=Q4skqGNmFKB!naN-1HiX01}n
z@#at#8K!g?naG?sx|^GtSh7Oz2@PvQOFx-*BQtIO(wliWQ)~UxY@;AYwvK#k1lCnC
zp-s<*k9;WIDi6rD;|1~t6#Oi;-GzCJPmrA(os^%PdYvTOw~sYE;vl~7lngTC-tIUK
z&pFP}=|C`N{aJ>@<s*R#$Ej~gw=eIo9CgL2S<K%#C|Ft9u(hk^Y21@XW5isWQymSO
z!KTz~j7~ZEj9C)6Nien_+nzV#)M;7+?<8KKG71o_PW)5KZx)3BT#HVkPMLYUJVY)c
z{<q!V!bg9fJ(C~jZS%Nz3Fg64Zn)ztPuj|g%WrBiCk|Py{Se{r3ALk5;TA2QOPsV@
zS2A@Q2eSb2NZ0iU*M^9e%jU;s!l}OF;Ne9LHp>9HksI=tVcaO&3+&NxnSbx^urfFJ
zz&Vq1JthiDyBdW6k*abL>PSQ~(MWhTEanBahdD|!dCa)h)Jx*fO{&m-qZrSTG+OSY
z6qiZtA00<7Kg31K1%($MZvH=Mo(l};cD)>pd=NdMf;}MZ!erRC2aWNw2aNJ^wz)$3
zD=pIb>apw%bCK7h9s$c4I&Jta5C!C@2AqE)?&I!TP7FE#X!)J}lBdJ3on-nBzq^Zq
z%y!RjYugV1M}02=XcxXw1g95h&#!KRjkU<i$jZAj6l;YNTqK>k5e`S#*leG;=!dO#
zK32hm<B4AH4--?KPj<x79WuXqX0s~dNq1u_%JzZf{RlQzCUkA<V^$FbK+?e}&@M(#
zzH%Nw<=_e6m6@EvN=1)oY_^Ffxfn=JBPX<Vp(nK&!Z=|s*Qhv!3K__lZn5Q(WJ>~z
zwKjps@%D<N<Vc~28q!b7GH=(I{=|~jOG42Neql{mM%at12l{Q)UcVv$D0{U<J2*sF
zb@Y9VJHXDZtxf%f7g#-JhwmiR+nuPHAA+nW<g*OujcY0|)Jjb~bBUiwAr~>r1YcBg
zV$Q6;8blfWO_-}Uh$n$$XON8_88AT;qCC{QDv@SKr7yvUaB>=YWrFIY#D*;iM$dwk
z*d(Zuk}nAJ+laW9kpG+`UTZK=lbpi3C4Pu3O;|qxANKu#6MKze7R7<d{HpQhbZo-H
z_-Fn`fh}IY71W$EPnbi{gqAwrBO#+h+$Kekk&6tVw6hkO6x#n<UsmxWh$CZWmJ+i$
zG|p2X|0ZU9LB(izd|gKb>v+4<FoL$Gc#v4Jqvp*~{=n6HwVUU9<Y?ZXxi%OEN}2hC
zjCYRp41wo8z(Qpcv-y1jEtwzFMV2Ait@;7LVF39~eiqOvxkXs*(m>F!vREc%9UWM3
ztDt&Z3fZVq=Jbj?n8#03R#ptosxmcE0kUosmjZOO3|&~^R0WB#vr|^IG%T&HGEIK}
zdNKot{r`z%*!~l-{3nt5X&YtvALIMqLQ?y*YC13ya5ZUJc?s3FB|0!OpdaZsdm29j
z7$%^YU_!OPZyxgAH@rOmFPMp-s(67qXh3R<|Ee#UZD#5fkxUk!eWIClC&TGhvR$(a
zkaQGnqoojPvRFJ8?ra9neKa@4<AeUS6iiX<mbr^rF7Id2SX=gePw#UZF1`5&Cw$t(
z<G)tB&tW#5Jh;_**ULSzEqgOhGY3AF5l?{MRMg0kJ@0@g$|j5Xfvku`X<>QT>|Pib
zFa2}NqdhojRFewI-rj=Q6kIxo^=%~Dgn5m0q?BBEB;wRMVgfor5^93@msEBO85cDX
zIi2@zwOT|(6TA2IDv!1E<W~A(boxm{8#pON#KOXFWpi7}*jOnvN6yICszxy-9CZMN
zggq?c2<TAh@MX+)c4|EtpGbNJ=B>E$!Dh+5Uz5#vAR3H;X0r!WTTIg6?&Q(M9;l=K
zA?*QgAJh@3(^nKrSX0D3wmFhHoH@*~>$Li`_Ox@hZMJK6N%mzn;<VQ^{51Hq)wIvF
zxco13;;<vxJ>KyQdHll(&**zZb8vt;wK?`kT$6ut#Qs3Vp&br~V|IL7rn~va_^pAQ
z#nH_E_JikCS%6mvc6z(_-l5cMk_!2DPT`kYIKzy_-Rw~q7(!Orbmmk1wueB~_HkVE
zJgV=>9NR)(Ha`1j?zhSJ<JZ4HvcS5Y!{Kc0gZImJ0UH=_j`hQ*Kl)=Ky9R*US#{O`
zcmS6!PMroOESF)v%P_CGZ4uTPCI{<zrhg-<P>2eYG)WcvaK>Lac$tEt>Nms7zRV!h
z@jaef7!>B`@c}fa(L{{Ej_w6mJXxCNQ*Hl7bYaf~WKtq-@0?sXf+HMV@Fq}D<k`wa
zXlkVU6DuEE;Mm=Fzlm<+y&XV!VxP4y{Y<uWh_&`9-P~#7{=#RE_<*YmtbPNv4TYk;
zG!LzK(VUsdztny&%92XbX&cXGFBwUV{tW}ar<Lzo)2{=gX!RtpN#L?ZQWhyP<+F^X
zms!wW2GPp${2i<UPri4B>s}R}!SyQIAw{9bYsWB#=n?0o4lqM1=1f53JyuuO*L{*8
zS59YgcgJr_)-2@oMrh&k5(=@Aw@o%NG1!Wu#6t{J`Wavh3^;rSfhiF#O8?gOYBh9?
zIVHwaHuRMT{T^V|I4V|S5zJiLnBS&QoxG#@{n&f(+qOdYv|!STV}iX36O==Ho>~6m
zjLE1g=!<LCtK)t2toQ(VWscTPw;B%?N}1vESW?yy5nPi}sl>)YlfL}2VRRc8t@OJn
zG>J{Yr2t8yIa5or3mOl_I(7>|3dPlDHT2XqYMbaf3f*1dAK!qUZhJVf-7T**Z*QS{
zB~c=;%wDqU%1S$TY;ap|0KqV8ZcJXLx7FqKEJ@x+$6%ogbqfGoq&88j#V~>$qTIHk
zn*!pzw~}YFHRsy?5{%;EOoo_h+ujq}9j!gA!;aqP9{D<}0w2NFzI9^;SnUuKOawlP
zV7Dv?9(C>IY8306E;q?54gV?d7t9MXm{0;9_2y%I5lFYXG(A35vRy<%*cq5~2ocXr
zWfNOVdfybgNEKk354=G*MQPfO{q#H^bkcB&K@3<Ss5b%Nbx>D|tC-@S4@t{jwZP(-
zF4Hp{7niL@UY=qNiP(MZjJ$|XSZ>ObFS7!lJQbylW?~22H2~TAft<?fy|bWW;<Dvh
z0CHuSJHAcvW!Jf_hj58ifM?6Tih!Cq*sE1f?zm>3Hwf@Sf4@&)j1%v9B=CbKP)ZA&
zF`^He`CNQ5i*}K}d6x-Hq%|KtnSrM?oulw!#d#&nV-WD{X87B;r}aV|LvTb9xMs$N
zfmw4Qw#W?B-QR2dDL2l-z#lM@K<3n&Lxn#;VrjQ4mOB!;`EcBak;;E^l--2GFN8pn
z$@^vrt^;r+!^1o8Su_aqm>OAqS_sR6|K(atM9azR8_O7uX8Z4lHY~s9!x+Lp=trD!
zw((%HWzD)UEX1{HQckmGJW216?hrEarwu6l6^W3g+QFRz3p+_pyK#)ZA`yRecSFic
zAkb3HaO0$-u#_Ob+)>3>gtlH#**d7VrR0&wI|JZBbP6KUo04oZsZsbv4R#h~tN6Rd
zD9GBvbZ;1=4Y)<ev$A44hCG$P#9HC`(LDgK67FyeED;#VBw#v!sj33Pgadleh{K+9
z$~lLg&wX>#qIfc7n7L~?F|Az!LRcLV>PR%7m3dT|6Bgc0(0(Quc66cYL7La@01kkA
zKm|}q!;Z!>K~VYL65e1^#1^cZAe+LkNVAJc>3)ntl=g=HOmH~JHO*5pfCZ*Fz@bCi
zGR<RwFYOA$h&SCnf+N7wm%_P^Q6DXn1^2Gi2Z`i0`>ecy$&z+YJQV#+BtPQx@v(hG
z2p&R6zwX>lh{0-wM(KJ1{|8yYci%HVRRG|QJH@XOg>E3Szgi&hQE*L?-(%<PW*I3C
z$-OK?EZ@{Xn}>DIwsj?bFX4Eg^@x8B?-#tNR}sao=o!4Hh8|Osdm;j|rZ;hN70!=(
z6zBq>2~*wL`Jvnj$7ecG5rg{+NNdJ~6=UjMXEq^UZ`TouSly4gneoxwAsw5v(gg6N
zifwDp<@{)y?*+pSLo(>mcmk)Mi;dq7QZCogc45W<y~d=D(lr|e`ic=>8Wff+Da_I5
zeKdfkk+sXaTHdn?Vm~>oz#9UBL7@Nis-UvYJ@gL24ee$7SiL0XUUd9zMgOa^Njv+7
zQy<9t5AIFxRpmqH?y+@;!w8CV6bE4Q1gdoIUf~N#VE~B}`gqUxWzD;3R<;>usL-X@
zOgtA~OMzkC2}JISM!boh*ud>(%bZ{n{A^!F=%wL!uio&T*bVQ94$9BeWj?jN$|1OF
zFOy;-2Hi(j?8zA=r(;Y+E|=>8&QGh)7g%qM;cHe`-)U~^3fG3@q;4KVDiOds-yJVi
zl6IWBysX~pCZR4dE%PI!E>DN$wd>bruwxmsNUb-2sgfWc=Qt3rWC0xq)sn<L5Kh%n
znm3`U4UisB(Ib?Sn~FxboVNIGgc)jG`%_<TjZ9NH8&X9kdO@EA#-;RgX{Ij<fJV3Q
zm$v*POaTf<=4`T*(iMdOTMcl&@}#pf?+jLg71y|U#ZapnTejfvREt6_xhe9dkE@fp
z&IIQe68ZTl3FpDhV@(|LEMbj71(yF)sz)%1hx~0`(p?WdUS9YoGWkN((nZz#X{xUF
zk9SF+knT+92Qs5jPd@cXB8`GdWOMZPag4H~$O|kl{`*eH%dKhHvMzvs{hylVXs*PN
z3#EP;s-12J8tBG@Ms`@%>|mvc&1FNbzHrJlXDUs1vyMyF?0$r`#jav+)cdU?>m}&S
zefdZjx>d^W(Gt|<?99f_{;Qr*5bN8)QF9SLZ~gUrGcPA^XCoXk)Lu>s-=xFxU@ohG
zpkN>x6EQ5yF|Gm}g<(K<T<)o0k8hhssswksiFGz!XGLaZf%W5M$DI5TK{ys#v{(Fo
zuYcC<X2J$|Hxa@EaEP&in3__?!sJ03YmtO4oH76KoEd8hhX%WQUiVAh4O8972nCr}
z&cevvjSEJ?f)EBaq0<}iUh8JYRhsxXyYNQl1v$<us|c9l@fQFTW^p}aqqRY*Fvrr`
z-zzdMuvoNjJ=AUhVsR;rVW$F?{v8nfNFdrXU@f->B6@)Ep?GlLmuw*WrpFEB_~O?M
z0YM6+te5KoQ?*)?B8=X0)_ij@Ra$q+-mON?VsXGtZZ4A;A1<C)+tV?vYy9IjTS~<*
z58S_na8LH8@C1C`3C&~w9Ji@D;cV>|5Ht6+y_m`ir+N|^8630~b-WINMx`pzmL8eK
z?}_anlhf`W^Ev>nya2T?<S$7JQm=LhSnV)KT&HQnhuV-OeVQ%OWCb9L*jB(v+rnL7
z21FAHJNRl}--_5vY^Glw3vtY$JUnZYA`8f97bjz%p93PFFj|^wQPd7pW+fF>gu3xm
zaJmSAW)^(RL-F3vuVOQe<ks~=BvXc{k<o}vGi~CseTtd1`)O5O<PQFJf1YIc3}4g4
zP{h<uHOsIJW{g#&jPH$yMh?IGWl(Mug41Vm2lt113?%uL+hGR<l<S<No;>TbnIXG+
zLpqP;DFDK)-=&zWmpT^7)=8AV1AN`|v|3fpWWzYE=Elp?{@h7#q%Ea-H6;Nh&58P7
zPlB}QUjMU#jGe23<rb!}idwc}$%MX$ZmO^C$S?QZ=<o#@Y>^Y;eZb6IE<cmDG*kKK
zbpH`bD^n<9EKNCP8A^XPEYaKRT4yv>i5euGH4VTlM(L?b-T$~w%kqvOMawPw%M!${
z6+`N!xE+VzooO?BJO-*YR#?oK|Ml;KX?1>4bs*XPTwUXX_MR0Qu1?$w<E`&>Z{K3?
z+A~*o2DMY|3caMHv}DYNx+=0liV0>+k>Yyzb=5qp5b!;AwDFjRDO1sMU{25MsAYzD
zQ3^oMLCFzjcr5s?=*r^^t;L9ORK4p^Y5Ss!wQ6MJl$}&UU9ROy1Ihx;2d<HqUepmw
zXWvn@@{Y3xgd{n-qUMpyz0?vm;%Qk+o({d8ja%si&Gl<n{)H4{MAhuwQqt2^Q@h6J
zbj`2JbBL8QVihfCz0Jo}W6==tl+bgNIRQM~gqMSw-D^jX@{jy*w1dwyZ@Z_3`)%??
zzmylk=46_w*W!Vcr4wF0o&;a&Pc;99UExI6^xrvKx1-Diqaum~@)g+GJ3H0Y!iLAu
zT5)S5Z&2}rUH|Q?Eq%@kh0p(Kg!xnjA(H0gp<w0{#e79q<RR08z#GOkNAO1MHUYSz
zxgcNO3#$|(qgcH8O}s8QOYUNqMl=A9G1$${ARX5;WmhRyx6r-YiyC`c!>O$4_}zQ2
zu-PnJqN&*^7-@*HK(}9C2td&i$(i|*PMOGy|Hx9Rl3BpYs<+jvLN4|uVg0E`s4YzC
zhhz9qHOu$15+Qy7kI|P?AKdp?_y^EbKiTng$=#l{;L}#rV{+NktNLq4%ZMyuw4kku
zRlzN3yhk)FyH$iA1&iLgs#p$0WpaFxH2Ra<&3sdLvZ8x|ZOxvmW~eeHaEF@}5zgcC
zx$O&RRME5G8u9?D)z!V5O0sRmoDpS!iS1giK=_O}jiQCblZkYU7B<!;vjMi|nfY2P
zkjVqN2Ew8gaWO38woYvvMGX9&-v|BoMM+U4hSb$o7uWorK;`_a4GPuBr}yC!bZ>K(
z!W7!vZgD#j9G~axyGNzt{{nah`V%n^L*gS9Ap`Zik+<Fu@O*hk>nY-2x(z~~I!LO8
z(r}=d0uLcpeEf%tB2KU#ngJXugQO;qD474k8FD(y&Ya?kT99tFbl}pZsd0FCw7LDL
zyP`A1ZED}lWXLeyJj=nWESQ1F)%sd-#&sN!W+zqf35tbxhla#SGAOf_tJMwjFm5hN
zVDZCN$oFa(VFK~aC)}5Nwz@0Q59&XBXx<6`suf_i9YcGznzPL`VFE&Ci&|G?moC}P
z5*Mksw8hhKg7TQkHC9~5M8O)SaU~(R0um<uD-&KxJAsGiEKw^K2C2;ua<N0p{zO)!
z-H^xtw{WM(r-L9%TPLm6kcGHW?AP<yl;z`67pN%}SB$w*8Q<~(YB18Zsf%P)6qOFD
zTbVCUsH*zl)e%{<835ER<uLaT2Z6fmIw{=JyV|pu08QKneSsO4sive*6;Jb~ca?1z
z0V=ZlqNU2m{I<i!5%twHA;O)EJ`#S-kbx5AARw1yY6Eju;=FT<CtL6s5$k^zG#{5=
zO5$E1h5TY!dOw&VDMPzUL>Ro+R_T;HNkwx)a)qEqLFKXrGQgSf$~`Z6b&)(r-g?%0
zb#_wGlr>n$C7@i@b~&@zWXP*U{+5}4*M1f&Szi%3%z`Dumi_32$DU{O!c}e9euFwQ
z2Wcp@8!;PShVW0r{Eb9YKs}x!9a_v%O5<KLqHDc_>+`z89LZqhq~LvBsGioFx=Ac$
zs&D=88Jm^k6#%!?6>r?6NjE$V9<9KFM+<@}kx&E7Q)&Zz2T4+KUfbU7<m5^6Kcrn9
z|Me*TlB(;)KO64jzJ@n9mJWS>wnDg%rR2(FE#@mN$s8^ZBkbTcntxu$ez{@gCdTFk
z3GPwc0@slV`&qDil^T4o<<>LNX2Tw&2jNVW5kzZmPylM#V#yb~u3-_?>`CD<F28b3
zAIF8g)oQweUynt7!E!M9n%JPSsYi|K6YZ~A(bjlqdMUZ1e5Cq$i>u_|CW0&&KlD-<
z_NC$@E7ay*9GQ~34f{K<v+uFKtUWm0(|)J<qzR@FZ{S00frx9p3YcvE<I}2f_nK8X
z83VV^js$SEK!V{N12^8yLZOOk#FJ;h$f;LFVXD^Inma%WEJRsm=+}(h4eRkFvmj(H
z`dz}Lng1vq9>|gbxyM>@@^e&iW#A#UW0IaMCLp9DfpW_poZFjH$+enVxry;~ksDhS
z{P#ms=ht|@zoPLO!~<qUmO#AF1tQCg1$c30-~cs4`w25Vd^us8uuldOz0d@x?yLn^
zaGy2>Ro*AQ`LU@zSonys&bM{f5WikBZ2~4lD$Fg@imA2QDJ&JFJ>~VHya6cpJJ87=
zkE~8g%zN_BU5`l`Z+h*q{H0Z7DPvF({e#W(lcDJDP49hXdIMj@kH@pGEW9)R5@POF
zvw)&>cn?R8BM7E0^w9lZn!;qjW^=~ZTj#<Gx#pc$Zuw*mIsG6c)Y_Q(ueUK1Cl2Ri
zt)F*H8ZcPNt;HPbV0*1MuQqR2IXuGnxV(WINf+Xq(zO&W>3)JMZmvDrwu~1^EWJ4>
z<;bV3`s33D2O;qWPJ`=S;eAQsqS8MaQUDobvT?bCu%CM!R_7Z2$-*O|5FSr!V!d<^
ztWz|zai^AT@bCIe+~E%hS;x5};ShS4zeC+y!KLl9DA)J19|)&k3IZoiX+<Gz0z4q$
zrSUW4#x%E^Xq+xTC8mF#&xBY@ig@ePN|!DE(3&o?sC)Ln9wbvf-NxMM$_%_tPy#St
z-SChF;_`Gmee4)fsAE@gkdWJTktBC6(OQL*B19d%MLcol94tnwrz$4g%G{Bq?@mRk
za-Jci3QbEA=IVOo^U-Y64o23B@FMbm30H!Tr!}9LV$`}9c9ZkRI=r=0z{#1B#~A2y
znHEkknL>x%1Clug5dIgSrh(*upu(}SuyFh@GG$NeV*{rI*OHKtmRD`_69v-%O4}6s
zFT}?2ldvlPzm*4CKM<QnYi;XkEpl5qRS2ni5Y1J)C~L%i;2t=*J8BxZkl>S^$@VG#
zzl-<v>c(bb;24=g(HJe+=!gl~Lh-ygrU-Es?jzI=lRLWr@(h!s?$@chOo7g`ryB2>
z*J<~jYhvR`a7N|~o0nw(nzee}KhC8s%ZiEWHAiRO;;iMp3Fg}rpgqi2v&6?pEenOj
z!cR1#OUMhn*oJ|dB@E0C*`u8kD*{YZw7va9JTp^cfi<h;KrlCTnGZe@AGa<rO|Fg*
zPw%&`kU0iFbsS*#caKo9se0|bWAhgMH?i_1uNlRecu0k~FOCfW#2Z9Nm}jUa7nqkv
zC@7<BKk*2e5>Qu8>J`GnYUeWl=>3$bcXnEs2UoCHodMEOlacAmuo_ZNf}dU1%Ei6=
zHuH$t+~!!_G>#1i;4Khq-^P3jpF2P0);<aD_m81K(+uaH{Kt6E7j3MIWp2iGkIj;V
zHB)Vji>YG<+!P4N7?L$%XQauHniMxfV+m_8VrQz#=$JGyWBKtSgsk;*GSf$+G$l6}
zmon*Ov_$i<<as7wjcPLS8c#?67H9d21~VRmHP!ze%4GKARsdy5?D1oQWBKe%_S9(=
zbu;|C0|d@Ru}v>v#y(W7%A_+_kzGD%WLgbly%*}}-Qf;^FoXM8*ERogQT*D`3L=5X
z!{6gOSXbOAa1>F1Yr=Nh3&CSJfF)q(wFv$#dOE5hq29y!JQVkO`a$${taPSi;&Nf}
zd)NMUR@n~AT<cT$M215j|J&)5=4vm$KmeiqGZrZ6<u9psB>EjbytN01X`~2ihMYRE
zIT^p8Op+5I%Z%M7lus}jG5>f`!J9y{YRG-9Kwx6UvifguE4ia<itOfElfOd6tVx(K
zq{X~)VR-E`L{zfHET~zqNwEm0gOZhL_ZOc<FnBvG8}{^IXb=S`y4g{Xe%?|{5$$aL
zNBk;vX;li{8^kO)-3>>15lC6XK`Z7Ii3B$)sk#&Zqo+2DXd`A%f*dPfmYzIn;3Ye;
z`p><f`Qu!15D#bo`0~PIW9L3%T0%nQlwv{vY1W@`xyS`_({eK~P~l&kB8+%0xngBo
zP?on1K$f?uNIbrHsUqBiBEqryE2^Nj*-VQ&*BIElP2Cfh-8k2}r<KT|Pm~r1lQE4^
zlmj_{d2IL{t}mVEw$WeS6xT!if#?vFWBn!}nV*Chys8H(5NtX{y`T^$OTE4j4@L<c
z%f4UrL@o(}*k7Ffc+_Uat&v4Kr}Pl}(5z`uTb%I>(*A=MHSGLyl4}^vPUH@Q*beJ+
z&fK^$Mb0yp^UeQ(<HkqBqXH18FL%DUMRWkSw>ZI5YofTRD6#biDfZ@jq}fZ+y0wfC
z=1mpLQF*&N?JuHUawxF}Qjs2%WAUI!hEhHjTMU#$x>a!Uar2^9MgA}<G}aG!&vegG
zJ%^zU%9A22AdSu3<wt`H-00_CfKmBTDO!jLr%|d=`oYp%Aargh;c@U!6i&%Hidldl
zz=n?B!-|;S29#7t8T1E_<F?K}@!AMyL*@<J{obLuBjJ;IHHUODa_oELdG5^tB*2bo
z?7oD8aO`lp&s<?=(8S9f7~@+zpuMlwJDfWqcrz=CktZ>D`rznk;cCjK=fv{YA*qXj
zz}D;$7QqgJIn60$_a9>f;ybmEivm_D;sKOD`#SA7u5ESq0^Ig4>G{nGa<W<9QcdwA
zkrYCB<<x!lkSyjkZXXaVpzIpZnKdZbsSTOoo<C^2h8?T^0lYoD_e2?D7e}!q&GgrD
zBU%>j??kbP;kniOW0ZdbIARAjQfeyCo{G@OIbmvq4g=Km>%nw8UIkG`WB~0lZ1Wk8
z3u8TF&Xf-~38<;&oEu}I8dp{>`T3YUj_?h{`}or$6AL3WF%qgenl7VC>6&GzoQ23@
zsiR)kcXrl#dw)(&Fn&q+$!_caE4AWxrY{5M&Zik~kMh<(M&`cZ!KJ#sJxjQK9pZWg
zfY;6!!!Fu@0<@){5Xsea@BoWHWRUb9ur<l`aEP9|c1z_qEAm<C=YR-A(UDDarR^%k
zcnfQ`jq-1v=6PuVC><)OIwsw%wBci&g)ASvgvtyre}iIGRPhAt7lXfr$<V=89n8M#
z`tSPckZkM}kDL&zoLc@WVS|#YU$w)<unV-sU68>XZ%;}C?24F+W&qaG^Jc{9$LXYH
zHoAZaj@?vhU0Xr-2+wLUy|O<P4d(O)AQ`*;zu(~~)R*ZC4ija~;-O3s97o1Xn5|}k
zv~VMj4l6p-2Sp`kD-%aq`|UHps*L1^LJ_(*d=x;SZ}d(N_sypbd{rHQYk}b%t%)Zd
zq+S(8F(BWx(Wdy;YykaG;t@!sTVn;I{URpR*Zw#uuDg0f*Fa&$elN%rg^c^~o@;Al
z^X_eDs4}S^{UY6-y=7Ps4M74vg<Thr4g@*Q<me`W-4oa?op0@Vk;Gc9tvoGg9IShJ
zZ++P=3iO?Zj0Q;{u5wfw?zkEqu6C6A5-i3%_P|&|)%Y8Gs(@^-2TM;&*kW;OmOW*)
zzA6o|_IV_f=9fDxwW5q35%<Aa?KP+Jbx;98eyr*Z>b}WaeK#MS8JHU10KJ&yyIky#
zObL799Z_Uq;W5mgE+!;~X5wW`Q3jf3afX10M3@gN2b(9}b1$w-oX(187JE0J`Nz|e
zPG<+aEftO{UcjH)Q7G~Nx&DtDcp`qBB^V*E?P=2)qfn9|4a%<O&vAMf&CPK3WY?$P
zpc$b9;Z2d8->jKsbdJ#8IQ)-4X6(6cCmcll(ZA_*TN~Z()tfvrnd+@2Sx>4TbHN4T
zYbg}&@kvF!oB<Lg5wKp>K6gJ=(~5OV2arq=Qtw288-RbvY6kzb*OzveIwn&``JgCd
zH4A%${VpaJ)G|xNJEOFr&pVL8Gm@iRp61yvu5>u?%YGO>pR^GHs@umpdp>cqb-G5u
zC7v1p#klw<LUX^iWj+pBrs*x&El?bbQD3B*p@dmwICK};c;{uBAjK7{(HfK#+zxQ$
z#guO#As|q8t0|r~ML9a>IQbc76QhE=VN9-rbI!JMC)(7aYVg!hS5MlbRt3vHB691e
zjcmI~{h9J)vGKk^XvXU>X+)Wmmob~;Xb%^ca*(|EB8+nSUwd!uwC0wh(*)28hY#-N
zZ_D>&nz4`VwwdiP5n}DeA~5squJu4i2vY|T5kTJ2X8b;-?o=KmKS)V4VekUr^}$5Y
z+9#m0p_;u)H!nf_Q4$wJsj;r7r+8iwXKAn0E$(MaylKsMr+3005(Ch_(%9KLEn4qo
z7{~b|sMj=th?jYW3VzOY9H(AL(&KiYQ)N(N4NHZrYrXOpx6;#1C{sQMXB#}_r;CY>
z7I5UC2rqy^kIw^+VZRL?hR5^QsP+uj@sI(4-8Qu0jaS18Q^#U^ED)?*F*_}rw6`rO
z@OhgjvTy(M*{-`62&6M5Rr`%jLV0e`|M52r4li7M{?U_pPikQGTv0V53F+q~n-1tK
zAv1xL1CRNNunTpAts=+r37pFt9U|Hz2J|3187s5JqmmSxlNJ}7f~H=M70CU~lLcb7
zqU}N4$}Y8%WGOWh@>ceSY<C1ShCpJBG(rRjTcxPC5wt^&LaHF8{)3<@>F}bgLO!F3
z^XdgbGxWp`!zeh6Ff=v^8UM^zm@W-u3$aJ<hq@}_F%<NizC-NJkD5rbnEI8$2B<t%
zmbS74sH&i}(cP!*+~nM~(LP-PN=p4w>k#2ba7bi5R>Nybk(7a23LZ}qn0|MQvN5z_
zGxYIn7Bz50B+XX6lmzBJsLgJ_(?B9Lk;Ls0n({OcYCv$jDq40W>R(a#%6o3ls)IbY
z6?Tywj%7H$H&Z!ktF5c|h6`$f0H`n$uS?v@bblzmvli-H*g<t}m~~TnhpqA)8T~TC
z_%ON-NuKB`DcrejeKVOxUZm&yJekNPXdffG>cEy}p@K)yRO+U`|A-PC{UYq@@ol8D
z>Ai8`eDfMvdFj6&ES`JqNiqL^ZNr`SW0d^Es|@Nf7h(A+ISpj)<kT|H1C$%dwU<k~
z<s4Z`mf?1jn&H?J?>h!%DO>Mb87K8!cFSjKo#Pm#)w<+#5W95Q8fm;jymUihSd}j(
zPbtKoDDl4X#g_RHj?Ch7Z8x;74g8xKS!h}-+YfK(5FwlxrLMG?{w#f9P~LF(HT|5@
zlf;=)QXawaSbxdf9+h@I4q(!7Ik2r{p%;R3pZB=x3)<Kivj~dE0$Lw8=M*tl@As7s
zWoMF7w1;7`;bRW5^W7}e5^ZgC^_HqWTTBJ1Q0T`G!LY0(iQLBq=?hVj_#-rVgs6rh
zFN@xc7LWCc`#$}-x^j946WrhbvDew@?!FnG#9e<mqLAme?~*op22h<@g2iVu63d(F
zw^o+_xplo)kQ@J%slwo;^{7LmEL3YWq=NF^^^Od?wvEJvKV*GyLU7&m37zoXl6q6o
z{)FLq(oetM;kLW?(76D-Wgan52b(o2--&o5a*5V%hwM^E<v3QSJSR(?Q=lJanc?Ru
z9U4}G=b_m9yg+J73Xm#(<0LTkY;)jsSn=*9R#_Uiej8C;>qP*BS|h8;q4jnS&yRSz
zy_yIL&@3tTt<_OYo!EHz4}(m}N;6E6Iuxyt-XsdzEx-GxSFEXjlAIK;kXWRYCZ&>a
z{bdar%`#d1fID=SX}aT2p3F-Vzt_26QOrsG=~UD%H2H#t1jIp*-D8w$$%ldd?c~3I
zCW@Nyk~p|tC|mM3#X2~>uWJ9oczAYPN%9r!4iU$f_^2t*XZ$AC%v?2;BXu3>t1mEk
zL0>W>Eh{UvW~FY-lvNG4dW!QQGinE-=ijeNTWu_y-#dfG6}F*sN;*w!(fv(22yNA>
z{>_Bvfh?V`0=OHSLxh6rT%CNF3`VXs2!Fcn9udLqKTb72>Y=&h6GV|<+J|@a?K8gL
z4&>~7eh^*KRF>7WQOQox9L%u$7t&)xgXbJOB|9BEAw4cj2N}XTYf@~%f}Y@t9^5Bw
z>4NDxCY0=|+t+K)Du0cai<6R~43`>`EO%F#`#WSv1)!WtK=0d99Xgr434P_65{2+a
za=hJ?`EAU|e-1Nj-s^Dh-_T}JB>W7XO(P}8)hXjE7*qD*Eh9j<j1%senWH14Dxy+U
zP{UmE8&F_4Sy%Ee^}Tq&IlziT#w>}eD|{2ZV>AljS=Ce}-2$<=4MUL<%3EH_&aQq~
z9>iR}3kbh}75GO#?w-|kyK0bN`9-gD!oejKnk&Rwy2S^Zr;@Ga0M_o5G_PQcFt&(6
zd;ZhBZQBQdJpY?6T&IrX76k>(K<3Mg`jMl@5QNBOQV$&mfSpW`QAd|_qx$O=oXS#&
zK=adUnfNWd?lwJ`Ckp2N{z}rpD+$=0!c`gO9dML?U9q%G@gE#9TUU8!>N_6wsWGls
zSYf_!W>h-JWg^%XQGR!^@H^A1n*61dVO8jYTyjR9_LXkb)B__x0-g>g>i)hb8NE4x
zel!d{0voslObvTpnf0MaX)4DiNCY)!W^NZD>rLEexR6duA?LFAWi>hZ)v&^Bd*QqQ
zkOAE)&q>(lVIb;O3-8k5St(I2$mOZETdKZ%#-ONgU)U**-K6_Fvy}gamq%x9>6_xZ
zLkz8tFHU99X735DXHNK`2Cc-}klMyE(&6xHU;usXQH21%7T(~6;jr(U$N#hDx#tBG
zhV1$9md6ILJ(jBR^Qh%)`fwNM{eXlD_IseXET8mP`+t1%>bj^mQUqM~RK+NKpMc{N
zs@(eDX8EWERxTrY>VcoKe|`iJObeMCPXo6jX1C`2ZNhoZD%7_%tW@Wg%BjK@1gAb=
z4cfEC6cwX5-REP_a|*XLpd(nQv3`st_Oo)WL5wD{3?jHE`}W19EE$EP7^Q$mqD%59
zDFH{Wcb1aEQn2hSl~5Tm4w&X^*NKR$E*+>ft&SAk-p!vwr9j|VP8Sq|3!4<S{a-GL
zw31L;#h~!}y6%B&M#So-_%3Q0cQRQ85$BK=F77ap4q2}jC~T@QJul})ZNfcdEI7e+
z*jwMfdUk5p0g|eNHUan6I&lEe6%PDLUiBmo2k+Y1wOgozU+xgNAD;{Ev!h_|pw_%>
zx9gI&o#bpF%7i%^c_3=Sz3fC<p#&W2WB%Bx&WV#E=qJx=h%Brs`^@qDI@|r8%^Q@F
zkuKb$dy#uYbW$KleZW`>t7wBrqtb-27-P`5GVN~;d^NiCU67HauKWNeCJ@fAMxb-Y
z9i)idNd*@_`omuED$kd*i`Oa%xFHFg9p12_QRW-sqGiq+7yI><)p<qVcHW_rR0<bd
z{;IOGo2<!yIvm3zVwW0InLsFilkQC)BSPXSB9d)_&PcTe+umC*wl2?q^qf)l-rh1Y
zU9$w9+U4UtP3pYlO#1+*>>&Y0Iixho^JXm~CG7ABjM1Pi4m2xX*<?}jgaHw0IEY=N
zZKw^@)X_n~Tpw}&&$95{d2gpbv0nJIb3hvL4WnQh)`Upy%^u+j5OSu;&{N?V5q7d~
zHvhzrkXQ=C<5sLJq4%N)c?=Ljy?{nY-l4dGYd^qf@^&4v?LGjx;N8-0XPDs9-F~5(
z!vwN+`CHZK)BPc_N8>6IRCMMdN`KTrEF=13Pi&!ZC@1w`+S1BSSRSzc4vFmfp`8{c
z(iBt**3pcjL`rLS*#WsDl=d1S?2p#-#gdu(s{R|gT&n4V^Zs}ix6OMG!GrI|Lb%$2
z;dJ@3Wj1TGZma`nKl)foMqlT@0-d%8NHE}1jg-6~;BU=*?EK|f%Att!5%rd_7Pk#I
z_i`cpVFclf=pKjfYM<SD1yW%tU@#Jqq0^LQMWe3yC1{#6okCzEbwTdkU?@qhZ><Rr
zavuI@lIRBcz=yf!aX%yK=b3=i#hnZA3==5m4flbcM*jlvStR+8+8r#6y-3iOh~Ec3
z^{a>5Ab%k53lpVpEFgN#dgPa0K1{n)%rDB{6Nv;z^x`9bs89?MICANv6+NmaQ~`Xb
zr#+4`_u+m+WiC|DPGwDq6?x>%F#O_EblxlZ86>%Q^a&D6s1{Kj?8du6%SVfpzMKCr
z3LML<i*W&TOGp<-2F2dFcu?pq(QWqCbA$hMChl$O7PLoK2GIXKC9`<iT{8GfxK+^C
z6MC(eBwLR4?e>{5aKrWNVTO@_G+`Q5YGdVb9~mZys`JeC7d^H<j$N_C#`zuFR;E!S
zt_v4&bbQ3e#K;g%@34j7fvrvcLiZ5AM88*q5X1m*m{s&uXcx(R#S)^t_Vsp7^u&(S
z+1u{(uo?kwRL%*R_OB@7Ds^9?J-Sz-)0{s}#G5WN@26^n6gOJb-baZ(c39-YNg8Z$
zd4{HrR@h>a2{S*$8m{sdZmSEha<@PqcRGt@@Ou~R?{8$e;IX<SCQ(-a6a1A=*FzI}
z03`?Dp55WI>)ipz^w@ft!lVNF<59joO$Xo5_<0jt2}1Pyp#54o59Dt3{P@c5foJ~M
z|80YC&E_vj+1wSYo1)qIX=;=~e&C3WDbv(xfMK{&0_UNQMVTOlsU;t-1!N%SI&^ZL
zv85Z;ROwbDX9FoUGaos<Ub;jy^xoYyfhi4OKah~J9$#7wvusoR0(DRd3k5bn2u`uO
zpCcLd){;q;(~5Q<`ZrBwqjXeLu+D0sU>e{xTy|i?XM4T%Y3hk~OZ?X8Tk3bU3$1=&
z+RM9t1!({&uv7*!nj|l|VIaIQKJ>$p)E0(t6bT%W>zt|o?G07-43FB~jj|nE^Ir%6
z6Pep9{S7wT5GfJ)^0ojoGbIyh`>_j^S!O5YUy1_ZSOjm)9wm^T{zNuW`cDq4yiR3L
z$WG_=sE#eGLgl8Mx84CqFTTr#O_NC$f5pm?dkarx=7ZD|+Fg;jo<CX4B*a5p<V;+q
zM1#L1%&0fCzuu1Lg_8lVV^Zxi1szKO^T9yM(&~)XHB^;_O)JjjQ}de%<n=gLb1X`G
zSGrb%_O&g&8saZfW~K;mhH<A}&Tov*Ac1aItS~j+eTWERFY?bY)Z0$u>}~SC8f!e!
zxfH5V)Nzc;?;r-=FB<$;OGD)E@NVbFot8UvIn|(@JX92+Aw$uvo^jCFR1F_lrI~r+
z#H_fk%48D>dTVBhHNw8l$y%$Mzd^4-5JlByH;Dgs3SjShPbm<2{<mH*vi;v$ftBq)
z+k^jJ%rh~wrWxvkF@Z}<NGfPZwWaBU5di%dl{x>9^@3@Nr=qF`df0YR!FxowkZ)1+
zTW16^650@4gd?gFxGr&mlA>;B0J>IYiBJL^ZQv}fwuu3VT#*0lJiQBv)i1Vv@o_zJ
zq!G>7A~hkVAz9wIPW9|CsEUe=PQX8%<1J^uZ7q5^Ep0_sxeZ&uOVcwtAkQ;5YX!WW
z{>v$1<D>vYAm_+j^M*xiL#hvUqCG*js);3?B#E&fzMEpNF^&>R&f6CHAv#t{H7w*R
zE{)4`I;Eqtt80u`RoYdvo>;n73#r$jLU|A-OESa2#UY)Ue@^TO35#lj+lxfLRSm05
zl|VK0<7|yZ8_gL&s9%w48w;;gSwtDxcpt4)`8-0CN~_npX&drRyfTE!mh~2RSNK6m
zV1?6?nkn3{NKjs}$U2_;Mq(-<S4ggs1ge%ymLhWN!uZdYX++qRiE<p7uQ|E_w-vhK
ztxS`?hpHjz;AY=;JL;%R#nSAdZUBxOmU+P+-ls>3HIWI>n7lMF2eOH+&<nE#hi|9=
zkAkr$`IJDIEpt=|-mMteYN3~ulb4tPbm}=T%bZvLRa*~~>T~Gs{Cyfe;g9>L*302b
z+Tc5D9%dGSQ^+x}dciDJkc-i4mR-_TqI%Sgg&X^&Li`PWUNfAX*oNX>li?$({Z_E-
z4V#hk{t^Z70m_wjY|?2jC@fmvEFsJbuQNu*5lJZeR=X-gKWBX{(o~P{uRq{%i+520
z)4gQw|N2zPkRguC2f{vn_;^fG(t1sIGUMG8bFvZ$V1^8|WxOv5NBFC$ZU7lW(fH<`
zmqsn?hi33g1f9;EG%4K118I7|^VqMpLOS5$;Lj$2p{b++#|Iu98a>vN^E0w}NO>ax
zAZ}i5YhA}NphHQ-{>p>7@$6z?1)J_^4dQ!jFfba<2#Qc2N~{~W-@f=zO)6;;2rCs6
z6Pg)o_kHwtrvDFWg)V;Npvlnn+2}unvo|nXx*JSv)@aWP(Z5f-dYj9i0qgk1Vm>VT
zrT|z#rz9=^T8BK_+qCs9K;`ZHTbbG0C>^vSV5>)^vwaEI@(lnIk>8grZ;Im?fu*rB
z7YAm5B1;T=h^LipOWri6Ks4<P?cy|U+E0+A9x<@Je=TtF=Pv$S?M22%RVhJdCp8x(
zAMlYp&TgoPLXQ_h-=9Ahez-c&qw5{S`GN#EC$Woc9V|tm>s)BjG9XKF3{3<t2Rm{L
zo7cmpC5jqL>=tc?%n0V$)?;;DmU<5Ops3ZUrU~`ZBQKWbI22(!!4ftw!e}QGzkp?S
z=@zVfd~8s<jtXHG@CN6~Ui<=)XTmyFZ~i-VLf9|;5g;a$j@Ax=3+Xz0d@?3j(NPSj
zM3ZO4Q=$`!ET<gm=h$!{?iBF4Jt};YXsnNTmsohjxd}gg{v%a9IREc?0na=!uB~~+
z?UY6Sih55LudM(v{dlKD`S2nZGI2O`$SOIr`A_g4Tsb#-6CwB{RY=!fFmN-}tXDW!
zR<{^tt+?6?nkJTOBD+Z%MG7lIvKSIT-Ii@b;yx8Id9&_(As#SEb}*3zveN-A5i7w|
zqBkh1vGjET9zEknu==5^ivouDJ}Xk^&C<o#fSe*2+zs63nMKVd7sU-X_@SjIHfLhr
zrTkXL6@(5^y^V%kD!WD&j4ZYZsgzXN0b=n=iq*YLRL7mP@v(}bet+N$uMs*RqupNR
zki%$xE3)Zvc(v5G@@7y^hM;5D!^QIvS3r0JZDw?G=kEZL)2XI~By8Gj=Ncs{P*ee@
zR<QLg26`<)_nc3~)}rr`4$<lGCU^@o1sC@3^x4vv*8R}TY3sff0dhB!C2HkUxMFA)
zhxPMorBLSMFcY7CaZUV5BDq>X1CEd{RT<~fFA&B4ox!c#Dv^4pSd{8)Hg$0B9^@J@
z`ao}MB>NqRwM6CFzyP9xJz7HNxDv}HuuNt-sv^WNlzQd}uz&8><I>Q1kYL04ap{bM
zyAubJ1_u2mo&EB|T{w|AG>s?U7bS^{&A5<)RZ=pOfikUmb+*zv|!s;V)2s$lf1s
zY07rI%{+`K3L-u`m!>x|TX|u3!<S-3^mk?u$8ZF)L*-|{<AuD|Uj5BtJrJ6pOy|6a
z#sk{4KNn!UeFBjWbq2VY?XWg7UvfS~3wPtW;DOUqXqIy2{kr4uv(GzcAG{Aa@*hn>
zzL=qXnXg8ui2bNro6Z9OHpEfHB2iTcPIMvMc+E`1n7*Pm9`jp|X&|9sDrpp&ZZP$M
zq$qY*(#%Pc5G(mHr{|U4wzx?4<~cjJ=RzK#E_r^|UIERjCI4V|C*LS3+L%_r{Z3Yh
zvZyCr13rA+5E-+IlVAz8rtkfWjkrsXjmHrwaNU}a5H%9=RXE528X%>8dM7kj6}X)S
zstC3YBqj4Tq`&w>W&(=KiYry2pqQ{6|3<qa0Twr@ie2HgBOEM5`&%st1MgQQMIC;n
zi`;2D@;spD));Orp;YMpp8vv`hB-H9gpw0A`&#DlUtSG+`d4I7!1oqgIR6{83h@|!
z@=k7yGrI*^Ik=%0py<<iIka6luJ~}^#sSN0LDxm$!=gTob8OF1cA^v0Nv~2&-{{Y?
zv80oa@>b#;b6k0uE969_ln@*(J1bb|i`*;xJ4>Cvu{9etWoL_<X-$umNr!|lx2e^o
zstL=zac~&ivU@7n2S+FJ4FO4=!Rr4zBjEn`bnCw}z<=JD85x=XpV5Kk|JLd#sw&8-
zNwi&>gJA=u!CU?pN#OcFW`-6`OAi#&u3SWBSRE}1ltY=wNLpyRz($yo(ce1SZsn`<
zsj02aE;1UOW;tUlQVZQB)}4x(!Z50CKyz`#S=uj(h^Qt?0%)jh?t59zy!P0Fz2_be
zcOxB6j}jCt_ggb=+s`OaOKk{b36i{kKy`5NYVC(?`@hiNV_UT}xqC^-j;aK=1oOXa
zUctCnncvGtzW8uk;6(aFW)BLIRf)AuzBBEGf15c?mRhtNb8g?}{-=ZC=oEz@0~ZCU
zb%=#f77q`Lpp^W3(6d%DJUl|xT>kDMBI;iE%8Pi&+0#VY#7X-={JEkB>NWyUaW-l)
z;~yN8Fs4HpiG6<E#BTW2S<=%N028RM)$TJFIYg6It$o>MHr`&bZ{TCO{t&@J&UeZ8
z3Kp3u$tO0IPp+h(!a~JxhGm6*C>K*et}>%+TtT(SX+_PJ>y?lx*exnolv`G+LQ?UC
zDg&2~UxZ(FkQ{iIpPL`5=vx6WT6C}iWs5xsK9eYsev`6$UL(q(_$;>1v<bF}x&ZD@
z?pbFDIUVp>G{CGk+$j%$3*rT5gT-fm=^V)=`VzqoqYkYM<72WJx%nE933ZQ6=lMM_
zdP<U|g_ZSPMQW%PA0`6s7B)x^blbW}BywoOj2Bj+$&1MF%ZxoI9taMA&ZyH`aTU%}
z<K}$0l5bH~^CXvz5ghcJWHLk!Jt=j9$ub@M%_oCiZp2zvdkM8{sy<^T3o24IlY#N@
z9xPf@#+#GXP~!YzFVPE%6J2`9X#_d7iUrLs#D)>OMaQx2e*12*{-k(l$FEYzV_*~P
z(IMBK4XtI2Z36l^#lHj4D5loib~<&Y4i40f7l*+q1d>g>jF6aO$B35-QxEYpK(xTG
zPuZdhMK-Cvj`70$Ne})WA$B3<BNnRiFWhV2T~%s`@|FpGN~msW(H-v#9hFp81(N_K
z5>gWZ3Eemmm$Of`|9U|yQ3%Epyu0+5K*;fEp2UPJnjv@-aHTfD`Uyt8%LnBc28Rgg
zBP7NwDO7NtdFer`e0FItpTe;TSK>FM-hLSrSP0L&yiuMfg-f5&$)03!g|IBx#jhwu
zb*&imLQ1Z)Fz2W{e~2XDyCfE2*{e1;P5K1EwgIdK{ViSc<gAHwT5iO~sHP3fID?Xs
zr%;I7Ph?Ut0nTASW2ksiJS1$c*tgJHDHoS<B)iF^h$3Ep7HBfu^o^TJf?jST;ubY~
z8Z=ok&bldZ%-5{}vP^DAJ}#=MqN)|0kN`LD0We?RYn{Xr$Dpe=zkhfBD$I4C-IWm2
zyv6q>ah4b*@pUI%tJVh0gaCL*j7uu)OsUFW$k)@C>Lwk))va|Npca}~&v`5KX`O7Z
z&s&+bk1369P%Ys>H4Bx!HZx51WJsY?-cEM+ZVwJi7q&QvNS>Zws;EKoZlQalNkNuQ
z%~#|35aK5TGr96!6^UqaK<GlqsNo4tEXo%QI<c=b*kUyf;JB*m-@l=IYP%8$&NQX;
z?=iR+4qgHHFl=f(b`49#b1#SIHHLL6pkBJB@W;k6k_q$DvQR*Q3Q4%SiN}%~lqu~}
z+6=@Me7;H72j*Mw0n<rW@nzlzNGc8r`6HT=KN|!%?YCk+@O~-h?hl!pd)|8LT7?oV
zAwo3NhI30<Uz6p*%#I~2Adj9DXQ@nihRpt2vb6xDrl5XtICvMI)DA=~*|9)bDL-Z)
zRQ2TWgR%`fO>cB4*vT%3#s>73zsNO=S2m$*!a}?Bdv<e5>`VwM0R=88zn6Fj>#r(1
zop=*^6w39Pm?#@oaLLb(jNy12wg7q9Raphxn_^WQg`9FIU&cm&ZtztM9C@VB&FMUd
z#~uSb$n5uEd3&h^YnKAYKo3YxB1N{e^a&*6!}b~ffSdmoDE=EX8%6NAy6vOmdaOOf
zhnUWsW4P0tznjweQo|1e46;H$qYW}?!h3?(Tns&1Ju|1cl;GSZ?*|5p?SibLS;?00
zt|lx5g__Vu7a$CSmBx=$glv@dvQ5wZp>ziDSpScj_Vg{0YDJ`Tz9SocxT4W)JvO)7
z0hCWj|45AIKD*ZfCK`NH<v^!Eh$?jcy3i{lN<1$%Gx`(i!ICv&@T)Aew3V}zLuQAE
z>9lrnjx^SMj+hq{Zg`6mxQ-NH#ft#<S7c5VHE_AmFuB5oI>&gmfyJJrPH)KKHv*tg
z^?LiedY_ds&krN~ct*A_4#KnIgM1R&0FwUYMZKr%Dt6aEYVM_%g&Z|T9WnP-L}xa+
z!2<G0eb-;C+M7Au{=~jVKcc%a+T%8RuJR_Orz#K3?EhlxoT4)cyLH=f$F@4Q?T&5R
zM#oOR*tTukwr$(CbMo(f&c)ed-&Nh!MU6G8p66Y2_FWJ7W_0%NNf$ZFLURfhJ@hpz
zG$4ER<f${e14n*9J-!YcQ+g`|0st>WORt@37<-)5_(&o|j&`xkFZeTq(zW*lRnsTs
z#Yo2owhUm{%I5Rvq8{-^(Ruj39LAztF0q&?v`#ONl<O83$Q@9!q%J&9TsIK%nHQv=
zI+|N&j<o6H3M}&wax@frQx1^kioU4=E(HFKn;MQOas%{O6fOb!;<QF-cYu-1LUQFJ
zZeh7`tA|x6Z7c}xYWdEcjoa>p>p19STMP1Dr<EwUR$J+qJZHziPMK`Wan1NqW4qMo
zsi`L!**jnptWNkuZtipf&vhJ5PIN|ZuD6+N+{>{;RP@KIV9lCgVYKwqRW}k=D#-RV
z<$COVBt>h`8BJEl4PLE?7XVh5hi8DsgrIJni#1<naCHjTzQ+wY3GXrI(Kl^sdK^kL
z`|0x`A<&2jj?kwWF$i5H5X|crr5AB^VC6)3GTZZpRhO<g3z{XgR2#QUYC9<@DR_$9
zRb+HpfQXp_BEOZy)reVCl`Mt+kaC@x08&F`4L^A~ol-*DdMJw?E#MPIE$om<b*Gn@
z{B*`YKu<188)yG0<qt|9nv+`PanGhy_5E&<bj+_%0pNmOQZa|vs?096e96OBsjk1q
zQVT)$U}whnd0xJ$ArLP4!oogBUP0hxGTSeEJH<v9sV><BSh-hZ2k3&gAYbeOX$PHJ
zCX9!NRG-H`Bue}{Z~)j=2-}VmJ1(67b?T-1a`hGGQYodZbu>9ywC|w8W!lCu^;Q6C
zrzQ!TyPRFLQpc?i#v>`OZa$29*3#D-UYr&8$~^@){UXj1W?7wR<4JX)wsd^9G^G}>
z`ozWH)-)g2BY7Sbv}LY<x(tqd*J#Wjg`w^5YJwqO#S@yKIDi2^Ih8!#SyL%|#doUX
z;{Nlj9CJ<<ADWvOYPYF__)gOZqgxwGlagsvW!O5{aLPDO@;}1UbO%w>R7$<_x?c^b
zXytlM<eSb{4Y-%~RFOnVAE8c?9Q$#1W;R)ptE_(4_~`>;85I4)qps#5^%X5gOW)n@
zC)crqKuSb{!+;Yxt#>v&`*M^O;g0lyLmE_QajmN?Dwbve8grkoOm#!#R}|V%7=uhp
z1jNn`RjenX>bg!dN-KX6az>ULm8g^YrO7r}`+gHz7iRicP@($QU(Eh{mb(ZW!EEdX
ztj4hqlA4lMz$j_skl^Ali1`p(o@prBr~u+t7F8{XB0%Y~&oseTT!A^95TBGH(Wm$8
zKXVJ_fiq|mU&2C{ztt@e4^WP_0+69C3G(w@ZE@huE%6d@PaYeztGB5Oh}1eJ_@i#b
z-CHOi7B@`8-^Cep{Vs|juZdIcQ7?wooW#{Wl#-QaJa!+~6C1jyOg$9)j0EU+sICW{
zry=~&1OP19zgGU`%?j8!`Pz|<{AVG5zQ&ds%MYo!?^J7RHZu0^RENvs>Y!Y8(kuJc
zGt9FH8D2@DQ7G4B1s$q8HFo@J;8fBVtJb&43MpVkEACC*^xFd0!58&tshwbRCG+st
ziar$>R5GUW#F(EAo_~~If6wAa1`!3TS3t|f#sH7E_WIT4k|r`)D%JK1FE5aer{9&~
z>oZhhzHc#uxoc$<V+1Nhq@aumK`j~%WDCA|qGo|0AH4B-BVBlL0S81-(Yo&vvMk&q
zJ9L<Hx($0QO?jpI->AKvBtrJ(p}k?i0EeO-4XX%X^JU6;F3ve+EE&_89T?Mq4`YUK
zIsgPTLwWmDk8@$WLtd+@m=!|}|8J)s6?uXKi6(R-YB;~3j`_^-KK(Juof)`Yh)K=Y
zX#Q~yQkY<uvo{@^X?kPg0iR`RBaFIG`9~QtH72m#7}T@ykl=xWCZB-9gA@_g&E~1e
zXfj_;?0^Z*UzZhkv%n&n#vfE~O)4gO1OOsBI!n=xRo?Ayb3F)W>d-~e$;2aAxbB<L
zBb!(#Ir01LUYdjAdBTX{bNcfxsKe1>yx}c<_K)0@Qo-4I@zQDwAE<SVh>VZ60{rN&
z=vY{S-ymYSa;#<ks~m0rfN$1vIy=!xs-HoLVx0Qo=GbsjkgiHh=aaP`<hj~1CqPXu
zYmW6BE=T#sxs+TGIIM~seZ=#JUlZQ7(^!H^l{g)N7fb|H+!I%a&SiS}aQajYTvSq1
zBPI+?dhr&Z4MRkSswyGe*dNc59QUk&A#nBP8Bal`dx~?QRXuuKN1*9zVV=)<ZLCu)
zxn2ejOzQ8rq%+PJ8bJBfYuCpB4|wW_aW~hAt*m*AY87~_wA{y%v>f=d@~Q8JxqkqF
z`eTVR>xK%dvzv7weTyG_3Y*^f&SJCUlHCkyEDoBl+u`@%`6TMU07nf%J2-?o9Ajt`
zs46*K6-*Whh0Do7%mLlmCL=tyhJRR}+{%uNt3AuF6)PmrW|_DgTOXfm1Fk-nGRqV)
zd+xb0Sjrkt&z-QvlY>wL7mn542n{rL8a<~tJ(ae~%|(JjjNEGVXem^jFSwdMLFt1p
z5vvO<?YhbNl;_TS<;(RrK(EHWSH_alDtbD8EIM-8rt2LrA9cFyohQ)DNVNejLtC&N
ztTxtSM@Qt!bP~4|>yLC#0Hk_vF!kSke;oa3__{Br_~;s(ad<qlE=1oW7t_Vy{=!cr
zp*VR;Xg5u|gHCmJ=h=bb`Ged@d0w<Sb0bm6;99$$TQ9CMvEU1^-B&Mr_xPh#>Ec$Y
zWcA|LBlgnhs_nc#;VC<bE<+@TB$m3fXk~^66N8mKyvpC32>zSG0t`4LQ)x*f5Tf!C
zDky0wD8W3!EX}&M$f*}g6ru0h=J8l(CqtngiHzf!5v9TuvQ^xtVm5lGP9GJP<`PUF
zOZftm)-zT<>d7Zp%BefJK-_gc6}FQ{5fCrr;||M>15q&Mty?Lf;eAr>AVxe#8gC=`
z_iPA)R8_8LDiu?c0~D6c!k!lhP9a;SwbEUTu#%#l@vzl#??gI~+-wYyu~?f-l!V#H
zmIcrq-uAebJ>Y_=HR~8hT;lDA?3)<Mxhg2iSt_+*dnYa^BuOWA>^}VAWp!H@53%xn
zl=;bT3P9z`Q6B$f4K_OVGGdxv=p<z7YW+jWHcwiq&hHyn0N7!<XVd(iaNB(xtnKa1
z{X!63Bks2$P-X?0@96YChI3L^v1##M{m6<yW~=JHe{C<5osA)628yCLdzgzJ-ph3b
zy$bG3zUqg;vb!3Y?Wd9WfX8R0zwJrQTr_jNPcI7_s+#`>KDumL*4ebk$iOO4fCzk}
zv!&5QN-7zY1t7hshw1PQHj$|o4iXOyms>7ab6wE1i_t4&EAzWLft+0l#J9~*EYs<5
zmaYV%P)p>NpXYS(f;5%cVtC<6$K|#<M!qW~LCF@(+Ab(7iK{5`%jZ&zE@Qjq%ZKvZ
zl3?n*nd+9ER!E7-RtI9CLKUO$i!*X3PffVHniHC106v0v(P8uy4w5a#sGub&D<$gk
zoZ7uNU-s!J9HR$;Y!W0rp!FR_tdUv*wz|ks(+3(aCWV;&GWaMF;G@J;gE|X_n0Azh
zx}l;)k*l}ZL*DRJv;KmN&rqA`+on6vV4th{zv-L^G+yGDK5cPmwt}QwqTkh6d9xqI
z>8J?n0amHpAUiu{rB-a-f#SFxLX~j#F>YgiQL)4nYwfV5qHK2RHTKA}uQD#Gld%ol
zwj%q6o-Zz@(>|U1rFXApxw^}I<)en+*kXRZ?7KLRE@saJaVaohPLg>LR!csQk1}FK
zl7bMt!)k%9VxZ5^I@o{jb#0QtWphGgGl{+R0d7NG7o@m7#f5@%J1Q&9pPweuKszC&
zL=LAMuCK1ZkNPvI&?ciZLq+%aDf^<%p`l<}WAYK+XYq)`9jskFVAm96_HV+xpMdb;
zmEcaeD!t_Znx{GZD35%Jed^Bte?ax$`P6^%rvJKPWub?HG`2DN&kY;%e+N{OiVE`T
zipjtn;91FE6QIz^(YatK$yMWEWXb<-zz~x!IKaJ;*#6@p{n?`Vf9V$6Pr79S&IDj)
zrT-sUR;4<mn&NU3FF~9`nF{}Psoo`|Mx|h8B@^ngn}~cY|KB6GtN{9Wqd?+6_b5dO
zJwEI{z%uNXmF}9F#TJW}mez}FD(&!_5096~2~V5rTQ1wro&T6T#iw{puK}Ouy5DPv
z@?I0<v0@8=#81Ew?E1yFZiC4_^=>2VcT)(y$xt`Z)6ki&jB{ZM8!WcBHG-^q-ioi8
z9~cQ*Xj0Wi6FK{j+G2T~tj}a3ua;HOWID^d{?824#Bx8)h)JYoK(uL&Ca4>to+19l
z?l~qR*Q^QuU!O@4eUX+)k!joM8uIDPJ|=W9h#(;m*C4=Z1?1K#CYq4Ec(@8(2<+WT
zn~A>G&6KqzdY~(3l_t(vqqlg<^PFvVBx2W7Y`TijYjp&it%DjW@=4dA`5MH$=)?)1
z_fo*iD)M$FllfgjDagc=g73S~C%FYMi=TbLl6-jS>VnXjwgp#XmWIG&E~z|GDeQuR
z1uaV|mN3A&AW2@a<eA*Vf`cV(O{g-bNItzZaRDL$ge4P8)H+v1@mf){lx0D{f|Mm|
zO{B6AO}?I7_v{~vWT&vOqF~A2GwHE3tiNE2f~CGn_-EE*esu-l^8TZYXvifLY19Xj
z@;N8Ds|E}-Raf^i*(bcZX<VrQD#)0PVwX8|3~T^tklW2r6PwIK=1Oy(Znk&!qwd1@
zJKHCC1SSIW&O=X+Z!t}gdV%_%ao}-u|1yY8><fmM`R>9xDzy)lftXUku}Ts3%R296
z4JOBhnRr2fhvuvE;`(Jj8r;37=@HlN^~E8nz1_z19Gy3EYjiorO}aWi8koqJYW~S9
z5d+{GoAPIau+GJ0*Vh%59+_k+EJK7sSDKA~*3c$eeveT1w@eKV3ccXui}D;>U0g@O
zrg1|up*bG<>2R|I_y?)?`<pU-UZse4t<1pmrN)#A%9z9cAGCu~Oi1>Q_bz37v4yDB
zo|jpV1+pBNr@uTnu}mUs%BW@joFl%}*8Bjjx&{H3I7Qb874X!Y8n_MM-VA&%*-S99
zU6fSkAgR!NRYChID|mm+7hp8lf#yku7~vFYUPE6Oj2GDm!WO!t<=l3w$<rh5{4nl8
z(W+l;_L3043Da}VQG{<1fKJC6U{YbHYWiR(WvGIvXVg^LN+>yqE(y1RViCaBdvyUR
zwm4xZg;{2lUxQ=Dt~+rgJpqI0KFnn0l=x>Df=YHqjzR`LmgTC){ZZNX%sA?kYloAd
z#?byJZ%!z#+7rXMiWkXQnM6Y^)KJNGW7ov4N^!0DUdAqI`6$UVw2W%PO>1SmppBr>
zXlAH0>LmXC3JreVcJCvv_k&z24(x!ZZEcPnw%JJa=Q!+{uIe#tp&Nu(ZnS%^mt8Ac
z2@}wfl$bj+|E|1>ufDoBNHtENa63NkmtqDp1gx!qx1Z$DkDEp?mHK!t&(B&Eq~62=
z0?S{-d&!OF8FYYETvt@%5B$I3??{qt&Srq4pfcDJ@JKpjNjd@85>yJV!T})oFEH`A
z;=Do)SW{zP|Ex(XDHC?X64;?J#P6|sF*Vj64Y2@NBM}NOxG=>r!B}KgwOwQOdGkaX
zNZ&^M%>rInR9h6N-Hw{&OZ8IN7zm3IDsq10m|)bpLC99|fINFkv53%TxwzqNw%8+b
zjGTF)w8oeiZ0+$F8ZGy=k1)V@<VPr%LBc#skn|$OVsDS0X19bme81wU+{zao&|6I#
z?t@W7zy9v-HGi<q7`9m=lzF?Ia~^5w?+R#s%^aG)?d=09l!b23fy=7|t->mHSrODN
z!la^e_b9KE3SAL4Q)At|%2>C-aR_oF^9Hw7SJ4%}EwkXo2}2#Xe6RqccUQS|*&$qQ
z7b|???YBq+JfFkOx)bezG~oqeN=~<iEq&ZLUfA%5H6UFRdCYALRK<~k3ZwP?_e*q|
zZ19o=Y619lMKGeA2NHZ7pShPAhms<lgmBC^5&WPZwhVlc&H4`Z^>un|iiG~IZ~&s%
z-PR-6xQlGcbUA#z7$Jb4X8Yuv0t%E^ZPa+M0^BDtg<$$52=Qo2sNE0<WX9)Do5`Im
zVY3sA4Jv@=O@4GZk}RA=gcw*^vnVE|FKP99ulB$;(B&CM%|YFtzB0K}6m12?Mb0N6
z&;mcj(r}ip;dp6_qtRdHX|bu4-V2g}n(ntLz^!GV?Rz@fVgvx8WBD^J*q4u09Xg8(
z)S=38B>jHjFlS9rUN^93mof;_jUNb}$zx!~D4{xU=9$$RtCN)GAT;*<cil<XB-Gvb
zDh%$)7S09O^ri&vAKYrTUBJwa)Kza;(b-Xdkl_pv?(U;z3f~df+gol+`2N58!NkYl
zE66=$@@*&vgkJ#P9rA-g9b-Ejx6G8Jj4Z$89Y(4SFx;^b0=HO0?L{cRHz_hVefac0
zIIQV+d!Q$CPQK*ed`*4n?yV#vdzddJ$(r~AzVcyBa{w*a+?OyBhOvvZ2~t!F<yoU=
zhfkO|#uZr3K%FWD0hoF1kAJ0Eg7=bb*@t6w2X1=WP;LNYg)jQb;HYELR7XEK#*7}}
zl{JSIJj%-^A}ad#$wH2?6_zx!TUk$;{1!{eWt=9^JEZx9u>lmDbKvVws;Cb5r4`Ke
zz0-qg=(O-+B2}aCi5M2F7>L$e@w*74LS|Ii0krTS5GIg++)-F^BpTjV>%$@HQOD<n
zWlG8#i1dKM7)9Dk{a?=XdC#yPHQ@X%*mz;`kXchtBPUjEUgxz7JOS<gv8#%GY~#;e
z!~d=}Vmge=AAlo=q3l0GSvRHEE?<iYEr(U>l_8>7bwQ7Y3NeWjPlW4_Uf9v`ACt!<
z_`wdPs=wS%W~q_49jZcJDaeB=Cw}^uD7sr)D+YiKvAiIfe17N!9PgV$qDWS9N`aW9
zs#xc+bn>ttG`lKj6IfI1$PyDJPkOl3l`<QMI|#FD3#EWwn*k4)$E$A0@9m2^0~d53
z@CGS$#sT}yUSipN@vJKm!>T3%s=C$IxU14lIz{6cAj~C(R=KI$P-1y1@w_4f^8?Th
z-xz>FsNCSO>*XH??Danb)c0g|s&MWDgr?lElZ0V)u(G}Nwa8n(CVQi1MD~C2b4o`7
z`{{12lYAIHEDQKcPdeB62%#cV#Ov50qBB?pN-(b_b+My@KNgPnn)p<ip&>P*L~`xS
zVAmqH1><iRDe!KomWfn9vQ#ZZByIXgz6Am6ymcVhwgHv&&X2(O&&piIX~chPeszNW
zxw$3?WXsU)2bb*Nz2U0uv}4iFAYnzW+rAr~HQOn+hBzxPbiM7SDub5ig}#mHqFS)5
z?5EY$JF4;)Ya)NW2-nngoLD6`J2vo_lNS;xpbxpydcUG#s5=&|Dd|Rp7dncA5QPKa
zQ;tq5S+uMqM6in)35**)G#VeisWfv2zbgKmhG?0#>gIY`J6FC?%?_|&mqdC;QWs|K
zl#A_F&3Ptk1r=>5#>+&{5n2WyA@|VLniYb=3Vqsix^jLH;89$nJulVNednSckBs<v
zbT1QdP#VNmL9ApGkHFQ845HRxHoXHr&5I*Tyy@)1M#}j&8aIs41aDhP+*~>ICs**A
zLnN|hro({wVp#uZ`yBWO^e}9&ClH@PuKb2f13^6>yOAs6M+(TBY{!47s%~L>nTGrp
zIz)T^9kD<#`)Da9rQpIMj`Pw1B)@H3Xi8cv0E#S^nNwaxUTS&A)>7r@)DR8WOQ0im
z9mvKg?e6>8@wre5PSR~t4~{z%vPCQ0vf!o?fv&0pI;+uGfnHo~<!GhRe`hN5b#uNv
zoAk2t=zE;Y12!B)R4(Es0@+Jl=^OajCfF#O8xUD;xlFa0(o$QUQXtbCqSkuLjo&IJ
z)WE__I+J}^*G8AaY$oaTB4Y<Ig?l%Ms*E6|;<hiIZttm%RsORLsO>rUn2-s$rc7^q
zGstXc7?YEOo?yH2E>IQuA<pOPeK)A-t=)Pyp~3pLrXO=eV_GjSsmt3xMb+e@g+CHY
z1xJ)DqL40w@13?=tzOA~qZ%Va(;_={o6NZY+<{S8#N~(B9_IagPI&;c=>+%q<I+Ov
z)p@2g{7ku?P84_od7=VJJPUpcE3+(wCqm|#1_Sr?QgvAb!7r{dxl-b>{&5(!j?$jq
za$V57A<{mZPu7$C7Of9|^^}i{)jh@{LDhyXV4SiZbY>=zL$yqD<5s*#@e~XTR{WxZ
z5BjVU%Q_<FE$*Qk*ZKihmr$KKtHD)X8;B1s8`TPFX~x;fkU$(VsJ1?()mE=)kF!54
z&poA5jyoJZ3GZrfQV7}?UjXCoe8%OcAqR;&^=YgZvRfPUcehr{%Vb=+d=N9y8GVlP
z{-3z=W58RN_sEVA?{BaEpF=7xSXWHbH#>AUYH-_c;f_3p2G;=mIaDB?7F^gkPjHdy
zj0H}B0bx?F#mem7;+Yd=K3qzB8`tBi97gspadQdtA&cx0J%i!-b%WWRhWSy|T6H4-
zQzQdVxhBwuvJVTVDhv3NAIv@q6gO7*u{*Ro4P`oODn=7qq*;>8!=e*&1%Jd6lsoHE
z$Z*~w5YnO1^DO}RQ0hiiO?IEHE6lpxb7$jtqts{eVeS{*^r3Bc0Q29xSt1&#)rdDD
zhEX$ywLX`6C&Wf?{#?W_UMKmtqA*UL;NjiIfjqB-beX#5hvy3(u)%?=Y=2UqrNq>=
zPlc>J4?hWug%)>2Eg@ODFnM6vF^}4L2KFDHi^DCD#*b0j)YYQ3f>>E&mx>ZWl30#e
znLt)z-}9n5Q%kucbivnqz9^#3(upcM_Ue(fh>-Ha+p%`zBtBVbA3AD6Avh2@1W7{X
zk2z;C@w2$A^ehc&*p-U$;h}Asm2_3^Vcw@{=<#o1nr_dhd;dsyQDsSw&6A$x1wr_i
zz)lrM0v>?Z_}S|`lV-I232o#sG)f2DU8w?hlnyBJEJXCPcUt+Ok^`}sRW*$;oz5$z
z-`O;T(8&vt-SSeE`bBjH@tV?I_)M@eiy3f&AjpMEf@xVCLBuI-q1T^X?WuX$xe5`K
zhB*E&7GyP^Q<uPxV@dN8KR+mG8x`DCNgFv-l>h+W#pv?@mbL7u_p4Y$+^gvYuhSMy
z)f#!KB=s2*BMN;od$+|~66dO-UQIFgY7+Ew{01q^7Z;|wZ8|q)MpNSPW&D%U$pMu2
z?^@dP8FZ`1(xJYiW!N^ZQ=H5{f9d0-!#2c1{EdV~OrXpW8dO^7%4FyQtVZgpRwdnG
zi8=xPYSSs(To3m-(sWP4`!`JG8QQA@C}{jsHrBmVihnM4V?qNmOM*IG4)^zI*04}d
z)%y=24_c#Qa_lDwT_{v7kO*+|^7a+xZ^b6mZV4W;DF?ir$P(ffIN;tr?!O?t3Ke19
zv*R$%_e$bU;!g5T!sJ#42L?xsNlV$KiY@>|@lqMi{%Vmf?KNGykkk1v!?Bq7;v0;$
z-Sgtn%&FhLJX*i-V<T-6A>vJXP%nBitr}vzE0Pc^S0rTDIwtjl>#GR-m`ct@BU6hI
zv~3gq^+ka#FY$RleBdzdyT8o&yDVckCX<ky&!_|atcX0r-2}(rJ&0A~Nxb2va%%%(
zS@BHOBZb}~1m^TCD;_<R7L5?O4&h>8VnNG$@EYnF$8bsYYq0#G64E9-?Ts&a$(aTR
z0|!Ww*qP?#$K^-HC*VZ{Z=uUCw9gWdfPG1IHD8ceG&%<&HRgDe{hT1p?wDVts?9pW
z61|osp6F)yj0L*y;ZM3Pm|@8)mR<m2vJ=m^D2|_4r9t&G3{R&o`SGSSH@b*wh~;bv
z=N9EIi6R!QM`<#D9`_bXGwTb19>8DiU*mGjv+S^YqEo-PAI=*4A>ftlHDo)F3H0u+
z%)64ZU{-|MufwA6{F*$ct}wW4oJ)q$mW!gI>9qLc8?|KjQI%&05nHy&X!HP=!|2LF
zI+2bsrC<>RUInGHoJzQuab*dn#NxGvE-+6Ajj3)>u)Q@`pbH2vrZFe%2qqAHD!X?M
za*!lhVw;f_&chc;$AXw8E~e;^*2fo@T;6=+_4|B!vnmZc`}Jf>%E0X|aqm_Hu`&Hn
zyS$vn>QF+0W!wy;aDdSDiW$IgH9R44AJKB`E&8x0z~;}a7FMm8Uz47;j)61ONQJ+b
z81kHhflC6)kRp%PGq~<=&KnQfFtKz`Jd(PgqP8LT{Mu4+fc&4r8ZGp>qKa!oU;982
z@X(kPf_Rb&9X;cBH5K9vWDP+XXS+z-&fpEaI4LEj*gL3_gyCh@HWolDTN{`=ggeAb
z0GLPXI>m_S<Qa}aUSNI-PoFzdeVqO85MwZ53u|dF>&~vKrRg2r^WyM7@3Q_24FR^h
zzr{yZ?Cm!hO3+OzeT}Tm{C(Vwc0RW1JOAv8ZYYaq45ITE*P6xMpXIpHKFvqACDOxX
zB$Ecwe=qlUX^PV7jBNwjP64%;->-?^j;sP3PWd}k-xTd#HaX8aB~RAR9l%S~TnGF_
z*}FhZQCtT51!v0CKt$y&6;-XBdo_PNf!ccJVhHioek0bbtdFh_Qp`rjEaj6rc2|5T
z^KF>!Ruk|*-iAX1!f7l@D;Z9syEo8*r3Be`bGXh01R4Lv#*zaD=i4@GY4Al4$e<UN
zV25+Blm)E7WNpt!vytWUMxv*ssWoLMiWr$N6I`vH4X7CDwwUS0+jaxYw;sMZu3=XB
zbII<`zE&mDa|jHSKv!GS1R7Gdtpm|qj?Lnj>yYAc4lM#7kWd1fMGP9`$bdmKOc3%T
zJ(;0ppPO(kW-S1re@z%#DONEdnXK%#9~Yx8hsM(0-pD&;#UvEmIfJ>k-p(bl%gQ6(
zRye1#Bt5cFm1VK;8?J|$+~q&vM=~E=R!@LD&QF36SL|z(`-@)Nka_1iS(Jx(5S70O
zdhPJ`0cwJC({Jgb+uPc9UP^@zNxK)QEt4Br_HWwh9N2)14vW1<*tW4YlkYq+)Mfj-
zpf(tc&&P#WNxu!Gy+U6g#IVLxhA|})a|vX7arH}e@KdrN3^(-5-;JKMN3B)O>bMtC
z5=xZFaU37!&B3ks7HPsBqoIsK59IykjP3~pepzH>W46zQcI-UaY^Lp#c5t8WE_7MB
zh2R5QR5O53PVssv>OfdP63qm6%m(2~@%cCTl&qpDIZ8|{;b!Z&dQ+;Huc6&v{yG(Y
z;7MWug$k7B*#f!53l&Re%T~WVui-1i#8RiJNQ%cP`=HF7!VR1YEaVf!onKV?i@hO|
z7RIauM202QmS%925mAq_TMUOsMnXj6$+9tE1}1>7karu0u;<5wE;v^%ENSZV`79sJ
zds#J%^UI4f5e+^L@|1)PN9);6&64ZY8zLF+Sbbk#)LiMt*4Ne5BA@Tz<gTEAW>(MJ
z6CWK=*_fkR47(Faw5ubnb&syElUjdt@kq;f)z=nsMlXU;$cnIX+Vb&jm#M=M6zakL
zT2ugB&!XAP9U1O0v?ja*#1mUn4+uCc=Kb$*^h;akh#iD*K2zMDYPV#9y_!8JJIHBH
zzIM9?-i6|f@*6^n_C%Ovvuioi>}^?jk10lQ?pf$!O!5S!z3bOPtGGC$k~o+@Dj3~?
zLUE?s%(^Ajvf-t>C|ru0pO3eR!jY{IvQ~i86b7{JLvkFp^w0U$q3$GWN7%_?O?x97
z1+A~^s(oR{Xr3N8R5KvR>1JZq^DuP<BGYx6q;c`Q;`AHZ4iDr<K1?sqc3mU07#|m7
zd0&mqa2HiwzejV&qY{iw!S1?Zi)x&}^oizu&Yu9k%hpdd_n$O^DpsMq)=DT1YaoCc
z)B`-7;MRgz03>_U%Wbxqq$?quO1`Yfh0%4+khO%l11>EkTovBa{+=k91X~Md8N$xl
zQY{i#JSl-Ru>j{e*lD7JW8GA?kqdBquV`9*h3HQ7Y=>&LNV4~oHc*0FX+XDIlvrH{
zY92`RqQRgW-cXU-&f3D}ft9tva0BQcxx**AbTRP8IMb`eVY0!_YbwDOXc5F}M7&FR
z3z@rF$swLLF5bY;b(zsL!?+U+OzGl9ddB62gzvqGhaCBcU+Nz&<KTA0Jcr>&jh#fC
zoZ&y)P&X^(QLA@}uEM1i+=Oxx3Cuqe3^B2CiO7CyD<)cr*JZHh8D$Mp0tdW{1cAOU
ziC|$-S;A_`TB8UoYy}-P<ih2pYjYTM!FG=38HwAmC@Bl~(^5nwIp%O2nWYw}iEcrm
zZ>7<;hCUP!O%l}Ureq{zkR_9t*w@>Zb2z`8N5_%0_Yn{ZKnyCN(5yxsr|cWYY0n;1
zTI^Py#=+O>WaUYLv^p8+*aP%S+j8XkH-#&YMs{WS`toN4ml{|h<~QBhBDp=-rk>xI
zGxsgMzCdB;?c&?^&^`P>_|zvnoU9ES`|PaIh%ShD6-mc;=)bC4F?n=dq0Y%?QBcfu
z?-yqlmmQ<Dgx&o>A1I*t$h7a?M;`GVDA|DUK&OzA{5sJohY*sR1puEq!y8Rt*@GE>
zVmov_AJp%Q&w_13dl6rd&Y>kG^K^(agN6%ibpyMPvnyV9O>|(H`xe<Z5B#L*@qa#o
zG70OWv1*xn;Zv3aeYOp`h0c5)k}$Nd>WnN=%MhkE`w2WdZj^0kMrW8BrCjhz!Rl@^
zqO%Wj-gt3H_knPTQvv6K(aGq{-Eqo$!`*<}1V?r{xq)Vbg#hOol0llGxIF0M>8yZi
z%!PjsuvVe(>oQqqEqs+FdAY9Jx7L65&#JVmIDjYEaGRL6watRx_t*+u5xgZyJvY%!
zCM8Ln%u?Nagzz%kevYMPSwP$hWhP0uYp>xaP)`t>X#e}f9|TM|nTOqLm{)k4ZbIn|
z=|AzQHr0HyU7mZB8^(rsKRMkGzP&B1Sk#R$H;4EI#4-DU^Z2Myw?kFXiS)W5T_nk3
zzw2BNKVC8^E`P)NHvzuSNj|p=O1{Bs8za2_mn!SO>Zbp+SFEh;3{b`p|F_EeZ~B{*
zw6L_ea`MgzST#Ha6rIRF8%GgyD`TcVZ1l;KDWF)%R3_jQKa~~3|ER2Z;yk1jT~LOv
zt#doc<8#~7(_J;u^<?;iIq_)cAweKuwEx14$x+hCnVA>PfW?T8)-*s!$muZFfKjVy
zoOLh}F}g{)QP^>k$eS3og@zBP7L8xW;fGSCUQAz$PrZ6~k?F?S?jsV5yL)4z12EAu
zTX+d+d0qLdcU59D;G;DszroWzH>?~EuVnDq)S~h_<x9}lZb*B{MoUt>5GkGbtGJ1n
zWII^*1nuP1)IwZ?6_TiA;}1giiQQ5e3yG&mQ1(ET)3lOQYxp|^a}kE=tjq>(86&Ax
zsp4r<L`o9QKDgDZ*kwo(504N)0sPimcXqZTqWtN<_h|e`w@9}LRFJj?><z$ncMV7b
z1|avqR!5)@SZ<D9b#H=oVv}sf>r^|K@f)8eP>F>IAqaKhIK<xhN>FZJOW-&2uVIJZ
z^>rNWTh^ML4}3x@U#Fllm7<GyBrB;CDug>g8-OdlINu!^cUg5T487}R08%~LXEHk&
zPXl=ANc{@9g(jA!<@H?M%G&)8u)G1BIpCzsxgIFzd?g5|7>hynGnnHMwgHqDK4?dL
zgnF@T<0Pr#j)rN|k@<3IgLoUX`dm2UH1tYINlY)Ro?-1M(w>A9esc(<qLlQiJdBS5
zblhdk*c7ay7{HNmv$*=?fMeNx)fUN?l*Igtk#qh0R2<{jLri?@eQ<NpR>f@)Yg@=F
zcFi-oY!K+h0;W@{$Q(LD#<2J>Lp?s?C0w)F#gp>Kzo>%hvA^LVp>rD=r<5E%FdW9V
z)|tRi?tnXJH8oOWoWu%Z3Q-CLP=qpnU}Gg^#<{U)3(n+YB%;sOfDc0^jVKkOGln}6
zzeqZI+<MvaDU&bLhdS9wP8{NoNO!Fef)kgvvTpY^x7Oz+<#mjPemAdR%Fet!dKCF!
z&3o&nc(V3k#kbEJ5gZ>?eU2rf=U)wRohn?MQ!AGj@Hb=+CuGjBrfcw={sc&Ij0d{%
zBj~!tw^)C(YoCL!0aGw*4Xe0$v=lf#oe0J;<MYg87kNfGI*RHozL?AFG2e!~E|DHG
z%Zq|6j`A)1w!fK`73RGa%@=3kD79mJm9Ms;rIOxekAn6apL16q(JON**cnvf>)|{u
z2ChNia>fW=i=l11LQj!^*Bq|IzgO~Ny`oIX^wD4^?^<~s0r6R&MuXs1zpP-Re_8Q^
z8~rkB9c>BPZvb^pW0@Bwx&fu_r?Y(@m@YQ4Vd2>2)|&jczSYr8iPOYS{en(f(j=5%
zL^A}G#8lr|#SZlR`g_`KmX(J*^+b(t<d+0xL!UCndEQaE_9x}7u|lC=IE!MHx0WA8
zOG)vHQZ5}c2SBL$-(*fV!mSSp5Ms#}N47)Wrej-=Ttzsq!jtu&3OP8`HCl$vx6^^6
zhwQO`s7?B$v&}CXxe@Gk*}Z3aTojy?2Sefh()mi$HHiy|)F<ED`ek2tx6}E`Yyd7E
zCRHD2#lmTXh+N0`B?|St#!-`IO(SOM8JODKAERU`IyU2^mcSGqo{M2_o?=bz?LQ#^
zAnJY2p8svw{bx}9XV@_?u+S%0<$y6Dh|5Vx$*EHbN(-nlFnTl7C+F&b1ti~0fMSB%
z8rz%yGfLK-1f}?G=Va{QX#US8d1o99HJK3Tr_leM2gaQ&o%f&p6IRCmF#t2wA(WJs
zm%8@p9jaGYR0%?v^ai71LxwQ&$yH#&pu&vJfak*hNL({{1Z{aFGlDB&P=^|XlBQuq
zl1!J(nz|LGq@2uqxdnf`PU8}fO1yqoG}BfLPHaABcs)H|c6NKk(vyB-gbFcQweE)j
zl%ueVS2(EcQ(rYIA{$={3va@NTpP3LHQIcQx-5{EGRe7K&dS4fUH@T#!}l%+Gb)4*
zcqf)?%h@WGR5#1E1SW10ho?FmuW3-j+(11(+Cn$j+Co3yLfJwW<A2a(_;Gu7_T?98
zQa?O5t5NYHn$#{)O;9oSjn})Fw&(Z&b~1N$a?#-UvvhKOVfrVuF;Gu-_iD&T92&K2
zmbt>4xo9CDo8a%&+nG0(%~z+K#)&?bMBm!2)mo`~Hr?(kz*wuJQ?0p7-&Rtq8744H
zkniE@Q&PvJOotewCXjwkMMSChuP`l5xSCKf#i#bLGmNK%PH>uVFoo9|EHP05FtAOK
z>V4fZQzzJ&%2QS&p!a*I4Xjd2e+Zc@hQky3o~g+g&_SjmjIk5sLlF$7LG+~mL0{g3
zN0NRr$q**KNYFk&$Bq>M%{h?XOVN(Aj!cc|#xIYwtD81OV)s~I|J&5H=A3NM>p2JE
z#WrJ|F_in}pY^AORe@81<z)aE-N#G^i@<KOS&h+O+K%rAAzF&yxQ*TxKEJ|#91~TF
zWMLWeocXM>*SpulPfAXFzt+{$>)lMxu~<OU=QQ%G$x|RUIZq$Pk1wk0BS4)k9FXT-
zy4fUkKrHZ|=AN3@Ah(bwcIddEVdVl<{f$gxs^RK|_Jd-)`&&GI(H9FaQ6u3KtuUTf
zx<lI}T7jpzAzF~{FQsm!y4Z~+x@1Hm!vApSX3>UOtw85x75hb^Kp>9MXNqomlm*dN
zR?P{!L4dJPqcU8oc8M4wEh{@)KqU@{6V~Y?T^0A|mg+?D`-6Z(5P+3wI-6_iX`v;h
zXOZDHpu+b~5(93BkX;FwXGQJvmcds+-N8rOZEu~wyr@K0<)T9MZ#ULMka~;@C-1Gy
zgZH?F`Hp<|D9FzApI+~Rf_;jQe-&p$eV2!Gr5q*kK-J7|hw(UF^zig}Fph1Vb?U05
zwDR?1{+RW_r7kFLfXdf6rGVH|U`~YMUCE}42oB)ElGZ9CbW;V~)M54@O7@fnPnp@F
zM2&Ie%Pg8PTSPMQ@UUVDa5Q_hpO-zM<F*Q~Ts#hVL+<{T)cG_4ml;T%962O^i$TG|
zB<_Rj^&5W0h}BIfoi|NcHZ@Y{X>s@G*5Zi<pTM{JqZDC5&;cQBX9R4=Komct_*BS$
zRhcESe+8|AAVmYftHqF*il-@{WT55QB-`XpctZu%s*%viZx^3lf%#_k8z1tA21U!`
zAx+z5j3Y=V>ib^#{f(SIh~j)RO{z$}edTn!inv>f5lV{F8*j9`IZ!4P^2=eb+<nP`
zAC8M9EvA9oselx!#n!I+d?>_QKf;WiYL1Yah+Z*2&_V{lUTR!hb?m0%=`4VmlFaYy
ztpddA^vpE>#9gN}itQ+?kKdUk0OGZx;QBD}*K_r^Sir#Vs32*#wlLD3clU~1n_Ywt
zvMx%Vna+^nteIgjbhP8Gj_*r02iiD(Hwm2OnrAeeUA(oeKdex7S)P4{u(YPxN|W0y
z1M^W2s&V3g14+DXQB}0}WJHs5%5Apa<pov%nyg%ASM`4d`~+|bP_P&S`&3L_WK5xz
zlWL4{5$-=?>AcI$Yr7V|lM$?}2+#|_`R@+h*|G{=*OHB2#knjk)FpG+8NG?=APEp1
zV*4mO+L+7uOte|jsS(kGL>)PoD$b^ZO(Gs+wG7Ar6GUjnr}tGe?>n);FQ2(o;diT4
zUnj935D9+0(1K&2>!vl5rF0E=Fq~V+%})33y4Qu&3oNtXDe_NN1`GbhZo*W1p|GH<
zRZjt55o~dM=vTVG3-tmD)2d*08q$a<%L2}k3N51ojVhYi>Q&`G7%^3%ITzl-e+V6r
zy9pTp7AugG9M(<->2lvpt?8d3aJt}1I^{E!*pdgeIoM}FVa8Rk3AxGY32Str)M0(>
z=%{`vAkj$7m>EH~9?B(?cc7|xR>zJZJ+9C&3kiu(El(O(8sL%zNu{UKI?s{)=}iWN
zdZRs>NK`zf>yZIKsRDwtw<HXA3U!kc!vzIsSH>CevtrnG=t#NNRv0N3+-frhHV-@9
zwPj}Jn)>$7PInJLmZW%RckG=Yo&E@wr{V&;6H>D_wp9^5ax?#Nttq?zYKfj^M`B{!
znldhwQ1%+oHA*saQk9_M{4q;+9!PkSqiWFyRF4L=6&+Y=Mv-rFW`r%t8C94@ll22a
z2azo^{1oAMsHj4N5_r-cR#1#b!VVFu77RMTbvX*Hm}eU;;guRy8agzseU4*9!7bRr
zYO38+P@B6w%*q*RsAd$_wEcB&PXtleeFNg?8PlYQw+66jLP)^p$AN#=jQHJ0z`VgK
zES@+o-ANuT-Amw^Y?=XUZm0H}m@NQEQ{_m_^(7R}9-*4B?D|>W1(!?<-jH`|?F~^T
z9D)uBCWr6pRF339Co^FtX9$s)QuY9L%Fun;eAit>8I$Wil5N&wk>@b!zpj5i^E16z
z->uY}42xPS23o^&Ill2hf=)?Pv$sTle4u@<c!%JOJE0$^WQA|QnIf5$Au<554Oqks
zQAs5)CrfeDc9&rTOTtIO41*7WMdhC`L1vj;BJu&HF=2_75F+&;-0?B)bH(@pJ9>s)
zpUAssU(-J0`3IacBGoB)MCnoVlqIxP;sICr;0_mQ@Z**?-bIXN(z}{F)RQzJ4@GJp
z2y$EI%c9-T@0rVY)Mv_&Oa*iT{cw`qKvNsMc-4soB5+L)wvXEB<ec^5(?2djn<=0~
zsf8^$WI#T{kop{O@BT`~Jbt8Kea$E=(&S4@P7Q;0n+3{dhwR=AWOndEnCb(Br9AI!
zLiRQu+t1G)j4y{Xp4+-kEw9l8+w+xVjy}4$zIbsAc8N4KZW@D^H30O^*`PN1EA<ze
z3OJ!uFZl$;IRT^rdk1{9xX@OS<EpGlOD0LDbBd)KA%}!vE{n_Ps!EF@jV+}cM0tcL
zSB+V2v=1p^PXB0br(LdZl&`i>4?(ta%2st6$*2bjaF*<&@ag)MUxqG`m#-?#VQ7?E
zmZ}2OmFBGcl`1L8Yyf;pf2*1bazgrnRy$y|xIHmww>qJpG@E=nBkxe`4y(1ooStsg
z1(_x%-WR^^k8^~i8Wa@=U)bidw_c|6ZrLugrk^*iVM)M{4rjo%ZSlAAhslmsT;o1j
zUDoq-=+Q{5)AQ6sOX*dj>T_)588C%<b7uM024|pbW{G`e?Euro3i>fMKGi-MCnzk$
zB2;s8`|*nN{u0fm^LaRbNkK3<z=N->WRzJ8&J-DU_4az@Z1=b7f_^6}7e@P`P$Xhq
z+UyYi;n5OTb4DjlJ~+u~P>|QP8#x9|@P8G@Q3*K`6?}+2lz8^)T0Os4Me9)fCE6N&
zEr=>npB!+8vIbbus;yAw7m2Ksr3j@tiZ(FsD;fkM#O;dzZVL0d(G4xkE|f&IwtM>x
z(sWw8NUtT8^J&ImA=Ds8mz1We@tC{|`s_Mky_a(m`x(bC8;SXFy#>?9>O4Sz^M~&@
zjol)FbeB>qZGQ4Q!}dOJGxK84r`k(S3pE9ib22H1N<Khp^8_Cel#1Y0V6H!*>YzMe
zR*^$xH2!NvLY03#qBZKAnbio7#FyD~S9ncd3%2iO>*)?FZT8Er{q;QWPvb8>HP~@|
z7Hc^(j;z8m(h(wN#wEU9*d;&Z+J4k&L4Eu=N?6%3THLd@a}ht^i|@@ET2J}8#j1^C
z7fx!B76HHrUE!2CX9S@?%Z{JK=nrf=2adu$JkdJCH$sq%t#xQ@af~u^-7cQFKB>8n
zPWO`ANqP40Xo430_X7Zec0rDWA{Ch~NpyDwo;_*_gd)gE^7RRKGVAKAOGjt2>k{H&
z@)D{pg}NAOf8w9QH(@5!Q=gmR8P{*6Tc`0om`%V1KO}b#6?{PoQN><m**u*fgNqd4
zXg0q+eYAv9SOnCJQs)K+S3UN5^fWC%D9}RDY;g!A{&aSjHbtCxT!RgLm^_;6TG|ck
z%hfcujWdtDiQ%^vyYfK#fDxKJ>uvyXU=a=@;d{&V%D7i0E1j;qT#Txc>T_?BW~~84
z(-+`iwZ0k`4?#Th=Z|-X03-=JBGgN8fVsj0<$L1K&ttj&3{hZ;qG>UXR^P*En2YN!
zbn}s~s+fI(4t}`LTaPByTD$HeBwl2dZ^C7*6);WJA0b}lRRM6fap-3?Dywg%E5VK1
zrE-h8oY{8FexGh(dT0u#f9JYc+7=gWFM#zHG|MsL-8_#wj(CLgz>R#g(|_Nmebpga
zN`Ca;NtT@Q2Z1LX+kgU#aEpt7VY7qvy;%2FnUWw_PVH+Rq&DpHoNG=fJE0UPo4YjV
zzt{s(p6HO!FzZ5#ZhxKVTxBg8M^T&`g>uj=8DjB1J>FtsrsoXyb+_`x?#xT9GJs+{
zOOCiSf@!;F-#)Kh6SOK_E~#(L5c_(jp`G3IO^0^d0v0`8pq91{$#OgYKYSM+6XG-6
zg?sjo;l2;Qj&MC2J;8<88eD;%QF4sczO{#fh6LtD4RMtiNJjp_uUef@92=i-y0gV`
zD|3Buc_$7y!X*<9@dabpWCTbCC;+Nv`Fj8sp1;8f0z?iE0_5#lN<>4%i-CM=$sO)K
zjGx{?JpB<pnBd9Lx5UiUw<14R1c@P81wqjOEv)X>UxJBO<fTcY&{d{6_~x8`Yf8Of
zDt8v!e=Db1{x2DI5gG6UH4tTnr~X$6mIINK9`FX{EAvPRhGK~NcHI{ZYJeUb^9Ah_
z4mO2!CMyvI6)O`15eaXM0zXb3_4qEI3I-w=m5`-f$1k`duxV7_h$Z$)Q#BbS6ML2v
z^cjI9%~zQ5QkOzEuEFS|#hBPk#i>VBj9qy;GoVeX7rwolRK(zEZ*%C+p^aP~q)qG@
z5v5iIM|8~?sOWombT1+5OhAZvS>=CWEe#jH!Vc~>!Jxc!XsjPLiZ68>67i_rA}7{F
z3YJEMbv}kYa5EFfE_2@a?WA-Pp%)$BBIK*)1Sl44h3vz!O|TD}N3{Vjx+Bbh<VS-R
znTj*KzlLY?lQ*lvsjsTOR7@kEi_S4Zh*}%tH5O~1&qKvSDTvJgJp4U6;*l=Kk<SIi
zp75a2F?J_Dz1rJiAh%ezG=<o)*BDijJCYZoA90K&DXM26o2%47r7+k}7$i*EE$CoE
z1u9n*@N}hEUMjo8Y!yw>O5MK>sK>k1%ia*Ao6D1&mI`FPf03?<XKWRIM#Wu7-?22T
z@n3z6NlKLaSpNXT?SO#daWK=7kBxsSIF5vJ9!TCRg7N1GqAHh;TD;|}tVz}N@z+K1
zI)nDO=MS1vYs5D?j$~q>$7gUuOekNdXTqhGs$BSV8h~Ghjf~Cuv6892Vi=Q?RF7;Z
z-Dzxsttq6H6d+kAg$P%Tie;hyvu=9)l4!q{W4N2SXJ-JU*0_~!;|*qUNlL2pq1ZZy
z{BSLgEOACB_m9`gTz+0S<GXLHnr_^FI^IEGyPNwD+-AUu-Z<qLr36*9H9ICi4y9|_
zX5STu=Mo6>vc)YqyPa`75%7F+dk5$Kk30r(yt!|!=28N%JPGMtgVKZ_Sz6SSVkTAT
zar%;NvI{WfE!Il*(v-T5L`i7;F(M<FRJc6<5dk@C5F&A_H>FXhd>QXTJY~<Eo5d%^
zj<l)23?Rt&z%Y>g2cUUs7f%rOre7RsSf?ia8Zf?|LWoZzwUu$Epheo4n5i13@rb@%
zhZ-51C`CA}8z6=T!wC+jG!I(S62+#VMHFz|bOL;e7Q-DLS~SLt9u6KB4@5MR9F0Go
z%Q&%~z&8Xn*}z4F$w(;Z?TvI>u5qah;Bxyw;e1_LdzR)a&qaLB@Z&Uw-LhIM(Jwhs
zsUeXXxDD~D77|n!V5YS^^@zAM_xx?fj9#AawYx(9cK^^hVKWl(-_z+2#_vVnU}<*{
z5(h{fady?-_GG;cxlq9^6JM-n<e!**qtyAf!#@E5nQM|u5p)q)&^cw0D#RDbhzA>q
z?K_(a7M`qxG-LMIsg~8?z2hTTCZ5hlofBeO)T9M_6i@4NDJeUa08Kft$5Dg-W3(^q
zXM8Twj--KIv^E}fZ`Km_SU1O2F4Z-4wE}3NqhmK}ayW2CK+sJ^FOs1Ats+mVD@zz2
z0shL-4G#{^&JGq0-|qFNp@Gm93NoqOc#%Md4>z`loI1eAB!z}PbV{3;A!iX9rWnc3
zaxtQ`BC;n$q#Ar~kh$=`j{G-DS}#NhdV9bGY^7Vm*RRhm{S7h(MMW|UZx}-kSp<MC
z{OBqG=j>bTGjEyM(z5$NpvhI2!zh*)wD2<+&yv2CNr<ZgOCOJOI&E{@+54m49OtND
zjHa7fJ%4me2^Fr%b^YrZp{Uaw!f-U^vOG-oow7X)PNg}B*$RFIv2pbXS`)`-9)EK<
zm)&(rn{ln5WmLBCB3}!Ywm_mW+8*E#DB0ou1qV@F87hti3r1Q?Ptg7{yl(b28Wk_I
z?&sp_zU+o?PE9vDiAwS8BK^MSBLo1Jeh#bt>-sQ+sGt?_-QORKiGRr>ziD^TGu&|6
zP_!K6UU&)Vr#ID3&{3$PyX3aC-_Kx#k;<2iLI<MY2Wj@S>D2Hyd{lMRX9SQ)zb@#D
zWS^u9nM*cjZ}?yfa>tG{=kzi0O#d$rbpm_+m_Jc2q6h`Ft+P~V273F>?Ny0wCU#IW
z3&u!6C4-h(Q9Ebqc;kTUx7?|yzh`O1AG&wRwH<aXS~ADB(9Qkp6S0<o)S6IDXBhkQ
zuyA{O6yd@Kc^6<ADv@}H<rY8}6ZG?`-M^hx>^(D!zHVJW8Eln<tcfEMB!g~;-rZY}
zOO-oih}Ax=hwaht_m$8vv+{N}v*DNy?*Zd#KWdLYQ8ds+Il6z`%ZnQvZBDHo2^N=d
zV5i@l+c=N#%8Ciz$pjH$uWt7OmlYXpT`l$}H?u)q`U4?X>=ajRRv7?6ZkLz#_VZ78
zjN_QCsK2aAyT0*e9!Trvx2IQeP`Wu0!_;nwiHIJ8e>B7m4zF`7VQ>#f9&4HjFbvF<
z6Lg2;Dv+>vGTr0_?39c&9Ies}SZBvW#&x&H;)eeZTkjO4S=4RYW@T2|wryLLwryA1
z=2vOkwr$(CZQDNi@3Z&45hwQhd|WYOu0BR<9Zbkho;QJlQMD^{Wh}&>hwHbWA9jv-
zsO=c#Q0c6)Q0b)6J-}#;nprB03DvbmB!~{+5iUL0-Z9%8Ikfnus6N8rq?kgUCmpu!
zTJM#Q^??GdhE)0zouX3)_1Zp@=v@<XUP>m3x}N*aj+490oR3GEuSY^h%kPFa86DbR
z#>urOr6>^W(~-`@OSH<!MM&w+Ck!I?cjUSG<NQ7jIKk)j6u|hBB%~BR9fBDvqs!^+
zPuNz}+IVIc3`hhN?d|MVO;Dv(WZJGzZtEXcDaHXIrN)RyqnLDQrS!u^QD5jPi#y!e
zX%%KzjT*ofQDEjUu+~=MtN`@3dVDELF*(G!?HKw$=<AWLoBy{&`zLuu{;x=zm5rV4
zKL`F3Z*y|~UlL7IQ%O}?vw3X{H20^ysU1}KC#wE$?#$82!Q@BF=$29G{vW(-=_!<w
zQ>;+4q1exQx);(^r1D<7O#PTE9EylZBE=LDLP@+X4uJsSFK_^mz;AE_fl5uSVT<xc
zXEW=@MT^F*xhEI=w$^8#_kU|!@6DfI*YDrtJb$u|GwPRh&%L)FtGr1TpgSo5p~8mO
zyR|O;4$-wX)Jqd6-Q3XCk^##ekkwMIhM(0(Q_Ah$)v%WM1P`u%BtB<fk||1s>)cNN
zHqX?&g#7vbM{%rRlb=aGnZdc~Zct+@oD=ODau0P~0<^7vO>rl3)xowvKEqDs<99FE
zy5Sz_CRT8dwJp9Kg0Y>smu8a-=rx#C=t7*L7Ib|R4UkVT9K8#?CFDz2?P%q8IzCFY
zG3YAaf_m2Kr04_K8~0#6m-IAB<+)aRa+6W0UUeF1Xx~IdY86L#7(Fa73N=e(Tk?Bv
zG-2)|lSw;evb5S(d&lubDl>>g76&QfEl{1&{!n7RSfc;I#==W97K8y79FK5~DGr6A
z@|F~?7D$JJm4!+2#HG#)>kB9rC_g}&WT!x65u5z@kJS;wg19l`KM2}ZL6Opa$>f6M
zSY(<2s3N^mCuP!^P^aKyp<yZK0>M}o&4qZU_+)-YiH|bHVzx)9Lk^fc2&s2Tv&0c)
zTEIggiQ?U}?s<Xi9N-9@tRv>D&(+0&n<PA8vl!$wd_o?~<M|AC<$az{>TTt1==pPr
z?^t9Q-S!dse0grW>$^6&scYftrp$k6cj+H02p&uY*306!0R8sg$Lb1v7JUQ`I@gaC
z^Wyo@-YEZkJ=_P2eM==>t@pLeW%4ec(Dc4Q2aOK`AEN82YrtOR6x|f!6nxOi7wKw@
z?a6bsZfQ8I{&~U*3GQ=2pDRT+Y$ByL(k;*h+yr)A<yi)pZb@!>o%D07M>@@)Lnyu)
zSk-^US+Qz!%g#{zUFCjHO4LX83J$rdOV@gHx}JK#*lUK!8{?#XFH<HJb$=4mfgp3H
zM#Osrbe?hJT>&DX6Y~rX9^G3|GBxm2EZ3!&*qx&7>tH7O3z$wpYy(_G@fRd`>4|wN
zzH^jrv;mF|Z7Sb%IKHYg{nn^P>oV0qfsBPgy|99i;cq)yF6sh)Cxd}r0iCpc&gs9q
z;-KzlldXK5PjjKU>Lg<%;Uo~C9IQ*C2JD1kzhWT6CIAT&Ea(|$A$osAFa!00GL@V`
zQaG_MbE6jB{Gpb5Wa}*3P{$UE7+6}vU6cb%ND2o<Y$5FRpb%@?{}hfdE*%JhDB-H%
zpdw}?9IakFUkxTb%c<Ct6lu6|uLP*k#GNn4Y_pcuKp)oFVOt12i!8pNSp`AXc-tFN
z<h#@K69Z6O9Ny{}H~ohXAJ{-UWL&n2sOOu6xKYexLq<Kceu=p?Bz(OWUuS*i^cbNA
zBYz!?$&j!`MxH*?kFM79Q&`CFf39IcZV2eY7XXuXObr<ikqJT|>*8tYSku*JYBd0$
zeB3LTU3xC$@)ht0mh;gg$v{g`a<(#iMQC-gy8w_WCd}I+`7!5}P0XO=i-<BG^<&}s
zNMw*S;Xy>xOVG^?f9;4EOFjsoTm&<gbfi7%i&%j72vicYih8_nam08qD%DIV9SPPU
z?<B`H8%eHk%MxpFJO04VOKeG<L=&*L^8D`fr;T#MQ?=3JQbPunb$Dy}0#fer@yiR}
za{)A;B3b4@+`)1N;jm!6a_5<=$EFM7<vaKtoNV$D-Dy6OLqx#&!*yK*&7y^jgdsYT
zSpNwtj;Mi*%$7oQiuyZ0#@hBXy1{WTtN_24<br96AZX<)q+Y-yZKa#bKtad<b*ZXb
zQrxIn@Ct4sJ|@ZPtHg&9p&?pu-Qc=laRF$f<J}Lxi1<PZWx=lcS=bOk;g!qW9)L!5
zil_VLQZw&&G-ix}JH6#7JNF|Nm@$o(L$J_k$RR`8N<JAQKFytay}(DXZ-ME2yGaLs
z-g@~hCG!z~7d_q2dURf!Z6pR)J&>%CAi;j(u*UHacJVIcs5Yrp=f)FF=@otXmj_TL
zcs&#HqhmenP`MAj=k4*u%FPxbia-de9rB86rYWKTb#Z)wP6eK>DUUUAO<*JB)}Mi9
z>ZlHvAk`<VkYNy{48|LgoWW|B*MLeQv+jc<iSHDNlf0@@U4Ss6A;Q4E77ye=8Oamq
z_v!n*{ey1$!Q}E{j&c?a_H_etHVxQS?+D$5*-9z_*`36y^^mb!b11obsm&ARfDQH=
z1EKD0Oz*+|*vW*bp0Qpx?DRd&&FmwJXdvkRYfm_iO4&y9_mZ+3*xaP)IJA|d=xZvU
zF&y{n$nVW(Zq1PHFnQL@sw*?nMQ)OF44Quyy1l9f0ltiv(P7%!p6_=Cp9)}ia+mfD
zJ_m2DPEHxWqJ-a=``4r$!_b+fBoOQXWA`!W+g?>eJep1I;bYTKI?)h_G9d!QFN8`R
z>btyJ8bT_KLTRa^TQ6;2wfv<Bp2S};vMMr~*v}D2>meAECq)C86w=hNA_gz9#9KEw
zs@88t1b5jVS3!$jDn7)~Y;%Ba_`n=bUzsqJOr;f;_%J&KVb{nCT$)o&{Wh#`q;1d!
zhUW9+4Pzus4pbo<O!|gdRkLdX!YZ}vS*u_0;%BQ0;8u|P?MLyAo|}3fDh-v6Jh2CG
z0_KS>bSD{;KNu9JPNC%F4jU~*U8VapXvPf~4~X1gmK%6lAbGyC*%Bc7#Cd@mJ|a{i
zCaY|B{)WS<+m3@_{$`zgMprpHDXZo4;26|R6SZ1ujtcr8C76Hebt&(bzR*5R-wl?6
z3-y(_0^bjd7IG}z#?@i49Q?c9TcKL)hdpI@vu&Avo1EqLdc9}CBMrMryok8;QtQE&
zJm={hW9tBvbzr7on*zuXzeYBSC+;39x6nt)6OqFbLeo5LE+F$-f2o-1vQMcb7xvkq
zOsit_eC)4XLyTMw!}rtg3h+k@f68~~cPk%J)GH||pQd8**$o&!;;jI4S17=?M_Ek$
zVa~5Kj5O=(+{5AkHSK78F+tS(aG`3ea#V~=St)@tH|2Rt5&^8=3KMyikC+l=MRnGo
zJCLqwOYl{hG2QLmxV}g&f!^!odld-w+wl2B1Woo*WkkPH(&eRbk7Q&E9#%12gg)%x
zQ^OJqL5I#o3zpAfP2@|w(Bi>=1v^H^Kt%E~-G^T=W~>@N@_)$2Vn_JlGB|DKMPAu3
zj<-WnJ)Iqk5CJI52s&rQ)JH`}yo#+lTZb_IFwBBW4ebfI=?_yZw7<H|mZITxKdMFE
z(k4(VvO3DC54c?C!1mB+f3emHO(d=_+v23w$}Ti$bOH!2SEhoT&_*Yz;k#n<4*TrT
z7}++^S4Xe#t*uALl}wN9DN`Xw5qblX2em2+O%~t1p8-|r+>VdpaPy7_?6;=Vc^tXa
zGkC%N@`apoc_D?{%7@`HwQBD!VP-Byuw3+MG)_fAVNW?yG-<R#Q@F19yqG@d_dG+>
z+~fBPW15fGh>6_5*8=CZn*xDh8p^ZrOJYnc$aeH{a(B?vZ`QTUYz@r<+7soXYn-L)
z3nDwAy8s(EK7&@r=yD+w_>*gyyHYP$D%eCBnWX3=vK$r-IW-I#p(^?ME(~sF);f6<
z>t*LhcQ2D^sqe&!>>Z+_8V!ffF?v0zSwp{bp;t4KID0J3N<#B+<GzV@>d8bA=f_^>
ztn!XdHDUX-Y-6_*{FiioDS}fZw_sFSe!zIx9H0`(4gRuq>n00@lfZQ;PJi9;cgl5@
zZkIbt17T?l|H=v&nS9w?0>U(f!yeU7QOSf!C|fpyTp$1lUA4A8#wpO==E{+6@fH1g
zckyfnD6iOe@N4Ns29nRGCei(T6zhTM?E60SJa`Z8UB%w=xfA4vefJ}fL65^VCDqik
z0#GoaG2o_N7{7G&m041h?uCz4im>)<_%kXfF#JUV{GK*CR{%^_u-@|wN9(S*lyO}5
zbMLu~Rk6h)HLlLYULm<JhzE*gI<8bbe^0|8|IQ$O<cD}Rz!&&~aG7Rqu^0P>_sPL;
zrYUz=MCmtV7ay~0eh4-)<5p8aJA_k;1Nh~hRh`PhzYGP5BPKCicv8zyuH~3$AuhYO
zaJH}jQ`jMxg)1Jj+j2fBBM`WoIP2x_1$et%*ry~d3)^%zPvW>SDQfw%7jjcAOXgU{
zBjduv5E_Fvy`Ox#8DlZFWHBz;T5<6K?4RpCjF=cGZt<N|o~&t9Ih*LUqx+o^2ngH_
zVu#*gQPNxW!dKvACUVMP!(<9kMHiIC{O0zgc{=5{ACc-I{?nB-n<G|-=X@0;uXg**
zAHH#Z>?Y&{N;zW>&1Hi<V~>t|`Le}jrXRN>ApFRE9tpn#cK^Hkg_8`}?h#)6J-f3x
zy+K?K-b(1Hu3Y{)JyGKr+;fMv4uDzhvdz}b90Na*EaF;T*DH*rZIKqFMwcu$2DycD
zXii#+TAIwPIX_jX+c)P8lY~;6BH+$cvV=Ka7t!Xy0OAM^`<ut3Y}w%>jbek&7@94?
z7&*wbS@YSmV37#^Nk3^9>2z8uG;;e-#)~op0a{*`PmbKve)4<^J|4IPGvM|tzvT28
zH}TzDOhn>AkM-ixjLQea+QY5!)(ln;X$d0+T$&FfT%>W*A}?ea+f0agjMTL{x0hA1
zK{#O@k&OqK7CzCu2pk4K-;n5PPZO*A#(g1F>YYw|S2nn+7=7&XGr4EE&^REjBMW1R
zmSY4@LD;FlEOBOVNkkQN9FR{WC`d(Y<*cIOjDr`dh5&HwO%Zq){HQpn<f?ySKtXnO
zNl*^bO*7}{fmUn-cOOV;i92%q<?ZA9GBcHG#fix_$C`HFL`TV2t-n09d59eyi5_|G
zw2bJu-h`3hRjyWw^a%UOGgY#MU9!mX(rYoaY2<s(BMnxRYMv3q0eCO4$r`wG<HdzG
zFT$x@O6W&TC?dJ^e%>fcrxb&fd-MKk){`B^iK^Id&c2(_(_|UE;ArRh0LJ-Cm)UVc
zYPgMit~heK-yo^Pt}-zVPU|!kgw^Ib=B~KQ*9U(wUn_7_swu@{ja~8inG%J3>z*L~
zeaQN)b1x8h!bA6Q4zSGPzEaDY#n3_B$XdS?c{rFH-}p<RCF^h^g%ype;f1Rl@6Hnx
zRJh|!lEd~S|0dvu9;LdJWzfKEY_{MCABC_v-_maSj)&6Y5B?jRP|h9!2NM%V8&zZ3
zA7t4E$7_iei3c~1b4~{pu1LI!58i?xUHbIUfbh1~0DBw$2d}&T7_{XiJS~+YCFqwy
zTA)!3{<n+YK!YY0PgsmFNmDIilmlZyD5sNFDnmH+&zKhB3Fgpc%p}rd0a|k;_`{rp
zb5#O9Fb~YWz~7>>mWNu-G*FQMo&uh7fZ3CT3pm}=Yl;53z>J;JD1XW+yne-)Tls3>
z!WP_hML^Ox7hroD_c@64S{`rei0H6N_<4BMNY_tTr~I2&%i7|=^CO{;28PV&CH(|@
z$;&I-Je$MfcRA0f_|wNmzN$_gcpsri{**FIKbRPe&|;aDGur`&3cDbtLfGXQMI?Hv
zj9`x*&$AhEJKdcS9R}xL@`JJn{Qzwp*-<5MF($Hdp`Z8HW`&jL;>EKbE~lNwHt$}^
zs5lzT?%LyCn+TQ?7s(%OK}8EJJim7?sNDzruvddjk#(5ho;-7Jx+DG>blIy--D{QW
zLuH)IbeK@-Fe;5LnJcQxUy2DHC8(pF&_s=2m(p^Ko^i9M|E}s#P2o*a2aR81a$J1r
zN&KQ)ngM7s1{mhIlxHw1Z^9L>P6Db#9v(B?D(g;*B<SnP+~PA1ap45FZyprO2jp0&
zpnS$CO4O)1si8k2tX#hcB6}8>I=qvq9kw_D{5rVQ+ktlRc7=3c#PIJcGx4Qjl-N~%
zYJTc!kW1$e#Oq1PQAHGACB&2ay1Nup!)3}-3Bc*yRN+PTQwQ-37-?Gm^!$TUQ&SFx
z)MdXnn#3ju%ln$j9?K9BvsBO_*tC$3XETa5*xxszYZHh2D+@~vcjxeAfqt#>^~lB^
z9R5r0z-^JBR?sn00h?d5*uBB2uN)V1m!HKy0g%6IB><Ws>0YGy<ymlf7HZ|<8vb%{
z1JLK<GU2CRU8xH@%*XS|h?PD0SfbL<>Igyki`uI<O%CVBig=uV?Gm!+5z@j@RvJR&
zCQa-n-D}ythkL6kASX<Z-5~2coSRfIuhbYyk;Hy6+eNzd(*k9R21a0_R&4Zy=k38b
z>*C#%TjNQTcH3?wqh^2=u9_Qo%+FCw3z+3vJwaIfD~<>c)sVI4Xu%>PVGJZoT*QdG
z-D`?FEA}1D#F<T2pMk3xIPQQt#G7LWwF-GlR1nH(7HF||5*1FN0~b1!L)?uxGDRkE
zoo~jr388s6yZJ)LzPvOe@2o0p6+#uUGm;F$x*0;Nh+csBQ?f~wfH{7|G36a+15iGP
zaP3X7Ekmh(RtdHg?&Ife{D5#eBQ6IFR2VtE1U2UqvsG*6NBvR&e^|2FTChA5`4B!)
zA&n8s(NkB}G%2sDU)XfArwJ#69|IDRR4j0FTaq4G614Ndf(u!{Av}nxLY(iS^y$4v
zmId63t(79tZs?S(E}|$M8m)oZ0Csk9+X!DlvWHF?uzA>qtc+N;zoX%J5S{l|Qk4q1
z(LY-=-|@BI((m6tIcFcKM;wA-SiS|?z*(K<HPV-BXX1ArE+%>m7T{O5ye<EzlT_=C
zB1JA7p|j&~YIbB(-1m-HT%TRGEe?!ZPp%+bA>%d(b^YS$ZKkTDoRyZO0c0U`?C_ig
z<N17WX|?pCHEPo0hkz!O`~7k9&0TX9PRLqT1`|S|SWG>0x>!5B4l#uoO`}nPi^X0y
zuW`9IVs?Mw5)Vc-9E}!A<pMM_mU=;&{mCbij1G31v>%uc<Q3j<65jZF>6({^1MM1V
zFCU+cF&kkJphJASU}8}l0k{a?w>_-3JD&#b7y}EzuM1Zq>I$J~s?+^ixCT2T7kTW%
zTEa4g75}N`Q;Fde%AW<w53<@1b~atta?g~l1_v=38Ih1nZ30@SFMqPxQv2KJV0KRZ
zoxbkj7gE(Kk%yrf`Sx*{5g0%u;J{>UnpeHr{*E5mPv8D-8-{Jv0yr9Fr?RA(>A8qx
z2p0Z*eVg^6&uAFa@9&B0imr!kd4zYt{Q>DUpq=gVccrGa{P?;oq`Z<f-SSxk4b)+A
z(sVr3x?ShvX=x{d7O|^igZU3`UX*+}A*>>+IhH(wM5}z?qnmC8^LJZN!C?mq??5RH
zhVokk&O{y`_bk#M8^AxZrQAg`2&|06LgeP8{0T|9tb-uZ^Hy3T;$V;~Xd6))?!b4i
zfA9Qm@oqghLaI|rzT|jzH8MAJ$vGZOG_WTJA(oS&QcGq?N}OJ`<I}QHWyNzoRD-~D
znsnUN-xv-(Kx*yq>G`LidtTnf{cL`^6eBBim|$<)hN9u(KX|DE8nhlszAkpG6YClO
zE;7?=VadF*WF{4PCICQu7N`f(fqzqD*8v*cQ(dN#nwn#*+}6M|-&rp15N8Qcek3OF
zJkp4aIq+;)@B`aqOO%pbk%zM9t%f>YX;V(0Bb$m;>!xJ*YfLF2m{|I;)M9PERUqMZ
zWJ4{*SOOW73NRL5o!n>R!b1sceWNjAQ(NB9eWYXP2Flu@4@S++@=9rT-H=s>l}aP3
zHYe1|1d(>P7RaY<W1%5qSsi|?4;2s7{kZjfK=QCZL#A2Xi`~J$VJSbMx`j4=xAh_r
zNfe|D$00*6Krja_p8MGAn==*)^BoqV%OOO+ham$=0C1sFh3zLwipw0;_*)WURa4hc
zi_>l3#;4^F%qtP%1><%}j42^|a1K%<A??eI@sLIb(ew)?6;Z?|B3vh=WXoGH{F@yh
z41N!F>);xt8%<C*WJ5c4JOgeoM)BN?Ktt$%U-8?ZQ9PjX8q|fbeS!;thK8nwURRTk
zF_}1a0&rETLPx+cDQ?5*whqRtm8(!G!kf5w$Zn}+6M4oO{O3ddfLLn&IGZE#MWdwZ
z^Jp?zsHT(CyqN)9<z}m>?a(%N^NO#y;)C+X<n{iLg<N-XTHCbzP7j}!!WvP=s&C9b
zkoE?<g|)1#CWX$|uNiiOG_`&p_9Rt;pGiCb;kj<!KT&2o17a&Si%<Vla(O%;xAm8M
zs+tbgT2v>kDgM%}B0QG7P*jv0k9qZiG{r=VWn_Crs(E1W@S<dziIQv1NGOh5(kdE|
zg_+L!Xyjr}pxVdu?0=s8tH2n`Ga~ruzyrVe#TEO3tphg5L$qx?P@o#~!`ynhnwkm$
z;NZ^(_5~Zl-Rije4A}&TEfO^I$yDQdKjrCH<=~$)t2VL`&39e?{v9Dqg{)fBF=tI)
z%+Out@+4`}yPhy;2XJ$J5JLy^2`Qa6T@>K*RK1j+2k1^K+M-Qu5+x9Ek)g%~=y`0-
zrC?UX@BYf6l22sJt<zaamS)sQY`sPWq&U>s3K9}#WYcgN_xGj9e?Ym&4b2<C<^xR=
zTidn#<CX-$((p||R?B`<=;#9Xhld18MynrKo65LODh-gHaWW$PzCSOS7TcBK&h8yo
zR4({*z2G5SNu5m{+sj?g{+KseaA8q?g5l2mq>W2+QJ$9-6@8F<QePw=-f=tv?7k?)
z2Tf@+%r?(-Qw30mj!$`Q+lD=#B{IZg-rXY+y-Ymo5uDxjJ%t$lL<ov$8T~u4+jYGr
z3aVy?bUt1?{pZI^^qLJ8>2fISwyf(ox^WJp?GDqm1nQ#`shuWM*tS{i-j6G((b$6=
z><8F0VU7i^>V;<fn!Q>5OQ>=H<Om0dvOu2F7%`g2LTY+HpR?IPLKFqXhEozPY;!_l
zGvSeY#D~+@!mW>U%{kBj14RR)V>DIU1(Q(vnK(y9WG2+nRGh1qV;+?<E@Y<6r<A$K
zL5<g<3R9WMInJE-Nr7G5QiKRTgWb3@*`8uu_+zzBkaB&Wg5{N*!7&ZM52bfD)G%S5
z?n1l^p&ek!I=Q{1GxmjI!>As`|JT2_k^yeD&<n^l#I_xVU8Z=fyH$P-=zZ7AYBk`)
znE^eiA1WoQjtguYtw<Q?zG4(Yrm6q8nt!#_?CF$mg-Cw*jw(&M_yi;)w22*>tSYlk
zV8Jwr+>YM><_k7cBd#C7a}(JPfmgu9!zBv3S$<d!mkshGz^^M2ihG8LO}R)`QY$kd
zCblhQMFWgJDRrEm$97DNd1j`bJjY+)p+&2Ozv#HF&BjIni~1}K``nP~KoZrAskMw6
z{Y(yczSeeQ5Apu5)#}K;$%+tRmq&yH5?ENzT8YEgCMAFFWxp+8pc%SfV_`k$GB)!<
z_dQm%6Ot+H>prJ@w0k$R#2WMK$7eoRY)s40&(P^Y@eLT>)cKwa|K$boIgzLP0Pp&w
z$HHocbk?G*Vhkl=9>&)cH_;Fy82~cx)O`{*^@_Tp=_hz+;uaj*^w_$Te16~e;PAec
zWaas8Irv1cxB#I46-Dno^uNs!|1%c+FNq~1!w&}d-(y6k|2sw$R}&Ca5om_;0)+%d
z;{0#e@Bcf*nEW4cB`^zHvZfCxAz(pAZBymEPeq^>4uzZ|>;e@y08un$6q$_)1k#go
zunm=5#eWUU)Uq5mY*E(QavS-5=K4L0M0`(c`}&>b^|bT3b(-V&oBtRfTS0M-mynpK
z(w%4%CB?=it9`b2#${c$8|ClQlISB0|EcB2LbHhP*1A??FtB0^etHb|8z2HmVf%-q
zu2HGpX>D#No-ne!E_T7-bIJ`je>CMi-OD&5b<pmq7UMroR~xOiL&w+(VYh<NvA!&Y
z!#dc@NYG=@x%=}tc+@q}&4Z}sEmBDa0}l!a?-Yik>-Fpq7C;ect#pZiTI*ajk#M@n
zqP0v4a<l%l(>U2`92eO-2dD<TR($`tXg4rv$u3t4_!d1L`KObvDgn&9SpaPsk^MSV
z0lEHHZsTjKpxJdImB-;KK>_c6%NuZ(lJYt~M3=%B^;6?UTw1vhyukD$r3}OpvCdyo
z94~cWXkRe1z-{#N$WD`t%w1B#m!B`GT>!Hn{g0WlRZ(^U#)7925bIF%SMgdty+mb!
z#sc_Iw6f^05_0Ke0(4`5M|7I7b?%b9R4Hcy_n?x0X%>pqV_uMaXX)#Ld>MS>zq<T4
zMc$IY1m4AHB>Dc5uLRb{6f9ZT98q}?%Ct4vP7&C=02HxRMVQ9amk=1cLOQL==C(Qi
zYX#z$KXy}Vy&lbv0PA!SHrfX*C%n)484b68wT2&<I@6=P=^n5bk5bnYTi=W1-L}<T
z;O~=H$;;R7-+RA4fDZqC<F#1pKN9rjJP62HAFt`+^Vr#)?sTsn5PApUV7)EP+`Eil
zI9zNu!8dd>TP-j=-kA4;1a)K7nh76-$ZaEaHGWnKR>8AJ0;G=K@8VyB;n?7yafxu~
zI<4Pb{!=D{EVhMFi1n!dFg9!c7UuH?Rj?@4sH%5DAVU5R^)22CTSq$_3rk3WCfanK
z(SU-W1}pJ~Hgm4?h}s+917PEWyiKS~99az?7O|tcgOY3C#ov(AZX5XE13YtjU0>&~
zXaWQ!$S8gU2z+<3xF`^hP&|O7qzt8qf~*jrx?*pu2&2Ia?RXvIx6)_R;T#*{j-yct
z9DCU|Q-QUhklaMio-8&F%2yxQDSTsiQu;`RZOR{wQ_ow(pV2J+sic&8U|Ii@tQ^1E
zCl3?tIaf=Bf*~I$`O4)%`4qXHj+BU_U!9{gZjyEYxTB1*Qu|!Hxk6@}V?gSjkQ8<(
zs1b9R-QZA&DR1Uc^-WlHF9|7)qCyT777M)Ms%d{*wXdNb*^4L+cBw3PnQ7*-TZC==
z1U@<iua_w?W^WFNLX0i7lxGCsG<&90>x1b?!>v#dVc+~aY`DBNb%o2~RKxio3?_bt
zh}^dT!0wZ2MTHk;+wyS%3frrN4b|C2p!LiuW8nI@e!q3<4=#b`CZq_v8#5&%k*{8b
zq^wHWdI8Gd0vNRK8RKpxvmMM)4a-={-q!PDxOIQLWsD%tuLdwMz+XM|R9)CupdPNj
zaQx{tYJSzqfa)mD2SzE7t*hoq`e5R<BMhwpN~jf#{6`)r5_rl8T`CH4;o*j#)J>3W
zny&DR%==<e0Kn-!gXvZSyVd+m6$C{xWVnU?V3mulY$Z0xJqn$$*w?hsl8}ZdPJ5%6
z@)Xk&6-b1XhHNP=1p+c&#mXo6v#k3d@xjC~{MGO(P|z;ggH;;#?t4Vl7Y7*yeFuU7
z<$$pJyD(<QuE2~w$A~)S1fTtJMT7XF^8jo!xgSMAAX5>ps9CQL_emR^q4Rpk_9H_)
z10>kowrb0Z`y02+j@Wz+V@ju{{RNGMsZF)}KTw>goI)^a6=b_57fJJVbV9Te`5Ar3
z*8MD-^+xx@4rDsxT3TTsF~EAwfcH5dtC9It&8(hkvDYB;PdB1&9abX~a%l?4u6W;W
zaf6;>9DcVDg}^R&TCC{g;-4S{z5YtX*f1v)>uW9FF-~tl8xeS^0;HpYdK48zGBFV+
zy*6QkunKGHHa74`XwgSlW$k0ats6npr#;fcKRo`g-~JpO(9?#vI#+z3Uu%tk^yVrq
zxy-$~l~{J!-Lk-Q&6-&_qWc4c^?^RUVhvjo-hs^`sq#=xq1Xi1<>Q%1%6Bil;!&ry
zrpB%5dZ%MMD^`1?ra=%qxtID&acgf}_^+k$0PLR%3+<=f$*61_?RNV{XMgHtSj`(E
zZe1y_9LD-~=xWrGF#J&D0@EWvZ-#KBw@M&peYId<P|)p59IP%WlFPRL)=}yY9df06
zrim?#pkB4SZMgqD{5Oc;2;^RRF;g-2^-M0D@}XA}OVzaq{WXEgBF0<D;7C9>TZ#4p
z@3twGb}_RTs^1S%(>rSxf0-Wo0qK*s2}K25w2+Lf*x`<aBpUg3@lqaOOLiMeDvK4A
zc}qp`-G`vxb?(-|4?{XKKp{Rw-px!ufy}66`U#1=lNk(f(eA1-(q+uX%tW03hXJAp
zlhsc|+hKW=NtuDE?TUZo8`kM`yOGF^o;;D!vf=&;oGn(&!L#&sQ<YywHt=t8n%|H1
zA^U55eSISz*voxA`}`0vs9WvcSbxP2%D?uz6*1X>f%A}-qMLGNIvBR12&WOK^9-Hm
z_j48p-1G2fRx~Kug)CncTR>|`fs+IiewTYb4F;`fxZJSUFa>@6U^Bf=i!a2w@N0gm
zjVbEc4zXWE=Ue_o7gB=%le7I{ZYZ_Xgf=HQsNhEqGZiCRVU92WS#2kf@|>5E*@UtR
zS<|B^Y2pe5U4sKjAy}tIN*IDKEZR)42UJyUp$`$xbC1Ub49R>?Za7;2ein2gstP@W
zqHRI_1!z-bvJPpv@A3f0G6q^RsfN)&$ZWvLn6C#FH{tYm@?($7YE3}(NkY*4rrM4~
z|BToUP`&;UP0ByOr8~_9&*)hpKV)xF<bVO#v$mKOMa|7E?*0<>=#tJOT*ax?tgg0r
zr|G1JAK5vh=+!5~FAr`0S;f-b+HX~8!wy@~M^z6{pmv}0jn=3sc0B&p-1oDq+d$dP
zP((1KzflXHAM!w)Kb}nf@P+kj67Or~g`UF0Yjah#q$M4I5B^|Bx81O`%{+$^91FrO
zrwzWPEUmnWEUHnv;-Cd>fn}x5*&o@1AG-~<9|J=(KEL<b3kI}14O{ot3?*zs4Yp+#
zP0W&1<#z#qtIcq}D3h8Di7Jf@e%UYB1tHa|<f_Gnn{Ysn-%=x-^WlS9Wg#*eRh_os
zGQbXl>OmO5I0-H<!ui~AZXZD&9P9@^!aloM(@x70)H{`h_Fh060Q#`l8x|~N9qkXX
zRKu_R2KnYN#-L)%YDl$E*m(9r?8sIfrg=HGeg>CP)W<vV>x9oH+qBEi@IJP-r=%c{
z&VQdAovuG>+<!(SRA9i%%YL&mx9M9Fh?2&L{fZ0Veid&tJe9>?=RNNM56|wC2A@vJ
zPhlf65x?Hdg=PFW>)cUPLsc%GimaI00nb=A*7qhUu|E`03AK&uCG9Ks3O69F+vN5n
zo2VBW&^)Lt7(v5hhjB-Vb~w!4mJcrv%zQqGg#qKQ*8o^Ya`tefMNe)oH^eebnwOw}
zBQ*hFU|{NH$XCec!z3gsWHd(mZoNQp+uY6?nY_x#Sah|q;BSgbgRkUh;Dx(JF&kzs
ze~iZ!UK?f6D&*c}j6@?*y%gk?fQ*U^kBz0>Ums_PW#=MK@Kb6p1SEiJ%WkyVW173)
zf|ex27%@~BeV&?A)Y08`T)?zNP35ya40ZvOM9`@g<mAE2!s+a$wxy#Q5e=%v&D}1V
zf?ev60-2B)AsbkrBoq@*Q%iMLH>PiD+w%Ppf9nIQ|8}N{$k~R-K->XOwFUYaXyZJ)
zN`BG+@eNL}vA?Of;0vopE`yl`uki&l#|($n6ETad3TWV?<VB~Z6%FBc)4{<^9wY!}
zF=r!nS_Q~i3NmY0%<D4lXWR%NYx~~!TDPvdLVSo0t+SiRyiuFYSGGERl$vcRTFCbl
z$LF8~5sh*{_ysWhg<)R{$C3oA7T+^Eq7EWXW%RP&K<cr+FX*T-4*e1p1fd_ocYa$Y
zwbh8ez^Beoe(Ehed<#jXGo2^Vox=m#ia^LW=`z!1xWS5$Ann6_9IP&zDzDCq?xf7^
z9!>eJDVOv5CtSnvc64!cZBmORny$M%bQoV|n~JYz4@-Wrf~pDU*fl_N=Jz-NRP=Qw
zehp}szCGw8kIsY|qLl2!A9&{b&xSgx$!Ar>g;%3n7Jx?Br!xpa4@Y2BF<Jol=$p#s
zN^&6rJ=06Q1EPkPw3=-NCptv_^m3$pEM7mSRfjMZ?lI>%?pd~ZL3YfhB9=mS)n>@`
zU&ZMRq<V|)@2)^re}SwEUCTwWD3`t3p_u#SK(a44c9&P`*T5AaCxpS|dPRv)WZ(b0
ziUK&ArsY2qXUNKRTzS7wedYsjO~m*2i$g+=Q0UG_Q&R&^tel$*I=`(DV7#0B+;%7%
z&Vy@<IN0Wh?$&o)HkN_cizi~ONUYzr>6@#dt0Cav;Njt_AgasDOG@^2O-=<)uo86d
z+y16>pjxc9B~%m7N)P=!kY9VX>MdLy+b!m!D8^8zL{b6h7PXm(O{f6QL7CT$+&|V6
zD!^JtOZiddTVi|RZqq`9t<Yl_>&N$FE~p-?`SDMtnsS=~x}@<S4lNTmekhOBmg}h{
z@mRPi1MY0LG*0A8Xf#>;o`;ad)%`CtgVTF^PUB&HVgF`>UsgkVX6j@cZ=6_NhWU2B
z-sZp2iHLi^#nemYm$LwK)eWAWu8h>a-D&ED-C&7?LyB$v{_NtedWyrc>FC$|_?NbO
zId|C=gRc+5IxCm`!Ox40cAFwRw>)Pjcc0Lm&dt}w^P3cYgqiW?D3Kk4-hvnr1p
ze8g=2D14X{$)(8UL<76C0^vRa!3GmzGsje><;&k+q8uqGsJVc+PPhw*7&&YUws!V`
zg<V_u;HOMQc4)+d7u(*(av1mH#fAitGG4P^#$`%jl;P+8X!{iX!se#CbgKn?2j6Bk
z`qW<NTD>~yZS2p?SY`-&#erQG1p-fpB}k|jrftp|wv{U2r3P@Zzkxml%;v3X!zs~t
z39zPz;;nW9N9h1lM~_<Eg<7;R#<3PnTgBaNLUZ@+MNv_+{+$!^;7*IIWV1>7A?5?x
zu+=*vOQy652w%P~b`Fl~2VPHlI3F_vB=a5S3)L)F-#444(|CNoU)s+fztyQnK9Iky
zeaP?A;kk-u>W_;g<C=2Q2<WJ}sj(B8RFE3Qaq!N&-{t|A(_B~C-&+g@X<#_c1Pm{v
z0y*0TH{rRA2tj!vYeo5e5!SH|U5Q(M(<>Aw4QVaNx54>U1?Vq1!g2J-ee?0IMs&1s
z3Nto#Lq&@V-$=v~&*xYRJ$gg98haBfLL*-YV-xiAs{D#*rm75*T<evf&l8eV5p+U<
zC7>ore^me})W6lu1~yEqnTJ!bgAr<K(U#$9a+nIzZ|57PVFur(;Oq!#B4(b=45@)-
zDdC8Us>)Tj5>ql$2Za9J91YptoMal!#Ql+xR*}&036B$Umn`JUSJw!*L%e@o{b$l~
zDbc}$`@GF$zY<10)!o=|%$9Y46yoMBCq9B*OFjnRUc)6N92&gu8Lr%J>`9>!!V{mv
z(DV?;w*(##OQUm*WOSGEPkRk~QQROK%{#~pa?y26lU!mFu(e(Oh>pdNZCNi}J5~uh
zi}j|Z5__dZdqnZ|=KUD#Be82_tU?krT!ZOvCoBEeY2ON)p!VYufDE!P3Wc@CHacDO
zevANI;UU94Jt&<(!g0(OwU0V3KV%5g=w>A*<&T_@5pb4N`}z=}nPJ#Ej^u%^->WR=
zCAs3XpR~$MmivHSnQt8sVtMS|x&dXG)USJ?dvu-YfZl8ie8X*Qlf9@UNAjHO8a12v
z-b!FUuzA5Ob|w12P}_zGD}>y#Yaus7cM=2IlH82B6o20x?SkZ5TMqBW2UCaVXL8b@
zO6rzYwpYWx@dp<`Ekc}}`exaC`n9fr^qTmL;Dbu`_hBLnvH}hH%r#fPN!&lU&~S7M
zU>wcFQuv*qIkTFsx1HZ8Xw2ULoG5P4&e!_@4J;850sdU-CO46SIq+lzG;Ss}uV?_s
zq^F*3(n<*zrQgUHMcSKiTBw|Ll8kYPMPhlveGivzo@LMmTw|&U<k_zC-0Dpk$LSj?
z!FTSY-sMV}mr5cW*4fbuX4zcK&pZPrxI_`t4*b#i33u8Guw$gt<?=4|y;zP7c564a
zej=iCdWH(PTvw{ym4BU+;0^OaDFp%J^AJcJoOhx=Fj=I+?NT4nVeBvC&G{@~)d+D9
zr;)=WsR<(q41S7>{rHQ|Qf?-2T#;uf!-5ZpRIeou`Eg2PR09Vkj%8SV387voNY5iN
z&6rIyMYEnIp^-&U59hf-lhc%A#3<B~RN@nZ+rG(}Ec`l@Ledc=x-^8Y@$LW);Re!I
zGLm6Z!qCnZo-P)CrBppDsD&8&)fov9Tzr>5AvWx{*V7)qc#PNi%HDrxnqJYo!a&<+
zAFivus7NiQNvi1Bk99prSJmDY5pHSoUtZ#2oFgMmy$6RKY~4MY*Fu0YHg#jqA-Vc}
zJx+`{Te4MTwRsx!j>_|KbF%}$OWQ#{9<rBX57-~p$>nTqx(^ogSEjWm#~B<r{DId;
z^5PCEN(6a!(sA{pd$4%9A$VZkyBY}Cp%WS0OV4HqI*`|Qy*Azl8jff;T1j2m5%L#}
z%kSF~XbTsgN!niB(su|7>gza2#9|}#d>n|uS5q8n5iF=DA?$yhWxWC{d~?AQGmghW
z=M5-S5YZ(ps%3*f5kLO=1CU*=F*hIxbb)^Te%QKQIesWw4`1&?AeQ_Y<kN~z$sQZP
zHBt4}iz71G&>!92l-7nylu{%~jD=QI1!wAmzv|$bFZ9v)i?N;lF}ML|Il0upKZw1+
zoa*rqXKSXh2fa+DxjzQjw=zJ5rjOOtJs;XP$^?(o5e+>J`tM6+Z0kMkdiIvz(fvl=
zKR!g-Uk;ZdHUu&8Jo2i?sW8~7juyD_+NCe3BC_OPIth-ApJ=6-p<h(8GO$sgqcW|N
z|FnUFS5H&O|3FzpF1mQW7xJkiC{z-q2ri|b^Wu~geTubLsEq^oB@h8~lsBemVrSzd
z`w?Bv%g+$Pfo;SEQ)S4<bi%w|Zbv^IFH`d+F578tcb;LlTNp9P;~6f9n2?sec(ul%
zm-4OPYg+BCk1J>r<MDZ|CbMR*k2+m-t3iS|Ai>-17{{uUcjB1Lam>uYIffE;|27X!
zzZLWQb;GL#WBU!b*+Jy`Cy89AG@6ZqG8m93vZP$D0$aItOul1qV5@gAwc6Das^58_
zR`Yg<eFE|j0k_dVNxL?mNvv_ia31m0AZl^Q8HRH=S*LVF?QlqyV7cw{`f&U_UFno@
z*x*yzTk_0Wvjav$;-cf~9{^KgXh5Q~5|NhfEzc7z)<*$oLtuS>A;@-vi|!*1yglgV
zn=FY5j&(!9jrK|#-4X0pc4VO+1Ur*M>e)%Yt}A_yQ{D{;jfjkr9Fv@o-rY^_<{y!r
z2(S9{bcUp&p}W@gfCGYz#PWvbkIGNzav`-x<uXw2Z4c4Mi$Qs3sagtk)@o(uJ6a>`
zDWQ`T>l+5Z^rz+gV9iv-GC_duqR{TUKAYP=6lINehkfw#RqfV6{o_c6eO|{)#z)J@
zOO<Fx(?p`V_^|GNlDm0dJ8Wa0)2-HN29T{{B3@Pp=Xn>+2c%~lqykl)uCF>~X)vXl
zu90n9eb@wX7e5GlGVvtlvX+Dh_fK?02w@&4E++tv6HV*savY^icd^5vk(FU+VOnnP
zF6kJLjB{hjKY5|#>RMcw9^u;aa?o5bgj33MY0oW;bs(MUq_m@&Gp)HF4?E?WS}R>|
z)%yULJw7U)9jM-YJSpDr&qLl@>HM~zp|pBI4o%(kQR<B@w>6M*ragZ!9u8)wT{G!9
zEm{DtEuoqF3q|v~9e1Dca;nuDyA1|W1_~u@24Q=SkR%gsEfTKp+YBK&<iQwc!{Gc-
z1mb|iNuJYmbTJfbdBGwv#HSjip}(RFxfTgJMar0d{ZrrG0jD*N>$!t=>dkN=?WPbf
z`4U7D10ZM-+2V60%}jYL)ZE<Qr72|;&Luw^j$AX{R+unkh-LhotEz%9;=RC|Bs3V@
z!3=>uEVv#SyyaY88U6Y7EAHuh?e{l-*DLd#_eK=EhN|tDB?TM;aSHPmDlkZlwArh&
zjf8*o!o5Q6=yI<ksqbHtLP4yoBdj^qwAIeOXoC>j_N-tt%>8?<1onn^i~ih@#w7=|
z!3?csFm2!Dg$tx?A~n&Yt%Bz?5QuouTv@WeMY^J=O@3hF1`e-Tv2MSlMD>0uU@0;v
z49=zvO}zENRH3}BetZSJyFoxwc4M1jSch=M{~%p+fCoxWW)A1<A4lVK|Gw0cEmKJ9
zm&bGR=jw(csi3>GMg<iU4<{R4U=85$8g-NrDj@D6UovkIwUtza6HS<vuIwv1yz26&
zR*TI;!Z2QOu5grMXk<4md&>W@*jGk(E4R0+mnwVdswyfs;yYy^o}k~B-g2l%egi}+
zn)wT&>4=>N#pB;2GX|Kj^V<%Oi!bwPuNy}B`{UFl_VtdvTL<%1V~>6$=Ouul4tH+d
zK)D^&!qWCV-b>=moik=~Ejc#QA@UenDrunDq2=iM&^+``Il+paGLo`-jP@t|-C5^f
z;r67rUafPj%r_cen=jU)+uZ$2XS7e+I2@I@jE0sJ?B*se7=q4rc3u1Y)L^}S)@XC<
z7tNkw!RvNgWp2D#+iwCZA_6e+&BBY@ar=Vhk{d(<!yTKT=6<2bUo99H{}-VdRk`<9
z_&yA!0Th&ZK0x?>&|}zb*hV2FR$&KJmGbG96{<#ZdSztCT@WQ?V;T$>QBRyN5JS<Q
zZ7Do~2`_qt#J4K;R~}mVJbXJFPAT1Lb;TEZW3wuLKiUD-0-h2jWdtC$klI)gj=!hf
zgi_QXc<&DBiL~E!WxPr~sg&TXqM@UvE@NZz@Rrc7j&V`{v!Ody`vHw}X|W2Qg_QDk
zpiQ@a6N%&wLnI&rM?^VEQ_+Xxc!#mdaZ5Q@gUlrL{$inu#8V4e2*zy0{JjYFBIJ6D
zc+oxIeWSfvuqq5*;|Rb`ZLE|rbT4`EdQ3k<s{B(_!l&0{lK<Y4*^13l-da%LTz&v0
zp&kLh)=R_H`fy(#oDRq4P#Bk=9-8;s@by;unJbP*1ut_r&qHF*Xhwg>MM%BCQZ9E<
z{`bZrrDrHhC4;!4MO{hBp1`P(hGNWf9E=W0tG<=-&}VQjj2E!Vq_VOlvsJ1%&_b?T
z%Bv#pc2~i;(6;HOPf%U{=Nfo=rSCJK)AMI~2q-M{g!FvIX1ass38l3ml>30`_zI7D
zCYI9_zci|=EIn1oL-ulsO(ZQWAfhy)5ax6<9AjnG=_VKV<D|)_&wM?-niW!8lhqc{
zW1KO)(Aj{0P6P0}K5e!AP82XlFG3r2XpKWA$EGJZ>P6@NOS9cJHM-cc42`A!K5>?+
z3dDb+v_k*X<n|^K7!+7C2-~_Unb2!Os1ZiuefojxrD$PDMd+9ysj2-~3<qZai3If^
z|BwA(o`XuQ<g)O5^06)o>S|tTy*Ro`PA}{YKgCgM1S<Kp0R$V4or#tGe+HBs{|!T`
zDTykHsU+j2gC76lNcKqm|MjJ;|Bt;-MNvmO-W26aH|)}s6b8K;60@mO-4NF|f;P3y
zoK5j3JFC;k7{jUchd-gQHuqIDwI0`#k^@kD#-bGt-f;^=IJbckw`*uO8Pv6ITCwZW
zXyBk<4Rz?bQ(sv^jl{*XyUR^EPTlhy6HxI-0|X&Zvy@fJ;j$@|C{&86w@3aOZ<L2n
zPwu-wI+Zt4e;0{0MI;}6-!MH{4<{wt=^&B{mb|SLXJ?<+P(Of$E6i`q(Zy3gjZi&b
zZ&R0Bm_(+5HOdw#H#gT*p1FMGCzd|IVl{0l5|+<dm<-oL#9we&8b)SX8QIhcZd;s~
z0Zb#A3cF%i&mzu-XynJ!q^-1qHP>?(*~~Qjn~2{Royr<3s(cG6+FLMLy#*j)xlb<p
z7%lFoOfvH5rU|BL4?6w-<(*LyI|sc*q!rK+vjZOp=vrXYXN=_wF5oKrOPl?!JXk#D
zMJV~*48@6lOWKn3yI6wYV-4h2*729|4!|>o+kOAyVRnWy2N$k}8yLYw>ieWy0pH?j
z)c{D-?5+($b2nj`QTtwLU4|RcatGnW{4N&)WyXL>ljgDrKI7A-82Qc26QfV=tL=G)
zx>ro(21AsrC~tOj6#w&KCWaj63M5#}W9iuiIBO<w8qu*EBHJfyrxa+}5TDsv5^&~3
z7B8F3A|pp0KOe_BCnF(?tViyh?HkOHgwySCXmN-BoiltL41|07YyFB{juMO{0ACAE
zuj#Z>)qgi7{_4`1+ab@U9nZPXCT$^f$7qIzZPVtn^_V(`9+WU{-&w!rH2un5?RSS=
z=1|8OW(zw)SBsNV9;4r&;|;ZRB_Q@lqOxQULJ{~wRdZ6<V8JSguH5($Hx{*R&mJRE
z5-J<I>F#c-7{N|GX3Kw?c~&80xV?vJ(u=mi#dnnlO2NDePSK4hu=`MjuJE@ur>@}*
z>#itoYmjLGqxg*yjVfd+aeW>vPZlY%@skL@jXSgKNOLvU?W~1$lpPo04nQ)CmboB}
z+8GQSxKn;_FL`5=7|^}4b?E|Po3f30<4%YXN3%8HoZA1Zd>Pj_4)NwK*l;5?QE1Q~
zF&Z4qeOibuy?lA8nJn=_ayRU^D{mHZNA!C-<h#EQMiKEQVY?;J+eO@jE6LHxwM*Y1
zQcd8ykgQGYKp3&N?hOboBp{F|*~7c(9}9C3uU3oxP>0Pbs5u#FL)y3LYL~s2D-L}G
z@ko~!#2gJkSY2YQCSw7CG&Y{eA%MajGj<=VV!%N=C|W%0663F53vl?YtQUiHJSZak
z-x~pNwD?Q`#a`0@(K~LTE!cSAiH99YEP9Ar+v<lHNyR@e9sWbEA^=XL`;H^4o24Y^
zIjAcj<aPDCyEjEc#j9-TTQb_{Ky=*-Xh7X5LlQf#=&<@*CnF&x7E0kjbd$uutLHwb
zmQt-BaM&AsT8td>|F&20pS$J1jH3+fEdO&OF*5#-hm?nhKDqM*6c<cHKtMrGHF*OT
zY&E$~1QaQG%NrCbc^(c7Ir(RoPxOb|X8V6GsY-QsHx!e!>mpLL5JWL4<b^T_KLG&|
zF&)%aA_zeO?Oi1Ck<6I(c&FpD_V%`|vaacZc-dpwV-i9HP7+Ci5I-Cy-TeGLjuOX<
zoff^}v8s3Hy~h0s9_IG<hj~E3+#~MwbNiMY&Ck10oCbg<R;AtLwI4J9zQ4D>OyfcF
zK|<z~%;EH$FvA;%)B7N^oZ?|Iyjee@mlNNdm!~yzmzoDr>$cdY<Eg~Fe+PXaqJfz@
zm$K6G${3#IaW<NA*lI4KK{@Kqcsn{b(Xe4m`DFx{IQmGaU@85`O*wpj9=3w&R=}yJ
ztmLRHVFA!OJM6W5Z1^FWYbr>4`B-QwY<01iJBT{i*f<FMT_TDV$86WmO0MJe5pnl9
zdu#D)===Hg!5mDTtBA|^9JMrQeQ%<5KRPu<pKf{mqU<zml7k_dwVIWk1)FuuD;9<i
zJqmFNMG~eKfe*hzwnnK$vPPmsnnbont3<O#tOOuhqjnNVqEsRehO364g}8()h3^S}
zljVu9hua`dqHGfX9V9pszPE1_W)Djn@GKIRo0YI)KalCPK1)Y@7SnD~kdh{rmGyL6
zOFcDbuWUP=i|E5#wzUb*KwWho-%1TPW!r3fLtnRPKYhY%)*4m5BjEHI=5;06n)NX~
z{n^b7t@EOe+D=2@ED9o6!-c7Q2%o(_5oI!Qwpi2^?JfId959vF+zci&BkC*wKMxtO
z2=Ykxf7m+5CQYLzTbFIywr!)!w%uj(DciPfS9RI8ZFSkk={II#CSv0Jf!v?=eeabk
z^IGg>B_%!$_?i8-uIt?#oRIb;fkG!xJxjD(@H8auxGL%;fh;AsuR&qI9OA7*n|`qp
z^uhb3!BighuguI{jF#ej88U>O!7y360%%0yW9o?K5gv`oZughQ?1v5hfp*CtA?gqy
zL|{P=Ui95#WJHb&bflXwJ?fEN)naATLTZ)eu%9x&ApW!}>g3a|kygjDs8ZDEf)2SI
z@Astn)VUgz*dS)=?NNq0y}Qv#VV+c~$?xUh8Q2tP3lg54K@406Ws|5Cs7sV>0cdx@
z7*XPKr}?*cuWW3JD%+^tO35(HOOCHXY1T|=ZtB1hJ+|e;P*;PXFw)f)E+cbz5z2bq
zzTPb?t#Q%cu9B~2AE_zTV+62jJoTKO*v3`Qi}NXu^j%{*XRh0n@NNW*ZChQ}cz@%s
z__G^Yv3*=#W&fez`dr5pg5zFj0vx)-v}usdTT@p7k>43BoFvSC%<*-qz(>QR%kZl`
z`#hiI2qoL(#7xIhNcz_j5{Ri726N@HA+=eaYFlxa2>xMg$8`&$Q~QVXsgwZ%W&Y#M
zU|8al_9^KdaNAkgB#UkK#DSyHeUoA~0d(HOgM{>NF~(gEB@%j?jP`b?3Q$Qy6LXwT
z9(j@cbX6k<I;wx^E#EF1j&TC@!obt=O3QZ2Y0z22lO=D@X6>?cpeYOoL$rd9hs%HV
z<NIRc;&8MqS|`GZSN@EFl&~v<F)0wZm(E3nFfNLiq)@0Ay=@7>fK%P`F5Hyl?6gO^
z1!MS3&K&;>UAU_P3MvQ01TYDmt5j7vBwX}Yq%58|`R^lL)uQChFP{cuUKM_5BMjBt
zSO!$E3V|~VFG}PyRYwW!>8sNMcxxN$?OZ`pB~?j{pZ?HN04AG~Ir(THGF#)lYEYtD
zlcGG8uAyBgmbnOPHZ<t^NvKyF4BMmij3o`BRCg;5KMB6?!-2t^93aQ`N)9qpLXKbt
z7>fXptID|vdrhH4G?N;Xu?J_O8DnH*0fECZ*r!}s-DYXuI6J55cO%v=A5MonkC*3Z
zoxi2aFU8Vqj6xEa0Pv9Cx_o{D=j(G?rSniBNc3B%#43Tm0syBKCR&_&Hq9*gV4#ys
zF#D~JHpw(4e5Y2Sa{!Gdr<Rlk_viHdsOwPuQdp=cNW?lY`tAso_X6bK*~3R7?qLu`
z?cs4hDnqnfzYZ)hHT5ubsN62iKQ+@?{ghIym*_&z?r(?em|D6cY(xozMW_0qQ*Jw#
zh-7EOcvx>!dEhFke+tlyO1LqFzFw<m^^@`qdSvAhM3Tc&1^~dWY&cOuafN>^-w7G)
z`JVivzAL{OHTGZ+CNft;u#<1Cf`8wKJ^Aos`MTuH_lrCoaX{zwCDjqn%nxQE2(yup
z)^d<t`d;3Fi;&U(#;8qHdlhocjx^z_52EfWhb?D?v5kIh^z&4{EJB1@931QAIz&G9
z^alC^`ut#w_5~n*o2Ym`*&%YMgMWGUbEJ1bn*uw@Rhq<F_M&muuo7oR3o0yKptPZT
zu>fuO{UTc8l{B-zN3Wh+3;2s>5e8Ad%3%#bqc;bFEv+yzPUCiIw7%4Qs$pR_pbFzW
zKl8vqyS%nIzY!7FS7A5vkg}rI40<=Ja@MLI)nBND>k7~gP3@^yPlY!lYD?W{<V!hG
z?y7=OWX0k;PzXy-3Jl`j{7NND4$&T~Q}1bzN)Hii3R!PB)zBB6KVuLp@J!yrv>q$&
z?st!CAyPV>e7tj)u-@?JT5hlrwO+q$#yp#f(P?x8C2)sP%3xw<kRe1HB$pmzZB2$V
z>2M0z&;-a^F&*Y-_U%=1PuQrTsk90!j(^;1zZe?Iqng9Kz&>E~be!n@I6jmpZRBnx
z`J#E{H#D>^u3m71@-Y*eRTo4SOc=ydUV;|-TitQqaWuv0UywgJF{!8CY&X`C5QgKc
z)jbp5h_$ixh(RhKKEVUsg}zYd%#@ovz21^Jn*zX-F0oBSdP#CXUHf0;f`_M<!!)vT
z#)UX?z%xoO36BQl<LYabsenf`$5{s84{?iv2Nb(YV~>kHo|;G|mXbW0vccKur*Lj^
z$&{Pr$N$}!!P$r-Rc9G5(mH7WA6^pikj$bf9wu$oaKaz133WRbo<4BH#-)%bZ#Sv}
zG5}XA6V-`8QnaIqjdap{skx?lMX@@AlDGShO#EI78Z5a;fg&|uNQ!(khTr{jpX}gc
z3!+b6K!ihOU-+`RN%4~B!l}BgZi}bh8wU}_wl@er%YuLID{7`h-k-;}JB5JPhri??
z2?K`G#cG<fe0{50^=c7H(Na=yh2W@X&;WA%R5<8_Vv5P~ZP;KCRNbJqjST_{4@{RZ
zlfGc{@_cK^HN0!#$Kslde+gY?J#b(ob2XL(9X}6pr>WO#DG8Z!Rr=D_Qh5%9ExNgC
z-N5O2opG~O(n%~bqTF8{iOnsot;@@gV4JoAL=c%Qs3?sgxW`s5D-(L_e}$?mz5#O+
zp!QA*w=KfKIh92Ix&8IM(LQ=8&A@8$R}LY9I}QzlPB>jd`^`aBU=g=_pdwpai%~zf
z?s(@~Pxd_9y7eb;w(#*^mi<qe7(}tnCuY;ge$XES&fVE5k0vPtVrvAEq|?!ARllUi
zY0G5vrE8{vMba6zNQPjXPxE2{7XU?oiale^%oN78@lvKwj1jA>stGi#_rff@COCSh
z1HWxoiu)W$%rylk*3KQit)%fT5q_7G@vR}&je?D<PO#62kj9C<ekV4n%OwI`6{Pl@
zR<t*A>T=Q<NJOew{(AT~%=Ya}Chb5@^X-hF6IAp?`Ay2JH+L_Zz!d~kJ>V4<*aVcL
zD=)kwrOiPdXBq}RAt_MS2m5Z{p}%seaa4u%4Bwl>lF2F9o0O?fP^)<80vEop*6wc2
zO;!9JBME+yz*#wfUCyFdAIW%816KA9_JPE&cEP?dwOmlb2dqR~ThY?lswmftDfrPm
zXV9*3DZK(&m4CUi&GOC=1`tZ4N0TN1H#88gRP6lda5A_CdmST`fbXe*9yG5g6coFB
zfK<w9h0idfJ*(o^ytPyrMiNeNN;=WQn%=_^kK0$CX0nKH|5mZO4_GMJ2$$I7(y`V2
zH~UXPjXRg2z|ZwJr}vrDnZW*9!aeKaQqL8$rp8=hGojRfdu7K73h*Hu6BwlHE6t3C
zg3f>~;b&s6AV2zy`FuT<rj%I_J%jlJeg28G<rf3vpz8*BbR=TqB@%GeLYaWx{^j)A
z?x6Whoqb#hVjCKe_+r*tyyqop=oyQA9mSvI@b;KM%0M~YP!dP;9KgJhKNH!FX&OI$
z%*%sUi;>-Lo$>@u4&c5|_VqP0DAZx><<%A)pW{&0prWTqNSSz<e5e=F$i?dO&)Ior
z+4j1e>mx!s?NYdS(#(h7KkjCaUgz;aAMSA_Bl>=V$`mAl-bT-qKWQ=}R}|S}B7|al
zdk;%QU_dWiIKB3LmNDy$<tgAP2&NY+c$7AhSVqB0RsP361>ny~u&KAp!aB>o{Kk=f
z!{VQhvm-c9VW-_v71qf$t0NuEH4Y*!?EX8od~&$4l<7cWfU)@!lu}^Gm0A>Vv-PV(
z#Ds3huGCccTZI$#B(~Qq-QTQvsm^_ArK208^80Fhj(|U7!?UV8swwjy1bw?EV8f9A
zWRO@xePo4A7@*sgyCU_pX7{b`R`+Yl({56s$@{8+*abD4WJd~Hx7BX-d;71E>r6){
z5F-yy_`&BvkOjG=!I{AQ15~fG2+Pr<339h(>oDR<1gQD_`Y-kr8a@tJBdjTw5d6=_
z<#4WoS;bh+)+eD2S^xnwqX;Mj`y|zq>O%I=0UeQy8X&h;dUaUEPQxI*dJ#V_(tv=U
zjYinlL`52)R@0oHUoUh*Z*P5Rd6}OYJ4>{Eg%w}p);k<kWY^xQo&NmNQKf8KAuMhK
z^8zI%o>*DWgDVq(*~uDrP&wuLsfqs9arv~_TNSyy=|O=<fGHc6BG~GG_Ab59Qdf36
zw=0XH2FNm-rBt}4-V-psDZuZZ(U+{N81d}WHL-Fb=v#()iG3I0kQE(QzeGPki>M|(
z&OjIXtpfj)^V_@b806~u)kp=f%)$Y1%D(|Ziq+;Q)66KVDqb{^Jv5?h*b|wjJ@pC$
z>0w%fsss04JhR_Ua!|<@biFbN%_<w&Z&k(^1t3MXak#S*s`lZ`1qLW#qmMX<rZdGm
z6&AI$G77O1x^=$`S}V4Sbl_LjS8ps|uySVFST!L|?FDnLv<U9Qthl;yaNy(n{hed3
z2Z7|f;4mIvzN4$}a>Oi>2Okb5YH5ai=PlOrzIV6DjVNkdP*z!>8LWH}LJ^2(c2b-&
z0f=?@^-yC6Jg7}8$=5*JpJN`v6|q?tka#WbPm$_Pf9n&fx%c^=*B#{10aqzAxOio8
zMU@EnT(jz793%Si(xXYsQ^+0w^5{Ujwq4WR;P2%}fp;%X-ZPPPaBsO*!q!!EwUh@8
zMV)?R|2Ug`zR*{*qscZ>h^}?C^VCho0uJW%l=2MDINj4P_vKq-nOHgGq>({~RUwK)
zvxI97KFpa6UCtb%=x0;T9}k;?_sd`AQygGlF~m4c4&5w0^!)HZ-&_dzEC!6LYQ6z3
zE?Mk`l?C0De1o~DmI5S&+8kZPQ}#Q13{WNsV{*pJGRH^0Gky8c5amE!17Ln<0D|R5
zf!YnFb=27A*|UZ*F9Gp!BiZ2Hf`{Iue1*BH;+B#-cg%hexjDt0I!4;S1L$CIo(l+h
zGLI$>^M80d)%ia)@?CA*SzwKph0H8>2>;;5@4BoQ|8NmcBVWf=iy>GYBm%6SjAueH
zCAsFZ`M{gPHWA${ZRJcBFL#ZDfKx9<ZMkILZcbOU@C(xL-v~j%wrrL$E^bo~!(8Ph
z>Mm|3Pa}rmpXL)}V<M|Rh@9-=8$NOjHEXquD%VOSO+2ox1;28hwyA_|oXc|VbBEq<
z&Nw|o=i$h5*&^h|MZ~m7Y8W`Eex#Gi1)0Oim{^QZCR=ahewAq=F6Qj20+!-Ur~}38
zoo)Z93MOtfoPHd|YvtUwC5qZkD<q1(fWixMcos={Y6Y_WNL4nU)A>?ACEw;6hZTUZ
z6k)=R8uZ6}&|~qw_@;X7XKa7mKc6a_$x7J(d4yf8;fn6_ZEt3FK6kR^b$hu>&>(58
z*Jzv<^gRDgm+}o6B!@S7`Ika$`=)t6{W*7G`mkTR(}V$e3TIH94$mRyC;%$1iczf4
z?3fNL18Gx|wMGDc6sTM`uL>P=$gT93nEryZwQE@Xqh5h0C7YN$BLGbs2AbmU5j@-q
z<&9C6{K(=8d7vww0KF*$CtJ_7IIkYoA`DZg!Mdb{NGSA2kzb;13t*JnRX_nThE#sW
zstYNm!pwCkpOjcfb(d>4?cR%1%)9TrnQMTPXHmkUlq0y~%NUAyd@V^zqJz#2Hg~M1
zfr|c+k<?zbWf}?&Nv1`+qV=pxn+FZ4-SM+#;oLPpR-I>w0Tq!$feS9ah&7}J-g15Q
zfDr_xIgNA{{i)164S;@(`3l>)MbI=To#7FC=)cF+YVCOvdifg%6?0Z-FLe39>j$6h
zs?%}LhS`T+SSNJ+`Jl9`>)@cPtMuUcxwO=chGht<G}NBsV_5f0UfS|%EsBhy1Dk80
z#Eq&&TVhmkAn%)&0CO1VatMZ>B5PLW%V(6B|8MIC-Cm|g3V=DVH4_J*b$igX5JZB5
z=GHAsIDlBlr%iA{vG4Q`lvyKgR5A)0o)rmxd<U_W%aK0{dba7$=}(tleyJs$bxSvn
z6U{SK&(uuMXThR`A&cAbh2&Leei#vK(~cV>(sXO_T#`MQA@>;4|1Ikf>S6M-J{rs$
zTrt2ukh6{!3796z!N{t>wZ5(JaB-4@wshd^6Zw-Ol;Fp*n*nM~6xk*szi(uD-x^ew
zgdlb084pTr2K&$|mDE-j2YN7nb-H8EvdZOUC24@PZEedJcrY(VxYycgQtu?!AcE9g
z&-&X+CC-QJh%I<V7o%vGQx<^)_nO0A%y=dw?IT|{9H7&sZ&3S>)~|j919lCQj8U^~
zf{5p!6w~V%n;z5^_L9z@1MtD0CiIv+af2M-RHkA2XT!2AwSrT>luelgU2azNG72O)
z{YGz{(9wW_eXhdWgPXPU$`>B95xP()*v&-|l^xrr5S9%lFD}SrKafdXy2wuTuRtyu
zv-@i;4rs!!jv2P)^1|T{#wd{7mBZJgnA#>HgW2Sm3mofxBhw9Sm0&Y_4BQT|O{ScZ
zsG<QxFunALoT`6HB0tSDE2H+v97BOmW_avcteFL#J-hb~x&E2!aK#jWP!2~UC?u5y
zF_8roshT{FKuXl(geWuUiOBRDO!~%N%&cKGrwSMQfftj3^ZEa^SpU-*{ZEUPot1?n
z4d(`&1wutbN?2Mp?U4+kFwOD~TpW~*gEMW190D5x;l<(cai#5x90DAK0V?qb{{L5y
z^M49*|4+-7iT%HJ;Z!7Kl_X`;7&^gg(vA@zB>$D>N+az8rvnTYvV@@;06Qw@gMiS}
z(_h&({98bq>{gI9$Y*R$R`${<5Jk(N3c}irY5YTvEsK$sK9xS@tJ!!t*zMKS9`)gn
zd&I{*`}UK2`iU5Od}_oM%P81xWB+#DjVn7bArpm(;`9xlZICrumsB2{YvG=|ff-Y)
z_jp3Pb)EKyo)+-uMZ*XMZ?~nbQfynoItvHK^&X!5W=xQdfg$ncx0-d<IU0>;hRAC9
zZ?&@_xv0<lj#}vo(%qz+-&P5Pn&p;hgo>@SE%+1fn1$r$D;(YO6)9;I7b)84p+?}Q
zA*KE8wzQ#YM#F2szY*0V=ttF!rN~BL>S;YaJxvnv69IsSwi7}?Y#RPf?*aGs<u<W!
zzdYY}=<%-kU6|l&Z_+IsV~W@34iK2)62YpDRM<SR$yTd&S&wo#gG;%8=~cAOofULG
zOFO3rHxKXdF>3c<fFG7v6Xj?X#|rdC&9k99(<QW+Z)3sRct(`}f+3%+Q_{0rp|+-(
zQXey!6ahfx)MAu1B6vz!*jLS9U0Y+-4P?oI#^oKZ1E&j3CgbDjYI@{QvJCh7YkI%e
zIZ84deU|*==MBh7;SO)+<4vRF_xp-&CVa@+FDjpxoui{cp&`^~A-uPa4=M{(c=?Q+
z`2cJwCNC*woGuC>dD!?Bs6%qE3?&>k!-W>s=z4(on*J-Y#uZEeCZA0oAz|jZ@OQXH
ze%<6L)0rg`5(E<yz5|S<<qO_DMh9;|vlx-nrULdmlwCzU7=;jU6GR7i#jTeGrMQ(U
zT8q7buU^99gd$ve!s04AO!kwA(8?)xC>NPwyfmGd7f`$)L`3+qC@O+N6($Q(oS3so
z1{@%3+LUB|UY9HpYs%DH6pz9M{oR%X0+hj7QjXI}3p<Jb>{<@Nn^>BR_%C)Kb3+`P
za}L8}M4Lp7;r0y-<<$Y)-5&)%wAiC|IYxZ~ztme8zoeyA#@v^J@M+o2WVslKj5pm$
zO>iRMi0-lAX^|ZT$r}YdshB)UI&=>4QvrZ1_~I9MP_;UdRsOpQr#F!}UHC`_m2+qW
z5R90(5pH@V@!DyCKcmDNSA0iwUwRBYdrM}Lf8{TYQgg}nz(=^dr<}hJN&eTPt*(D8
zDG&9DzMR=9GLtt4?`^a`M;K9drs|SL=#>_hjMO?!-y=>`Yr@-gHL0sHkFxC31lj?7
z<FT>GsiG(R2n*uuXx-otmd}<!LEWI#SR&LafUw$(>Y5HC-#+Qn)6)YMd<|;XBsg0R
z^<-K+h=hpjKR(3M$8kF(EW7%dnGkH8_1p4`2qWYy$5;18Xt>@(Y66iFiyuK*0Fr%b
zzo17`%w@Qou{C?+S<}VC#gxHi0}cSe-};H@CdxGv|D)pp>*;~jvx_^(F0t#n8)sC1
z36_!bP@H{}N#=q11#LH}p)05j5G{Zc7E3sLXbeqEYsGoy{y|L>>w0=LeYfo_$U%M9
zmW>s_eNKY;S{}22k-Cl#Mrt`VUHZx3CX2`?f-cN6D8ac%qmFK^iq~B9KnSp!V~2`>
z=*Y_j2N;lPpFLEbpBd&AbmkFf{G+5XhYt1gOxyNa`>iaOBwVCU$!=l74B#UB=*1cm
zag=V4v{^vL-&`nMtW+J`(6vj)PpFwI%e7O0UU%U7Ow5PEJW8EnOralVlwr`Bf=Hzw
ztp5Qr9`y$M-_K_n=>RAS7&8kub6OV}1Pg?un3#f$Qd(j^cu!g~IfUdt3yb^zSXenJ
z-il}%7$col>2_#$3C%JgE^&x~N)g031`R#|`BX%akwJVCLPTAmoKRwLg{;n@!Vxg9
zAQ-^l!Y+#8v5_#!5jaWgwYWA-iE5MWj?*i(on?287dy!8)Jc`w8=2>VrByfF+q*Bk
zyGGamZ{AR|b>g0#od7@Kq^?iQ(5c34tfH=dnp(GsEL|k#&JE5d-%CSBS3V{XmC&MD
zMIU#p!G`Kt<rs}f22Oeb4hB*F{tMfd(`qf&CD=scg@dBzach9Bgzm3Ij-YR8)w*91
zk#XZ=zLMQU%u3w@ZX|l$BozD<^t2T3S{ikLWHLQ-iC>u;g5*3D^chC!t7+ttC1Q|g
z#$AiXi-#-+tQzFjNmwI6(577($5SNcFsMVXOm<T;=FF&5bVlmTepA-wJcqM%rXW}e
ze%OPHo1<FnSwnsnX%=C+WbOlg!C&-Ys$qiVBNfW3{9TB7qk_n8{AMvcBX1SkC9|-A
z{>n#fEz`M}3vXP+2;xeTyqF{YMl`UNg(!PXwTq`A;FSQ3aQvYRaCnxl?%;W<ZoZm&
z(o&r2S4LQGczj1t9;XTNOAN<)jcqm-)x(TlaTWpf1aNT#oSswE@Kouxy3k%D21wZE
zeunl6%<7)<<N0qt@7adR>Nk}2pGio-@0iffKD0blJcUMohIS}PCmCXxgB>5LDF_q0
zgk*f2+(tYw77Pa;$vEh+{qn|#ks67h9m`}vhOJac@PYS{$CHth^H@kR_<6FmFfP>8
z==RglCY>7Ib9pH}`s33+x;eXmFcK?H%E>0X<Ff&3OeU=%C6#aa6O<dPRufae8ozsX
zTu&R}p<%=&v8)&i3c=4`j?ZwCSg;rDn?Wp+2~Zq#9ZP1oOD}c%HaUuqo{$4rIrTea
zxeFSRznin^d;#G@$Ni?+pKlo(9TcAQao@an)jo#EcxfrUcS8+7I?SvLY?1Gxp};(P
zR~$LjHYpc$Ws^F4aLr~M5{rm{z2}g&9*0)h_4#2Vh20NhqY&W6vp;-UVVG+1R&1qb
zi%$@90r8bedd!@C(w1Rf?J{Z#$F7F{F3yqbmVr3J)Tb#|U%k6uO4O=>lf-L!q_nG^
z<;)p4Q!OVbUQ*>vm7kB)NYKd5dnht8_y&mNidFV=S<&&-kG)UXSdANi$i`vw(wNL`
zRee73EinV#(hf8~U<7~vT)-Ern)PF+V7zow&>^hT(IVeni;^n1cYz2%2r(p{{PDsd
zWLSfn=DLpC><`3%2Igl)f8)yrIdMYRh6@KJ+41B-(wQ?_86ua>D{R>rlW;XdSSZdQ
ze(!^mhs~Zme2V42I3XkeCChmN@650k<#$6H4Q`|}{4n^i(?}-JHVdv51X|6#(nq2~
zTaiCsK4~(_X(CnD=ZN*mvElfHNA}SEP|yBB-yYa4R%9+0SQ1lgdlBtA(aVR8D%4ju
z3I3n)Px|(R6@smv#wpxVDAWKj)cEYY#@){61ugG2akWFs?Nu(ok`mSag%=t@CM;~5
zT`(VUA$ey(Ma9X`I=f^lV<a5(L~`_4<rrig!X5$_JY)ebPsQTm8}Na2I`}rBUXvk;
z+9|`gN7~?!J~J?kp^3Pk_`E=QU}d8og^G>*N2=R-!ss7CeXB|CL^b+V4fPb&WUMyq
zNTa6ws+pRax9J_gpzAul5ss~waBML@mb!V-rpffL-o2BxuQw<4kx~z-z_Ih!^K4J8
zEK+Lx0E71fn#T_3ee+4lyf-#!Vb>}n5GXHGF@^T69pJQ^?Vu9m{rV-99<jn92{a-m
zBT*(t@}d@tSa*X^{w3q*wwxT7HGSTR0r)MaAe9j+=b<k^J+HU3{``q9bpcDqqbL%}
zxGGW6=t22Zs`1-qU{y%H$nCxV6jE>G$N0jEuLLW8k}8#a+UV^cMNKtzkQ8?1uO5|%
z996KiK`!{)nx=8NKi)^TCeWLws=<DZzcF2)_;*F&H_{kZQ>01*Wn_vS=9;_JzqRBy
zSoYGCxILc$l}{BYJAj#2)}nX8ub;%k?t_MGk?*0%hsw3h=H<O6yi(f6@T6)}lv+3?
zZ2pxP_eEHxwsGOya)M*P^Yq^+1KAv68_%1yt!ARLikA7-SC0$UjqCg}crJuCs;>iX
zTi@SnVe|7FC-C^AbYTjzLwRdX)t#5%+6Kw0>GJ*nbed>P_&|0c$3p`$qQpGkcO>#X
zv(K76LCq$&>n&UM929}Qh#!UOle^$Ah7Y4d_SbDKD}lHk#v-I2xeKS#%yT*Q<NdyG
zWeVMc_vi_eyJf}uRZ3ATF<}zA?-WI+gYm3uVK!<E+_~efVh<9N<HN^8L;kNA--bJi
zds8;R1~S4S^AQ973o;|QvR5a><M_n`s=?C@PRl4ph3m*e=xNmNovABTSUJ`X9ZlHS
zp$ragr`u|e(F@r78JPPHBN-28brWY3+s%TQk4JMW4QX2|TBy}c<I^!{z6`k&F%&xx
zgxNoS4_gT;Pfj$!-ztrj2&x198+>bYjO<DP9Bc3c4`Do6u(f|llnaigKb-C6l)e_%
zD`zu#7;cw+!~EFRq>l0KUrYZ`%P7vpQ{F1Fr2f~KF{i0M`+&{8t*_WzljZdXzm&<J
zcc7cDiY|L2ZtBelWHlNT^${J&f<r^A_^)UhO36uiN=ldC4mie6PUh)9Kxm}R%P?lt
zcBcQGIq=_fk^g!R{71O4Ffsq{Yz+H<Lq`;amDLpG)AXnyMu3^qXmY@C|2u7*lj;9H
zBh)=zP+$Jw6T^vum~yK{Hch3cB_|5#i*7U*NCzmEFRn0iv@&xTc1?Jsm|Z2>UVW75
zt(fbin%dlvm>i=2P6cu!3RV`ufdO`!klt*r>tg#N{fdb7UO+CUwsQ7z+R0!AOl7n7
zzV&=;-vD+d`%)SDvEW83KW)J~AKbrRp0~F0deZ$GIG(^rpN<ljRDQ9Vc{^2n#PXQj
zjxXO*9q<S0`$F0JV41LBt#f;~wK<e@y$87lRzGd#O?!Pq3VJZx=&)vK80d|UPt>3-
zHDu9(KZ>fT8_Bxz>kxgpt+bYwRtG*}epZ8U<N>Bp8*Hw>UA<*lHK+_98l7~k*Z2@Z
zjjC;xXW~rh*>&A$Z-{#J*Vf3ab{<edzc5=dCkJy!o{iqt;u`ccIn@2pjRpH7>+}98
zIU7v|^~kFs4kJXPxcO<L$p+z(e)3rc?nzaqI);#FeC)%?$TZ*Pt$?~g3v~yA*LhG>
zM8HbTZ=Du*wb8QZt?joeL9=Te9pIvJOSTsJAt5zO@+v!b6Pq4kvsBP<N3*hiWZ4a3
zdAPx1BP0h&OtDX=sDLF+1Z`pj0fo4t#r@pwY_7nfJF~APS%{QcdO{X-d?L0r)$f2w
zH!Px{IST}lIXn(<;Fr#=ZwBz@E0#YWF@Pg?6##3f90Rnej8K`n`(CoKBP{H4;YHKZ
zQ}l8k!@A!diduq{A6JG{0`$nyRlj?B#i~k`<};9He?-`Z4@-#{qY{clPN@<jhOKtd
zA*WItPKr4dz=(CPZXjf@qURw<LwdJ<5R(5@cX{pF6|$Vt>>g+h1S4!!LTopW0FVdN
zHCl57yCl+`y(L+rzAVB$X87ZAsCbbqfPl)hk%E_uNli;D`$ujWemFnmi%2HdX#h|2
z)+knG*aj&rWolXf8;joso}Wc*ZaHr!yy6-ocVM@nXHu+cwh7J&A2GU}sr($l?SmIT
zxM-385{lQWTQWz<VhG#u(UY>~8W1o(G;}#m>(8huL*|K&)>M<I+KRPAG#F)pBmZdy
zfvo4pjm0~~QxbsGrK_X{-#&%}^}_wxPg-nmd5_8!w7avQ(p6Dk+>tS-KM|)Y3=Wlf
z1Y%?>34C_v4YYQ^P<RouV{+&}sw+|}rdM^Gs9jqr!#HFWnryGQ0H-CD4=7NQpm}0O
zMb|Z{xRA@F_n$l>vVIYc|K;n8{Z4FLa7?K8z5b^~AEhSJ=aaTQ<i~n)wqi6~{C9>J
z!T<tcFkQDHOrlZJG8he0z|LIkC^h{B9!p0UT`TpN7;fs<pBu`{G!6ktetBirC3^Lw
z^#v>7u<od?-~;S(yLCbdXMlT+!3)1Ny7Xb^Gf8PjWUPT%KA~S<<Zxhj@3(mS>BM@#
z(4VF-1%Jes@&0^{Og68=ieF1Jkl@WanULp_!3@BAj5mG-T35^+KI&Pk@^1J%CRd>X
z;eSC!7GW^O3Q}lO?AAKC(<YO`AMUx2^GDGA>b<Mg+k(Og3C?kW2>~t{hg}6HiXTjS
zfIs2tF|WxOIRnKSI8xG90suxR|I<D0Nj{wT1^l+4nO{X6N1cRJH+LXAk`J626=3IP
z#3!X~xg{$qT4>VzPtyiHfmml&k8s*Sxy0p;69Y8#_<r_{FFzxv<9|6ZjU|BuU7Ou-
z4H|krN6B~v>l)A&AOV<o2)q1PYSYYn5Ufv8yttYeRnrP8OGam^;ha{#_(V*unS!8h
zp#1F-nsI8REtFBglf{y&<F0~!o!cy#ENP!-*z1k;xLVs;`UGB1>nIKzq7^3WDVlBx
zBD#GNyuj(w7pzf^*MW7Z;YPe@^V<43=^)B(lKivyt>s)zzyW(LkS1vcghI0K6k|oJ
z3NGY8fKK<S1;d5Rn7`OP&)(5A1mYJrSI{>Q4=^p60)52=(DXMz^QSaov3*9OD7W%;
zHJo$6FvOTX2pZ9)p*K%`)Hlfre5%eE4$V0H!UnU2=#2QYGxW8;_Y)i6L;$QyK)o$7
zw6*q=pxa+Z27ojEZ|t`eia%PC`Uy=KwFEbXlsp0ho-H!3F(-Ot_BT7e<o-AD`cG>$
z3{m`gTn%gnDMBsKk9_>2S(c`m5nxgSGJW1FD&03DAkIwTc?>e<Dzp_hf|9m+?%&|e
zAhv!tMgA&R%V)nRVnWwG@mc~YAaXVM9Z7+RcdZt33;}Y5_C%#|p;qR<#=bFHuxS<m
z-g7_if<`iND;XPOjcfGs4tw%JIyIHm_GqY;ii7ibeK&;rpO=>Q!ECrzYHVXXky9tS
zthp-|IiiQsvFk>`Bd!xnkK($vhOUqCET$%Z%?uOUmXoheSA5>6+R7g(a@ON(@8->a
zp-YSkzyaohrd~-=spo)Ghu2?ps)8_@4+p>W-TBzy3Bof)?<HCa!He7L%ew0r*LhtV
zsdO7p{mYxP<8wFv?u*jjg4xmsX2$9ns8%|6HyISF#w@L_Y*AM070kqE)$??-&RBZU
zewR5!b0D8Wa-veJ2Rfefu(HQb7_N8r3Ezl|odc{;rN~e~iKA8#uM7IUgWq|cxSk$a
z?Qgm~T}tiGkk+3wEvo4ywJMGqFD7kh{UQHN>_}fJ<y8@ac=Qf2+U-NFdA3bi%spV%
z%|b#UY|OGW2T4=ZR&A|LKy(EQ`Z`g>rjD48RkT@%l3E?<D`oVVs+J~rlh~rM5*C)#
z#Q`X=Zt^5`{sP-8)R?xMZ-_Oc!ire;p4LAMh5Uo6EsbDUd#c!`6DlGxJI*;sBXe|>
z_$$X#ucvh3?CWbER~F=}#Q)kLRg&6Ms!$l(hnjfUsqBu?#}$r?1++70UXU!Q=jvJ1
zxJnNq1@sv5p@hHSH9iYr$>WedvDrn>*aHkY$|$OLSs8Q*yuu=Ccg77}X-VjH<!L2P
zFoz)zBDjRr=y)s*7HKV=Hw60yzU)s_^~Ieft6wDFb-Qzr7f@eDx*KM`=XckAIpU@v
z34B`L9p>K~8QYyMSEkOe_O^3yYK2y3Cglc~cJC+nw?7X%r<NwqKIpnNr#Ujn<p9f_
z&cL&!-QO`o$3u+L?qloV+ppvI35oUu`MK5~rxjnE78E0b4_+}+<V5Z&U=IGW-oERa
zhd=;bXQ-LMF)1gmMCbXVAms26ucU;#K9DsB!02gVn?a(x#^bv&|Fx1vw97DmQmoXj
z{R&sn4z?HhVt=vvq}5WfiI68j4Pe4Dawn>pfpoT|sV(E|)Ick<q9y9|$?Aj2to6e*
zp<NKo5k>ujZNmsrcV!0F5b;ddUU@!vF$iV1VUEk)8_BkQ3pYT&kP;1j3*Q^~)VlDF
zpq|I1c-Z^~nDH}I8@s$29&9v`Uyt%6b~d*Ff7;%qil+J8%d)pK`>uaX6_6;Xu3KMb
z4S-hC+MZJ-mvt@@*esCQ(qbO1*EK2>HCTyye$elFdAh$X+$d+E6;8=u-DO)9JQF}6
z9WV*t{NAUg$XOB^lO^YFc6Ml)_tQ@Pz4LepZ||%YQPHL-udTnw@ou1PSe;j|`UKx8
z+XppG1oP|Nw#bDldaMJC9)Ra(`xm>vp(qJdMX9j&wK-Yd!}5*$QR;wI6AeN+Ij5}*
z>DF55)1msu9eRjNR3lC-$)yo5&|$QfYAGW-_k7_TqBTBVJ{5i;Pf6CfJS=l@>0am3
z4-&iE&F>v+Z@k?lPgAL~wk*orkLBf-e_+Rx8y`qzopT|%ri}ec5CG9<RUaA}8i$|P
z3-OArgZ=Y^3sitxY7J@XCvPaohbaCQlagt0bH)%Lr>ME0>kFV5>b0i&#H{$5z)rPD
zc1K%?r~8uMPUrGDy;B-77_8vb>euAjA>=ooebn~BfZAusktN;3@>f_A4(SGV@Wq8X
z25!oUPEX>o1TImw2FxjkVN|W6l~iL#fJe;|`iBo++9%ywkrNG_s3R>l(C*4h^7-=O
z^L_2*xml`lEEG1iu4R=E8INZkB;#FDAZoHe?tr<!gLTf6o?bEmg<1N`c(d-&qzFrl
zZeDB6-Tgiq9#*I}j^cpI;NLrU@tO}wcAx$$9;S9Q=U!sKBh9PV^Qe#Z%?3N?1mVk?
z;E~I|fw#|b+dd5m8FFXJCLmRf@h@x{UP&o#v@N>wmX6SGZzO04RMr5lMwj`w!5@^t
zZ-k&y9x|9T<YiD)jQ@y<|7Z|aW~TquAgpObQ(#mON?Hnv3ZiK@><}#|tp7cK|38Kh
zYnssv7#k=XC-Z-tB`iqT=tsm`_mws{PKYdEaA?t{)&Dx-pLprxg5ZPrr6MgVC)1{U
z1Fi}TEzBswD9R|tD4upX367n{1Pl(A7U>JlmIiqTPLsC901lTnCk_sgCVmG_l4ipL
z@oxcu^Iy^%k+Oim{{**{XhEy0Xteb(ADvWkd80S)MAbaI*P7Ibw(R{9c90m3@Raut
zrUn)nNX`!S%tbj-5>gVgQL{#`a>Qr}dbY=}T<NWOZlSCdUHy?qA^U6avEqF}KcKC9
zo$<W0`*PK-z!f}A6gapK=e*u%1W2iRm{P0NX=7mi9_(jIF!8X7H$veAAI3%K-59g+
zv6*O`56vhtyoY+-kqVsLum18_r3ql-Aej>sI%2Y2b_w&8O{H^lfP0F8dK5r9+4B-Y
z+r#w|3MLf6YlZ3p^%ZY$#={d8!Q;TS5aap%9P=0xe*eU5+aZHQgBImO3c%9^7wADY
z0u%o2=ok(E@a*6kiTZlE)h=_^IceLH_mK(pGv+^iAr_#s5*5^H7Y?(7f$wDaG0I$^
ze@Bb)OXrWndm(n`Zr)#RoBLcu^WJXL8Qzc7o;JYxRz>3R!_Jq(w;+@;#~nvQlmn?c
zs%$v-5bu!PK#ry;9r+GvDF7)eyk&^Rn1MM(Q*w%QhrAW(BBEvp!Wfu2W=(<%6*l7U
zklTTYF*0+|ns7VP4Jtt}?Y<Ztg*h^BM9dJ4F=Ic9Nko4zs4%K%xZ{wbF*kE=J-Gl`
zC~{CZdN4n8_8tmqIC3!j9WrwQmNXZNJ#rCL;w>2kauKvZKavSlBw#JFC@}0dIfF9^
zHzGt0mP_cxaJMz<riA4K`)rDPi0&_rd&s+&hgs!AD(a`>z3HIMP^eI+u#t_%)|A#C
zf>x8Y-mo&bAIIR+@Y;mz1aC<JtQPB~n)yQs8;Ku238s_P1}zhVIg$6N_US|G(akso
zEWn~&(YDFQ`19NI4<Or+(`Yg{6dIADLjg_U^OL@;t&3t^L0dqY@9$o*0hT01P|kpQ
z)6a3e7Yn=R;89T$eCWh}s7yX*_)|8cw~+`VW-X`7LS6#-Q~n=uC^9;25t$Gou5ygz
zMq6KFz+_T?>hJMM{;}`AI-q4gKO&Y;ttgb&(x=>W_@ZV!Ljcs?0B-1qi<616K2d(+
zm{5GN6oRnm`^1$oJ*_Z;mU7q&Y7mh6OETnXe8+kh5Hl1^Ehsst{otLIv9u{D=A0#(
z7VI0ngZzn+jGVRDTj%mP+76cZ1w6Z#ycXl?ZGsV!9>lqDDusqhHYiPnIdHfMlJp3)
zkb{Vuk2FqJ37{IZgs7j>t7u5HUJ4@}N3LS*DD-S`e^s1+oID{-MhJdv1<mXj%^#&w
z3(7d=f!v6Qt5h*JE%ubt-wBAaz~E|WVoEF@gl68!Dt(Rj7e>KUMZHR^#L*~-3=%Hs
zqumDJ-RlK&m%X0irSHLO#=UzEKW`D*ZC>!|T>Ib;C4gZptwJNklbLqh!)Ju3=xS8)
zMPL%uCy$O}RD9w(DE6rLx;d9m3-9kt{+OX3pMZv9x8o9Al@i$wqZ(q}8FxNrDBnKL
zCsEjn^urMJoe-TxVu>T<3efpi%W99{@*^*vj(RmnMzwl{dc`qzfU9(gf90a}g`EO;
z?wBKKCZHV%{%4hq3#4c9Q3aaUAI}5CPh1oP#xo_g27l_V2AJpBgv|&(yN|XCl%5Ml
z*^PyoJxg^$JuzNHgbf4zVF*L$(@viPBzzqpk~TUPf=N4MX$kc2*MVUfIUa!O@*<>%
zi0NmXE=K7==}{8ACsoQu#y+l{y>Hi94B?q82*~HiXsdyU`JI<eh!df~_I{D;IV^=V
zf%CciSv}TO-&J2VHp;-t%-My^7Pz%BH4x>Hg|DcwJylt{<okVuOBwYRv;2i&M*_;U
zkR(Fw+#cd}R&c6&5mKmsEe=`?IaPOs8m5yCtVTvQE7;?`bF<Nf^DJ+B=;@GnzU_hN
z2*75;L0_B$ML6AEw1d0Dtj+5G2E{KdK$1V&tupAgZ`(Z?{#rX<ahCBmLLFHlc!ku{
z1-lmlUS<H9hx3wxm_P@<wDW^QYH16qgek?Cc$JEiAE5-|j$i*!1EvQx$cXR-M(u<_
z)j=D4E#&KAPo%j$4`2!oCAIho_6X<n2H@aCNC;#B+vZO<ojQ;Ob<OK;j9;x3g{Aeh
zyL}a2e0ti+%U63w$a-;&HAilQ0|w1H#1k-IEtY0UhS7J_Hi1LhSuF~cEQgA)<Im3N
zY-~(Kg|?JVV%dlA_qn__cS;CrTzlWYM88sW`17vUMl}2WhPbbXi_6JkaPD!d1AwZB
z*WjF8MM=?jk`q;3+WVD^FsbyefPO)8m5}fAp0N^WV~(c<_pX%eW9UT&U(gwLZGn<9
zVYy?~F5ZO|`eP|p(a+Uhqe^O16B@OI5-ZAK+|Y08oj_Ze*3&*O2Ut(_Iz1t;<ky}c
z!ifbxIR((L^w3@>wWCT@k3T{f0-UZQcy&di_Zjp+&I5<3BLYw)R2$l6@OfSE4hq}m
zyqXCRM3VCHkN7`Nn}S5*lW|}MQmR4Vy>+NTm%7M%2dN$21r7W(-fHk-sts95t%Vr!
zqw|?Vk;TvUt5<nK51~L6!EDLpb4^vw_WxP9fm^4udzM@-^NeF74??<{0HDp(c=YEo
z%NMH}cDr!mQ~|*EQHagyDt-1%*N#=oEN2-utHYVB16J#`Y<gUc4h-k~hKvK0@{Aw}
z4tyRvI=nb3AO~V}09r4uG6pA1m_D^BAxjW~r5>720P8DS*`Sd2T95COyB#6+a{MhE
z2TI$Bv3gkOj@4!EjhqM<aP*>b(v!hLOP~BV)IaX}QJhR#7)I*6Y>Lr*;?uGq8kOcy
zM{+1V8Dx(ehajd>vUZGJCY)zpDF>-TByEDnBUxCVDoGzqET!=<qO5;4A5s^L6Sgx_
zo*m5(`Z}<5sL&SNyU%(LVkMv@Vl&B2G7=Lw3OLQn$dB=*tEJ-%@IIuZetsY~aEG{O
z+K$Aa3uZy&jj{gdx&U!!B0#241dWBcL}7ZtL_|7=(PRM=YfCUw;!q#rWO?g&zXI+`
znnb)L?c!fqPH*>Z3>{yq+3~~gcKWMFY)v8IwERO4Ho`C{B;Y3VFNns4QDd%i6XwL7
zz@!mOj23v<j>r8V0I@1Bzkm)!XJ&Vf5}~PaWF`@6Kq_eM1pMuCtOK97Yh~KF?3s~a
zZZM~GSn}mLJ=MN!-*N$SC>`{zT2Pa@M^k@ao@!SD0ql)omrTYt=*JEKY7_g4Dm%2A
zPx9>#Hi+yYiR@AU_;Zg>mJZkZencXq_IKi(7Nt{Q?Goh=z?O5<bO&r*GxZC{m9dGX
zaqED2h+R9xn4!M}Q(iA{lhJV_8eQxGQ}+yzpzaTrKNj!LM#Q>8A)XIq8aPnh#bcG!
z1+A#yZO?C+x;nbtm=Z#sY3%COF0T|Fr=p~<M`^dgu#tvxG72*R3JU_nzBz9dV4&pS
zNk*GS782wDa1f%Lqgut6a)(g1?zgvdfW!Opo&}`~XCR7R2Y+iG{hqnLo|#c8<9V^)
zYz6c}R!LO-m5c`!xYcj^+5Rgp$+MXimpx%hk1dAy@T415WYj2~FIEvT{x{lwm;osa
z+&aaj*3ethv>@<bb1Cm#Svl)j4P;F^Bp7^Z>#T+sKsZfivj_v`KOhiietKUbw5F?^
zt&%tCgX4f;*>FHt^SysN9$z|!veHRGV&gU*a0w5dpHpdD3;5(BRjf8=3*@n(XI(ZK
zNq!tjg!7yFk@Y)A{rRb4$?(e}c*hbfVtf%P+bQZk93|^B*w=b@kv*io#eUk3{IFyS
zTKTdCT)(P(-w}^yx67#qS*wY9kcTqgg5U}(dOC<Z1Qnwz8Z7Bu@=*af;mr}DXB9rC
zN%*5uG6wwiWKWtyQBO$~E=Z_()IM{L`79Xpy%8X6<F5XjERi9|mv6Y4kI5fTlu&cb
zhF@&#>A&bDRHOSw`w5xt_i~(beb}jiR*zEwplB`GU5`J`I>;eGC)*1?(&$DX-E@P=
z4Cf$PHAuk6^QtYXsE&r8O<T^ew3L|g{F0@IOv0M!%SOQ+whTzYqJIs&EHh+lx&)1S
z^@%Dz;^hRj^Kq{!Yh%Y7Bb%QvL@(O9q93UVCq1hrK<cQ|ci4mUu<G8&(_^eeff6GD
z1mw%88W^al%@T34&5%^Yhjq+5RPDLzV7+s6$!6voCwyJhAM>o%|8*rvr3|KE-Q?L~
zC8^)ePMO5CwYi;CFpayk`PGA;mggsz2+Sa^;o&c2J^D=_tH0w}B4V!KyMe40QmI-3
ze>TcjD3@P1MQc4}6bpG_R>pKzk%dSAV4vg_L1+@7<b(ZmE^5r4Kw){ocx?+XSsF*B
ztQGMa&kp}Z!P@*w?Va*6D@r9=m=MnZQ<q9j$00-xzudht0rEb80O0r0J5Y-BPGm&(
zb}|v+gMSG8j(xeSi2R-qr9lQ!3j{9*SN%y#szky4A@jPu5?ehY|GNl-(|joh@MD<$
zhj*wSLSaw03;8Ezf5#r~#UKChy);1x#Aonp5Ok2K>cDX(t&$uk1?Q*|0rHp}L<Wx-
zTK|sq%wGkupIAdH2=#{@YAOPo)gt+BFr=)(dB2>~G~>>mibding1`F6qy^l9AXOQ4
z#;2RkD21A*#))B`a^$J-_|Kv>0MF>Y8=+??j16j<-#JL_LU4$sE;T#wQ6)cD!-gFY
zuI5DM$o=L^%n<6**8}o09b&sAgx|mFOmG<ZN;OrmuV^`F(-JtRJBdS2mKn0M-=8<7
zziznxl_YRyM~i!+JyZX|;rW6=am=RgU<wF>vZbF4OHWxLVod>7#&bagT+-R#UP&bx
zVy)T=#f?!j@V45!bAKfU#NoUGSkI{=B>1yGCK(Y42bH2zAkB1xD4z|x8=%>!7nvqA
z1j%3Wi}=tp)G4{EER%DkX`ev9iR5V3$sS~He?|3uoy&V9zf`2Shh_X#g+E_+KI_EW
zmC4?^<Q10i(^6RGw65s@q$?+32ePdGcFfR`7(kAGm5FyAQ$`wy`?YpvUpMzr%w9Qc
znZ5k*q7IC`sxapHPWWpL-K4C>-}W)h&VVG0|0XbQfX1XsHmgz4=$v)J(O%lumCuqi
zDwR4RhcaEhrt9Rr>lT4)Yg!f34V3Ql>pEVlNJt*;!XsvcF7iGW@Eo@p6@@;rT~%^;
z#0a@B)uI%0#3PzCpQK!CL>s#(e7MAfG}~hfA&t&8Rx5l3%{%0*(tW8`+{p5Wyu_{5
zsB62w@;mvlb^UnRgA8v|Bl)HX{Hd=8qm!a;x>9|_@^^5ZB^RjOLCeMaA^U8*tfB+y
zn8mz6@@SAJ4=h+IAQ7OV-dpca4HHXFC`{l3TXJh^^mTKS=}QYzkot|MLL3;{-hSe$
z>FIZN;lEmcaa!#=P(=W=pm@O-H7@|(#`EB@qaMlg_{3mzsS)21My2m@1o%ho*_T7e
z-hUvF!V%OR6nMqfgU+A+EZ#OO!z`ML=I()qq?SU)$X!7Kz#9Xjo9^_YG&h!K2|BR8
zj5*mtYCQDvJ9UZbpxsR5bM^358>HKR=7nnRB0j#POzye}&Owe@HYr<Y^j@*fV`XtZ
zB@mwNGarV5YGAzqzs$E!3P4=3tNP`1RA`l_Hd%^5aKTtpwZ|h`r;O_1yr|pFiGk2y
zbn+JKr%Vn2pk=1?i9>GvvFa~=pQRes;|`_glKL~^)D@#l1Jl<1DXjQP=3j-94}>8F
zQn-Ng8_Amg(@y8V>|$gmjBwJzA)t^DLNH+1c?1`t9nuz=8d(^1^frEp+Gb&=us!d1
zWS5p&E7jjArb>})YG%c@ej)-|`gb3Jzic1+*9ZhUU_jw-+USZ$`)@Y`v>uj+Bp{4(
zcI*6^8BiR#9&LCwqNK`*l@Q6u;sDrOyU?P&_8UUM&Qq@ymC-Gp9B1q$C3g*d2|hOC
z!CKdXlz-VcJhry_Uc%N0i^^rAIn1uzle4n%d&j8#p`*i<e2c!x^D;;>*rFy*_17s-
zI^kv}fI&B$WD2uM=lJax{dnNsKwchSGmX)lBuRO;V^cF+#?pJ0W|8>=IoLL)O~LT2
zxXsO{;U<Pzo<HZbZ8$>9W;PFU)t-(9kUt?Q`{Nbff+nPKeJ(gI=(%qdomHh>_|1yq
zSUqEi+?OspkMCn<R$5l;zkC<9*sm1{-9sQF0mg}9&~#3k2pAxYG(bZH+#oI~zXY@&
zR%!Z%64SguLoQ}!2(F2tEImOK1F2}}Sig}#msPf^t^1x*MFy|T>W=%7dx#Ke?m^O-
zSU`%)Q3|P=^W%z*n0zKg72eDZZ23k5bQ<J(`<>a^QGR|8HtBH+UP41A6RB0lA5or`
z0QU6V_mPME-TNk}EbjDgQaZc%MA4`#q=n?in~KgWd-z|zv`(hJ8pHNN-%y~`v7fRQ
z7huu3;OJ77W&c#Oui*61U8@xdd)RoYtNSr5uC1u~pwPZGuoKp4Ui1ukOInqst5rGQ
zFXPA+_zGHD7q#p&2a4^Myr`SR;66Q&0>*qBKDlx5j#6lLW`!_|_~Tqcq1Vh{Yn}I@
zUm<HMlrETaorG<KfS?qimS-}d%qK#E@%~?1M;=$h_IFETDO*XhJVHw8HFxID+&kzg
zB<)dASrVc}3sO?Kh_Xdqm}K8dvOS(|X(L41WcQ2G<At)cAS(HNr(5ZsdH(R;=Q!W*
z`R?19xpQiI-}fg@{TYAr?9KWyUu8yd;_d1y8d;waj-yJeJUy4dr?%5h?r>m~k7X%!
z|2uW#<L49hE^xi!bZ4h(%|B;O4Ov`Yx^K^HuUD%a38~A9(ru$HU2`J*=Q#JYGNYY!
zjAHgBB_<^$SpM`mUcM<m<^uLWw`%*_HG`Nqvz6u}n{Q+59L~3lR6b-`kfD8HY(h$p
zr-9nP=U&dC7KAN|3AJKPo1+^?RQ~WaO&+7m%#RwaW1vAj^fnx_tH+Te+lD4=_3Hk=
zm?g2zr59ow8l({twfd^bQ|P%Si(0bcr-%+=q2Ag@4>q+lIELi>@gdVE|Mr17Sw>Nd
zALYGTcP_HP|Hi*h<37sLYt<f>#_Fi{-SBnlx{<rh)t2Nd1>Pyq`ld^4F(2<9_4Bh|
zkIiW}ri>q_oc&=<;4#gieJ-cnYkjnQ!WGj6{!W($C(qcO?2vR>T3a*uag~MU-GcQI
zq2`v({%+?DZUkMwUH!7ZB<e)ugS3mTQ<JtWjxhP>^}D~unc7%dFEUJUKfHl{(=x#%
zV$_t#mg-F(7{=#H)VpOV*98Gh8&!>mW*;qiU*dG9-$}p5J5xyN;|{muUj^!`Pftiy
z4(hggf78*bvrU;zXPbhSilq|UFPcv?x9+U!nGnCSb?;QE?W^VHx!O{jY2?|%hl(1>
z$Lg-nRkzo+B-Q>AasIuPR@(Fzb6YeonWt`Nja|b$OPF4-hP_JD9DgeD=f!TfLqGTH
zccjAo*@s!h;{y_(q^(}})w^-)#E`2dA^xk&a-z(&mhZcIFe|*W;qa#s2UnL#)2@3K
z%zCxdA*Af=$L%W~j@QYU(s$Dx$=jjB3-kIm)g2g-?%<VXCX3R%b*s4`WEpOL$5CT9
z>!R}h%F&As^KGve-TNe68$bt^dOls4z5nMv-!(&Lm-g~1tpDC%rqt8Xf?cxIbLj@+
zjKO&Wo5901t|mPj{%7E*VS?M&hC4)UDU*I0RsQhSQ;p2%hNHGm_8&i?w||Ue*KFOC
zI7&Tsd5-tx+uJ-Reir9seSKDB*hA)TyjV1@df@6a$tQF5ujkDB_Q?FI$;scJ+7DKL
z|76T^{|ml8^mVfy&&mSp{kG_MEL2Mk(sF&+x9^o^CG8sfK{w1?qeu7tXMIHf8LG4M
zPkLQ^AuSZQhCK4s8uXXe9f@eaY?n=~a`w7tQ$d+k-U%I-BYT~kyytnYTIx4<Y}})S
zne4OaKfX0y@XxApQmU~!-uQA!lf{EvGA8p#-GrTFE4|~XPukLJYn2->RGldCD}Sx7
zI<8Nc`?LG$r%d~-Jbfnq&!;m&ZDtunX1Cn1)DalG50%c`{CDPr3z;JeBqgTV>krgU
z%i8T??G<}&(pAH$DoYIZx+Ui&GeaN#TOBa0sN`-*-u+p>%^9^d$R#>&Lh9P#zJ`9M
zmyFM(56$iIp|$Gy?-BFdej7Zl=iaeN)^RI}JeGw2+u(mEW8|cuYwr3zw~YV#!^wN~
zgHqMG7q9k?(Rw~KDOXx|2dgVL*N7$m_f07#nvQK$J=pD#_P|ZVyMFWQ1|(ifo+Hf+
zZKzh8S7f)^JaV#V?dQmXz+BJxb=r2Bg#wcoCOMVv=RJy2Dub3D9-C2NQMt{_bx34&
ztIH`HOMAh}=F^uX^KEwyYVKJcW>!)EsqX23msPJHRs~lF`IZ<ht(2~H8{oM5y^FcC
zzyD^hitNF=H^PTevp)O%Y*=%$rh3=^p4Z(m_8)9<cX7(ZjM_Vy^>==R#f+|SAl5!O
zs&w%A{WYoD;TuyXEZ*;;-1mCjkTdt@dEK6Vc23l%CF0E+=l^i_fM;so?{)gqK~sHR
z(%l=HOD0IVjk5WaONIR&6};8hP?{oeUZCoh(A_8eTCXAZqTsc3>**m=#~(W4cu+OS
zDJE^knLUF2o6JID?T=5{r*`~<S<qjT#F~FhyB^HEOE;hvILw`O%Jz=+U5_`P;kVx+
zvU7Tk`eGayynj<s`h6**nG~yc64&v~++6-{*50QsrRG{=W`_)W?41&y-B>j@qE5Qk
z(_6o)F=<BDZ#y5a^8fO@X2a+eH_LBF1fDq6-)(vIh*8_)3id329d)l!W#X%pmbJ(2
zpI?2jruV#~zeiWN$-LiueKvRdJgcu{o%-aT-M8ZU`8~Qj6ijxFXkKnHch&G!_ZkDe
zw2q#C{Nn8d{cctpX2s_kM7}z)81l)agAR{Z+DXd}?Vftfw${k4UR%<){xtchkMp@}
zGd0KddXc_$z=`WYyKCca{qN%2T71Lgqv4)Mt^~cF9Xy=0tbbe<60@VCm`c0$Cdh1P
zV&<;D)YjPLH80%jeZxT6{kUsToyXbvtu7g{8}@u(ER?8iYtHG-Y8yJmzbMG6S2;Js
z&JLTkc;-Cm-D^Fn<~_XkbH3T0ShGd-g)6)oE+(GI`cS1=tDzEY*Q_2hEs`|~tH@xI
zyFa-QGr`=>XOLs?dzTO6Oe0=oEGtd$^Dj3`ym7eHtWoRWk&AsNkz*cY2`s*Tx6Zve
zE<suEfi|V@km5W<bH??_Q#LnLD_bU8jvKjen^D}p*+185>hJW7D(J0tv72AM?o1on
zee%f=ee&km*$XGS1o)QuPTVoFb?DBJ#$9c9UPHUnVoJmg34)*4!wb6)#%yftW|*0=
zC!DbO0Yc;=jbs-Vcc;dR#M~Fiy54UIwhDq<1>L$UbrT2#edH))NzT|>fl5o%;X?WC
znrg>)%S5<{{mlywj2)t)t>R#7>t@S_&%tgfktBQXMEk>oa9by0x4B?rq^ZR0-)3T>
zhrRRu6{^n}J>^{T+lvQuGY-5T-8|#c0b3o*xG0khvylf(FNMb1US6)TbzuK<*PV`~
zo?Kvfdj7pZNp3X~k8OVM4i<z5y)TMdBKG@!f^00`-|(X0NAdR`#gRJI<8$%C%w^lZ
zG^zhsbZA{e)y90~bD6Qb14{n<<UmOutPgLgj(fJXEL|_aY}N18gBG?HO}mBHY_|&P
zn^fXCjtu*|@on~rEa{^&J+5q~;|dl%U;3n47FsyAjNY}#$?Hh)V570S0`{j~JU%7E
zyFO}eM*eF${fy12<f9X!i{5>SpXZi!;^FH{8dLo1w1?ZVW$*uTDKJcZrdE)Bz<x$A
zsjKz2e8<<`m-bJZo*El-a?2#U&#!0JcQ4(ovP36+|LbvkwnPo{7=+J_uRE*js^{GA
z^w*U0r;VzmOSG08S$M?5eVMUOc5-NS&Dl(gJ1q~{+14v_ZU*T(*RS1Qc>?blmir-N
zwBNm=K4sU99W-lXkymt`;77F@Q`Jld2D_N}`buS3>e>;$D_5AM{%h(e6Id2`eeo*t
z())a){Bi2z8QqUx?v`-lk%{d;hv%<Q>2~GwUB7cN#|AxBG1}XY`qr|~s^sgw)Wc;P
zr<U7^1B-o*6iGhkKDAi<rs9KE65+S6cKFr}W893Bml&$I9?dy-=6v5teKvklc~wlj
z?EU!1#|PplY3tU|=;Ik1jkle<?$Cco?$<wlb_?8kI5P50j>_D3O^XaB!LI}lsyw&m
z$-QZxCzm!4)E(w>{Z-2;_nA9aT5FYl7lkYmUb<svv+%sB>_PZ~q{)q}{q5T&hlWbS
zZ$&g+xmu(DP`7eXFMI1kJxet`XRpNHvwizVMIUl79CC5fkNqE{Z(2339jmTq<D(n)
z{oH%z2>ETe=RY%zoqBCveoo`;W3#vFyXM!>Cyfq{ZvN(;WzuxuazKDfXhqcV)tk$V
z4-ZV-xN*~B^+?9@VZ^aqgYp0DP7kd7v;Xfg;$VUJ-jfKgYa#C|TZ}3~(r<36I@Ls{
zm};jMCoa@`xjz2nV&D6NQl*#4UKRPp>K3`dmbw?>u7vB|Ja@QixUJE~V`V*md->Mq
zQ)HFr9G}T48WqbWIm%XPM4aE|@~4e82FKEC^o9q&w0T*-wSW=?s##o}t1+OmPtCZu
z&L>?WY75xKF{2Zw9v9BMx@`XKsIPjX@Z2wXQO448w~wm5D(eMaJwEolxmJ2p`)-o%
zl39e7p-S0$y>A62*;mihM&~uH6^QM2A3T*f(Xr^?<<n>W=Al=->tOh~2Xn_e$lwcD
z`U_UP9avYccHwXJq*FPKL_B*lY;V(JeKOMUX>r;=Z`QA$F(<t6t7)Oga`u|jrWzOB
zdo*u)d~wehqh*uXyb5W4-#&XM*337Pda%a|y_L@QFR#`j&wLlCV{;6?eaa80>lISC
zbXA65YW&3ATW+Z<J$f+dkIe@S22Z{Hb{OsVbE8SD!~MU^4yE;!mL#6MGwiEnVEnak
zb6NUNjdeBSzdiTe?s8hi(bM(REo^~T_YrAsI#^gp@I&*Ikv$JSarOOPUh#5p`RZZM
z`bo`0W5$m5+SdP)dczyiVA!n};rI^bbn$O?Db{SFug0=>>T8$L3lehmtu(^EBs70l
zOR#=gJoSn9A3p_Ql@W!BA<O1WNRpOV-Y9$a&Sr^>(C=q>_3)n+l}VTfbHMVE?JDy9
zuKPNB8nh>Dmo}UGI6IB&U0sVySG<b;yz@<VA8E=Vlk#aL3vbVGSs!uiUTa{Oe(&Me
ze$?&#aKPLsBF|iFVD_BPk8bN}_%+|k-uBAqg0lGA1E)6+_YZLkd9vNNxZXkK@cki|
zFNnU4ez~nrw0o=WQr%cp&(t2Ps?{#V?XsdP4}?!X+O#f3XJPU{pXtMzKlI*oB{}!m
zz(&(<X)EbR(o*4I^>^`!&m*#QCLi!|6Ytr6`oX;Lf3KW~7*Nu$d-aot_Kok;e-?Ny
zH7&NWuX?RCk2Lyx)<f-*Rlnggv8!{_DyN*3oeB86Hc;n8ra{YtjF!^+v}bSi#Y3Zq
zMeoXs?wd3}@ZTLn*Zrti7vvNXnV}Lf$0TdV^2`ZrMVY43)7#T-otYSMe)`Yir5jo+
z-FLO7(LL{d>k|@iG;E>!-#^Sf)<sOq>-pmEU8krp(S6(e^juq?Bcqq?+!Gg9xZmPV
zj$l~+M}a&6X^9|hwf(>&-Sr`Mimgjf(N~#eYc*{;YvPU_>(A|j^w#<O2)n^ug@S}c
z$sZqCtyceK<%$O~^M#m&K*f6VrZ;l@gF1ddk`#5mj4Tqizl>}>)qL7COZJTic2Y?w
zVjV91%5$_FZC!Bi>J@bl*@i_}l#~`NTG-#C|Dyg_#_kP=Jm?#Sd1*g)h{yj{`(v3K
zd|~U|KIMwgoPu+$-wv&MGd*v0#j|YtrsDjTALWhB$4l(Hd!KIFG=yrY`dB_fC&%-j
z&(1HlGxTfY;=9F0)=sU(nm^`OW!$<Q67X@t{Fb6rr;ig$5+6Ou=(p;*vq|0Dw_-`o
z^fZscyrxjYea0?1r`LrxO-uKic;vIu+p4rnlZ#C7N2bZnf8?ZOrCdxA^vv*;oJkBW
z*&CUb%<f-|<ro*wxmug_Be$ZUD!k-C-q(rV6Pkn1>pfpNZ+ullsN{*wtIAL!I-1=e
z=vFr4OHgmN?z!?%WlBu2DQi3HkeT*&mga1bCzhZ=x7QmT3L$B-?L(%ZlD2on2lr^`
z^|`Sj=#eaVDdsLvG42~1Cs&DP$NS-=nCyTiMC@PLm=0!c=WORXO?Jx{3sGhTUf5_=
z`Mc<bQ*9kxSz|BEPWCMr`=G>53cyD7cCwmoF?|mF+bmXR2c{tl3&1ugW9_e)n{L3g
z*<q`&iL$s2*cfFtEEpTp@mA%_O_&y&8H}08h|QR;GW$9d8;!ZmaIkc9mGxPR4HCd7
zFh+{tQ>~(3|7EE#%vc~|J;N}ufM5@WVetY&Mu%g*0@c|wZ0zhTI6{PM=~?*E(VPhE
z2YYiJHnfL`l8hA5xU75~Hctt2b90<+<HoMvf(>HlY``YTO1EI6l$97#&c6IhvFxxN
z*kBEYG@c&dA2iK#)#8=jfk6Q)M>1?_Fs3K--+_$)5WEdURsOTga`|vV&|q*BPQu=c
z0JxiRSd9`e0QDj~GPMEgO~~z^BbzdI3JvsZ12net@bfgDB@)so9?ow{Be1cuUa^>|
zvOvsw<f;sA!(?pjIBTY>BZo=C!z89qL}K=00;bOv<zhPp64|^PSez1ItGk7b!fkBL
zZ7rQSL^K}}!9xV%27*}MJnXHKP$+Z0jhQPck+ht$z%7_+?>3V)v~`?f+h!w!NSa3u
zNsHus8L^nXGG^&uW#iz=ZcM<U+4ISm8@u=b5R0F|da`i`ur&gTRXd2K%Y0HWi9neY
zO4{^5$_s2D+}4sWOxT5z4$oT14_$j0Tc(V;T3B1zImzA}!z`4*tc*`$A_4n0Mxe$n
z&sFKuCS=T2UY74Tg$>pud0Y@=8y9-Am!~i@Wz5QAhW#8%nO-s$t_&o@!*+62VP^86
zT6h+)P&^$AsdgQYIEM{TR&{W)w{_+W+tEhuVs;lX10?}23%vvc#y!hdWizrdEmis3
zMs3`;Ilw@QXT6;9aOSK3H)gG@3NL3`+BgBg6qh!{>~0yjH9@iK(=cmrufjCU6KsM=
z$F>V7S#~;{rbNm`ttx-65Ma&au!DpoPrO31UAzGq*kU+tmX*B~XI60BfVB`RYO}Gi
zN<AnXA4$;!3*x@Vez=ZBtH~cTgpE#43@gpWY*}!(C|21U3ukY5V}sd#-dKO`FHJVn
z8yms>-!Sek6&79|v0#(9e~5*DkcIeQy6~pqEo_Xc{Kts_r>&)&SK~bJ{MoCpBLXD}
zBWn!8HVN2-d<b^VRyKAPoK&3TJ7s10Se!D1R0+GH2-BWTP(lgU0CImu`j70*{g-4!
zBo04_%>C(DgMBy!nGac$(2zwH)*u9nB<#x~Y^;=lfUfXw6eAJBLzBoFh2jMi44kaE
zPfUs#cwJoq7LH<2+QkGTmbC4Yb|s!6dBg}AF5@U5q(u~gAS7rI2XZhe#)S;Z2q~s;
z`N8eyO51RYP>yk2NZ`Cf2qDEIMkt{b5Q1iC3CTNH!jSD8|6*9e;Di)8gajGzHc|x6
zBSs>kNK~y75rHEFf|4i(-A9UPs$DYD4%^{4M#T!e2ysZ;3gQ=wDFU@Iu~;ZX_K^~a
zm<J1t(26!A#R*a@Mh%2Jm_Wpe;}njHmBd9nqDh?Os{~d=2tI-$ghG)N;SLN~q(~t!
zPYH#HSaDoTq6BgXQClEL36E$Fw$oUp?d}YV@IyQZF%$uR6xYD##S|)Pco9^L+L469
zMQC^+B?R|Cc2{+R{fns%W9YO6A<m#{1gwY<DG-cELLkOPN+9bY_5mwGAtHWAgkm8x
zQtp2p2a^zbP#uF<2^v8NVg<n}a)JZV+%&8!ces#}@QI<JFzeVSZI7lxn!tGhgc0$m
z#$gTJhf5gVA!3P$=XMn2YE&gsQo_?aP|cwJj)P~Thk#^6R3|5LMnE!P>K)w4*8o<;
z$0uY+V5Cj{9pVRs{Ll)Hj9NNQKv+f&#t9G>vPP1OghW&aYn14hQA_2?Oia_L>yRWN
z<XJTdqWJ~f4oiteh*fippu~V=7<3KdFN91)CpZC?i5>#BFX630a77G`6oW^gQV;>h
zsLhBNa2`+-C;txdlVVU5>f2BRpedRJZ|A3D_&fq17Q9>07D)I_uda-=>7S$-l4sQ-
zA?!tgg*eY67(&D&nu7d-N`|5so-Hs!DQ_cZg1ih!GD5UA;MBxhgM`5I2#Sz!pMmHa
z7YInulD2>Z{C9{S2Vm}Xk**tIO-v(eKp?|Qy<9nlSULwQL8O3_Fmdndo}BzSg#W=Y
z1Ob#7aASlMs5bt?`bk{Q-7n^VW3h-wAT5@nZU>=)Bv7NFD5y&mi6JRUh^AEVFd9uT
z1cWzUok%hrwd1e)k2@H36I?_KQI!Bf9)W}ik~GR4z@i}-N(fw{AVH8nAQbUZuLxos
zDt-!543fog3Pg<@Oi~b9yXqKJ3~Mx+oJfgSES91hX_`dKE0U(c?-21zC|<S$Mkt>3
zgH+M%2}F06b-(IAiiX^#cnBbbA{to}K{<qY1WwUHv_FBeli@zt($$*)p9Bd~Q2%j8
zjTjsU%=2xU5Gm@eO?3=vtbk8~R!ulfAay^GMRS~>^&c2IYUzNG;eLdxD<>Q<s!yC2
zGiVJ#P;dxhN02CmomEq3{RhA#A}(BvGeVw9AkCs{(7uRK0s$6vMO;jX(S#)h3L!Qq
zat9QOc)b7sqlO8w5v~RiSir}#BN!n`c+AmUU)Yv^euZE$#CcR)l!zC6fIu;yJ4T2W
ztvCpkZ!;p%ufWw_|8d0&FIID{0BV>LkiJ3y;fzoO*&LAq*NLIA0$_R3RtkOGe;5so
z^ASQ+Q9K0adO%dHa0G#@0fF>?5C|gxr2d20C_!s{C~g@v>H$J1kras`MBrjP0>POO
zbwWGT)wSjIA0ULDnTL>uA*!O=0WdGlLubw74hk+bAOV3A90}Dp1NAqrw_|7ubtfQ@
zSMdTuUY7)sf<_}I&M*vG$Py5!NzS%7`|l_~pvLTs%N=VRFoQ@zh!c=#6(s}1Oz5L|
zYrL>bN+9}l+1KWOKn-sr5JRAq4;;*(^`8(r`Y!c+TS*T1U?QVP4B!K&Ra^sDDMV6q
z5qe65V?YQ=P;nn1glh`LHOS8p;*d3nwn9YjfDh_wZXfX9A!<MfF^&)1rl&4yf?)t;
z3B`SY5TXFG1}#I^Qk%164wmlfIh_1KAux19fGG+J0c1@C$(%<Z)Tca-!QQ$a0%rh$
zkP&$Jgi_RXghHrA5#0%4Y=FiE4k3dO1Dyc$CW?n}uxJ4S>8fM8_N)E_gbZJV5FHUI
zaKLCoD&!o8$1!*!0t*C!Z+9io8N?63XlNC}bO#MS1ZWPe@c|)kS_-gi=_^b_%Aa8Y
z3f_bcP%spt8EAHdXe|t9OVB!r!-onSW&$wR0v@}D77iHhv^W#&w09w-RkW@FguJc~
z5EAG<4i@go6!D3mBkOWTduRd6;dw692#B*l!688dCrq`(sP=(CC`uI%1_F5j8(^hk
z-XSnYM@vIMNTYEM5W<K~@em=vqUI^&GCv{(z}N0S3Zdmc#7}{uP)CCz9IashA<U8#
zi6LNug-TTjunNUkTWA5VN2@kK$lwTffKbTudVoc19U%mJG{C|YFi@jNAgqy638E*M
zpb)4^IAT!i2VzLHc;XJ`g(|N4L~V-;b8=~Q2`wV1H4zGh0E|{+LMS+R#6Xha^)c{W
zNi;=qu!=P<$RC<Mh^LC8fp6>*yh{?8$}mWd;$YEnA*@L#RCQph6e<NM_(W19_;J8u
z^bj$mOcWUAX{cdBl!580A|pcJ4Xq4?0NRn1J6lWO7+PmVU_c0C55+YO7;PP3O3Vw+
zfR9Go6TpWS>rxn%1BpD2A-^FB6A+5g(hv|ra777(2_m{Cfzbo9#^Dq5T1zgPA+`V$
zQ(hYhA&NoU4nQbD836)$7keBm(Q!scYYANkT<<D!0#hRfoo~PzuT6j{JNX|5_a99+
zMDLD++pjdF+`(u~3T+nRCR}YI!FlBc<W+@e2B`*Mc>`CWgx~c6KDfO@T1%)YVW6xi
z1r8YP;)M*{JRzKL2+=YX@WD3>5PZ<R{)!dtttGT=AVkHDfRJbX+;jugF$ar=Zy3Ex
zc-BuzV6cdsAr--Z30dTTd65eygS-hH1$_eI??51kOYsmW7DcF3VcZ8(dZe`kjzIy6
zz=Q~{InZdvsToldluVE%5Lk%R=oJLugNupIeeJC!0P}J*G_|O40fBId+zBl2V<2nr
z_Hhj{8Zn`%{iXNzix>*>A3x4R$H?Q3A$XNO+{L1?0tn<a=fE*IEkZQFwoL`N{NLHz
zKm_Pon{kC3_&c;7ioj5-^QwR7D`9S@xDSY7(6$4JfxEw7`?&LAiVAA#vM67J5d|+~
zf-NA%3J4iqa)J<tmSzN0W~iYP6eH!uewa}3t`Rt3o_!E7)I}mDAZ)X0j)6|8LUY2)
zB>*cAdcc3@Mkw<C10nA=76{~BBS6Unnd6sO+aw6{KAvsC{fa_$#mOHK@~#n}djho}
z2;pLl7eD|ZdIbUac-IJEZM;m$-E>NMmI)0Wzk|U$t^$5Z3xIk3Fg$O<k9rKWItU|B
z$F|pmUFtvZY_zi{pu*?*HkYAMy+a`61tiEryb2ob!WC<Sp5S6|GY_wHoGr&jN#UY^
z_bdx31acAG!o@g^mRclSUZO-miwL!@BKO?oD(aSy7`TAd=8c^q=B@!zcjK-VQP+YS
z8EChWL*OohLd4G92BGSKwJzi9j*E6E?a^@n3>SD}hd>0wTjXE}PH0KS6)kAz&pm+C
kbuDP6hxc;U{X3@C_DGfgcWi8*w);9^Z(Ut;`{}*^4?=A$9RL6T
diff --git a/doc/footer.html b/doc/footer.html
new file mode 100644
index 00000000..fe5338c1
--- /dev/null
+++ b/doc/footer.html
@@ -0,0 +1,4 @@
+<hr width="80%">
+Code by <a href="http://www.libtomcrypt.org/">Tom</a><br>
+Docs using <img src="doxygen.png" alt="doxygen" align="middle" border=0>
+<a href="http://jlcooke.ca/tom/hidden_image.png">
diff --git a/doc/header.html b/doc/header.html
new file mode 100644
index 00000000..426d4e3c
--- /dev/null
+++ b/doc/header.html
@@ -0,0 +1,6 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<html><head><meta http-equiv="Content-Type" content="text/html;charset=iso-8859-1">
+<title>LibTomCrypt: Main Page</title>
+<link href="doxygen.css" rel="stylesheet" type="text/css">
+</head><body>
+<!-- Generated by Doxygen 1.3.8 -->
diff --git a/eax_addheader.c b/eax_addheader.c
deleted file mode 100644
index c7dfdd02..00000000
--- a/eax_addheader.c
+++ /dev/null
@@ -1,25 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-
-/* EAX Implementation by Tom St Denis */
-#include "mycrypt.h"
-
-#ifdef EAX_MODE
-
-/* add header (metadata) to the stream */
-int eax_addheader(eax_state *eax, const unsigned char *header, unsigned long length)
-{
- _ARGCHK(eax != NULL);
- _ARGCHK(header != NULL);
- return omac_process(&eax->headeromac, header, length);
-}
-
-#endif
diff --git a/eax_encrypt_authenticate_memory.c b/eax_encrypt_authenticate_memory.c
deleted file mode 100644
index 9e9a4280..00000000
--- a/eax_encrypt_authenticate_memory.c
+++ /dev/null
@@ -1,53 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-
-/* EAX Implementation by Tom St Denis */
-#include "mycrypt.h"
-
-#ifdef EAX_MODE
-
-int eax_encrypt_authenticate_memory(int cipher,
- const unsigned char *key, unsigned long keylen,
- const unsigned char *nonce, unsigned long noncelen,
- const unsigned char *header, unsigned long headerlen,
- const unsigned char *pt, unsigned long ptlen,
- unsigned char *ct,
- unsigned char *tag, unsigned long *taglen)
-{
- int err;
- eax_state *eax;
-
- eax = XMALLOC(sizeof(eax_state));
-
- if ((err = eax_init(eax, cipher, key, keylen, nonce, noncelen, header, headerlen)) != CRYPT_OK) {
- goto __ERR;
- }
-
- if ((err = eax_encrypt(eax, pt, ct, ptlen)) != CRYPT_OK) {
- goto __ERR;
- }
-
- if ((err = eax_done(eax, tag, taglen)) != CRYPT_OK) {
- goto __ERR;
- }
-
- err = CRYPT_OK;
-__ERR:
-#ifdef CLEAN_STACK
- zeromem(eax, sizeof(eax_state));
-#endif
-
- XFREE(eax);
-
- return err;
-}
-
-#endif
diff --git a/ecb_decrypt.c b/ecb_decrypt.c
deleted file mode 100644
index 4f231564..00000000
--- a/ecb_decrypt.c
+++ /dev/null
@@ -1,34 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-#include "mycrypt.h"
-
-#ifdef ECB
-
-int ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_ECB *ecb)
-{
- int err;
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(ecb != NULL);
-
- /* valid cipher? */
- if ((err = cipher_is_valid(ecb->cipher)) != CRYPT_OK) {
- return err;
- }
- _ARGCHK(cipher_descriptor[ecb->cipher].ecb_decrypt != NULL);
-
- cipher_descriptor[ecb->cipher].ecb_decrypt(ct, pt, &ecb->key);
- return CRYPT_OK;
-}
-
-#endif
-
-
diff --git a/genlist.sh b/genlist.sh
new file mode 100644
index 00000000..73daa1d6
--- /dev/null
+++ b/genlist.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+# aes_tab.o is a pseudo object as it's made from aes.o and MPI is optional
+export a=`echo -n "src/ciphers/aes/aes_enc.o *(MPIOBJECT) " ; find . -type f | sort | grep "[.]/src" | grep "[.]c" | grep -v "sha224" | grep -v "sha384" | grep -v "aes_tab" | grep -v "twofish_tab" | grep -v "whirltab" | grep -v "dh_sys" | grep -v "ecc_sys" | grep -v "mpi[.]c" | grep -v "sober128tab" | sed -e 'sE\./EE' | sed -e 's/\.c/\.o/' | xargs`
+perl ./parsenames.pl OBJECTS "$a"
+export a=`find . -type f | grep [.]/src | grep [.]h | sed -e 'se\./ee' | xargs`
+perl ./parsenames.pl HEADERS "$a"
diff --git a/hash_file.c b/hash_file.c
deleted file mode 100644
index 0511f2c7..00000000
--- a/hash_file.c
+++ /dev/null
@@ -1,41 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-#include "mycrypt.h"
-
-int hash_file(int hash, const char *fname, unsigned char *dst, unsigned long *outlen)
-{
-#ifdef NO_FILE
- return CRYPT_NOP;
-#else
- FILE *in;
- int err;
- _ARGCHK(fname != NULL);
- _ARGCHK(dst != NULL);
- _ARGCHK(outlen != NULL);
-
- if ((err = hash_is_valid(hash)) != CRYPT_OK) {
- return err;
- }
-
- in = fopen(fname, "rb");
- if (in == NULL) {
- return CRYPT_FILE_NOTFOUND;
- }
-
- err = hash_filehandle(hash, in, dst, outlen);
- if (fclose(in) != 0) {
- return CRYPT_ERROR;
- }
-
- return err;
-#endif
-}
-
diff --git a/hash_memory.c b/hash_memory.c
deleted file mode 100644
index 2c87d76a..00000000
--- a/hash_memory.c
+++ /dev/null
@@ -1,50 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-#include "mycrypt.h"
-
-int hash_memory(int hash, const unsigned char *data, unsigned long len, unsigned char *dst, unsigned long *outlen)
-{
- hash_state *md;
- int err;
-
- _ARGCHK(data != NULL);
- _ARGCHK(dst != NULL);
- _ARGCHK(outlen != NULL);
-
- if ((err = hash_is_valid(hash)) != CRYPT_OK) {
- return err;
- }
-
- if (*outlen < hash_descriptor[hash].hashsize) {
- return CRYPT_BUFFER_OVERFLOW;
- }
-
- md = XMALLOC(sizeof(hash_state));
- if (md == NULL) {
- return CRYPT_MEM;
- }
-
- if ((err = hash_descriptor[hash].init(md)) != CRYPT_OK) {
- goto __ERR;
- }
- if ((err = hash_descriptor[hash].process(md, data, len)) != CRYPT_OK) {
- goto __ERR;
- }
- err = hash_descriptor[hash].done(md, dst);
- *outlen = hash_descriptor[hash].hashsize;
-__ERR:
-#ifdef CLEAN_STACK
- zeromem(md, sizeof(hash_state));
-#endif
- XFREE(md);
-
- return err;
-}
diff --git a/hmac_memory.c b/hmac_memory.c
deleted file mode 100644
index d6d33640..00000000
--- a/hmac_memory.c
+++ /dev/null
@@ -1,58 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-/* Submited by Dobes Vandermeer (dobes@smartt.com) */
-
-#include "mycrypt.h"
-
-#ifdef HMAC
-
-int hmac_memory(int hash, const unsigned char *key, unsigned long keylen,
- const unsigned char *data, unsigned long len,
- unsigned char *dst, unsigned long *dstlen)
-{
- hmac_state *hmac;
- int err;
-
- _ARGCHK(key != NULL);
- _ARGCHK(data != NULL);
- _ARGCHK(dst != NULL);
- _ARGCHK(dstlen != NULL);
-
- /* allocate ram for hmac state */
- hmac = XMALLOC(sizeof(hmac_state));
- if (hmac == NULL) {
- return CRYPT_MEM;
- }
-
- if ((err = hmac_init(hmac, hash, key, keylen)) != CRYPT_OK) {
- goto __ERR;
- }
-
- if ((err = hmac_process(hmac, data, len)) != CRYPT_OK) {
- goto __ERR;
- }
-
- if ((err = hmac_done(hmac, dst, dstlen)) != CRYPT_OK) {
- goto __ERR;
- }
-
- err = CRYPT_OK;
-__ERR:
-#ifdef CLEAN_STACK
- zeromem(hmac, sizeof(hmac_state));
-#endif
-
- XFREE(hmac);
- return err;
-}
-
-#endif
-
diff --git a/hmac_process.c b/hmac_process.c
deleted file mode 100644
index ebc6f4cf..00000000
--- a/hmac_process.c
+++ /dev/null
@@ -1,29 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-/* Submited by Dobes Vandermeer (dobes@smartt.com) */
-
-#include "mycrypt.h"
-
-#ifdef HMAC
-
-int hmac_process(hmac_state *hmac, const unsigned char *buf, unsigned long len)
-{
- int err;
- _ARGCHK(hmac != NULL);
- _ARGCHK(buf != NULL);
- if ((err = hash_is_valid(hmac->hash)) != CRYPT_OK) {
- return err;
- }
- return hash_descriptor[hmac->hash].process(&hmac->md, buf, len);
-}
-
-#endif
-
diff --git a/makefile b/makefile
index c90b88d6..b38aa17c 100644
--- a/makefile
+++ b/makefile
@@ -4,7 +4,7 @@
# Modified by Clay Culver
# The version
-VERSION=0.99
+VERSION=1.02
# Compiler and Linker Names
#CC=gcc
@@ -15,30 +15,39 @@ VERSION=0.99
#ARFLAGS=r
# Compilation flags. Note the += does not write over the user's CFLAGS!
-CFLAGS += -c -I./ -Wall -Wsign-compare -W -Wshadow
-# -Werror
+CFLAGS += -c -I./testprof/ -I./src/headers/ -Wall -Wsign-compare -W -Wshadow -Wno-unused-parameter
+
+# additional warnings (newer GCC 3.4 and higher)
+#CFLAGS += -Wsystem-headers -Wdeclaration-after-statement -Wbad-function-cast -Wcast-align -Wstrict-prototypes -Wmissing-prototypes \
+# -Wmissing-declarations -Wpointer-arith
# optimize for SPEED
-#CFLAGS += -O3 -funroll-all-loops
+CFLAGS += -O3 -funroll-loops
-#add -fomit-frame-pointer. hinders debugging!
-#CFLAGS += -fomit-frame-pointer
+# add -fomit-frame-pointer. hinders debugging!
+CFLAGS += -fomit-frame-pointer
# optimize for SIZE
-CFLAGS += -Os -DSMALL_CODE
+#CFLAGS += -Os -DLTC_SMALL_CODE
-# compile for DEBUGING (required for ccmalloc checking!!!)
-#CFLAGS += -g3
+# older GCCs can't handle the "rotate with immediate" ROLc/RORc/etc macros
+# define this to help
+#CFLAGS += -DLTC_NO_ROLC
-#These flags control how the library gets built.
+# compile for DEBUGING (required for ccmalloc checking!!!)
+#CFLAGS += -g3 -DLTC_NO_ASM
#Output filenames for various targets.
LIBNAME=libtomcrypt.a
+LIBTEST=testprof/libtomcrypt_prof.a
HASH=hashsum
CRYPT=encrypt
SMALL=small
PROF=x86_prof
TV=tv_gen
+MULTI=multi
+TIMING=timing
+TEST=test
#LIBPATH-The directory for libtomcrypt to be installed to.
#INCPATH-The directory to install the header files for libtomcrypt.
@@ -48,85 +57,96 @@ LIBPATH=/usr/lib
INCPATH=/usr/include
DATAPATH=/usr/share/doc/libtomcrypt/pdf
+#Who do we install as?
+USER=root
+GROUP=wheel
+
#List of objects to compile.
#Leave MPI built-in or force developer to link against libtommath?
-MPIOBJECT=mpi.o
-
-OBJECTS=error_to_string.o mpi_to_ltc_error.o base64_encode.o base64_decode.o \
-\
-crypt.o crypt_find_cipher.o crypt_find_hash_any.o \
-crypt_hash_is_valid.o crypt_register_hash.o crypt_unregister_prng.o \
-crypt_argchk.o crypt_find_cipher_any.o crypt_find_hash_id.o \
-crypt_prng_descriptor.o crypt_register_prng.o crypt_cipher_descriptor.o \
-crypt_find_cipher_id.o crypt_find_prng.o crypt_prng_is_valid.o \
-crypt_unregister_cipher.o crypt_cipher_is_valid.o crypt_find_hash.o \
-crypt_hash_descriptor.o crypt_register_cipher.o crypt_unregister_hash.o \
-\
-sober128.o fortuna.o sprng.o yarrow.o rc4.o rng_get_bytes.o rng_make_prng.o \
-\
-rand_prime.o is_prime.o \
-\
-ecc.o dh.o \
-\
-rsa_decrypt_key.o rsa_encrypt_key.o rsa_exptmod.o rsa_free.o rsa_make_key.o \
-rsa_sign_hash.o rsa_verify_hash.o rsa_export.o rsa_import.o tim_exptmod.o \
-rsa_v15_encrypt_key.o rsa_v15_decrypt_key.o rsa_v15_sign_hash.o rsa_v15_verify_hash.o \
-\
-dsa_export.o dsa_free.o dsa_import.o dsa_make_key.o dsa_sign_hash.o \
-dsa_verify_hash.o dsa_verify_key.o \
-\
-aes.o aes_enc.o \
-\
-blowfish.o des.o safer_tab.o safer.o saferp.o rc2.o xtea.o \
-rc6.o rc5.o cast5.o noekeon.o twofish.o skipjack.o \
-\
-md2.o md4.o md5.o sha1.o sha256.o sha512.o tiger.o whirl.o \
-rmd128.o rmd160.o chc.o \
-\
-packet_store_header.o packet_valid_header.o \
-\
-eax_addheader.o eax_decrypt.o eax_decrypt_verify_memory.o eax_done.o eax_encrypt.o \
-eax_encrypt_authenticate_memory.o eax_init.o eax_test.o \
-\
-ocb_decrypt.o ocb_decrypt_verify_memory.o ocb_done_decrypt.o ocb_done_encrypt.o \
-ocb_encrypt.o ocb_encrypt_authenticate_memory.o ocb_init.o ocb_ntz.o \
-ocb_shift_xor.o ocb_test.o s_ocb_done.o \
-\
-omac_done.o omac_file.o omac_init.o omac_memory.o omac_process.o omac_test.o \
-\
-pmac_done.o pmac_file.o pmac_init.o pmac_memory.o pmac_ntz.o pmac_process.o \
-pmac_shift_xor.o pmac_test.o \
-\
-cbc_start.o cbc_encrypt.o cbc_decrypt.o cbc_getiv.o cbc_setiv.o \
-cfb_start.o cfb_encrypt.o cfb_decrypt.o cfb_getiv.o cfb_setiv.o \
-ofb_start.o ofb_encrypt.o ofb_decrypt.o ofb_getiv.o ofb_setiv.o \
-ctr_start.o ctr_encrypt.o ctr_decrypt.o ctr_getiv.o ctr_setiv.o \
-ecb_start.o ecb_encrypt.o ecb_decrypt.o \
-\
-hash_file.o hash_filehandle.o hash_memory.o \
-\
-hmac_done.o hmac_file.o hmac_init.o hmac_memory.o hmac_process.o hmac_test.o \
-\
-pkcs_1_mgf1.o pkcs_1_oaep_encode.o pkcs_1_oaep_decode.o \
-pkcs_1_pss_encode.o pkcs_1_pss_decode.o pkcs_1_i2osp.o pkcs_1_os2ip.o \
-pkcs_1_v15_es_encode.o pkcs_1_v15_es_decode.o pkcs_1_v15_sa_encode.o pkcs_1_v15_sa_decode.o \
-\
-pkcs_5_1.o pkcs_5_2.o \
-\
-der_encode_integer.o der_decode_integer.o der_length_integer.o \
-der_put_multi_integer.o der_get_multi_integer.o \
-\
-burn_stack.o zeromem.o \
-\
-$(MPIOBJECT)
+MPIOBJECT=src/misc/mpi/mpi.o
+
+OBJECTS=src/ciphers/aes/aes_enc.o $(MPIOBJECT) src/ciphers/aes/aes.o src/ciphers/anubis.o \
+src/ciphers/blowfish.o src/ciphers/cast5.o src/ciphers/des.o src/ciphers/khazad.o src/ciphers/noekeon.o \
+src/ciphers/rc2.o src/ciphers/rc5.o src/ciphers/rc6.o src/ciphers/safer/safer.o \
+src/ciphers/safer/safer_tab.o src/ciphers/safer/saferp.o src/ciphers/skipjack.o \
+src/ciphers/twofish/twofish.o src/ciphers/xtea.o src/encauth/ccm/ccm_memory.o \
+src/encauth/ccm/ccm_test.o src/encauth/eax/eax_addheader.o src/encauth/eax/eax_decrypt.o \
+src/encauth/eax/eax_decrypt_verify_memory.o src/encauth/eax/eax_done.o src/encauth/eax/eax_encrypt.o \
+src/encauth/eax/eax_encrypt_authenticate_memory.o src/encauth/eax/eax_init.o \
+src/encauth/eax/eax_test.o src/encauth/gcm/gcm_add_aad.o src/encauth/gcm/gcm_add_iv.o \
+src/encauth/gcm/gcm_done.o src/encauth/gcm/gcm_gf_mult.o src/encauth/gcm/gcm_init.o \
+src/encauth/gcm/gcm_memory.o src/encauth/gcm/gcm_process.o src/encauth/gcm/gcm_reset.o \
+src/encauth/gcm/gcm_test.o src/encauth/ocb/ocb_decrypt.o src/encauth/ocb/ocb_decrypt_verify_memory.o \
+src/encauth/ocb/ocb_done_decrypt.o src/encauth/ocb/ocb_done_encrypt.o src/encauth/ocb/ocb_encrypt.o \
+src/encauth/ocb/ocb_encrypt_authenticate_memory.o src/encauth/ocb/ocb_init.o src/encauth/ocb/ocb_ntz.o \
+src/encauth/ocb/ocb_shift_xor.o src/encauth/ocb/ocb_test.o src/encauth/ocb/s_ocb_done.o \
+src/hashes/chc/chc.o src/hashes/helper/hash_file.o src/hashes/helper/hash_filehandle.o \
+src/hashes/helper/hash_memory.o src/hashes/helper/hash_memory_multi.o src/hashes/md2.o src/hashes/md4.o \
+src/hashes/md5.o src/hashes/rmd128.o src/hashes/rmd160.o src/hashes/sha1.o src/hashes/sha2/sha256.o \
+src/hashes/sha2/sha512.o src/hashes/tiger.o src/hashes/whirl/whirl.o src/mac/hmac/hmac_done.o \
+src/mac/hmac/hmac_file.o src/mac/hmac/hmac_init.o src/mac/hmac/hmac_memory.o \
+src/mac/hmac/hmac_memory_multi.o src/mac/hmac/hmac_process.o src/mac/hmac/hmac_test.o \
+src/mac/omac/omac_done.o src/mac/omac/omac_file.o src/mac/omac/omac_init.o src/mac/omac/omac_memory.o \
+src/mac/omac/omac_memory_multi.o src/mac/omac/omac_process.o src/mac/omac/omac_test.o \
+src/mac/pelican/pelican.o src/mac/pelican/pelican_memory.o src/mac/pelican/pelican_test.o \
+src/mac/pmac/pmac_done.o src/mac/pmac/pmac_file.o src/mac/pmac/pmac_init.o src/mac/pmac/pmac_memory.o \
+src/mac/pmac/pmac_memory_multi.o src/mac/pmac/pmac_ntz.o src/mac/pmac/pmac_process.o \
+src/mac/pmac/pmac_shift_xor.o src/mac/pmac/pmac_test.o src/misc/base64/base64_decode.o \
+src/misc/base64/base64_encode.o src/misc/burn_stack.o src/misc/crypt/crypt.o \
+src/misc/crypt/crypt_argchk.o src/misc/crypt/crypt_cipher_descriptor.o \
+src/misc/crypt/crypt_cipher_is_valid.o src/misc/crypt/crypt_find_cipher.o \
+src/misc/crypt/crypt_find_cipher_any.o src/misc/crypt/crypt_find_cipher_id.o \
+src/misc/crypt/crypt_find_hash.o src/misc/crypt/crypt_find_hash_any.o \
+src/misc/crypt/crypt_find_hash_id.o src/misc/crypt/crypt_find_prng.o \
+src/misc/crypt/crypt_hash_descriptor.o src/misc/crypt/crypt_hash_is_valid.o \
+src/misc/crypt/crypt_prng_descriptor.o src/misc/crypt/crypt_prng_is_valid.o \
+src/misc/crypt/crypt_register_cipher.o src/misc/crypt/crypt_register_hash.o \
+src/misc/crypt/crypt_register_prng.o src/misc/crypt/crypt_unregister_cipher.o \
+src/misc/crypt/crypt_unregister_hash.o src/misc/crypt/crypt_unregister_prng.o \
+src/misc/error_to_string.o src/misc/mpi/is_prime.o src/misc/mpi/mpi_to_ltc_error.o \
+src/misc/mpi/rand_prime.o src/misc/pkcs5/pkcs_5_1.o src/misc/pkcs5/pkcs_5_2.o src/misc/zeromem.o \
+src/modes/cbc/cbc_decrypt.o src/modes/cbc/cbc_done.o src/modes/cbc/cbc_encrypt.o \
+src/modes/cbc/cbc_getiv.o src/modes/cbc/cbc_setiv.o src/modes/cbc/cbc_start.o \
+src/modes/cfb/cfb_decrypt.o src/modes/cfb/cfb_done.o src/modes/cfb/cfb_encrypt.o \
+src/modes/cfb/cfb_getiv.o src/modes/cfb/cfb_setiv.o src/modes/cfb/cfb_start.o \
+src/modes/ctr/ctr_decrypt.o src/modes/ctr/ctr_done.o src/modes/ctr/ctr_encrypt.o \
+src/modes/ctr/ctr_getiv.o src/modes/ctr/ctr_setiv.o src/modes/ctr/ctr_start.o \
+src/modes/ecb/ecb_decrypt.o src/modes/ecb/ecb_done.o src/modes/ecb/ecb_encrypt.o \
+src/modes/ecb/ecb_start.o src/modes/ofb/ofb_decrypt.o src/modes/ofb/ofb_done.o \
+src/modes/ofb/ofb_encrypt.o src/modes/ofb/ofb_getiv.o src/modes/ofb/ofb_setiv.o \
+src/modes/ofb/ofb_start.o src/pk/asn1/der/der_decode_integer.o src/pk/asn1/der/der_encode_integer.o \
+src/pk/asn1/der/der_get_multi_integer.o src/pk/asn1/der/der_length_integer.o \
+src/pk/asn1/der/der_put_multi_integer.o src/pk/dh/dh.o src/pk/dsa/dsa_export.o src/pk/dsa/dsa_free.o \
+src/pk/dsa/dsa_import.o src/pk/dsa/dsa_make_key.o src/pk/dsa/dsa_sign_hash.o \
+src/pk/dsa/dsa_verify_hash.o src/pk/dsa/dsa_verify_key.o src/pk/ecc/ecc.o src/pk/packet_store_header.o \
+src/pk/packet_valid_header.o src/pk/pkcs1/pkcs_1_i2osp.o src/pk/pkcs1/pkcs_1_mgf1.o \
+src/pk/pkcs1/pkcs_1_oaep_decode.o src/pk/pkcs1/pkcs_1_oaep_encode.o src/pk/pkcs1/pkcs_1_os2ip.o \
+src/pk/pkcs1/pkcs_1_pss_decode.o src/pk/pkcs1/pkcs_1_pss_encode.o src/pk/pkcs1/pkcs_1_v15_es_decode.o \
+src/pk/pkcs1/pkcs_1_v15_es_encode.o src/pk/pkcs1/pkcs_1_v15_sa_decode.o \
+src/pk/pkcs1/pkcs_1_v15_sa_encode.o src/pk/rsa/rsa_decrypt_key.o src/pk/rsa/rsa_encrypt_key.o \
+src/pk/rsa/rsa_export.o src/pk/rsa/rsa_exptmod.o src/pk/rsa/rsa_free.o src/pk/rsa/rsa_import.o \
+src/pk/rsa/rsa_make_key.o src/pk/rsa/rsa_sign_hash.o src/pk/rsa/rsa_v15_decrypt_key.o \
+src/pk/rsa/rsa_v15_encrypt_key.o src/pk/rsa/rsa_v15_sign_hash.o src/pk/rsa/rsa_v15_verify_hash.o \
+src/pk/rsa/rsa_verify_hash.o src/prngs/fortuna.o src/prngs/rc4.o src/prngs/rng_get_bytes.o \
+src/prngs/rng_make_prng.o src/prngs/sober128.o src/prngs/sprng.o src/prngs/yarrow.o
+
+HEADERS=src/headers/tommath_superclass.h src/headers/tomcrypt_cfg.h \
+src/headers/tomcrypt_mac.h src/headers/tomcrypt_macros.h \
+src/headers/tomcrypt_custom.h src/headers/tomcrypt_argchk.h \
+src/headers/tomcrypt_cipher.h src/headers/tomcrypt_pk.h \
+src/headers/tommath_class.h src/headers/ltc_tommath.h src/headers/tomcrypt_hash.h \
+src/headers/tomcrypt_misc.h src/headers/tomcrypt.h src/headers/tomcrypt_pkcs.h \
+src/headers/tomcrypt_prng.h testprof/tomcrypt_test.h
TESTOBJECTS=demos/test.o
HASHOBJECTS=demos/hashsum.o
CRYPTOBJECTS=demos/encrypt.o
SMALLOBJECTS=demos/small.o
-PROFS=demos/x86_prof.o
TVS=demos/tv_gen.o
+MULTIS=demos/multi.o
+TIMINGS=demos/timing.o
+TESTS=demos/test.o
#Files left over from making the crypt.pdf.
LEFTOVERS=*.dvi *.log *.aux *.toc *.idx *.ilg *.ind *.out
@@ -134,33 +154,31 @@ LEFTOVERS=*.dvi *.log *.aux *.toc *.idx *.ilg *.ind *.out
#Compressed filenames
COMPRESSED=crypt-$(VERSION).tar.bz2 crypt-$(VERSION).zip
-#Header files used by libtomcrypt.
-HEADERS=ltc_tommath.h mycrypt_cfg.h \
-mycrypt_misc.h mycrypt_prng.h mycrypt_cipher.h mycrypt_hash.h \
-mycrypt_macros.h mycrypt_pk.h mycrypt.h mycrypt_argchk.h \
-mycrypt_custom.h mycrypt_pkcs.h tommath_class.h tommath_superclass.h
-
#The default rule for make builds the libtomcrypt library.
default:library
#ciphers come in two flavours... enc+dec and enc
-aes_enc.o: aes.c aes_tab.c
- $(CC) $(CFLAGS) -DENCRYPT_ONLY -c aes.c -o aes_enc.o
+src/ciphers/aes/aes_enc.o: src/ciphers/aes/aes.c src/ciphers/aes/aes_tab.c
+ $(CC) $(CFLAGS) -DENCRYPT_ONLY -c src/ciphers/aes/aes.c -o src/ciphers/aes/aes_enc.o
#These are the rules to make certain object files.
-aes.o: aes.c aes_tab.c
-twofish.o: twofish.c twofish_tab.c
-whirl.o: whirl.c whirltab.c
-ecc.o: ecc.c ecc_sys.c
-dh.o: dh.c dh_sys.c
-sha512.o: sha512.c sha384.c
-sha256.o: sha256.c sha224.c
+src/ciphers/aes/aes.o: src/ciphers/aes/aes.c src/ciphers/aes/aes_tab.c
+src/ciphers/twofish/twofish.o: src/ciphers/twofish/twofish.c src/ciphers/twofish/twofish_tab.c
+src/hashes/whirl/whirl.o: src/hashes/whirl/whirl.c src/hashes/whirl/whirltab.c
+src/pk/ecc/ecc.o: src/pk/ecc/ecc.c src/pk/ecc/ecc_sys.c
+src/pk/dh/dh.o: src/pk/dh/dh.c src/pk/dh/dh_sys.c
+src/hashes/sha2/sha512.o: src/hashes/sha2/sha512.c src/hashes/sha2/sha384.c
+src/hashes/sha2/sha256.o: src/hashes/sha2/sha256.c src/hashes/sha2/sha224.c
#This rule makes the libtomcrypt library.
-library: $(LIBNAME)
+library: $(LIBTEST) $(LIBNAME)
+
+$(LIBTEST):
+ cd testprof ; CFLAGS="$(CFLAGS)" make
$(LIBNAME): $(OBJECTS)
$(AR) $(ARFLAGS) $@ $(OBJECTS)
+ ranlib $(LIBNAME)
#This rule makes the hash program included with libtomcrypt
hashsum: library $(HASHOBJECTS)
@@ -174,38 +192,62 @@ crypt: library $(CRYPTOBJECTS)
small: library $(SMALLOBJECTS)
$(CC) $(SMALLOBJECTS) $(LIBNAME) -o $(SMALL) $(WARN)
-x86_prof: library $(PROFS)
- $(CC) $(PROFS) $(LIBNAME) $(EXTRALIBS) -o $(PROF)
-
tv_gen: library $(TVS)
$(CC) $(TVS) $(LIBNAME) $(EXTRALIBS) -o $(TV)
+multi: library $(MULTIS)
+ $(CC) $(MULTIS) $(LIBNAME) -o $(MULTI)
+
+timing: library $(TIMINGS)
+ $(CC) $(TIMINGS) $(LIBTEST) $(LIBNAME) -o $(TIMING)
+
+test: library $(TESTS)
+ $(CC) $(TESTS) $(LIBTEST) $(LIBNAME) -o $(TEST)
+
+
#This rule installs the library and the header files. This must be run
#as root in order to have a high enough permission to write to the correct
#directories and to set the owner and group to root.
install: library docs
- install -d -g root -o root $(DESTDIR)$(LIBPATH)
- install -d -g root -o root $(DESTDIR)$(INCPATH)
- install -d -g root -o root $(DESTDIR)$(DATAPATH)
- install -g root -o root $(LIBNAME) $(DESTDIR)$(LIBPATH)
- install -g root -o root $(HEADERS) $(DESTDIR)$(INCPATH)
- install -g root -o root doc/crypt.pdf $(DESTDIR)$(DATAPATH)
+ install -d -g $(GROUP) -o $(USER) $(DESTDIR)$(LIBPATH)
+ install -d -g $(GROUP) -o $(USER) $(DESTDIR)$(INCPATH)
+ install -d -g $(GROUP) -o $(USER) $(DESTDIR)$(DATAPATH)
+ install -g $(GROUP) -o $(USER) $(LIBNAME) $(DESTDIR)$(LIBPATH)
+ install -g $(GROUP) -o $(USER) $(HEADERS) $(DESTDIR)$(INCPATH)
+ install -g $(GROUP) -o $(USER) doc/crypt.pdf $(DESTDIR)$(DATAPATH)
install_lib: library
- install -d -g root -o root $(DESTDIR)$(LIBPATH)
- install -d -g root -o root $(DESTDIR)$(INCPATH)
- install -g root -o root $(LIBNAME) $(DESTDIR)$(LIBPATH)
- install -g root -o root $(HEADERS) $(DESTDIR)$(INCPATH)
+ install -d -g $(GROUP) -o $(USER) $(DESTDIR)$(LIBPATH)
+ install -d -g $(GROUP) -o $(USER) $(DESTDIR)$(INCPATH)
+ install -g $(GROUP) -o $(USER) $(LIBNAME) $(DESTDIR)$(LIBPATH)
+ install -g $(GROUP) -o $(USER) $(HEADERS) $(DESTDIR)$(INCPATH)
#This rule cleans the source tree of all compiled code, not including the pdf
#documentation.
clean:
- rm -f $(OBJECTS) $(TESTOBJECTS) $(HASHOBJECTS) $(CRYPTOBJECTS) $(SMALLOBJECTS) $(LEFTOVERS) $(LIBNAME)
- rm -f $(TEST) $(HASH) $(COMPRESSED) $(PROFS) $(PROF) $(TVS) $(TV)
- rm -f *.la *.lo *.o *.a *.dll *stackdump *.lib *.exe *.obj demos/*.obj demos/*.o *.bat *.txt *.il *.da demos/*.il demos/*.da *.dyn *.dpi \
- *.gcda *.gcno demos/*.gcno demos/*.gcda *~ doc/*
- cd demos/test ; make clean
- rm -rf .libs demos/.libs demos/test/.libs
+ rm -f `find . -type f | grep "[.]o" | xargs`
+ rm -f `find . -type f | grep "[.]lo" | xargs`
+ rm -f `find . -type f | grep "[.]a" | xargs`
+ rm -f `find . -type f | grep "[.]la" | xargs`
+ rm -f `find . -type f | grep "[.]obj" | xargs`
+ rm -f `find . -type f | grep "[.]lib" | xargs`
+ rm -f `find . -type f | grep "[.]exe" | xargs`
+ rm -f `find . -type f | grep "[.]gcda" | xargs`
+ rm -f `find . -type f | grep "[.]gcno" | xargs`
+ rm -f `find . -type f | grep "[.]il" | xargs`
+ rm -f `find . -type f | grep "[.]dyn" | xargs`
+ rm -f `find . -type f | grep "[.]dpi" | xargs`
+ rm -rf `find . -type d | grep "[.]libs" | xargs`
+ rm -f crypt.aux crypt.dvi crypt.idx crypt.ilg crypt.ind crypt.log crypt.toc
+ rm -f $(TV) $(PROF) $(SMALL) $(CRYPT) $(HASHSUM) $(MULTI) $(TIMING) $(TEST)
+ rm -rf doc/doxygen
+ rm -f doc/*.pdf
+
+#build the doxy files (requires Doxygen, tetex and patience)
+doxy:
+ doxygen
+ cd doc/doxygen/latex ; make ; mv -f refman.pdf ../../.
+ echo The huge doxygen PDF should be available as doc/refman.pdf
#This builds the crypt.pdf file. Note that the rm -f *.pdf has been removed
#from the clean command! This is because most people would like to keep the
@@ -229,21 +271,15 @@ docdvi: crypt.tex
makeindex crypt.idx
latex crypt > /dev/null
-#pretty build
-pretty:
- perl pretty.build
-
-#for GCC 3.4+
-profiled:
- make clean
- make CFLAGS="$(CFLAGS) -fprofile-generate" EXTRALIBS=-lgcov x86_prof
- ./x86_prof
- rm *.o *.a x86_prof
- make CFLAGS="$(CFLAGS) -fprofile-use" EXTRALIBS=-lgcov x86_prof
-
#zipup the project (take that!)
-zipup: clean docs
+no_oops: clean
+ cd .. ; cvs commit
+
+zipup: no_oops docs
cd .. ; rm -rf crypt* libtomcrypt-$(VERSION) ; mkdir libtomcrypt-$(VERSION) ; \
- cp -R ./libtomcrypt/* ./libtomcrypt-$(VERSION)/ ; tar -c libtomcrypt-$(VERSION)/* > crypt-$(VERSION).tar ; \
- bzip2 -9vv crypt-$(VERSION).tar ; zip -9 -r crypt-$(VERSION).zip libtomcrypt-$(VERSION)/* ; \
- gpg -b -a crypt-$(VERSION).tar.bz2 ; gpg -b -a crypt-$(VERSION).zip
+ cp -R ./libtomcrypt/* ./libtomcrypt-$(VERSION)/ ; \
+ cd libtomcrypt-$(VERSION) ; rm -rf `find . -type d | grep CVS | xargs` ; cd .. ; \
+ tar -cjvf crypt-$(VERSION).tar.bz2 libtomcrypt-$(VERSION) ; \
+ zip -9r crypt-$(VERSION).zip libtomcrypt-$(VERSION) ; \
+ gpg -b -a crypt-$(VERSION).tar.bz2 ; gpg -b -a crypt-$(VERSION).zip ; \
+ mv -fv crypt* ~ ; rm -rf libtomcrypt-$(VERSION)
diff --git a/makefile.cygwin_dll b/makefile.cygwin_dll
deleted file mode 100644
index 5e11b7c5..00000000
--- a/makefile.cygwin_dll
+++ /dev/null
@@ -1,95 +0,0 @@
-#makefile for Cygwin [makes a .dll]
-
-default: ltc_dll
-
-
-# Compilation flags. Note the += does not write over the user's CFLAGS!
-CFLAGS += -I./ -Wall -Wsign-compare -W -Wno-unused -Wshadow -mno-cygwin -DWIN32
-
-# optimize for SPEED
-CFLAGS += -O3 -funroll-all-loops
-
-#add -fomit-frame-pointer. v3.2 is buggy for certain platforms!
-CFLAGS += -fomit-frame-pointer
-
-# optimize for SIZE
-#CFLAGS += -Os
-
-#Leave MPI built-in or force developer to link against libtommath?
-MPIOBJECT=mpi.o
-
-OBJECTS=error_to_string.o mpi_to_ltc_error.o base64_encode.o base64_decode.o \
-\
-crypt.o crypt_find_cipher.o crypt_find_hash_any.o \
-crypt_hash_is_valid.o crypt_register_hash.o crypt_unregister_prng.o \
-crypt_argchk.o crypt_find_cipher_any.o crypt_find_hash_id.o \
-crypt_prng_descriptor.o crypt_register_prng.o crypt_cipher_descriptor.o \
-crypt_find_cipher_id.o crypt_find_prng.o crypt_prng_is_valid.o \
-crypt_unregister_cipher.o crypt_cipher_is_valid.o crypt_find_hash.o \
-crypt_hash_descriptor.o crypt_register_cipher.o crypt_unregister_hash.o \
-\
-sober128.o fortuna.o sprng.o yarrow.o rc4.o rng_get_bytes.o rng_make_prng.o \
-\
-rand_prime.o is_prime.o \
-\
-ecc.o dh.o \
-\
-rsa_decrypt_key.o rsa_encrypt_key.o rsa_exptmod.o rsa_free.o rsa_make_key.o \
-rsa_sign_hash.o rsa_verify_hash.o rsa_export.o rsa_import.o tim_exptmod.o \
-rsa_v15_encrypt_key.o rsa_v15_decrypt_key.o rsa_v15_sign_hash.o rsa_v15_verify_hash.o \
-\
-dsa_export.o dsa_free.o dsa_import.o dsa_make_key.o dsa_sign_hash.o \
-dsa_verify_hash.o dsa_verify_key.o \
-\
-aes.o aes_enc.o \
-\
-blowfish.o des.o safer_tab.o safer.o saferp.o rc2.o xtea.o \
-rc6.o rc5.o cast5.o noekeon.o twofish.o skipjack.o \
-\
-md2.o md4.o md5.o sha1.o sha256.o sha512.o tiger.o whirl.o \
-rmd128.o rmd160.o chc.o \
-\
-packet_store_header.o packet_valid_header.o \
-\
-eax_addheader.o eax_decrypt.o eax_decrypt_verify_memory.o eax_done.o eax_encrypt.o \
-eax_encrypt_authenticate_memory.o eax_init.o eax_test.o \
-\
-ocb_decrypt.o ocb_decrypt_verify_memory.o ocb_done_decrypt.o ocb_done_encrypt.o \
-ocb_encrypt.o ocb_encrypt_authenticate_memory.o ocb_init.o ocb_ntz.o \
-ocb_shift_xor.o ocb_test.o s_ocb_done.o \
-\
-omac_done.o omac_file.o omac_init.o omac_memory.o omac_process.o omac_test.o \
-\
-pmac_done.o pmac_file.o pmac_init.o pmac_memory.o pmac_ntz.o pmac_process.o \
-pmac_shift_xor.o pmac_test.o \
-\
-cbc_start.o cbc_encrypt.o cbc_decrypt.o cbc_getiv.o cbc_setiv.o \
-cfb_start.o cfb_encrypt.o cfb_decrypt.o cfb_getiv.o cfb_setiv.o \
-ofb_start.o ofb_encrypt.o ofb_decrypt.o ofb_getiv.o ofb_setiv.o \
-ctr_start.o ctr_encrypt.o ctr_decrypt.o ctr_getiv.o ctr_setiv.o \
-ecb_start.o ecb_encrypt.o ecb_decrypt.o \
-\
-hash_file.o hash_filehandle.o hash_memory.o \
-\
-hmac_done.o hmac_file.o hmac_init.o hmac_memory.o hmac_process.o hmac_test.o \
-\
-pkcs_1_mgf1.o pkcs_1_oaep_encode.o pkcs_1_oaep_decode.o \
-pkcs_1_pss_encode.o pkcs_1_pss_decode.o pkcs_1_i2osp.o pkcs_1_os2ip.o \
-pkcs_1_v15_es_encode.o pkcs_1_v15_es_decode.o pkcs_1_v15_sa_encode.o pkcs_1_v15_sa_decode.o \
-\
-pkcs_5_1.o pkcs_5_2.o \
-\
-der_encode_integer.o der_decode_integer.o der_length_integer.o \
-der_put_multi_integer.o der_get_multi_integer.o \
-\
-burn_stack.o zeromem.o \
-\
-$(MPIOBJECT)
-
-#ciphers come in two flavours... enc+dec and enc
-aes_enc.o: aes.c aes_tab.c
- $(CC) $(CFLAGS) -DENCRYPT_ONLY -c aes.c -o aes_enc.o
-
-ltc_dll: $(OBJECTS) $(MPIOBJECT)
- gcc -mno-cygwin -mdll -o libtomcrypt.dll -Wl,--out-implib=libtomcrypt.dll.a -Wl,--export-all-symbols *.o -ladvapi32
- ranlib libtomcrypt.dll.a
diff --git a/makefile.icc b/makefile.icc
index ee7ba54e..41848dcc 100644
--- a/makefile.icc
+++ b/makefile.icc
@@ -22,7 +22,7 @@ CC=icc
#ARFLAGS=r
# Compilation flags. Note the += does not write over the user's CFLAGS!
-CFLAGS += -c -I./ -DINTEL_CC
+CFLAGS += -c -I./src/headers/ -DINTEL_CC
#The default rule for make builds the libtomcrypt library.
default:library
@@ -30,18 +30,18 @@ default:library
# optimize for SPEED
#
# -mcpu= can be pentium, pentiumpro (covers PII through PIII) or pentium4
-# -ax? specifies make code specifically for ? but compatible with IA-32
-# -x? specifies compile solely for ? [not specifically IA-32 compatible]
+# -ax? specifies make code specifically for ? but compatible with IA-32
+# -x? specifies compile solely for ? [not specifically IA-32 compatible]
#
# where ? is
-# K - PIII
-# W - first P4 [Williamette]
-# N - P4 Northwood
-# P - P4 Prescott
-# B - Blend of P4 and PM [mobile]
+# K - PIII
+# W - first P4 [Williamette]
+# N - P4 Northwood
+# P - P4 Prescott
+# B - Blend of P4 and PM [mobile]
#
# Default to just generic max opts
-CFLAGS += -O3 -xN -ip
+CFLAGS += -O3 -xP -ip
# want to see stuff?
#CFLAGS += -opt_report
@@ -50,11 +50,15 @@ CFLAGS += -O3 -xN -ip
#Output filenames for various targets.
LIBNAME=libtomcrypt.a
+LIBTEST=testprof/libtomcrypt_prof.a
HASH=hashsum
CRYPT=encrypt
SMALL=small
PROF=x86_prof
TV=tv_gen
+MULTI=multi
+TIMING=timing
+TEST=test
#LIBPATH-The directory for libtomcrypt to be installed to.
#INCPATH-The directory to install the header files for libtomcrypt.
@@ -67,76 +71,80 @@ DATAPATH=/usr/share/doc/libtomcrypt/pdf
#List of objects to compile.
#Leave MPI built-in or force developer to link against libtommath?
-MPIOBJECT=mpi.o
-
-OBJECTS=error_to_string.o mpi_to_ltc_error.o base64_encode.o base64_decode.o \
-\
-crypt.o crypt_find_cipher.o crypt_find_hash_any.o \
-crypt_hash_is_valid.o crypt_register_hash.o crypt_unregister_prng.o \
-crypt_argchk.o crypt_find_cipher_any.o crypt_find_hash_id.o \
-crypt_prng_descriptor.o crypt_register_prng.o crypt_cipher_descriptor.o \
-crypt_find_cipher_id.o crypt_find_prng.o crypt_prng_is_valid.o \
-crypt_unregister_cipher.o crypt_cipher_is_valid.o crypt_find_hash.o \
-crypt_hash_descriptor.o crypt_register_cipher.o crypt_unregister_hash.o \
-\
-sober128.o fortuna.o sprng.o yarrow.o rc4.o rng_get_bytes.o rng_make_prng.o \
-\
-rand_prime.o is_prime.o \
-\
-ecc.o dh.o \
-\
-rsa_decrypt_key.o rsa_encrypt_key.o rsa_exptmod.o rsa_free.o rsa_make_key.o \
-rsa_sign_hash.o rsa_verify_hash.o rsa_export.o rsa_import.o tim_exptmod.o \
-rsa_v15_encrypt_key.o rsa_v15_decrypt_key.o rsa_v15_sign_hash.o rsa_v15_verify_hash.o \
-\
-dsa_export.o dsa_free.o dsa_import.o dsa_make_key.o dsa_sign_hash.o \
-dsa_verify_hash.o dsa_verify_key.o \
-\
-aes.o aes_enc.o \
-\
-blowfish.o des.o safer_tab.o safer.o saferp.o rc2.o xtea.o \
-rc6.o rc5.o cast5.o noekeon.o twofish.o skipjack.o \
-\
-md2.o md4.o md5.o sha1.o sha256.o sha512.o tiger.o whirl.o \
-rmd128.o rmd160.o chc.o \
-\
-packet_store_header.o packet_valid_header.o \
-\
-eax_addheader.o eax_decrypt.o eax_decrypt_verify_memory.o eax_done.o eax_encrypt.o \
-eax_encrypt_authenticate_memory.o eax_init.o eax_test.o \
-\
-ocb_decrypt.o ocb_decrypt_verify_memory.o ocb_done_decrypt.o ocb_done_encrypt.o \
-ocb_encrypt.o ocb_encrypt_authenticate_memory.o ocb_init.o ocb_ntz.o \
-ocb_shift_xor.o ocb_test.o s_ocb_done.o \
-\
-omac_done.o omac_file.o omac_init.o omac_memory.o omac_process.o omac_test.o \
-\
-pmac_done.o pmac_file.o pmac_init.o pmac_memory.o pmac_ntz.o pmac_process.o \
-pmac_shift_xor.o pmac_test.o \
-\
-cbc_start.o cbc_encrypt.o cbc_decrypt.o cbc_getiv.o cbc_setiv.o \
-cfb_start.o cfb_encrypt.o cfb_decrypt.o cfb_getiv.o cfb_setiv.o \
-ofb_start.o ofb_encrypt.o ofb_decrypt.o ofb_getiv.o ofb_setiv.o \
-ctr_start.o ctr_encrypt.o ctr_decrypt.o ctr_getiv.o ctr_setiv.o \
-ecb_start.o ecb_encrypt.o ecb_decrypt.o \
-\
-hash_file.o hash_filehandle.o hash_memory.o \
-\
-hmac_done.o hmac_file.o hmac_init.o hmac_memory.o hmac_process.o hmac_test.o \
-\
-pkcs_1_mgf1.o pkcs_1_oaep_encode.o pkcs_1_oaep_decode.o \
-pkcs_1_pss_encode.o pkcs_1_pss_decode.o pkcs_1_i2osp.o pkcs_1_os2ip.o \
-pkcs_1_v15_es_encode.o pkcs_1_v15_es_decode.o pkcs_1_v15_sa_encode.o pkcs_1_v15_sa_decode.o \
-\
-pkcs_5_1.o pkcs_5_2.o \
-\
-der_encode_integer.o der_decode_integer.o der_length_integer.o \
-der_put_multi_integer.o der_get_multi_integer.o \
-\
-burn_stack.o zeromem.o \
-\
-$(MPIOBJECT)
-
+MPIOBJECT=src/misc/mpi/mpi.o
+
+OBJECTS=src/ciphers/aes/aes_enc.o $(MPIOBJECT) src/ciphers/aes/aes.o src/ciphers/anubis.o \
+src/ciphers/blowfish.o src/ciphers/cast5.o src/ciphers/des.o src/ciphers/khazad.o src/ciphers/noekeon.o \
+src/ciphers/rc2.o src/ciphers/rc5.o src/ciphers/rc6.o src/ciphers/safer/safer.o \
+src/ciphers/safer/safer_tab.o src/ciphers/safer/saferp.o src/ciphers/skipjack.o \
+src/ciphers/twofish/twofish.o src/ciphers/xtea.o src/encauth/ccm/ccm_memory.o \
+src/encauth/ccm/ccm_test.o src/encauth/eax/eax_addheader.o src/encauth/eax/eax_decrypt.o \
+src/encauth/eax/eax_decrypt_verify_memory.o src/encauth/eax/eax_done.o src/encauth/eax/eax_encrypt.o \
+src/encauth/eax/eax_encrypt_authenticate_memory.o src/encauth/eax/eax_init.o \
+src/encauth/eax/eax_test.o src/encauth/gcm/gcm_add_aad.o src/encauth/gcm/gcm_add_iv.o \
+src/encauth/gcm/gcm_done.o src/encauth/gcm/gcm_gf_mult.o src/encauth/gcm/gcm_init.o \
+src/encauth/gcm/gcm_memory.o src/encauth/gcm/gcm_process.o src/encauth/gcm/gcm_reset.o \
+src/encauth/gcm/gcm_test.o src/encauth/ocb/ocb_decrypt.o src/encauth/ocb/ocb_decrypt_verify_memory.o \
+src/encauth/ocb/ocb_done_decrypt.o src/encauth/ocb/ocb_done_encrypt.o src/encauth/ocb/ocb_encrypt.o \
+src/encauth/ocb/ocb_encrypt_authenticate_memory.o src/encauth/ocb/ocb_init.o src/encauth/ocb/ocb_ntz.o \
+src/encauth/ocb/ocb_shift_xor.o src/encauth/ocb/ocb_test.o src/encauth/ocb/s_ocb_done.o \
+src/hashes/chc/chc.o src/hashes/helper/hash_file.o src/hashes/helper/hash_filehandle.o \
+src/hashes/helper/hash_memory.o src/hashes/helper/hash_memory_multi.o src/hashes/md2.o src/hashes/md4.o \
+src/hashes/md5.o src/hashes/rmd128.o src/hashes/rmd160.o src/hashes/sha1.o src/hashes/sha2/sha256.o \
+src/hashes/sha2/sha512.o src/hashes/tiger.o src/hashes/whirl/whirl.o src/mac/hmac/hmac_done.o \
+src/mac/hmac/hmac_file.o src/mac/hmac/hmac_init.o src/mac/hmac/hmac_memory.o \
+src/mac/hmac/hmac_memory_multi.o src/mac/hmac/hmac_process.o src/mac/hmac/hmac_test.o \
+src/mac/omac/omac_done.o src/mac/omac/omac_file.o src/mac/omac/omac_init.o src/mac/omac/omac_memory.o \
+src/mac/omac/omac_memory_multi.o src/mac/omac/omac_process.o src/mac/omac/omac_test.o \
+src/mac/pelican/pelican.o src/mac/pelican/pelican_memory.o src/mac/pelican/pelican_test.o \
+src/mac/pmac/pmac_done.o src/mac/pmac/pmac_file.o src/mac/pmac/pmac_init.o src/mac/pmac/pmac_memory.o \
+src/mac/pmac/pmac_memory_multi.o src/mac/pmac/pmac_ntz.o src/mac/pmac/pmac_process.o \
+src/mac/pmac/pmac_shift_xor.o src/mac/pmac/pmac_test.o src/misc/base64/base64_decode.o \
+src/misc/base64/base64_encode.o src/misc/burn_stack.o src/misc/crypt/crypt.o \
+src/misc/crypt/crypt_argchk.o src/misc/crypt/crypt_cipher_descriptor.o \
+src/misc/crypt/crypt_cipher_is_valid.o src/misc/crypt/crypt_find_cipher.o \
+src/misc/crypt/crypt_find_cipher_any.o src/misc/crypt/crypt_find_cipher_id.o \
+src/misc/crypt/crypt_find_hash.o src/misc/crypt/crypt_find_hash_any.o \
+src/misc/crypt/crypt_find_hash_id.o src/misc/crypt/crypt_find_prng.o \
+src/misc/crypt/crypt_hash_descriptor.o src/misc/crypt/crypt_hash_is_valid.o \
+src/misc/crypt/crypt_prng_descriptor.o src/misc/crypt/crypt_prng_is_valid.o \
+src/misc/crypt/crypt_register_cipher.o src/misc/crypt/crypt_register_hash.o \
+src/misc/crypt/crypt_register_prng.o src/misc/crypt/crypt_unregister_cipher.o \
+src/misc/crypt/crypt_unregister_hash.o src/misc/crypt/crypt_unregister_prng.o \
+src/misc/error_to_string.o src/misc/mpi/is_prime.o src/misc/mpi/mpi_to_ltc_error.o \
+src/misc/mpi/rand_prime.o src/misc/pkcs5/pkcs_5_1.o src/misc/pkcs5/pkcs_5_2.o src/misc/zeromem.o \
+src/modes/cbc/cbc_decrypt.o src/modes/cbc/cbc_done.o src/modes/cbc/cbc_encrypt.o \
+src/modes/cbc/cbc_getiv.o src/modes/cbc/cbc_setiv.o src/modes/cbc/cbc_start.o \
+src/modes/cfb/cfb_decrypt.o src/modes/cfb/cfb_done.o src/modes/cfb/cfb_encrypt.o \
+src/modes/cfb/cfb_getiv.o src/modes/cfb/cfb_setiv.o src/modes/cfb/cfb_start.o \
+src/modes/ctr/ctr_decrypt.o src/modes/ctr/ctr_done.o src/modes/ctr/ctr_encrypt.o \
+src/modes/ctr/ctr_getiv.o src/modes/ctr/ctr_setiv.o src/modes/ctr/ctr_start.o \
+src/modes/ecb/ecb_decrypt.o src/modes/ecb/ecb_done.o src/modes/ecb/ecb_encrypt.o \
+src/modes/ecb/ecb_start.o src/modes/ofb/ofb_decrypt.o src/modes/ofb/ofb_done.o \
+src/modes/ofb/ofb_encrypt.o src/modes/ofb/ofb_getiv.o src/modes/ofb/ofb_setiv.o \
+src/modes/ofb/ofb_start.o src/pk/asn1/der/der_decode_integer.o src/pk/asn1/der/der_encode_integer.o \
+src/pk/asn1/der/der_get_multi_integer.o src/pk/asn1/der/der_length_integer.o \
+src/pk/asn1/der/der_put_multi_integer.o src/pk/dh/dh.o src/pk/dsa/dsa_export.o src/pk/dsa/dsa_free.o \
+src/pk/dsa/dsa_import.o src/pk/dsa/dsa_make_key.o src/pk/dsa/dsa_sign_hash.o \
+src/pk/dsa/dsa_verify_hash.o src/pk/dsa/dsa_verify_key.o src/pk/ecc/ecc.o src/pk/packet_store_header.o \
+src/pk/packet_valid_header.o src/pk/pkcs1/pkcs_1_i2osp.o src/pk/pkcs1/pkcs_1_mgf1.o \
+src/pk/pkcs1/pkcs_1_oaep_decode.o src/pk/pkcs1/pkcs_1_oaep_encode.o src/pk/pkcs1/pkcs_1_os2ip.o \
+src/pk/pkcs1/pkcs_1_pss_decode.o src/pk/pkcs1/pkcs_1_pss_encode.o src/pk/pkcs1/pkcs_1_v15_es_decode.o \
+src/pk/pkcs1/pkcs_1_v15_es_encode.o src/pk/pkcs1/pkcs_1_v15_sa_decode.o \
+src/pk/pkcs1/pkcs_1_v15_sa_encode.o src/pk/rsa/rsa_decrypt_key.o src/pk/rsa/rsa_encrypt_key.o \
+src/pk/rsa/rsa_export.o src/pk/rsa/rsa_exptmod.o src/pk/rsa/rsa_free.o src/pk/rsa/rsa_import.o \
+src/pk/rsa/rsa_make_key.o src/pk/rsa/rsa_sign_hash.o src/pk/rsa/rsa_v15_decrypt_key.o \
+src/pk/rsa/rsa_v15_encrypt_key.o src/pk/rsa/rsa_v15_sign_hash.o src/pk/rsa/rsa_v15_verify_hash.o \
+src/pk/rsa/rsa_verify_hash.o src/prngs/fortuna.o src/prngs/rc4.o src/prngs/rng_get_bytes.o \
+src/prngs/rng_make_prng.o src/prngs/sober128.o src/prngs/sprng.o src/prngs/yarrow.o
+
+HEADERS=src/headers/tommath_superclass.h src/headers/tomcrypt_cfg.h \
+src/headers/tomcrypt_mac.h src/headers/tomcrypt_macros.h \
+src/headers/tomcrypt_custom.h src/headers/tomcrypt_argchk.h \
+src/headers/tomcrypt_cipher.h src/headers/tomcrypt_pk.h \
+src/headers/tommath_class.h src/headers/ltc_tommath.h src/headers/tomcrypt_hash.h \
+src/headers/tomcrypt_misc.h src/headers/tomcrypt.h src/headers/tomcrypt_pkcs.h \
+src/headers/tomcrypt_prng.h testprof/tomcrypt_test.h
#ciphers come in two flavours... enc+dec and enc
aes_enc.o: aes.c aes_tab.c
@@ -145,8 +153,9 @@ aes_enc.o: aes.c aes_tab.c
HASHOBJECTS=demos/hashsum.o
CRYPTOBJECTS=demos/encrypt.o
SMALLOBJECTS=demos/small.o
-PROFS=demos/x86_prof.o
TVS=demos/tv_gen.o
+TIMINGS=demos/timing.o
+TESTS=demos/test.o
#Files left over from making the crypt.pdf.
LEFTOVERS=*.dvi *.log *.aux *.toc *.idx *.ilg *.ind
@@ -154,25 +163,28 @@ LEFTOVERS=*.dvi *.log *.aux *.toc *.idx *.ilg *.ind
#Compressed filenames
COMPRESSED=crypt.tar.bz2 crypt.zip crypt.tar.gz
-#Header files used by libtomcrypt.
-HEADERS=ltc_tommath.h mycrypt_cfg.h \
-mycrypt_misc.h mycrypt_prng.h mycrypt_cipher.h mycrypt_hash.h \
-mycrypt_macros.h mycrypt_pk.h mycrypt.h mycrypt_argchk.h mycrypt_custom.h
+#ciphers come in two flavours... enc+dec and enc
+src/ciphers/aes/aes_enc.o: src/ciphers/aes/aes.c src/ciphers/aes/aes_tab.c
+ $(CC) $(CFLAGS) -DENCRYPT_ONLY -c src/ciphers/aes/aes.c -o src/ciphers/aes/aes_enc.o
#These are the rules to make certain object files.
-rsa.o: rsa.c rsa_sys.c
-ecc.o: ecc.c ecc_sys.c
-dh.o: dh.c dh_sys.c
-aes.o: aes.c aes_tab.c
-twofish.o: twofish.c twofish_tab.c
-sha512.o: sha512.c sha384.c
-sha256.o: sha256.c sha224.c
+src/ciphers/aes/aes.o: src/ciphers/aes/aes.c src/ciphers/aes/aes_tab.c
+src/ciphers/twofish/twofish.o: src/ciphers/twofish/twofish.c src/ciphers/twofish/twofish_tab.c
+src/hashes/whirl/whirl.o: src/hashes/whirl/whirl.c src/hashes/whirl/whirltab.c
+src/pk/ecc/ecc.o: src/pk/ecc/ecc.c src/pk/ecc/ecc_sys.c
+src/pk/dh/dh.o: src/pk/dh/dh.c src/pk/dh/dh_sys.c
+src/hashes/sha2/sha512.o: src/hashes/sha2/sha512.c src/hashes/sha2/sha384.c
+src/hashes/sha2/sha256.o: src/hashes/sha2/sha256.c src/hashes/sha2/sha224.c
#This rule makes the libtomcrypt library.
-library: $(LIBNAME)
+library: $(LIBTEST) $(LIBNAME)
+
+$(LIBTEST):
+ cd testprof ; make -f makefile.icc
$(LIBNAME): $(OBJECTS)
- $(AR) $(ARFLAGS) $@ $(OBJECTS)
+ $(AR) $(ARFLAGS) $@ $(OBJECTS)
+ ranlib $(LIBNAME)
#This rule makes the hash program included with libtomcrypt
hashsum: library $(HASHOBJECTS)
@@ -186,19 +198,14 @@ crypt: library $(CRYPTOBJECTS)
small: library $(SMALLOBJECTS)
$(CC) $(SMALLOBJECTS) $(LIBNAME) -o $(SMALL) $(WARN)
-x86_prof: library $(PROFS)
- $(CC) $(PROFS) $(LIBNAME) -o $(PROF)
-
tv_gen: library $(TVS)
$(CC) $(TVS) $(LIBNAME) -o $(TV)
-profiled:
- make clean
- make CFLAGS="$(CFLAGS) -prof_gen" x86_prof
- ./x86_prof
- rm *.o *.a x86_prof
- make CFLAGS="$(CFLAGS) -prof_use" x86_prof
+timing: library $(TIMINGS)
+ $(CC) $(TIMINGS) $(LIBTEST) $(LIBNAME) -o $(TIMING)
+test: library $(TESTS)
+ $(CC) $(TESTS) $(LIBTEST) $(LIBNAME) -o $(TEST)
#This rule installs the library and the header files. This must be run
#as root in order to have a high enough permission to write to the correct
@@ -208,10 +215,3 @@ install: library
install -d -g root -o root $(DESTDIR)$(INCPATH)
install -g root -o root $(LIBNAME) $(DESTDIR)$(LIBPATH)
install -g root -o root $(HEADERS) $(DESTDIR)$(INCPATH)
-
-#This rule cleans the source tree of all compiled code, not including the pdf
-#documentation.
-clean:
- rm -f $(OBJECTS) $(TESTOBJECTS) $(HASHOBJECTS) $(CRYPTOBJECTS) $(SMALLOBJECTS) $(LEFTOVERS) $(LIBNAME)
- rm -f $(TEST) $(HASH) $(COMPRESSED) $(PROFS) $(PROF) $(TVS) $(TV)
- rm -f *.a *.dll *stackdump *.lib *.exe *.obj demos/*.obj demos/*.o *.bat *.txt *.il *.da demos/*.il demos/*.da *.dyn
diff --git a/makefile.msvc b/makefile.msvc
index a5b5ef92..16d4b8d2 100644
--- a/makefile.msvc
+++ b/makefile.msvc
@@ -1,93 +1,104 @@
#MSVC Makefile [tested with MSVC 6.00 with SP5]
#
#Tom St Denis
-CFLAGS = /I. /Ox /DWIN32 /W3
+CFLAGS = /Isrc/headers/ /Itestprof/ /Ox /DWIN32 /W3 /Fo$@
default: library
# leave this blank and link against libtommath if you want better link resolution
-MPIOBJECT=mpi.obj
+MPIOBJECT=src/misc/mpi/mpi.obj
-OBJECTS=error_to_string.obj mpi_to_ltc_error.obj base64_encode.obj base64_decode.obj \
-\
-crypt.obj crypt_find_cipher.obj crypt_find_hash_any.obj \
-crypt_hash_is_valid.obj crypt_register_hash.obj crypt_unregister_prng.obj \
-crypt_argchk.obj crypt_find_cipher_any.obj crypt_find_hash_id.obj \
-crypt_prng_descriptor.obj crypt_register_prng.obj crypt_cipher_descriptor.obj \
-crypt_find_cipher_id.obj crypt_find_prng.obj crypt_prng_is_valid.obj \
-crypt_unregister_cipher.obj crypt_cipher_is_valid.obj crypt_find_hash.obj \
-crypt_hash_descriptor.obj crypt_register_cipher.obj crypt_unregister_hash.obj \
-\
-sober128.obj fortuna.obj sprng.obj yarrow.obj rc4.obj rng_get_bytes.obj rng_make_prng.obj \
-\
-rand_prime.obj is_prime.obj \
-\
-ecc.obj dh.obj \
-\
-rsa_decrypt_key.obj rsa_encrypt_key.obj rsa_exptmod.obj rsa_free.obj rsa_make_key.obj \
-rsa_sign_hash.obj rsa_verify_hash.obj rsa_export.obj rsa_import.obj tim_exptmod.obj \
-rsa_v15_encrypt_key.obj rsa_v15_decrypt_key.obj rsa_v15_sign_hash.obj rsa_v15_verify_hash.obj \
-\
-dsa_export.obj dsa_free.obj dsa_import.obj dsa_make_key.obj dsa_sign_hash.obj \
-dsa_verify_hash.obj dsa_verify_key.obj \
-\
-aes.obj aes_enc.obj \
-\
-blowfish.obj des.obj safer_tab.obj safer.obj saferp.obj rc2.obj xtea.obj \
-rc6.obj rc5.obj cast5.obj noekeon.obj twofish.obj skipjack.obj \
-\
-md2.obj md4.obj md5.obj sha1.obj sha256.obj sha512.obj tiger.obj whirl.obj \
-rmd128.obj rmd160.obj chc.obj \
-\
-packet_store_header.obj packet_valid_header.obj \
-\
-eax_addheader.obj eax_decrypt.obj eax_decrypt_verify_memory.obj eax_done.obj eax_encrypt.obj \
-eax_encrypt_authenticate_memory.obj eax_init.obj eax_test.obj \
-\
-ocb_decrypt.obj ocb_decrypt_verify_memory.obj ocb_done_decrypt.obj ocb_done_encrypt.obj \
-ocb_encrypt.obj ocb_encrypt_authenticate_memory.obj ocb_init.obj ocb_ntz.obj \
-ocb_shift_xor.obj ocb_test.obj s_ocb_done.obj \
-\
-omac_done.obj omac_file.obj omac_init.obj omac_memory.obj omac_process.obj omac_test.obj \
-\
-pmac_done.obj pmac_file.obj pmac_init.obj pmac_memory.obj pmac_ntz.obj pmac_process.obj \
-pmac_shift_xor.obj pmac_test.obj \
-\
-cbc_start.obj cbc_encrypt.obj cbc_decrypt.obj cbc_getiv.obj cbc_setiv.obj \
-cfb_start.obj cfb_encrypt.obj cfb_decrypt.obj cfb_getiv.obj cfb_setiv.obj \
-ofb_start.obj ofb_encrypt.obj ofb_decrypt.obj ofb_getiv.obj ofb_setiv.obj \
-ctr_start.obj ctr_encrypt.obj ctr_decrypt.obj ctr_getiv.obj ctr_setiv.obj \
-ecb_start.obj ecb_encrypt.obj ecb_decrypt.obj \
-\
-hash_file.obj hash_filehandle.obj hash_memory.obj \
-\
-hmac_done.obj hmac_file.obj hmac_init.obj hmac_memory.obj hmac_process.obj hmac_test.obj \
-\
-pkcs_1_mgf1.obj pkcs_1_oaep_encode.obj pkcs_1_oaep_decode.obj \
-pkcs_1_pss_encode.obj pkcs_1_pss_decode.obj pkcs_1_i2osp.obj pkcs_1_os2ip.obj \
-pkcs_1_v15_es_encode.obj pkcs_1_v15_es_decode.obj pkcs_1_v15_sa_encode.obj pkcs_1_v15_sa_decode.obj \
-\
-pkcs_5_1.obj pkcs_5_2.obj \
-\
-der_encode_integer.obj der_decode_integer.obj der_length_integer.obj \
-der_put_multi_integer.obj der_get_multi_integer.obj \
-\
-burn_stack.obj zeromem.obj \
-\
-$(MPIOBJECT)
+OBJECTS=src/ciphers/aes/aes_enc.obj $(MPIOBJECT) src/ciphers/aes/aes.obj src/ciphers/anubis.obj \
+src/ciphers/blowfish.obj src/ciphers/cast5.obj src/ciphers/des.obj src/ciphers/khazad.obj src/ciphers/noekeon.obj \
+src/ciphers/rc2.obj src/ciphers/rc5.obj src/ciphers/rc6.obj src/ciphers/safer/safer.obj \
+src/ciphers/safer/safer_tab.obj src/ciphers/safer/saferp.obj src/ciphers/skipjack.obj \
+src/ciphers/twofish/twofish.obj src/ciphers/xtea.obj src/encauth/ccm/ccm_memory.obj \
+src/encauth/ccm/ccm_test.obj src/encauth/eax/eax_addheader.obj src/encauth/eax/eax_decrypt.obj \
+src/encauth/eax/eax_decrypt_verify_memory.obj src/encauth/eax/eax_done.obj src/encauth/eax/eax_encrypt.obj \
+src/encauth/eax/eax_encrypt_authenticate_memory.obj src/encauth/eax/eax_init.obj \
+src/encauth/eax/eax_test.obj src/encauth/gcm/gcm_add_aad.obj src/encauth/gcm/gcm_add_iv.obj \
+src/encauth/gcm/gcm_done.obj src/encauth/gcm/gcm_gf_mult.obj src/encauth/gcm/gcm_init.obj \
+src/encauth/gcm/gcm_memory.obj src/encauth/gcm/gcm_process.obj src/encauth/gcm/gcm_reset.obj \
+src/encauth/gcm/gcm_test.obj src/encauth/ocb/ocb_decrypt.obj src/encauth/ocb/ocb_decrypt_verify_memory.obj \
+src/encauth/ocb/ocb_done_decrypt.obj src/encauth/ocb/ocb_done_encrypt.obj src/encauth/ocb/ocb_encrypt.obj \
+src/encauth/ocb/ocb_encrypt_authenticate_memory.obj src/encauth/ocb/ocb_init.obj src/encauth/ocb/ocb_ntz.obj \
+src/encauth/ocb/ocb_shift_xor.obj src/encauth/ocb/ocb_test.obj src/encauth/ocb/s_ocb_done.obj \
+src/hashes/chc/chc.obj src/hashes/helper/hash_file.obj src/hashes/helper/hash_filehandle.obj \
+src/hashes/helper/hash_memory.obj src/hashes/helper/hash_memory_multi.obj src/hashes/md2.obj src/hashes/md4.obj \
+src/hashes/md5.obj src/hashes/rmd128.obj src/hashes/rmd160.obj src/hashes/sha1.obj src/hashes/sha2/sha256.obj \
+src/hashes/sha2/sha512.obj src/hashes/tiger.obj src/hashes/whirl/whirl.obj src/mac/hmac/hmac_done.obj \
+src/mac/hmac/hmac_file.obj src/mac/hmac/hmac_init.obj src/mac/hmac/hmac_memory.obj \
+src/mac/hmac/hmac_memory_multi.obj src/mac/hmac/hmac_process.obj src/mac/hmac/hmac_test.obj \
+src/mac/omac/omac_done.obj src/mac/omac/omac_file.obj src/mac/omac/omac_init.obj src/mac/omac/omac_memory.obj \
+src/mac/omac/omac_memory_multi.obj src/mac/omac/omac_process.obj src/mac/omac/omac_test.obj \
+src/mac/pelican/pelican.obj src/mac/pelican/pelican_memory.obj src/mac/pelican/pelican_test.obj \
+src/mac/pmac/pmac_done.obj src/mac/pmac/pmac_file.obj src/mac/pmac/pmac_init.obj src/mac/pmac/pmac_memory.obj \
+src/mac/pmac/pmac_memory_multi.obj src/mac/pmac/pmac_ntz.obj src/mac/pmac/pmac_process.obj \
+src/mac/pmac/pmac_shift_xor.obj src/mac/pmac/pmac_test.obj src/misc/base64/base64_decode.obj \
+src/misc/base64/base64_encode.obj src/misc/burn_stack.obj src/misc/crypt/crypt.obj \
+src/misc/crypt/crypt_argchk.obj src/misc/crypt/crypt_cipher_descriptor.obj \
+src/misc/crypt/crypt_cipher_is_valid.obj src/misc/crypt/crypt_find_cipher.obj \
+src/misc/crypt/crypt_find_cipher_any.obj src/misc/crypt/crypt_find_cipher_id.obj \
+src/misc/crypt/crypt_find_hash.obj src/misc/crypt/crypt_find_hash_any.obj \
+src/misc/crypt/crypt_find_hash_id.obj src/misc/crypt/crypt_find_prng.obj \
+src/misc/crypt/crypt_hash_descriptor.obj src/misc/crypt/crypt_hash_is_valid.obj \
+src/misc/crypt/crypt_prng_descriptor.obj src/misc/crypt/crypt_prng_is_valid.obj \
+src/misc/crypt/crypt_register_cipher.obj src/misc/crypt/crypt_register_hash.obj \
+src/misc/crypt/crypt_register_prng.obj src/misc/crypt/crypt_unregister_cipher.obj \
+src/misc/crypt/crypt_unregister_hash.obj src/misc/crypt/crypt_unregister_prng.obj \
+src/misc/error_to_string.obj src/misc/mpi/is_prime.obj src/misc/mpi/mpi_to_ltc_error.obj \
+src/misc/mpi/rand_prime.obj src/misc/pkcs5/pkcs_5_1.obj src/misc/pkcs5/pkcs_5_2.obj src/misc/zeromem.obj \
+src/modes/cbc/cbc_decrypt.obj src/modes/cbc/cbc_done.obj src/modes/cbc/cbc_encrypt.obj \
+src/modes/cbc/cbc_getiv.obj src/modes/cbc/cbc_setiv.obj src/modes/cbc/cbc_start.obj \
+src/modes/cfb/cfb_decrypt.obj src/modes/cfb/cfb_done.obj src/modes/cfb/cfb_encrypt.obj \
+src/modes/cfb/cfb_getiv.obj src/modes/cfb/cfb_setiv.obj src/modes/cfb/cfb_start.obj \
+src/modes/ctr/ctr_decrypt.obj src/modes/ctr/ctr_done.obj src/modes/ctr/ctr_encrypt.obj \
+src/modes/ctr/ctr_getiv.obj src/modes/ctr/ctr_setiv.obj src/modes/ctr/ctr_start.obj \
+src/modes/ecb/ecb_decrypt.obj src/modes/ecb/ecb_done.obj src/modes/ecb/ecb_encrypt.obj \
+src/modes/ecb/ecb_start.obj src/modes/ofb/ofb_decrypt.obj src/modes/ofb/ofb_done.obj \
+src/modes/ofb/ofb_encrypt.obj src/modes/ofb/ofb_getiv.obj src/modes/ofb/ofb_setiv.obj \
+src/modes/ofb/ofb_start.obj src/pk/asn1/der/der_decode_integer.obj src/pk/asn1/der/der_encode_integer.obj \
+src/pk/asn1/der/der_get_multi_integer.obj src/pk/asn1/der/der_length_integer.obj \
+src/pk/asn1/der/der_put_multi_integer.obj src/pk/dh/dh.obj src/pk/dsa/dsa_export.obj src/pk/dsa/dsa_free.obj \
+src/pk/dsa/dsa_import.obj src/pk/dsa/dsa_make_key.obj src/pk/dsa/dsa_sign_hash.obj \
+src/pk/dsa/dsa_verify_hash.obj src/pk/dsa/dsa_verify_key.obj src/pk/ecc/ecc.obj src/pk/packet_store_header.obj \
+src/pk/packet_valid_header.obj src/pk/pkcs1/pkcs_1_i2osp.obj src/pk/pkcs1/pkcs_1_mgf1.obj \
+src/pk/pkcs1/pkcs_1_oaep_decode.obj src/pk/pkcs1/pkcs_1_oaep_encode.obj src/pk/pkcs1/pkcs_1_os2ip.obj \
+src/pk/pkcs1/pkcs_1_pss_decode.obj src/pk/pkcs1/pkcs_1_pss_encode.obj src/pk/pkcs1/pkcs_1_v15_es_decode.obj \
+src/pk/pkcs1/pkcs_1_v15_es_encode.obj src/pk/pkcs1/pkcs_1_v15_sa_decode.obj \
+src/pk/pkcs1/pkcs_1_v15_sa_encode.obj src/pk/rsa/rsa_decrypt_key.obj src/pk/rsa/rsa_encrypt_key.obj \
+src/pk/rsa/rsa_export.obj src/pk/rsa/rsa_exptmod.obj src/pk/rsa/rsa_free.obj src/pk/rsa/rsa_import.obj \
+src/pk/rsa/rsa_make_key.obj src/pk/rsa/rsa_sign_hash.obj src/pk/rsa/rsa_v15_decrypt_key.obj \
+src/pk/rsa/rsa_v15_encrypt_key.obj src/pk/rsa/rsa_v15_sign_hash.obj src/pk/rsa/rsa_v15_verify_hash.obj \
+src/pk/rsa/rsa_verify_hash.obj src/prngs/fortuna.obj src/prngs/rc4.obj src/prngs/rng_get_bytes.obj \
+src/prngs/rng_make_prng.obj src/prngs/sober128.obj src/prngs/sprng.obj src/prngs/yarrow.obj
-#ciphers come in two flavours... enc+dec and enc
-aes_enc.obj: aes.c aes_tab.c
- $(CC) $(CFLAGS) /DENCRYPT_ONLY /c aes.c /Foaes_enc.obj
+HEADERS=src/headers/tommath_superclass.h src/headers/tomcrypt_cfg.h \
+src/headers/tomcrypt_mac.h src/headers/tomcrypt_macros.h \
+src/headers/tomcrypt_custom.h src/headers/tomcrypt_argchk.h \
+src/headers/tomcrypt_cipher.h src/headers/tomcrypt_pk.h \
+src/headers/tommath_class.h src/headers/ltc_tommath.h src/headers/tomcrypt_hash.h \
+src/headers/tomcrypt_misc.h src/headers/tomcrypt.h src/headers/tomcrypt_pkcs.h \
+src/headers/tomcrypt_prng.h testprof/tomcrypt_test.h
+
+#ciphers come in two flavours... enc+dec and enc
+src/ciphers/aes/aes_enc.obj: src/ciphers/aes/aes.c src/ciphers/aes/aes_tab.c
+ $(CC) $(CFLAGS) /DENCRYPT_ONLY /c src/ciphers/aes/aes.c /Fosrc/ciphers/aes/aes_enc.obj
library: $(OBJECTS)
lib /out:tomcrypt.lib $(OBJECTS)
+ cd testprof
+ nmake -f makefile.msvc
+ cd ..
-x86_prof: demos/x86_prof.c library
- cl $(CFLAGS) demos/x86_prof.c tomcrypt.lib advapi32.lib
-
tv_gen: demos/tv_gen.c library
cl $(CFLAGS) demos/tv_gen.c tomcrypt.lib advapi32.lib
hashsum: demos/hashsum.c library
cl $(CFLAGS) demos/hashsum.c tomcrypt.lib advapi32.lib
+
+test: demos/test.c library
+ cl $(CFLAGS) demos/test.c testprof/tomcrypt_prof.lib tomcrypt.lib advapi32.lib
+
+timing: demos/timing.c library
+ cl $(CFLAGS) demos/timing.c testprof/tomcrypt_prof.lib tomcrypt.lib advapi32.lib
diff --git a/makefile.shared b/makefile.shared
index 5f5f5b83..207ceeaa 100644
--- a/makefile.shared
+++ b/makefile.shared
@@ -1,25 +1,27 @@
# MAKEFILE for linux GCC
#
+# This makefile produces a shared object and requires libtool to be installed.
+#
+# Thanks to Zed Shaw for helping debug this on BSD/OSX.
# Tom St Denis
-# Modified by Clay Culver
# The version
-VERSION=0:99
+VERSION=0:102
# Compiler and Linker Names
CC=libtool --mode=compile gcc
-# Archiver [makes .a files]
-AR=libtool --mode=link
-
# Compilation flags. Note the += does not write over the user's CFLAGS!
-CFLAGS += -c -I./ -Wall -Wsign-compare -W -Wshadow
-# -Werror
+CFLAGS += -c -I./src/headers/ -Wall -Wsign-compare -W -Wshadow
+
+# additional warnings (newer GCC 3.4 and higher)
+#CFLAGS += -Wsystem-headers -Wdeclaration-after-statement -Wbad-function-cast -Wcast-align -Wstrict-prototypes -Wmissing-prototypes \
+# -Wmissing-declarations -Wpointer-arith
# optimize for SPEED
CFLAGS += -O3 -funroll-all-loops
-#add -fomit-frame-pointer. hinders debugging!
+# add -fomit-frame-pointer. hinders debugging!
CFLAGS += -fomit-frame-pointer
# optimize for SIZE
@@ -28,15 +30,21 @@ CFLAGS += -fomit-frame-pointer
# compile for DEBUGING (required for ccmalloc checking!!!)
#CFLAGS += -g3
-#These flags control how the library gets built.
+# older GCCs can't handle the "rotate with immediate" ROLc/RORc/etc macros
+# define this to help
+#CFLAGS += -DLTC_NO_ROLC
#Output filenames for various targets.
+LIBTEST=libtomcrypt_prof.la
LIBNAME=libtomcrypt.la
HASH=hashsum
CRYPT=encrypt
SMALL=small
PROF=x86_prof
TV=tv_gen
+TEST=test
+TIMING=timing
+
#LIBPATH-The directory for libtomcrypt to be installed to.
#INCPATH-The directory to install the header files for libtomcrypt.
@@ -46,141 +54,145 @@ LIBPATH=/usr/lib
INCPATH=/usr/include
DATAPATH=/usr/share/doc/libtomcrypt/pdf
+#Who do we install as?
+USER=root
+GROUP=wheel
+
#List of objects to compile.
#Leave MPI built-in or force developer to link against libtommath?
-MPIOBJECT=mpi.o
+MPIOBJECT=src/misc/mpi/mpi.o
#If you don't want mpi.o then add this
#MPISHARED=$(LIBPATH)/libtommath.la
-OBJECTS=error_to_string.o mpi_to_ltc_error.o base64_encode.o base64_decode.o \
-\
-crypt.o crypt_find_cipher.o crypt_find_hash_any.o \
-crypt_hash_is_valid.o crypt_register_hash.o crypt_unregister_prng.o \
-crypt_argchk.o crypt_find_cipher_any.o crypt_find_hash_id.o \
-crypt_prng_descriptor.o crypt_register_prng.o crypt_cipher_descriptor.o \
-crypt_find_cipher_id.o crypt_find_prng.o crypt_prng_is_valid.o \
-crypt_unregister_cipher.o crypt_cipher_is_valid.o crypt_find_hash.o \
-crypt_hash_descriptor.o crypt_register_cipher.o crypt_unregister_hash.o \
-\
-sober128.o fortuna.o sprng.o yarrow.o rc4.o rng_get_bytes.o rng_make_prng.o \
-\
-rand_prime.o is_prime.o \
-\
-ecc.o dh.o \
-\
-rsa_decrypt_key.o rsa_encrypt_key.o rsa_exptmod.o rsa_free.o rsa_make_key.o \
-rsa_sign_hash.o rsa_verify_hash.o rsa_export.o rsa_import.o tim_exptmod.o \
-rsa_v15_encrypt_key.o rsa_v15_decrypt_key.o rsa_v15_sign_hash.o rsa_v15_verify_hash.o \
-\
-dsa_export.o dsa_free.o dsa_import.o dsa_make_key.o dsa_sign_hash.o \
-dsa_verify_hash.o dsa_verify_key.o \
-\
-aes.o aes_enc.o \
-\
-blowfish.o des.o safer_tab.o safer.o saferp.o rc2.o xtea.o \
-rc6.o rc5.o cast5.o noekeon.o twofish.o skipjack.o \
-\
-md2.o md4.o md5.o sha1.o sha256.o sha512.o tiger.o whirl.o \
-rmd128.o rmd160.o chc.o \
-\
-packet_store_header.o packet_valid_header.o \
-\
-eax_addheader.o eax_decrypt.o eax_decrypt_verify_memory.o eax_done.o eax_encrypt.o \
-eax_encrypt_authenticate_memory.o eax_init.o eax_test.o \
-\
-ocb_decrypt.o ocb_decrypt_verify_memory.o ocb_done_decrypt.o ocb_done_encrypt.o \
-ocb_encrypt.o ocb_encrypt_authenticate_memory.o ocb_init.o ocb_ntz.o \
-ocb_shift_xor.o ocb_test.o s_ocb_done.o \
-\
-omac_done.o omac_file.o omac_init.o omac_memory.o omac_process.o omac_test.o \
-\
-pmac_done.o pmac_file.o pmac_init.o pmac_memory.o pmac_ntz.o pmac_process.o \
-pmac_shift_xor.o pmac_test.o \
-\
-cbc_start.o cbc_encrypt.o cbc_decrypt.o cbc_getiv.o cbc_setiv.o \
-cfb_start.o cfb_encrypt.o cfb_decrypt.o cfb_getiv.o cfb_setiv.o \
-ofb_start.o ofb_encrypt.o ofb_decrypt.o ofb_getiv.o ofb_setiv.o \
-ctr_start.o ctr_encrypt.o ctr_decrypt.o ctr_getiv.o ctr_setiv.o \
-ecb_start.o ecb_encrypt.o ecb_decrypt.o \
-\
-hash_file.o hash_filehandle.o hash_memory.o \
-\
-hmac_done.o hmac_file.o hmac_init.o hmac_memory.o hmac_process.o hmac_test.o \
-\
-pkcs_1_mgf1.o pkcs_1_oaep_encode.o pkcs_1_oaep_decode.o \
-pkcs_1_pss_encode.o pkcs_1_pss_decode.o pkcs_1_i2osp.o pkcs_1_os2ip.o \
-pkcs_1_v15_es_encode.o pkcs_1_v15_es_decode.o pkcs_1_v15_sa_encode.o pkcs_1_v15_sa_decode.o \
-\
-pkcs_5_1.o pkcs_5_2.o \
-\
-der_encode_integer.o der_decode_integer.o der_length_integer.o \
-der_put_multi_integer.o der_get_multi_integer.o \
-\
-burn_stack.o zeromem.o \
-\
-$(MPIOBJECT)
+OBJECTS=src/ciphers/aes/aes_enc.o $(MPIOBJECT) src/ciphers/aes/aes.o src/ciphers/anubis.o \
+src/ciphers/blowfish.o src/ciphers/cast5.o src/ciphers/des.o src/ciphers/khazad.o src/ciphers/noekeon.o \
+src/ciphers/rc2.o src/ciphers/rc5.o src/ciphers/rc6.o src/ciphers/safer/safer.o \
+src/ciphers/safer/safer_tab.o src/ciphers/safer/saferp.o src/ciphers/skipjack.o \
+src/ciphers/twofish/twofish.o src/ciphers/xtea.o src/encauth/ccm/ccm_memory.o \
+src/encauth/ccm/ccm_test.o src/encauth/eax/eax_addheader.o src/encauth/eax/eax_decrypt.o \
+src/encauth/eax/eax_decrypt_verify_memory.o src/encauth/eax/eax_done.o src/encauth/eax/eax_encrypt.o \
+src/encauth/eax/eax_encrypt_authenticate_memory.o src/encauth/eax/eax_init.o \
+src/encauth/eax/eax_test.o src/encauth/gcm/gcm_add_aad.o src/encauth/gcm/gcm_add_iv.o \
+src/encauth/gcm/gcm_done.o src/encauth/gcm/gcm_gf_mult.o src/encauth/gcm/gcm_init.o \
+src/encauth/gcm/gcm_memory.o src/encauth/gcm/gcm_process.o src/encauth/gcm/gcm_reset.o \
+src/encauth/gcm/gcm_test.o src/encauth/ocb/ocb_decrypt.o src/encauth/ocb/ocb_decrypt_verify_memory.o \
+src/encauth/ocb/ocb_done_decrypt.o src/encauth/ocb/ocb_done_encrypt.o src/encauth/ocb/ocb_encrypt.o \
+src/encauth/ocb/ocb_encrypt_authenticate_memory.o src/encauth/ocb/ocb_init.o src/encauth/ocb/ocb_ntz.o \
+src/encauth/ocb/ocb_shift_xor.o src/encauth/ocb/ocb_test.o src/encauth/ocb/s_ocb_done.o \
+src/hashes/chc/chc.o src/hashes/helper/hash_file.o src/hashes/helper/hash_filehandle.o \
+src/hashes/helper/hash_memory.o src/hashes/helper/hash_memory_multi.o src/hashes/md2.o src/hashes/md4.o \
+src/hashes/md5.o src/hashes/rmd128.o src/hashes/rmd160.o src/hashes/sha1.o src/hashes/sha2/sha256.o \
+src/hashes/sha2/sha512.o src/hashes/tiger.o src/hashes/whirl/whirl.o src/mac/hmac/hmac_done.o \
+src/mac/hmac/hmac_file.o src/mac/hmac/hmac_init.o src/mac/hmac/hmac_memory.o \
+src/mac/hmac/hmac_memory_multi.o src/mac/hmac/hmac_process.o src/mac/hmac/hmac_test.o \
+src/mac/omac/omac_done.o src/mac/omac/omac_file.o src/mac/omac/omac_init.o src/mac/omac/omac_memory.o \
+src/mac/omac/omac_memory_multi.o src/mac/omac/omac_process.o src/mac/omac/omac_test.o \
+src/mac/pelican/pelican.o src/mac/pelican/pelican_memory.o src/mac/pelican/pelican_test.o \
+src/mac/pmac/pmac_done.o src/mac/pmac/pmac_file.o src/mac/pmac/pmac_init.o src/mac/pmac/pmac_memory.o \
+src/mac/pmac/pmac_memory_multi.o src/mac/pmac/pmac_ntz.o src/mac/pmac/pmac_process.o \
+src/mac/pmac/pmac_shift_xor.o src/mac/pmac/pmac_test.o src/misc/base64/base64_decode.o \
+src/misc/base64/base64_encode.o src/misc/burn_stack.o src/misc/crypt/crypt.o \
+src/misc/crypt/crypt_argchk.o src/misc/crypt/crypt_cipher_descriptor.o \
+src/misc/crypt/crypt_cipher_is_valid.o src/misc/crypt/crypt_find_cipher.o \
+src/misc/crypt/crypt_find_cipher_any.o src/misc/crypt/crypt_find_cipher_id.o \
+src/misc/crypt/crypt_find_hash.o src/misc/crypt/crypt_find_hash_any.o \
+src/misc/crypt/crypt_find_hash_id.o src/misc/crypt/crypt_find_prng.o \
+src/misc/crypt/crypt_hash_descriptor.o src/misc/crypt/crypt_hash_is_valid.o \
+src/misc/crypt/crypt_prng_descriptor.o src/misc/crypt/crypt_prng_is_valid.o \
+src/misc/crypt/crypt_register_cipher.o src/misc/crypt/crypt_register_hash.o \
+src/misc/crypt/crypt_register_prng.o src/misc/crypt/crypt_unregister_cipher.o \
+src/misc/crypt/crypt_unregister_hash.o src/misc/crypt/crypt_unregister_prng.o \
+src/misc/error_to_string.o src/misc/mpi/is_prime.o src/misc/mpi/mpi_to_ltc_error.o \
+src/misc/mpi/rand_prime.o src/misc/pkcs5/pkcs_5_1.o src/misc/pkcs5/pkcs_5_2.o src/misc/zeromem.o \
+src/modes/cbc/cbc_decrypt.o src/modes/cbc/cbc_done.o src/modes/cbc/cbc_encrypt.o \
+src/modes/cbc/cbc_getiv.o src/modes/cbc/cbc_setiv.o src/modes/cbc/cbc_start.o \
+src/modes/cfb/cfb_decrypt.o src/modes/cfb/cfb_done.o src/modes/cfb/cfb_encrypt.o \
+src/modes/cfb/cfb_getiv.o src/modes/cfb/cfb_setiv.o src/modes/cfb/cfb_start.o \
+src/modes/ctr/ctr_decrypt.o src/modes/ctr/ctr_done.o src/modes/ctr/ctr_encrypt.o \
+src/modes/ctr/ctr_getiv.o src/modes/ctr/ctr_setiv.o src/modes/ctr/ctr_start.o \
+src/modes/ecb/ecb_decrypt.o src/modes/ecb/ecb_done.o src/modes/ecb/ecb_encrypt.o \
+src/modes/ecb/ecb_start.o src/modes/ofb/ofb_decrypt.o src/modes/ofb/ofb_done.o \
+src/modes/ofb/ofb_encrypt.o src/modes/ofb/ofb_getiv.o src/modes/ofb/ofb_setiv.o \
+src/modes/ofb/ofb_start.o src/pk/asn1/der/der_decode_integer.o src/pk/asn1/der/der_encode_integer.o \
+src/pk/asn1/der/der_get_multi_integer.o src/pk/asn1/der/der_length_integer.o \
+src/pk/asn1/der/der_put_multi_integer.o src/pk/dh/dh.o src/pk/dsa/dsa_export.o src/pk/dsa/dsa_free.o \
+src/pk/dsa/dsa_import.o src/pk/dsa/dsa_make_key.o src/pk/dsa/dsa_sign_hash.o \
+src/pk/dsa/dsa_verify_hash.o src/pk/dsa/dsa_verify_key.o src/pk/ecc/ecc.o src/pk/packet_store_header.o \
+src/pk/packet_valid_header.o src/pk/pkcs1/pkcs_1_i2osp.o src/pk/pkcs1/pkcs_1_mgf1.o \
+src/pk/pkcs1/pkcs_1_oaep_decode.o src/pk/pkcs1/pkcs_1_oaep_encode.o src/pk/pkcs1/pkcs_1_os2ip.o \
+src/pk/pkcs1/pkcs_1_pss_decode.o src/pk/pkcs1/pkcs_1_pss_encode.o src/pk/pkcs1/pkcs_1_v15_es_decode.o \
+src/pk/pkcs1/pkcs_1_v15_es_encode.o src/pk/pkcs1/pkcs_1_v15_sa_decode.o \
+src/pk/pkcs1/pkcs_1_v15_sa_encode.o src/pk/rsa/rsa_decrypt_key.o src/pk/rsa/rsa_encrypt_key.o \
+src/pk/rsa/rsa_export.o src/pk/rsa/rsa_exptmod.o src/pk/rsa/rsa_free.o src/pk/rsa/rsa_import.o \
+src/pk/rsa/rsa_make_key.o src/pk/rsa/rsa_sign_hash.o src/pk/rsa/rsa_v15_decrypt_key.o \
+src/pk/rsa/rsa_v15_encrypt_key.o src/pk/rsa/rsa_v15_sign_hash.o src/pk/rsa/rsa_v15_verify_hash.o \
+src/pk/rsa/rsa_verify_hash.o src/prngs/fortuna.o src/prngs/rc4.o src/prngs/rng_get_bytes.o \
+src/prngs/rng_make_prng.o src/prngs/sober128.o src/prngs/sprng.o src/prngs/yarrow.o
+
+HEADERS=src/headers/tommath_superclass.h src/headers/tomcrypt_cfg.h \
+src/headers/tomcrypt_mac.h src/headers/tomcrypt_macros.h \
+src/headers/tomcrypt_custom.h src/headers/tomcrypt_argchk.h \
+src/headers/tomcrypt_cipher.h src/headers/tomcrypt_pk.h \
+src/headers/tommath_class.h src/headers/ltc_tommath.h src/headers/tomcrypt_hash.h \
+src/headers/tomcrypt_misc.h src/headers/tomcrypt.h src/headers/tomcrypt_pkcs.h \
+src/headers/tomcrypt_prng.h testprof/tomcrypt_test.h
TESTOBJECTS=demos/test.o
HASHOBJECTS=demos/hashsum.o
CRYPTOBJECTS=demos/encrypt.o
SMALLOBJECTS=demos/small.o
-PROFS=demos/x86_prof.o
TVS=demos/tv_gen.o
-
-#Files left over from making the crypt.pdf.
-LEFTOVERS=*.dvi *.log *.aux *.toc *.idx *.ilg *.ind *.out
-
-#Compressed filenames
-COMPRESSED=crypt-$(VERSION).tar.bz2 crypt-$(VERSION).zip
-
-#Header files used by libtomcrypt.
-HEADERS=ltc_tommath.h mycrypt_cfg.h \
-mycrypt_misc.h mycrypt_prng.h mycrypt_cipher.h mycrypt_hash.h \
-mycrypt_macros.h mycrypt_pk.h mycrypt.h mycrypt_argchk.h \
-mycrypt_custom.h mycrypt_pkcs.h tommath_class.h tommath_superclass.h
+TESTS=demos/test.o
+TIMINGS=demos/timing.o
#The default rule for make builds the libtomcrypt library.
default:library
#ciphers come in two flavours... enc+dec and enc
-aes_enc.o: aes.c aes_tab.c
- $(CC) $(CFLAGS) -DENCRYPT_ONLY -c aes.c -o aes_enc.o
+src/ciphers/aes/aes_enc.o: src/ciphers/aes/aes.c src/ciphers/aes/aes_tab.c
+ $(CC) $(CFLAGS) -DENCRYPT_ONLY -c src/ciphers/aes/aes.c -o src/ciphers/aes/aes_enc.o
#These are the rules to make certain object files.
-aes.o: aes.c aes_tab.c
-twofish.o: twofish.c twofish_tab.c
-whirl.o: whirl.c whirltab.c
-ecc.o: ecc.c ecc_sys.c
-dh.o: dh.c dh_sys.c
-sha512.o: sha512.c sha384.c
-sha256.o: sha256.c sha224.c
+src/ciphers/aes/aes.o: src/ciphers/aes/aes.c src/ciphers/aes/aes_tab.c
+src/ciphers/twofish/twofish.o: src/ciphers/twofish/twofish.c src/ciphers/twofish/twofish_tab.c
+src/hashes/whirl/whirl.o: src/hashes/whirl/whirl.c src/hashes/whirl/whirltab.c
+src/pk/ecc/ecc.o: src/pk/ecc/ecc.c src/pk/ecc/ecc_sys.c
+src/pk/dh/dh.o: src/pk/dh/dh.c src/pk/dh/dh_sys.c
+src/hashes/sha2/sha512.o: src/hashes/sha2/sha512.c src/hashes/sha2/sha384.c
+src/hashes/sha2/sha256.o: src/hashes/sha2/sha256.c src/hashes/sha2/sha224.c
#This rule makes the libtomcrypt library.
-library: $(LIBNAME)
+library: $(LIBTEST) $(LIBNAME)
+
+$(LIBTEST):
+ cd testprof ; CFLAGS="$(CFLAGS)" GROUP=$(GROUP) USER=$(USER) VERSION=$(VERSION) LIBPATH=$(LIBPATH) LIBNAME=$(LIBTEST) make -f makefile.shared
$(LIBNAME): $(OBJECTS)
- libtool --mode=link gcc $(CFLAGS) *.lo -o libtomcrypt.la -rpath $(LIBPATH) -version-info $(VERSION)
- libtool --mode=link gcc $(CFLAGS) *.o -o libtomcrypt.a
- libtool --mode=install install -c libtomcrypt.la $(LIBPATH)/libtomcrypt.la
- install -d -g root -o root $(DESTDIR)$(INCPATH)
- install -g root -o root $(HEADERS) $(DESTDIR)$(INCPATH)
+ libtool --silent --mode=link gcc $(CFLAGS) `find . -type f | grep "[.]lo" | grep "src/" | xargs` -o libtomcrypt.la -rpath $(LIBPATH) -version-info $(VERSION)
+ libtool --silent --mode=link gcc $(CFLAGS) `find . -type f | grep "[.]o" | grep "src/" | xargs` -o libtomcrypt.a
+ ranlib libtomcrypt.a
+ libtool --silent --mode=install install -c libtomcrypt.la $(LIBPATH)/libtomcrypt.la
+ install -d -g $(GROUP) -o $(USER) $(DESTDIR)$(INCPATH)
+ install -g $(GROUP) -o $(USER) $(HEADERS) $(DESTDIR)$(INCPATH)
#This rule makes the hash program included with libtomcrypt
hashsum: library
gcc $(CFLAGS) demos/hashsum.c -o hashsum.o
- libtool --mode=link gcc -o hashsum hashsum.o -ltomcrypt $(MPISHARED)
+ gcc -o hashsum hashsum.o -ltomcrypt_prof -ltomcrypt $(MPISHARED)
#makes the crypt program
crypt: library
gcc $(CFLAGS) demos/encrypt.c -o encrypt.o
- libtool --mode=link gcc -o crypt encrypt.o -ltomcrypt $(MPISHARED)
-
-x86_prof: library
- gcc $(CFLAGS) demos/x86_prof.c -o x86_prof.o
- libtool --mode=link gcc -o x86_prof x86_prof.o -ltomcrypt $(MPISHARED) $(EXTRALIBS)
+ gcc -o crypt encrypt.o -ltomcrypt_prof -ltomcrypt $(MPISHARED)
tv_gen: library $(TVS)
- gcc $(CFLAGS) demos/tv_gen.c -o tv_gen.o
- libtool --mode=link gcc -o tv_gen tv_gen.o -ltomcrypt $(MPISHARED)
+ gcc -o tv_gen $(TVS) -ltomcrypt_prof -ltomcrypt $(MPISHARED)
+
+test: library $(TESTS)
+ gcc -o $(TEST) $(TESTS) -ltomcrypt_prof -ltomcrypt $(MPISHARED)
+
+timing: library $(TIMINGS)
+ gcc -o $(TIMING) $(TIMINGS) -ltomcrypt_prof -ltomcrypt $(MPISHARED)
+
diff --git a/mycrypt_cipher.h b/mycrypt_cipher.h
deleted file mode 100644
index 65749db3..00000000
--- a/mycrypt_cipher.h
+++ /dev/null
@@ -1,396 +0,0 @@
-/* ---- SYMMETRIC KEY STUFF -----
- *
- * We put each of the ciphers scheduled keys in their own structs then we put all of
- * the key formats in one union. This makes the function prototypes easier to use.
- */
-#ifdef BLOWFISH
-struct blowfish_key {
- ulong32 S[4][256];
- ulong32 K[18];
-};
-#endif
-
-#ifdef RC5
-struct rc5_key {
- int rounds;
- ulong32 K[50];
-};
-#endif
-
-#ifdef RC6
-struct rc6_key {
- ulong32 K[44];
-};
-#endif
-
-#ifdef SAFERP
-struct saferp_key {
- unsigned char K[33][16];
- long rounds;
-};
-#endif
-
-#ifdef RIJNDAEL
-struct rijndael_key {
- ulong32 eK[64], dK[64];
- int Nr;
-};
-#endif
-
-#ifdef XTEA
-struct xtea_key {
- unsigned long A[32], B[32];
-};
-#endif
-
-#ifdef TWOFISH
-#ifndef TWOFISH_SMALL
- struct twofish_key {
- ulong32 S[4][256], K[40];
- };
-#else
- struct twofish_key {
- ulong32 K[40];
- unsigned char S[32], start;
- };
-#endif
-#endif
-
-#ifdef SAFER
-#define SAFER_K64_DEFAULT_NOF_ROUNDS 6
-#define SAFER_K128_DEFAULT_NOF_ROUNDS 10
-#define SAFER_SK64_DEFAULT_NOF_ROUNDS 8
-#define SAFER_SK128_DEFAULT_NOF_ROUNDS 10
-#define SAFER_MAX_NOF_ROUNDS 13
-#define SAFER_BLOCK_LEN 8
-#define SAFER_KEY_LEN (1 + SAFER_BLOCK_LEN * (1 + 2 * SAFER_MAX_NOF_ROUNDS))
-typedef unsigned char safer_block_t[SAFER_BLOCK_LEN];
-typedef unsigned char safer_key_t[SAFER_KEY_LEN];
-struct safer_key { safer_key_t key; };
-#endif
-
-#ifdef RC2
-struct rc2_key { unsigned xkey[64]; };
-#endif
-
-#ifdef DES
-struct des_key {
- ulong32 ek[32], dk[32];
-};
-
-struct des3_key {
- ulong32 ek[3][32], dk[3][32];
-};
-#endif
-
-#ifdef CAST5
-struct cast5_key {
- ulong32 K[32], keylen;
-};
-#endif
-
-#ifdef NOEKEON
-struct noekeon_key {
- ulong32 K[4], dK[4];
-};
-#endif
-
-#ifdef SKIPJACK
-struct skipjack_key {
- unsigned char key[10];
-};
-#endif
-
-typedef union Symmetric_key {
-#ifdef DES
- struct des_key des;
- struct des3_key des3;
-#endif
-#ifdef RC2
- struct rc2_key rc2;
-#endif
-#ifdef SAFER
- struct safer_key safer;
-#endif
-#ifdef TWOFISH
- struct twofish_key twofish;
-#endif
-#ifdef BLOWFISH
- struct blowfish_key blowfish;
-#endif
-#ifdef RC5
- struct rc5_key rc5;
-#endif
-#ifdef RC6
- struct rc6_key rc6;
-#endif
-#ifdef SAFERP
- struct saferp_key saferp;
-#endif
-#ifdef RIJNDAEL
- struct rijndael_key rijndael;
-#endif
-#ifdef XTEA
- struct xtea_key xtea;
-#endif
-#ifdef CAST5
- struct cast5_key cast5;
-#endif
-#ifdef NOEKEON
- struct noekeon_key noekeon;
-#endif
-#ifdef SKIPJACK
- struct skipjack_key skipjack;
-#endif
-} symmetric_key;
-
-/* A block cipher ECB structure */
-typedef struct {
- int cipher, blocklen;
- symmetric_key key;
-} symmetric_ECB;
-
-/* A block cipher CFB structure */
-typedef struct {
- int cipher, blocklen, padlen;
- unsigned char IV[MAXBLOCKSIZE], pad[MAXBLOCKSIZE];
- symmetric_key key;
-} symmetric_CFB;
-
-/* A block cipher OFB structure */
-typedef struct {
- int cipher, blocklen, padlen;
- unsigned char IV[MAXBLOCKSIZE];
- symmetric_key key;
-} symmetric_OFB;
-
-/* A block cipher CBC structure */
-typedef struct Symmetric_CBC {
- int cipher, blocklen;
- unsigned char IV[MAXBLOCKSIZE];
- symmetric_key key;
-} symmetric_CBC;
-
-/* A block cipher CTR structure */
-typedef struct Symmetric_CTR {
- int cipher, blocklen, padlen, mode;
- unsigned char ctr[MAXBLOCKSIZE], pad[MAXBLOCKSIZE];
- symmetric_key key;
-} symmetric_CTR;
-
-/* cipher descriptor table, last entry has "name == NULL" to mark the end of table */
-extern struct _cipher_descriptor {
- char *name;
- unsigned char ID;
- int min_key_length, max_key_length, block_length, default_rounds;
- int (*setup)(const unsigned char *key, int keylength, int num_rounds, symmetric_key *skey);
- void (*ecb_encrypt)(const unsigned char *pt, unsigned char *ct, symmetric_key *key);
- void (*ecb_decrypt)(const unsigned char *ct, unsigned char *pt, symmetric_key *key);
- int (*test)(void);
- int (*keysize)(int *desired_keysize);
-} cipher_descriptor[];
-
-#ifdef BLOWFISH
- int blowfish_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
- void blowfish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key);
- void blowfish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key);
- int blowfish_test(void);
- int blowfish_keysize(int *desired_keysize);
- extern const struct _cipher_descriptor blowfish_desc;
-#endif
-
-#ifdef RC5
- int rc5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
- void rc5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key);
- void rc5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key);
- int rc5_test(void);
- int rc5_keysize(int *desired_keysize);
- extern const struct _cipher_descriptor rc5_desc;
-#endif
-
-#ifdef RC6
- int rc6_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
- void rc6_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key);
- void rc6_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key);
- int rc6_test(void);
- int rc6_keysize(int *desired_keysize);
- extern const struct _cipher_descriptor rc6_desc;
-#endif
-
-#ifdef RC2
- int rc2_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
- void rc2_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key);
- void rc2_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key);
- int rc2_test(void);
- int rc2_keysize(int *desired_keysize);
- extern const struct _cipher_descriptor rc2_desc;
-#endif
-
-#ifdef SAFERP
- int saferp_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
- void saferp_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key);
- void saferp_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key);
- int saferp_test(void);
- int saferp_keysize(int *desired_keysize);
- extern const struct _cipher_descriptor saferp_desc;
-#endif
-
-#ifdef SAFER
- int safer_k64_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
- int safer_sk64_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
- int safer_k128_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
- int safer_sk128_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
- void safer_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key);
- void safer_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key);
-
- int safer_k64_test(void);
- int safer_sk64_test(void);
- int safer_sk128_test(void);
-
- int safer_64_keysize(int *desired_keysize);
- int safer_128_keysize(int *desired_keysize);
- extern const struct _cipher_descriptor safer_k64_desc, safer_k128_desc, safer_sk64_desc, safer_sk128_desc;
-#endif
-
-#ifdef RIJNDAEL
-
-/* make aes an alias */
-#define aes_setup rijndael_setup
-#define aes_ecb_encrypt rijndael_ecb_encrypt
-#define aes_ecb_decrypt rijndael_ecb_decrypt
-#define aes_test rijndael_test
-#define aes_keysize rijndael_keysize
-
-#define aes_enc_setup rijndael_enc_setup
-#define aes_enc_ecb_encrypt rijndael_enc_ecb_encrypt
-#define aes_enc_keysize rijndael_enc_keysize
-
- int rijndael_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
- void rijndael_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key);
- void rijndael_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key);
- int rijndael_test(void);
- int rijndael_keysize(int *desired_keysize);
-
- int rijndael_enc_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
- void rijndael_enc_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key);
- int rijndael_enc_keysize(int *desired_keysize);
-
- extern const struct _cipher_descriptor rijndael_desc, aes_desc;
- extern const struct _cipher_descriptor rijndael_enc_desc, aes_enc_desc;
-#endif
-
-#ifdef XTEA
- int xtea_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
- void xtea_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key);
- void xtea_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key);
- int xtea_test(void);
- int xtea_keysize(int *desired_keysize);
- extern const struct _cipher_descriptor xtea_desc;
-#endif
-
-#ifdef TWOFISH
- int twofish_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
- void twofish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key);
- void twofish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key);
- int twofish_test(void);
- int twofish_keysize(int *desired_keysize);
- extern const struct _cipher_descriptor twofish_desc;
-#endif
-
-#ifdef DES
- int des_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
- void des_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key);
- void des_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key);
- int des_test(void);
- int des_keysize(int *desired_keysize);
-
- int des3_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
- void des3_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key);
- void des3_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key);
- int des3_test(void);
- int des3_keysize(int *desired_keysize);
-
- extern const struct _cipher_descriptor des_desc, des3_desc;
-#endif
-
-#ifdef CAST5
- int cast5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
- void cast5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key);
- void cast5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key);
- int cast5_test(void);
- int cast5_keysize(int *desired_keysize);
- extern const struct _cipher_descriptor cast5_desc;
-#endif
-
-#ifdef NOEKEON
- int noekeon_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
- void noekeon_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key);
- void noekeon_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key);
- int noekeon_test(void);
- int noekeon_keysize(int *desired_keysize);
- extern const struct _cipher_descriptor noekeon_desc;
-#endif
-
-#ifdef SKIPJACK
- int skipjack_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
- void skipjack_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key);
- void skipjack_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key);
- int skipjack_test(void);
- int skipjack_keysize(int *desired_keysize);
- extern const struct _cipher_descriptor skipjack_desc;
-#endif
-
-#ifdef ECB
- int ecb_start(int cipher, const unsigned char *key,
- int keylen, int num_rounds, symmetric_ECB *ecb);
- int ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_ECB *ecb);
- int ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_ECB *ecb);
-#endif
-
-#ifdef CFB
- int cfb_start(int cipher, const unsigned char *IV, const unsigned char *key,
- int keylen, int num_rounds, symmetric_CFB *cfb);
- int cfb_encrypt(const unsigned char *pt, unsigned char *ct, unsigned long len, symmetric_CFB *cfb);
- int cfb_decrypt(const unsigned char *ct, unsigned char *pt, unsigned long len, symmetric_CFB *cfb);
- int cfb_getiv(unsigned char *IV, unsigned long *len, symmetric_CFB *cfb);
- int cfb_setiv(const unsigned char *IV, unsigned long len, symmetric_CFB *cfb);
-#endif
-
-#ifdef OFB
- int ofb_start(int cipher, const unsigned char *IV, const unsigned char *key,
- int keylen, int num_rounds, symmetric_OFB *ofb);
- int ofb_encrypt(const unsigned char *pt, unsigned char *ct, unsigned long len, symmetric_OFB *ofb);
- int ofb_decrypt(const unsigned char *ct, unsigned char *pt, unsigned long len, symmetric_OFB *ofb);
- int ofb_getiv(unsigned char *IV, unsigned long *len, symmetric_OFB *ofb);
- int ofb_setiv(const unsigned char *IV, unsigned long len, symmetric_OFB *ofb);
-#endif
-
-#ifdef CBC
- int cbc_start(int cipher, const unsigned char *IV, const unsigned char *key,
- int keylen, int num_rounds, symmetric_CBC *cbc);
- int cbc_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_CBC *cbc);
- int cbc_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_CBC *cbc);
- int cbc_getiv(unsigned char *IV, unsigned long *len, symmetric_CBC *cbc);
- int cbc_setiv(const unsigned char *IV, unsigned long len, symmetric_CBC *cbc);
-#endif
-
-#ifdef CTR
- int ctr_start(int cipher, const unsigned char *IV, const unsigned char *key,
- int keylen, int num_rounds, symmetric_CTR *ctr);
- int ctr_encrypt(const unsigned char *pt, unsigned char *ct, unsigned long len, symmetric_CTR *ctr);
- int ctr_decrypt(const unsigned char *ct, unsigned char *pt, unsigned long len, symmetric_CTR *ctr);
- int ctr_getiv(unsigned char *IV, unsigned long *len, symmetric_CTR *ctr);
- int ctr_setiv(const unsigned char *IV, unsigned long len, symmetric_CTR *ctr);
-#endif
-
-
-
- int find_cipher(const char *name);
- int find_cipher_any(const char *name, int blocklen, int keylen);
- int find_cipher_id(unsigned char ID);
-
- int register_cipher(const struct _cipher_descriptor *cipher);
- int unregister_cipher(const struct _cipher_descriptor *cipher);
-
- int cipher_is_valid(int idx);
-
diff --git a/mycrypt_hash.h b/mycrypt_hash.h
deleted file mode 100644
index d5d8900c..00000000
--- a/mycrypt_hash.h
+++ /dev/null
@@ -1,472 +0,0 @@
-/* ---- HASH FUNCTIONS ---- */
-#ifdef SHA512
-struct sha512_state {
- ulong64 length, state[8];
- unsigned long curlen;
- unsigned char buf[128];
-};
-#endif
-
-#ifdef SHA256
-struct sha256_state {
- ulong64 length;
- ulong32 state[8], curlen;
- unsigned char buf[64];
-};
-#endif
-
-#ifdef SHA1
-struct sha1_state {
- ulong64 length;
- ulong32 state[5], curlen;
- unsigned char buf[64];
-};
-#endif
-
-#ifdef MD5
-struct md5_state {
- ulong64 length;
- ulong32 state[4], curlen;
- unsigned char buf[64];
-};
-#endif
-
-#ifdef MD4
-struct md4_state {
- ulong64 length;
- ulong32 state[4], curlen;
- unsigned char buf[64];
-};
-#endif
-
-#ifdef TIGER
-struct tiger_state {
- ulong64 state[3], length;
- unsigned long curlen;
- unsigned char buf[64];
-};
-#endif
-
-#ifdef MD2
-struct md2_state {
- unsigned char chksum[16], X[48], buf[16];
- unsigned long curlen;
-};
-#endif
-
-#ifdef RIPEMD128
-struct rmd128_state {
- ulong64 length;
- unsigned char buf[64];
- ulong32 curlen, state[4];
-};
-#endif
-
-#ifdef RIPEMD160
-struct rmd160_state {
- ulong64 length;
- unsigned char buf[64];
- ulong32 curlen, state[5];
-};
-#endif
-
-#ifdef WHIRLPOOL
-struct whirlpool_state {
- ulong64 length, state[8];
- unsigned char buf[64];
- ulong32 curlen;
-};
-#endif
-
-#ifdef CHC_HASH
-struct chc_state {
- ulong64 length;
- unsigned char state[MAXBLOCKSIZE], buf[MAXBLOCKSIZE];
- ulong32 curlen;
-};
-#endif
-
-typedef union Hash_state {
-#ifdef CHC_HASH
- struct chc_state chc;
-#endif
-#ifdef WHIRLPOOL
- struct whirlpool_state whirlpool;
-#endif
-#ifdef SHA512
- struct sha512_state sha512;
-#endif
-#ifdef SHA256
- struct sha256_state sha256;
-#endif
-#ifdef SHA1
- struct sha1_state sha1;
-#endif
-#ifdef MD5
- struct md5_state md5;
-#endif
-#ifdef MD4
- struct md4_state md4;
-#endif
-#ifdef MD2
- struct md2_state md2;
-#endif
-#ifdef TIGER
- struct tiger_state tiger;
-#endif
-#ifdef RIPEMD128
- struct rmd128_state rmd128;
-#endif
-#ifdef RIPEMD160
- struct rmd160_state rmd160;
-#endif
-} hash_state;
-
-extern struct _hash_descriptor {
- char *name;
- unsigned char ID;
- unsigned long hashsize; /* digest output size in bytes */
- unsigned long blocksize; /* the block size the hash uses */
- unsigned char DER[64]; /* DER encoded identifier */
- unsigned long DERlen; /* length of DER encoding */
- int (*init)(hash_state *);
- int (*process)(hash_state *, const unsigned char *, unsigned long);
- int (*done)(hash_state *, unsigned char *);
- int (*test)(void);
-} hash_descriptor[];
-
-#ifdef CHC_HASH
- int chc_register(int cipher);
- int chc_init(hash_state * md);
- int chc_process(hash_state * md, const unsigned char *buf, unsigned long len);
- int chc_done(hash_state * md, unsigned char *hash);
- int chc_test(void);
- extern const struct _hash_descriptor chc_desc;
-#endif
-
-#ifdef WHIRLPOOL
- int whirlpool_init(hash_state * md);
- int whirlpool_process(hash_state * md, const unsigned char *buf, unsigned long len);
- int whirlpool_done(hash_state * md, unsigned char *hash);
- int whirlpool_test(void);
- extern const struct _hash_descriptor whirlpool_desc;
-#endif
-
-#ifdef SHA512
- int sha512_init(hash_state * md);
- int sha512_process(hash_state * md, const unsigned char *buf, unsigned long len);
- int sha512_done(hash_state * md, unsigned char *hash);
- int sha512_test(void);
- extern const struct _hash_descriptor sha512_desc;
-#endif
-
-#ifdef SHA384
-#ifndef SHA512
- #error SHA512 is required for SHA384
-#endif
- int sha384_init(hash_state * md);
-#define sha384_process sha512_process
- int sha384_done(hash_state * md, unsigned char *hash);
- int sha384_test(void);
- extern const struct _hash_descriptor sha384_desc;
-#endif
-
-#ifdef SHA256
- int sha256_init(hash_state * md);
- int sha256_process(hash_state * md, const unsigned char *buf, unsigned long len);
- int sha256_done(hash_state * md, unsigned char *hash);
- int sha256_test(void);
- extern const struct _hash_descriptor sha256_desc;
-
-#ifdef SHA224
-#ifndef SHA256
- #error SHA256 is required for SHA224
-#endif
- int sha224_init(hash_state * md);
-#define sha224_process sha256_process
- int sha224_done(hash_state * md, unsigned char *hash);
- int sha224_test(void);
- extern const struct _hash_descriptor sha224_desc;
-#endif
-#endif
-
-#ifdef SHA1
- int sha1_init(hash_state * md);
- int sha1_process(hash_state * md, const unsigned char *buf, unsigned long len);
- int sha1_done(hash_state * md, unsigned char *hash);
- int sha1_test(void);
- extern const struct _hash_descriptor sha1_desc;
-#endif
-
-#ifdef MD5
- int md5_init(hash_state * md);
- int md5_process(hash_state * md, const unsigned char *buf, unsigned long len);
- int md5_done(hash_state * md, unsigned char *hash);
- int md5_test(void);
- extern const struct _hash_descriptor md5_desc;
-#endif
-
-#ifdef MD4
- int md4_init(hash_state * md);
- int md4_process(hash_state * md, const unsigned char *buf, unsigned long len);
- int md4_done(hash_state * md, unsigned char *hash);
- int md4_test(void);
- extern const struct _hash_descriptor md4_desc;
-#endif
-
-#ifdef MD2
- int md2_init(hash_state * md);
- int md2_process(hash_state * md, const unsigned char *buf, unsigned long len);
- int md2_done(hash_state * md, unsigned char *hash);
- int md2_test(void);
- extern const struct _hash_descriptor md2_desc;
-#endif
-
-#ifdef TIGER
- int tiger_init(hash_state * md);
- int tiger_process(hash_state * md, const unsigned char *buf, unsigned long len);
- int tiger_done(hash_state * md, unsigned char *hash);
- int tiger_test(void);
- extern const struct _hash_descriptor tiger_desc;
-#endif
-
-#ifdef RIPEMD128
- int rmd128_init(hash_state * md);
- int rmd128_process(hash_state * md, const unsigned char *buf, unsigned long len);
- int rmd128_done(hash_state * md, unsigned char *hash);
- int rmd128_test(void);
- extern const struct _hash_descriptor rmd128_desc;
-#endif
-
-#ifdef RIPEMD160
- int rmd160_init(hash_state * md);
- int rmd160_process(hash_state * md, const unsigned char *buf, unsigned long len);
- int rmd160_done(hash_state * md, unsigned char *hash);
- int rmd160_test(void);
- extern const struct _hash_descriptor rmd160_desc;
-#endif
-
- int find_hash(const char *name);
- int find_hash_id(unsigned char ID);
- int find_hash_any(const char *name, int digestlen);
- int register_hash(const struct _hash_descriptor *hash);
- int unregister_hash(const struct _hash_descriptor *hash);
- int hash_is_valid(int idx);
-
- int hash_memory(int hash, const unsigned char *data, unsigned long len, unsigned char *dst, unsigned long *outlen);
- int hash_filehandle(int hash, FILE *in, unsigned char *dst, unsigned long *outlen);
- int hash_file(int hash, const char *fname, unsigned char *dst, unsigned long *outlen);
-
-/* a simple macro for making hash "process" functions */
-#define HASH_PROCESS(func_name, compress_name, state_var, block_size) \
-int func_name (hash_state * md, const unsigned char *buf, unsigned long len) \
-{ \
- unsigned long n; \
- int err; \
- _ARGCHK(md != NULL); \
- _ARGCHK(buf != NULL); \
- if (md-> state_var .curlen > sizeof(md-> state_var .buf)) { \
- return CRYPT_INVALID_ARG; \
- } \
- while (len > 0) { \
- if (md-> state_var .curlen == 0 && len >= block_size) { \
- if ((err = compress_name (md, (unsigned char *)buf)) != CRYPT_OK) { \
- return err; \
- } \
- md-> state_var .length += block_size * 8; \
- buf += block_size; \
- len -= block_size; \
- } else { \
- n = MIN(len, (block_size - md-> state_var .curlen)); \
- memcpy(md-> state_var .buf + md-> state_var.curlen, buf, (size_t)n); \
- md-> state_var .curlen += n; \
- buf += n; \
- len -= n; \
- if (md-> state_var .curlen == block_size) { \
- if ((err = compress_name (md, md-> state_var .buf)) != CRYPT_OK) {\
- return err; \
- } \
- md-> state_var .length += 8*block_size; \
- md-> state_var .curlen = 0; \
- } \
- } \
- } \
- return CRYPT_OK; \
-}
-
-#ifdef HMAC
-typedef struct Hmac_state {
- hash_state md;
- int hash;
- hash_state hashstate;
- unsigned char *key;
-} hmac_state;
-
- int hmac_init(hmac_state *hmac, int hash, const unsigned char *key, unsigned long keylen);
- int hmac_process(hmac_state *hmac, const unsigned char *buf, unsigned long len);
- int hmac_done(hmac_state *hmac, unsigned char *hashOut, unsigned long *outlen);
- int hmac_test(void);
- int hmac_memory(int hash, const unsigned char *key, unsigned long keylen,
- const unsigned char *data, unsigned long len,
- unsigned char *dst, unsigned long *dstlen);
- int hmac_file(int hash, const char *fname, const unsigned char *key,
- unsigned long keylen,
- unsigned char *dst, unsigned long *dstlen);
-#endif
-
-#ifdef OMAC
-
-typedef struct {
- int cipher_idx,
- buflen,
- blklen;
- unsigned char block[MAXBLOCKSIZE],
- prev[MAXBLOCKSIZE],
- Lu[2][MAXBLOCKSIZE];
- symmetric_key key;
-} omac_state;
-
- int omac_init(omac_state *omac, int cipher, const unsigned char *key, unsigned long keylen);
- int omac_process(omac_state *state, const unsigned char *buf, unsigned long len);
- int omac_done(omac_state *state, unsigned char *out, unsigned long *outlen);
- int omac_memory(int cipher, const unsigned char *key, unsigned long keylen,
- const unsigned char *msg, unsigned long msglen,
- unsigned char *out, unsigned long *outlen);
- int omac_file(int cipher, const unsigned char *key, unsigned long keylen,
- const char *filename, unsigned char *out, unsigned long *outlen);
- int omac_test(void);
-#endif /* OMAC */
-
-#ifdef PMAC
-
-typedef struct {
- unsigned char Ls[32][MAXBLOCKSIZE], /* L shifted by i bits to the left */
- Li[MAXBLOCKSIZE], /* value of Li [current value, we calc from previous recall] */
- Lr[MAXBLOCKSIZE], /* L * x^-1 */
- block[MAXBLOCKSIZE], /* currently accumulated block */
- checksum[MAXBLOCKSIZE]; /* current checksum */
-
- symmetric_key key; /* scheduled key for cipher */
- unsigned long block_index; /* index # for current block */
- int cipher_idx, /* cipher idx */
- block_len, /* length of block */
- buflen; /* number of bytes in the buffer */
-} pmac_state;
-
- int pmac_init(pmac_state *pmac, int cipher, const unsigned char *key, unsigned long keylen);
- int pmac_process(pmac_state *state, const unsigned char *buf, unsigned long len);
- int pmac_done(pmac_state *state, unsigned char *out, unsigned long *outlen);
-
- int pmac_memory(int cipher, const unsigned char *key, unsigned long keylen,
- const unsigned char *msg, unsigned long msglen,
- unsigned char *out, unsigned long *outlen);
-
- int pmac_file(int cipher, const unsigned char *key, unsigned long keylen,
- const char *filename, unsigned char *out, unsigned long *outlen);
-
- int pmac_test(void);
-
-/* internal functions */
- int pmac_ntz(unsigned long x);
- void pmac_shift_xor(pmac_state *pmac);
-
-#endif /* PMAC */
-
-#ifdef EAX_MODE
-
-#if !(defined(OMAC) && defined(CTR))
- #error EAX_MODE requires OMAC and CTR
-#endif
-
-typedef struct {
- unsigned char N[MAXBLOCKSIZE];
- symmetric_CTR ctr;
- omac_state headeromac, ctomac;
-} eax_state;
-
- int eax_init(eax_state *eax, int cipher, const unsigned char *key, unsigned long keylen,
- const unsigned char *nonce, unsigned long noncelen,
- const unsigned char *header, unsigned long headerlen);
-
- int eax_encrypt(eax_state *eax, const unsigned char *pt, unsigned char *ct, unsigned long length);
- int eax_decrypt(eax_state *eax, const unsigned char *ct, unsigned char *pt, unsigned long length);
- int eax_addheader(eax_state *eax, const unsigned char *header, unsigned long length);
- int eax_done(eax_state *eax, unsigned char *tag, unsigned long *taglen);
-
- int eax_encrypt_authenticate_memory(int cipher,
- const unsigned char *key, unsigned long keylen,
- const unsigned char *nonce, unsigned long noncelen,
- const unsigned char *header, unsigned long headerlen,
- const unsigned char *pt, unsigned long ptlen,
- unsigned char *ct,
- unsigned char *tag, unsigned long *taglen);
-
- int eax_decrypt_verify_memory(int cipher,
- const unsigned char *key, unsigned long keylen,
- const unsigned char *nonce, unsigned long noncelen,
- const unsigned char *header, unsigned long headerlen,
- const unsigned char *ct, unsigned long ctlen,
- unsigned char *pt,
- unsigned char *tag, unsigned long taglen,
- int *res);
-
- int eax_test(void);
-#endif /* EAX MODE */
-
-#ifdef OCB_MODE
-typedef struct {
- unsigned char L[MAXBLOCKSIZE], /* L value */
- Ls[32][MAXBLOCKSIZE], /* L shifted by i bits to the left */
- Li[MAXBLOCKSIZE], /* value of Li [current value, we calc from previous recall] */
- Lr[MAXBLOCKSIZE], /* L * x^-1 */
- R[MAXBLOCKSIZE], /* R value */
- checksum[MAXBLOCKSIZE]; /* current checksum */
-
- symmetric_key key; /* scheduled key for cipher */
- unsigned long block_index; /* index # for current block */
- int cipher, /* cipher idx */
- block_len; /* length of block */
-} ocb_state;
-
- int ocb_init(ocb_state *ocb, int cipher,
- const unsigned char *key, unsigned long keylen, const unsigned char *nonce);
-
- int ocb_encrypt(ocb_state *ocb, const unsigned char *pt, unsigned char *ct);
- int ocb_decrypt(ocb_state *ocb, const unsigned char *ct, unsigned char *pt);
-
- int ocb_done_encrypt(ocb_state *ocb,
- const unsigned char *pt, unsigned long ptlen,
- unsigned char *ct,
- unsigned char *tag, unsigned long *taglen);
-
- int ocb_done_decrypt(ocb_state *ocb,
- const unsigned char *ct, unsigned long ctlen,
- unsigned char *pt,
- const unsigned char *tag, unsigned long taglen, int *res);
-
- int ocb_encrypt_authenticate_memory(int cipher,
- const unsigned char *key, unsigned long keylen,
- const unsigned char *nonce,
- const unsigned char *pt, unsigned long ptlen,
- unsigned char *ct,
- unsigned char *tag, unsigned long *taglen);
-
- int ocb_decrypt_verify_memory(int cipher,
- const unsigned char *key, unsigned long keylen,
- const unsigned char *nonce,
- const unsigned char *ct, unsigned long ctlen,
- unsigned char *pt,
- const unsigned char *tag, unsigned long taglen,
- int *res);
-
- int ocb_test(void);
-
-/* internal functions */
- void ocb_shift_xor(ocb_state *ocb, unsigned char *Z);
- int ocb_ntz(unsigned long x);
- int __ocb_done(ocb_state *ocb, const unsigned char *pt, unsigned long ptlen,
- unsigned char *ct, unsigned char *tag, unsigned long *taglen, int mode);
-
-#endif /* OCB_MODE */
-
-
diff --git a/mycrypt_misc.h b/mycrypt_misc.h
deleted file mode 100644
index b9f9dbd8..00000000
--- a/mycrypt_misc.h
+++ /dev/null
@@ -1,17 +0,0 @@
-/* ---- BASE64 Routines ---- */
-#ifdef BASE64
- int base64_encode(const unsigned char *in, unsigned long len,
- unsigned char *out, unsigned long *outlen);
-
- int base64_decode(const unsigned char *in, unsigned long len,
- unsigned char *out, unsigned long *outlen);
-#endif
-
-/* ---- MEM routines ---- */
- void zeromem(void *dst, size_t len);
- void burn_stack(unsigned long len);
-
- const char *error_to_string(int err);
- int mpi_to_ltc_error(int err);
-
- extern const char *crypt_build_settings;
diff --git a/mycrypt_prng.h b/mycrypt_prng.h
deleted file mode 100644
index e7068498..00000000
--- a/mycrypt_prng.h
+++ /dev/null
@@ -1,141 +0,0 @@
-/* ---- PRNG Stuff ---- */
-struct yarrow_prng {
- int cipher, hash;
- unsigned char pool[MAXBLOCKSIZE];
- symmetric_CTR ctr;
-};
-
-struct rc4_prng {
- int x, y;
- unsigned char buf[256];
-};
-
-struct fortuna_prng {
- hash_state pool[FORTUNA_POOLS]; /* the pools */
-
- symmetric_key skey;
-
- unsigned char K[32], /* the current key */
- IV[16]; /* IV for CTR mode */
-
- unsigned long pool_idx, /* current pool we will add to */
- pool0_len, /* length of 0'th pool */
- wd;
-
- ulong64 reset_cnt; /* number of times we have reset */
-};
-
-struct sober128_prng {
- ulong32 R[17], /* Working storage for the shift register */
- initR[17], /* saved register contents */
- konst, /* key dependent constant */
- sbuf; /* partial word encryption buffer */
-
- int nbuf, /* number of part-word stream bits buffered */
- flag, /* first add_entropy call or not? */
- set; /* did we call add_entropy to set key? */
-
-};
-
-typedef union Prng_state {
-#ifdef YARROW
- struct yarrow_prng yarrow;
-#endif
-#ifdef RC4
- struct rc4_prng rc4;
-#endif
-#ifdef FORTUNA
- struct fortuna_prng fortuna;
-#endif
-#ifdef SOBER128
- struct sober128_prng sober128;
-#endif
-} prng_state;
-
-extern struct _prng_descriptor {
- char *name;
- int export_size; /* size in bytes of exported state */
- int (*start)(prng_state *);
- int (*add_entropy)(const unsigned char *, unsigned long, prng_state *);
- int (*ready)(prng_state *);
- unsigned long (*read)(unsigned char *, unsigned long, prng_state *);
- int (*done)(prng_state *);
- int (*pexport)(unsigned char *, unsigned long *, prng_state *);
- int (*pimport)(const unsigned char *, unsigned long, prng_state *);
- int (*test)(void);
-} prng_descriptor[];
-
-#ifdef YARROW
- int yarrow_start(prng_state *prng);
- int yarrow_add_entropy(const unsigned char *buf, unsigned long len, prng_state *prng);
- int yarrow_ready(prng_state *prng);
- unsigned long yarrow_read(unsigned char *buf, unsigned long len, prng_state *prng);
- int yarrow_done(prng_state *prng);
- int yarrow_export(unsigned char *out, unsigned long *outlen, prng_state *prng);
- int yarrow_import(const unsigned char *in, unsigned long inlen, prng_state *prng);
- int yarrow_test(void);
- extern const struct _prng_descriptor yarrow_desc;
-#endif
-
-#ifdef FORTUNA
- int fortuna_start(prng_state *prng);
- int fortuna_add_entropy(const unsigned char *buf, unsigned long len, prng_state *prng);
- int fortuna_ready(prng_state *prng);
- unsigned long fortuna_read(unsigned char *buf, unsigned long len, prng_state *prng);
- int fortuna_done(prng_state *prng);
- int fortuna_export(unsigned char *out, unsigned long *outlen, prng_state *prng);
- int fortuna_import(const unsigned char *in, unsigned long inlen, prng_state *prng);
- int fortuna_test(void);
- extern const struct _prng_descriptor fortuna_desc;
-#endif
-
-#ifdef RC4
- int rc4_start(prng_state *prng);
- int rc4_add_entropy(const unsigned char *buf, unsigned long len, prng_state *prng);
- int rc4_ready(prng_state *prng);
- unsigned long rc4_read(unsigned char *buf, unsigned long len, prng_state *prng);
- int rc4_done(prng_state *prng);
- int rc4_export(unsigned char *out, unsigned long *outlen, prng_state *prng);
- int rc4_import(const unsigned char *in, unsigned long inlen, prng_state *prng);
- int rc4_test(void);
- extern const struct _prng_descriptor rc4_desc;
-#endif
-
-#ifdef SPRNG
- int sprng_start(prng_state *prng);
- int sprng_add_entropy(const unsigned char *buf, unsigned long len, prng_state *prng);
- int sprng_ready(prng_state *prng);
- unsigned long sprng_read(unsigned char *buf, unsigned long len, prng_state *prng);
- int sprng_done(prng_state *prng);
- int sprng_export(unsigned char *out, unsigned long *outlen, prng_state *prng);
- int sprng_import(const unsigned char *in, unsigned long inlen, prng_state *prng);
- int sprng_test(void);
- extern const struct _prng_descriptor sprng_desc;
-#endif
-
-#ifdef SOBER128
- int sober128_start(prng_state *prng);
- int sober128_add_entropy(const unsigned char *buf, unsigned long len, prng_state *prng);
- int sober128_ready(prng_state *prng);
- unsigned long sober128_read(unsigned char *buf, unsigned long len, prng_state *prng);
- int sober128_done(prng_state *prng);
- int sober128_export(unsigned char *out, unsigned long *outlen, prng_state *prng);
- int sober128_import(const unsigned char *in, unsigned long inlen, prng_state *prng);
- int sober128_test(void);
- extern const struct _prng_descriptor sober128_desc;
-#endif
-
- int find_prng(const char *name);
- int register_prng(const struct _prng_descriptor *prng);
- int unregister_prng(const struct _prng_descriptor *prng);
- int prng_is_valid(int idx);
-
-/* Slow RNG you **might** be able to use to seed a PRNG with. Be careful as this
- * might not work on all platforms as planned
- */
-unsigned long rng_get_bytes(unsigned char *buf,
- unsigned long len,
- void (*callback)(void));
-
-int rng_make_prng(int bits, int wprng, prng_state *prng, void (*callback)(void));
-
diff --git a/notes/ccm_tv.txt b/notes/ccm_tv.txt
new file mode 100644
index 00000000..3ff4b77a
--- /dev/null
+++ b/notes/ccm_tv.txt
@@ -0,0 +1,214 @@
+CCM Test Vectors. Uses the 00010203...NN-1 pattern for nonce/header/plaintext/key. The outputs
+are of the form ciphertext,tag for a given NN. The key for step N>1 is the tag of the previous
+step repeated sufficiently. The nonce is fixed throughout at 13 bytes 000102...
+
+CCM-aes (16 byte key)
+ 0: , 54C92FE45510D6B3B0D46EAC2FEE8E63
+ 1: DA, 7A8984228DCF944903936CA9D7709ACF
+ 2: B95E, 1056DE0CBBEEA760ED2053FFEB554EA6
+ 3: 58FF3B, A42DE1A812D29BBC6C1C5AC808565437
+ 4: 9D6E6FB6, 5E8E0422792999381ED669CE17601D34
+ 5: 40D49E851D, B076B4ED79BF0155B39A743550593944
+ 6: 015356B9A6E1, 8D62CEFC451CAE4A21C1C579C6CAA128
+ 7: A2CF0A77AE0DE2, 97B9D201740FA59E863513EDACC59FFB
+ 8: A44C68E52F95B48B, A461B79D4D9B8ADF6C6618E6ECDC059A
+ 9: F56B8AD68AA31F22B9, C5C7D2E6FE34D94CE72B86DA55679080
+ 10: 5C17EEBF4E348CBE3278, 29FAE7B470CB652C501343FE23B25894
+ 11: 1EE960BFAE360302D834E3, 8F8F475EB9BAB29CE14A9CF42C30B148
+ 12: EFF6BA1F2B1389237C6C045E, C895302DD8E75096951EF5CA63BFDD67
+ 13: 5A1179A4047334CCD9162F36EB, 110987D37F45422625DEA402BD7580EB
+ 14: F26E2C27E7D287B182FA42879978, 530FDE90C13A01EBCA86449073A3B035
+ 15: 77BFE79B4BC87116EC5232606E890F, 280994EB0E16C7CF10F31BB60DBF52C8
+ 16: 9926A4CE1AD70B89CC0050A58B958742, A635B4272EBFA1F83DAE270452D877E7
+ 17: BAAF99CAE4753E3304D6F8F9C0CD366C68, A6F606AACD0B87923B43C3EB61AC3965
+ 18: F72453C6765352A31494FA02B388E407B1FB, 0A446D28B7C5845C3621B4D3A0FA98DB
+ 19: A7372589A86B2E137F124A96618095EB5E1435, 3C59A6A858947FEBFD32441E37309F1A
+ 20: 5683E13A4E82A1AB8B3DC2051B6DBF2E1F2BB417, 459D1B0D2CF2C30B5ED5C237D07DFC19
+ 21: 33594C4B84536C23DA5AB2117E9267258CCE5DEC3B, 6E4BB70A72343E142AC4E31CE0FE6A77
+ 22: 332EDC9A3BDB90DBCCF317AC55BE5855CA9BCA2A73C4, 9FB310E5FFF5C754EE1E5FFF865F1656
+ 23: 734618677055469335FFD574B008F2C68B78633F79010E, FAD31386E42BB4EA76A643A9004A8CB4
+ 24: BA6F6ABA2AF35895F7F966D71F4E91A0BDD1DD551826F861, 25A3EC1C91C26283BAA5975390285AB2
+ 25: FF519213E858E36AC8D92450F81CA46C8CA8AB129A997EBB36, 0D4AB2B7A5EB02242C01A81CEBF5D84E
+ 26: B1F80058C3B4316EA86E9A898CD0B9C0366DFCB2AEC0799312D5, 0F4FF2759EDDF6349F4E23F284FAAD2E
+ 27: 00BDC15012F8183112D5C3A135DC60DC9C764A04BD39A8E041F1D9, 0C68BC9E6A6BF1B01743F3183C9B7C80
+ 28: 3022FD12969D925365C553D98D59E5D1EC494540909D1FA794F41E18, 05E61844943E78DB9BD417DDDE9C98B2
+ 29: 4F4A4554BFED6BAA09E3D8843C4EA3807B8762799C1D21289A46575389, 3A59A6DC9230020FE061466A92BBCAFD
+ 30: 6AE735EB15D9B39C8AD0E54F45307AAD97DB9F8A2A66BDC9BABCCFBD54A3, 0BDB365E493A9E160EEFD7DE24101870
+ 31: 4AF19F00EAE55FED2304B94FBCA29383042F2BE711041323C1D9F14BA63383, 94561581E496553D068052BA698683D2
+ 32: C2438BC46A92A465E0DB41E638CC6C8E0029C4DA842CA4140D73F90985EABA9C, 0F5A69F52AA8D8508D09E642511E54E5
+
+CCM-rc6 (16 byte key)
+ 0: , D01FACF2BB577BFA6194800E53FB4A00
+ 1: 65, 92E48F7300FA2697E9E0FF80DD187237
+ 2: AF5C, 332863BC515649D5BCAB6A2FE5F5250D
+ 3: E7C89D, 49A641F027C65A15100009D99E79CF3F
+ 4: ACB36D46, 53DE328A8B4B14CAD363BED53DACE8A1
+ 5: C3ADAE6CCF, F713F5079BD77046F95D8685CDF522DC
+ 6: 5A8CABC912DA, FB97B059D2BE1273497FA8D2739A1505
+ 7: 27F101DD6D0894, 266ACEF34476A0E64410D209219335D0
+ 8: 66164DA09BE2F46D, EFC64C01890A5B562AF39ADFC48E1CA9
+ 9: 1B0018895394753995, FA894E1C882D96E35A4C238708931F3D
+ 10: D346062826187BAEFC3B, A036AE1D3C02E2AD23541DE095AC7B84
+ 11: EFB375BA1138339FA1B504, CDD4232FF4664D59D5AC6BE32CBE1B35
+ 12: AFCF494078D7D7E6D9803FD5, 07E06ED923F76150BE82C1DDCB62C4DD
+ 13: 75DF2EC91379408DA426A444E4, 440ACDF2A6567FA3A5009DDFE502A1A1
+ 14: 3B36B62B01E324E702694305DD29, 4093598607DCD9993845D1837D211FE2
+ 15: 7DF6595C9711B164C99CB246B4D57E, F364993B2C187058F466B62D11E0F94D
+ 16: D317EE9EE1746D1B89A4CC52D88F0819, 41856B0B229D38344FA718E04CA57A8B
+ 17: 85252277A97CA7553007995BD5A0DCD372, BDEEAB636BD1ACC8D5A23F658150FA30
+ 18: 36FF305AC6EF662C155A1C15A6C195D3EC88, 9AC48EF07A510E308E06E79C0C80C3A0
+ 19: 51645A614313E978F6DCE7BBDDEDC33E3284AB, E9F7723E763AD50161C0671C4034FD0A
+ 20: 3CB9E6D0730FE05F903D338708AD8E34BFBB3285, 8A12185DAD518049F0FAC945A8FB305A
+ 21: 276E37D246C40ABF32DC83007B95390EE801CDA6E3, 73FA1D310D031E0A0A3A1421661B4697
+ 22: 4444BB070EDFBD1AC59D0BF70D66F48F0830069F3562, 9DCB6A99CBCCE3C8AEF29F06AF5057FB
+ 23: D16BA084CF82EDD2E43349311140BF3A2E37DE40544BF3, CB93C5AD60C700D4EA653136101AACCC
+ 24: 3FBAEBB36E2B74014043BA7D72F899B0D8DED883F592D778, 54DEA31D7EEA863A06A16D6C9B25DC13
+ 25: 3614B5428B790793F31E23670A38A070B65DB8E51C61FEA9C9, A91B750FD7ABFF18376C982DFA0C8872
+ 26: AC15FD90A4C254BA1406BE7DBA5694BB2625F634C69F45CCCD04, E6F97BCC8526BE3C04BA139EB50E65DF
+ 27: B506E83557E48553BD8557411D2C17D64005E734BA5A5FF1CF98B1, 6FA001758A19F783A71C97AF1AA61F94
+ 28: F07721663400838947EA1B9404D9683556F2D911429A9F59E3F5AD31, 376A1165A30C919E96C3706A4AB5DB37
+ 29: 98B5EB8FE0005E515A585D8F44D838FA590054EA5201CD444366B6F71E, D8C58448F601F2C05F24ED2CC349C78B
+ 30: E36E2FC225767CC1E2C388BEBC2C81C340FEF5B504575D5FA49682E1C214, CFED56F38CA4F84E6E1E16CEF50A6154
+ 31: 7A9FDD8E481B822B3D282AAF726944101ED61DAE73782DE055D7D305E36B27, 328B10841E977041CBD13C39CD70F03F
+ 32: 48AE8B5FA027930A7BCEC27468D795D0D8E6099C5F0558361B3AD20C1ECFF89F, B180AA9353E9EB6A22710A4DE872FACB
+
+CCM-safer+ (16 byte key)
+ 0: , E106F41D61402E532662213EBA471BFF
+ 1: 05, 1749600C7045647DCB3293C0724E7A21
+ 2: 2355, 80DD597665723F4AEFFF760C5C6C5EE2
+ 3: 5F4CD8, 59AE54E63A8CF4DBAD050B42CE922013
+ 4: 75F63A43, C31B6BD3125C036C99507DDEE0197201
+ 5: 51D4D87B8D, 0F3872088CDEB0E958C35F343677AC24
+ 6: 8CF6D81A274C, C8E688954E72A052B5F8D1CA46FB44B0
+ 7: 5EB8283B299AB1, 5977CB96C8D439DE3A86AE0452A2EE34
+ 8: 829B1A4EA8643EAA, 1E892D3DFB73A469035CA81DD7F937D1
+ 9: 0FEEF9504CF0F4E282, EDCBED7C61E8E2D24392B4145218F0AB
+ 10: DEF7679D3073D461A94C, D7ABAE561901CBB30FD7D9467C088B3B
+ 11: 625FD679C7354A74D62893, 450E3954857640DDF4C7A95A6E202A1E
+ 12: 3C9E76E4E2D4D95FEABD5C90, CD4467F695B7ED8973AEED5A822B347A
+ 13: B1B6294ECEAE6AEE4853731CA9, 6042302DAE598822BE8554BE038119CF
+ 14: 204BF480582D4BA408BAD23CEB52, 4D6B87334E1BFB9BA2D42B89B24165B2
+ 15: 277591770E3E2DB97A3011D9616991, 75D0A4B9937748EAE7794056F7A8A7FE
+ 16: 5669F75D0C908BFF7B82095231B86DAA, 3E816776A73FB89276534A3646C0F8FB
+ 17: 37E621EF5A043A83FC98A65329891BC031, 159A823EA61B3A47B42EFCF12F304725
+ 18: 18AC6ECF3F478A0797BF813C871235A9D309, 9B415B1B3A933B22C9027E2D72764956
+ 19: 671484C7587DAAB885C7F2FAF030081B452CC6, 574A63D113A5ECEC877D5A368A3160AA
+ 20: D7AB0F7D46B7ED976C8F6E7D0C6AABE3CAAA5A6E, 266C7A025C4EDF657DD42EB82BB6616A
+ 21: D60E4CFC6500E237276A69F35AE4BBAE17371392EF, 6ED2A1673F8B4DB795547D9D93D76D8B
+ 22: FAC6E21979D8D9896C790CB883C29F84D6820AE4FD4B, 1C7B6D73200E3C2DC5C701152F38EE8E
+ 23: 39240DC2B544CA8BEBBB4EA499FD48A5EE707198AE8AC8, E7FFD169552665ADE7B9C0DFFDD04EBD
+ 24: 6BE2C24172CAA192D55CC3E640E34675DD7F441CE5DB0FC0, 760CA976355281F76E49A2856A4EC7A0
+ 25: 0E20427218D6447D6E23FA4832CB8D2A172B23FDC542B41524, 27D0F37E109252FF5E6F6F703CA784F5
+ 26: 0AF75BD89028A5691B8B7993B9CE4FD24334A312DE28212C8B2C, AFE4C6B193B0F1796FC9E6C23292C060
+ 27: 6830D8E2E6DEC1476796DA44C982D36409E268F966283A66E801ED, 9E2C92D5B30EB0943E17869ED4C789EC
+ 28: 75ED280BEECD7768F7E032071F0E06D9D6BF1C9FF8E5DEB536DCD4BA, BF0DD11D633DBA5DCD25F4172765570B
+ 29: DF1FAECC1DB24718236B18B90B354F405FD5DE1257EC43F811F4A43DCD, 48D182E572E794350BBDA91FD76B86BC
+ 30: 176681E38ACACCD3C625F554C1F7A2D7C2C474C9444EAC8929B8C36EC05E, 080E109FFC5D247F1007217DD642BBA3
+ 31: 8A8172C21D88A1FDD43089C545C308507617F7BDB02C47CF2719F1484407E2, 1A0D10B0AF5BE21BF19D570D3FDA5BCE
+ 32: 0A93CAE2B95517773A4009FD3438231A207B9D46AABAE83FC4E1057EA4E2D6B4, 717AEF2F55DC8669F7E2D0298F8A7BE9
+
+CCM-twofish (16 byte key)
+ 0: , 33B3DF1B59C84DD3C15E4FEB66173303
+ 1: BF, 92DCEBF1C11DD0B028DEC944A555E4C6
+ 2: 8A4F, A859C7F76291326D821BB3C7519657C0
+ 3: BAE755, 14D7C2EFBCA1063460FEFCEBAE3AD79A
+ 4: 25695BC6, 9358BC434B14B59ED17F9C0D3F51DCB1
+ 5: 1D9FC70ECE, 2A86578FA3A8C702E2E6723DB9A9893F
+ 6: AC39F1DF3661, 3F9C71EE0506FD2BAFFEE7200D22CD92
+ 7: D330A915EED9D0, 22DC25EDF5ACDEF8358BE2A3082112BC
+ 8: EF913ADAE6380507, E87D72BB6395EEEF2AD4F546B4033DE8
+ 9: 5EC16994E762BCE467, D7700F7BF4FE026A2076F161C3383A0A
+ 10: 7EEB4910B7C2B540B490, 40C88A977E1DCDDABD749ABC9A0C60F8
+ 11: E5DD32FF54D39451CC2AF8, 541B1558B5AFF6E9EFBEE496D60AD65C
+ 12: 242C2900F859966B6627FF5C, 1CED148098350F3A5D1B5634180817A3
+ 13: EEF025B9E4EB867B127EBD19D4, AD0179A07AD1418C25F40E123C2BEF47
+ 14: C5E812B0AE37098686E2C4452C12, 02FC88AAA62E34742BB8577A651E922B
+ 15: 7BCAB32D1A871A62F9C781AFCAC60C, 2CD1C11EE197D9E130359F76E7F49251
+ 16: 1E82D8B8EED9A730D1670F0DCFF17B60, B7730261560EA6CF715FF7006D5FEFE2
+ 17: 0E1966992E360DC81312B28ECA6865B811, 10C40ACD169CB0F2A6FFC99F9A5516EA
+ 18: 5F5418C1322BF7EB828CF27C1F72086515BE, 90F8ED0447171A10476DED39F7518075
+ 19: 6C552506FA167FB8AA12E9F416930031487D4E, C992009F83F31A7BF922BFAE68C4134B
+ 20: 38429D966676406B17638DB7F9F7205250408BB2, 3385A50E9789D2C63835A80EFE9CFAE4
+ 21: 56EF426315EF96BE4C60B49F41C9BDDE2E0CDB3C22, 2D51D5B4F5B04BEF3BC1A7CF1AEA70E9
+ 22: 314B075C097EE531ECCE6AD7CEF22A72AAFCEFB02029, FB7A7D84D23FF524D060871D90FAC106
+ 23: 61CCCF7E2A9B3E46CD0A94D7F4A7617BB0DBA2D989907A, B3F4D46094732F3EDD81E0755F0C52EB
+ 24: 7A812A3BCED4E0A72FB81218BD5A4E33D69CA18834FFAE61, 487F80588B41F4E1198124708987667D
+ 25: DBFAB77EF07AA4C9ED2B05500BDFA00FE3F19F15F97A74880A, 84504D9EECBC6CE11B18BD105DE55E2C
+ 26: E676D4739B01B5101E36BF8D9F4FAE8F767C028E83A6D5B39664, 3141A05669807BCA30F0934F599FD077
+ 27: D8FEBD069D87C1EE504CB8F72ADFF2166B14BA40B17B4DAA439668, 1D99A301943041C2F7A71432DA736FE0
+ 28: D98E2A1CFFAB28341F92C41971A21AD0FDDE733EA25F2607967CD0C3, 42E05A53BF4F1A6C5B7F84742ECE031B
+ 29: 13FA412B484945C1FE8291A7EB8F8FB78D2DC2C72C5132386EA82BF4A6, A1A8E8B026DD116B0F9C73EB14C1C7CD
+ 30: 10ABD2DC25C8BA594FBFA9312E69C1A2DBF326475AF2080E55E3611FBC0E, 49DF8A5171DAC3FB684BA2CF7FBB3D3B
+ 31: F401D2123619B81F54F307B783362CC40FB4FB2433CF51F5543A147BCD1FE5, ACBB670CB3722059B4B9FBEE67703E98
+ 32: 839A9BFA1D3CA37924BC6648DED2291FC61736A3638906D9C5DA28A66AA684AC, CD07B83C8E0C3E6FB4115A149BDF6FDA
+
+CCM-noekeon (16 byte key)
+ 0: , FF73C6775C61DB36D9B5EEC812091FF7
+ 1: 5F, 7D2AEA62A5202E3C4FBE05F33EBE4CC5
+ 2: 0EA5, 312ED15FDDAB6EEEAC6AF9BE9CE698FA
+ 3: 968F95, FA1AD58B85B93B5A4B5096C881F773C3
+ 4: 9A8F4069, 8911063ADDF79E27D9DCEFF3F440E6D7
+ 5: A5C0376E27, 9553F44B0BA8039527F8E05CD70AD8B0
+ 6: 5B097736F3DA, 405B7EC685FC94903B36AC8E700558B8
+ 7: 616810AE303B2C, 64C95A2DF5263F7BE6D1F9F3CF88EADE
+ 8: C8D69A2E1170532C, 073A7E426266237FD73D8109F55AE5D3
+ 9: 3E42CDB7DA4A72F2E0, 48675EA4302CA6BFE5992DE96CE43BB3
+ 10: 88532CC1F3E321F66D64, 528B3516C6D9A4B5390DD32C2A2E6C19
+ 11: 9216A8FC9A961E7F602F7D, B03047186B783844F5B6757057576B38
+ 12: 89B0858D4FDE6795EDE19CCC, F4530A2DCA823307AEDE5AF34E5C4191
+ 13: A676E20BB0A5E84FD0B9149BF7, 11B823B315DA93B0E15780851526D4BD
+ 14: 903AD5C108C43A80436FE2117EF0, EB1C79C7DF20CE2967A99783EA8D6EF8
+ 15: 81774C36F46F67159B7FFC24C080D7, 2E9E4812D9A92977EC34922782B6420D
+ 16: 63FD1C3F692D64B2DA3982FCD474A5D4, 04171AE84857713A9BABBD4564875D33
+ 17: B1BF6AD99F83C9173C6C021ACA74C5431C, 38D17D4F6AA3C24B8F3B465EAACE0A1E
+ 18: 0948D1ED59F07DE44A96A76E05B0B6F7C309, 1848D886FCFF35E85B0DC3CBE5BEE7FA
+ 19: 3458E5911222F9C555A1054C7D9748876DA39A, 584AFAE72FB6065A74BE016CF39D2E86
+ 20: 641F3867185D0605E9D666AB605187E75A1299EF, 6F9332E6FB5EA0CE811E3345593CD163
+ 21: 0676622D07733EF31A765AAB1E713FCE329277FB16, 88547474050FFC986930CC04BA8A03F0
+ 22: 79861EC2FD2BCC5C12B69F30A1575FC66AC1405281BB, FC68EEAC8F39ED69D312AEABF8000084
+ 23: CB2731835A576F7F8F2C2786D786FB6186E2F85D89DA3B, 3ED9E95BC51CF6368E6EF63667B35BD8
+ 24: 3CB1C02FADB6DD5483BC5D3C03D944102CFCEDF82B913402, 1C3F60C989A6FBF41A7AF4F29115C334
+ 25: E69FAEA5E3D0B76EF9E70F99C5918D934D0E9836F248DB9EEE, 7F1916B2CF7C9A5E3F5581D365ADBD31
+ 26: 36779AD755A9DF2DC3C5824DC2F7DD4FFE038628A4E1A1C33AE7, 2BDED3703468D267F8AB7EC0AF8F1E65
+ 27: E9D325646A41EE5AA7DABCDE98DE83440A7DC02714BA0AEE017E22, 972F4D7832F3371C60DCD04A6DEDEA15
+ 28: 0FAAE3F6028A28A80BBFE71FA7AA9042E538B41A0D514D6EB4EE6029, F7B3925495E260249ACC6E1CBE956BC5
+ 29: A9CC39EFFEE354C0E0579256AA85CBAA7B10E670DD3828A7A05DA0F49D, 28D9D20187AFE70AD9DD16759F0EFEB5
+ 30: 032F4BBB4EBF2E65758C541FDAFF2107DDBED399739849F8EBB41AF9711F, A3436981ED637CE5EEE01B380C46ACAD
+ 31: 7B321ED831CE96A603668E3E74BBC7453749A03D04A1B38E95966E6CC488F0, 88D1DADF2C1EE0BA579D0A8A90C1E62A
+ 32: D862B0BD0E2178AE05AEFB14F34C791547C5956F1F3B5BD525926578DE383A94, BF32CFE059F27222DC55D3E7CE7C5F10
+
+CCM-anubis (16 byte key)
+ 0: , C85F41475E06F25682F855C3D45A6523
+ 1: 25, 437BD73ECB8CFFAD9B2876F08D4BDA36
+ 2: 5ADC, 5C762058A5EF71278B69F567F18CBE51
+ 3: 95E541, DF099E8218AEDE8087791B38298334E9
+ 4: 2DAA84E4, 7437094198E4AD2647C2618248769A26
+ 5: B9641C5855, 91B02EC44D22460BFF22BB40C799E20C
+ 6: 102012BCEFA5, E60488DA65D683182F0EFDF9DA52A78C
+ 7: 8F14972CA4F8EA, C26B51F20ACDEC7DCA911500CF1241ED
+ 8: ED2714B652972256, 8BA29459D5D370FC608EE362B55B7633
+ 9: BF58A269A4F59CE0A4, D69080820F836E5B5CA8F393E61ED009
+ 10: 44AF1F715ADAF26C6EF0, FEFBC7DB75ECDDBA4A13CBF9A57873D8
+ 11: 77CDE1B951F0803893642D, FBF8B80B061703504D8D3A7718366B6E
+ 12: DE599BAAC9D3EFD9FCD47E44, F636EC35D172D661F01746FF86688B95
+ 13: A792B8359050C4866572977415, AE67D4EED92E63A14003FBC936EEF43E
+ 14: 62D5A7A4DFB78A175831627987CB, 25F7B440DBE9902C28B28E50BF02C516
+ 15: B6F289459F924C76586F4EEA0C1CAA, 54266B4424C3AF6E81F6CC4F2437F54E
+ 16: 884B7DF3395F063DCA26BDF9F2FEF4EA, E3C2BFA1964EFDF78FDB9559C8031C50
+ 17: 774962377B8731F2F301B930487518801F, F35B54264711D843D23636BA6CFA3E4C
+ 18: E9C8D1164F2B196C7305406179B232E45F1F, 2A13E034A136EBC0ED3361737EAD214C
+ 19: D3DCD242C952C5589E00B65CD826CA87691B8F, 9D624D482042798DB896B55D801EAD98
+ 20: 57065B2655D4799C0478FE7E8463A2215E758875, C8FB052F14F9DF6731A9C8B566E71D53
+ 21: FF736FDBD23593D9BC9A0D8CA7D819F550EF969322, 5CC3023029790BFD43204B27D52D7D7E
+ 22: C562B7387B8F1D3DBA22DD1636C9C4AB443F2FF15F70, 195C928EAF88BB4ACBA8A01B4EBAEE6E
+ 23: D0AC6EA8A804DC261304D4821E6AD7FCC2F0DC1A299B9A, 34FE2034CCF09A98DD50581DA8BCBE39
+ 24: B65933A7D7C8EF19C1BDEAABE2B4CE5E821459D953565EF8, 42B20EF142EB228803D6AF47C6482BEB
+ 25: F1F4FCE842EFEF563F6F047956E6706DC9B178D00D82776D74, 3ECE3050D8C80319821D5F57A7CA7066
+ 26: 4A3F10F4E34210A5CA1B81AD4269CBC3FD68AC662BF0E9DC9935, 0BC0724AA9A194D8C75EE6FC8E7F28F1
+ 27: 077F3C055303FD669BC1A370B18AA7F31D3C8CBFF5A69381404FBB, 872C7946401BE70E677B79EA13FB0F58
+ 28: FD39D32B27FE5BB8E6512C642D490E0AD0866E386580AE115C85ED2B, EE81712EA57DD54DDEE98EAB3285E6EE
+ 29: B45ED179290A6064188AFF6B722B37F8C3E984EC37AB5F47B353229B12, 186B3AD0C9F60D57E84992CBB2B0F71B
+ 30: 83FF1FD179D518A414148C15BE566BE4CC3DBE9FF5319A651E862811F152, 4B2942C66565EB9139A83C2EFD549D55
+ 31: B8176469E6A0D5797ED6421A871FEECDE48ACF011E394981C43AC917E8FFD5, E9B01383DB1A32E6126BD802A6C6F47E
+ 32: AB6A0AA29B687D05735167D78DB697BA2478BD14ECD059AE9D1239E7F2AB48FD, A560A30FD87CF28BA66F5B2638567E4B
+
diff --git a/notes/cipher_tv.txt b/notes/cipher_tv.txt
index f144faea..c649d26a 100644
--- a/notes/cipher_tv.txt
+++ b/notes/cipher_tv.txt
@@ -1005,6 +1005,222 @@ Key Size: 32 bytes
49: F8B974A4BC134F39BE9B27BD8B2F1129
+Cipher: safer-k64
+Key Size: 8 bytes
+ 0: 533F0CD7CCC6DDF6
+ 1: C3CD66BB1E5E5C17
+ 2: 079DFD68F6AF9A79
+ 3: 84EB4922264A1204
+ 4: 31F3A7D739C7E42C
+ 5: 381F88FB46E1DCA2
+ 6: CAF4AC443E50EF47
+ 7: 2914E255DA9BDDBB
+ 8: A160A24120E4FECC
+ 9: F748C6009FFBC465
+10: 8B3CB5784846D2B0
+11: 4F98C1621473399B
+12: B486B0BC365ABEE9
+13: 314EAB2B4E9F7840
+14: 613FE3637968A8FE
+15: 28935352361E1239
+16: 0DCB090233B8EB3C
+17: CF0BC7F307586C8B
+18: 64DF354F96CB0781
+19: D2B73C6BAACA7FB1
+20: 638FCEEF49A29743
+21: 204C4E0E0C0A8B63
+22: F041EF6BE046D8AA
+23: 76954D822F5E2C32
+24: 6700C60971A73C9E
+25: 80019293AA929DF2
+26: 8EF4DE13F054ED98
+27: 41DDF9845ABA2B7A
+28: B91834079643850C
+29: 8F44EC823D5D70DC
+30: EC2FF8DE726C84CE
+31: 25DF59DC2EA22CB5
+32: FC1130B511794ABB
+33: ED3259359D2E68D4
+34: D7773C04804033F6
+35: C1A32C114589251C
+36: 51647E61EE32542E
+37: B95A8037457C8425
+38: 4F84B3D483F239EE
+39: 458401C3787BCA5E
+40: F59B5A93FD066F8A
+41: 1450E10189CC4000
+42: 0F758B71804B3AB3
+43: 51B744B271554626
+44: B55ADA1ED1B29F0D
+45: 585DF794461FEBDA
+46: 3790CC4DCA437505
+47: 7F7D46616FF05DFA
+48: 6AE981921DFCFB13
+49: FE89299D55465BC6
+
+
+Cipher: safer-sk64
+Key Size: 8 bytes
+ 0: 14A391FCE1DECD95
+ 1: 16A5418C990D77F4
+ 2: EE33161465F7E2DD
+ 3: AB85A34464D58EC4
+ 4: 3D247C84C1B98737
+ 5: D88D275545132F17
+ 6: 00B45A81780E3441
+ 7: 6830FAE6C4A6D0D3
+ 8: 93DF6918E1975723
+ 9: 15AB9036D02AA290
+10: 0933666F0BA4486E
+11: 93F42DEE726D949C
+12: 756E7BA3A6D4DE2E
+13: 4922DCE8EED38CFD
+14: 8EC07AFBD42DF21C
+15: E82BEBCFB1D7C6B4
+16: B3EDB4CB62B8A9BA
+17: 5521307CA52DD2F3
+18: 54B5D75512E1F8F3
+19: 1A736293F2D460A8
+20: 778C71384545F710
+21: CBC041D3BF742253
+22: 9C47FC0FDA1FE8D9
+23: B84E290D4BF6EE66
+24: FC3E514CE66BB9E3
+25: E8742C92E3640AA8
+26: 4DA275A571BDE1F0
+27: C5698E3F6AC5ED9D
+28: AC3E758DBC7425EA
+29: B1D316FC0C5A59FD
+30: 2861C78CA59069B9
+31: E742B9B6525201CF
+32: 2072746EDF9B32A6
+33: 41EF55A26D66FEBC
+34: EC57905E4EED5AC9
+35: 5854E6D1C2FB2B88
+36: 492D7E4A699EA6D6
+37: D3E6B9298813982C
+38: 65071A860261288B
+39: 401EEF4839AC3C2E
+40: 1025CA9BD9109F1D
+41: 0C28B570A1AE84EA
+42: BFBE239720E4B3C5
+43: 09FB0339ACCEC228
+44: DFF2E0E2631B556D
+45: ECE375020575B084
+46: 1C4C14890D44EB42
+47: EA9062A14D4E1F7F
+48: 82773D9EEFCAB1AB
+49: 516C78FF770B6A2F
+
+
+Cipher: safer-k128
+Key Size: 16 bytes
+ 0: 4D791DB28D724E55
+ 1: 53788205114E1200
+ 2: 4472BCCAF3DDEF59
+ 3: FE9B3640ED11589C
+ 4: 4DDD7859819857D7
+ 5: 6BF901C4B46CC9DB
+ 6: 930DBFC0DE0F5007
+ 7: E89F702158A00D82
+ 8: BEB661953BF46D50
+ 9: 6F0DA64C0FD101F9
+10: 4EBBCE4E5A37BED8
+11: 996EAA0AF92A09AC
+12: AED6BB9522E0B00F
+13: DF9C643624A271B4
+14: 2E5C789DD44EF0CF
+15: 86A5BA1060177330
+16: 2385DBA4DEBEB4A3
+17: 82E2FC765722094D
+18: B3CA2161757695EF
+19: F8A4C6081F3ABC06
+20: 6422316E1BEFFAC8
+21: C178511BFBFF380E
+22: 049B8CBEDE5942A9
+23: 0E181292C1B1DEFC
+24: C347BA0632A49E55
+25: 32FDA46669714F99
+26: 0523743E30C16788
+27: 782BE96A93769ED0
+28: 9F99C9E8BD4A69D8
+29: 104C094F120C926D
+30: 1F7EA3C4654D59E6
+31: 90C263629BC81D53
+32: 1803469BE59FED9E
+33: 1478C7C176B86336
+34: 362FE111601411FF
+35: 6428417432ECC3C8
+36: D74C42FCC6946FC5
+37: 1A8F3A82C78C2BE6
+38: EE22C641DC096375
+39: 59D34A0187C5C021
+40: F68CC96F09686A30
+41: CF8C608BDCC4A7FC
+42: D2896AB16C284A85
+43: 8375C5B139D93189
+44: 0F0462F9D8EBAED0
+45: C3359B7CF78B3963
+46: E4F7233D6F05DCC9
+47: 8533D1062397119B
+48: 4B300915F320DFCE
+49: A050956A4F705DB9
+
+
+Cipher: safer-sk128
+Key Size: 16 bytes
+ 0: 511E4D5D8D70B37E
+ 1: 3C688F629490B796
+ 2: 41CB15571FE700C6
+ 3: F1CBFE79F0AD23C8
+ 4: 0A0DC4AA14C2E8AA
+ 5: 05740CF7CD1CA039
+ 6: 24E886AD6E0C0A67
+ 7: EEF14D7B967066BC
+ 8: 6ABDF6D8AF85EAA0
+ 9: 0EB947521357ED27
+10: BDD2C15957F9EC95
+11: 0989B87A74A2D454
+12: 04C793BA2FAB7462
+13: 3DAD2FACDDFA3C45
+14: D1194935CC4E1BD7
+15: BAC0A2C8248FF782
+16: 7DD5894A82298C64
+17: A59F552A4377C08B
+18: 8DDDE41AB4586151
+19: 7CC4261B38FFA833
+20: E99204D6584158EC
+21: AACC8ED0803CB5C4
+22: C105CA72A7688E79
+23: 3D662FDC35B88C09
+24: A4BCEDC0AE99E30E
+25: EAECF9B6024D353C
+26: 214651A3D34AFF40
+27: 807099325F9D73C2
+28: 45EC21AEB6B90A24
+29: DCED39526687F219
+30: 2CC248E301D3101D
+31: C7F37AB8570BA13C
+32: BB9B31A34A39641B
+33: 5314570844948CAC
+34: 4581F837C02CD4F4
+35: 4E036B1B62303BF3
+36: 7B3B88DE1F5492A4
+37: CEF2865C14875035
+38: 14DE8BEE09A155DE
+39: 3AA284C74867161B
+40: 3616B4607369D597
+41: 07512F57E75EDEF7
+42: 710D1641FCE64DC2
+43: DB2A089E87C867A2
+44: A192D7B392AA2E2F
+45: 8D797A62FBFE6C81
+46: E52CE898E19BF110
+47: 72695C25158CB870
+48: 29F945B733FB498F
+49: 27057037E976F3FB
+
+
Cipher: rc2
Key Size: 8 bytes
0: 83B189DE87161805
@@ -1537,3 +1753,215 @@ Key Size: 10 bytes
49: 0AAB29DF65861F4C
+Cipher: anubis
+Key Size: 16 bytes
+ 0: 30FF064629BF7EF5B010830BF3D4E1E9
+ 1: DD7A8E87CFD352AF9F63EA24ADA7E353
+ 2: 0D0BE8F05510EBD6A3EC842E5BD9FC2A
+ 3: 330F09581FDC897B3FE6EC1A5056A410
+ 4: 30349D965F43C295B9484C389C4D942C
+ 5: 9225343F0056BC355060C0282C638D02
+ 6: E3A85D41B5337533C4D87730948A9D4E
+ 7: 09DA0DDB65FF431081CAB08A28010B76
+ 8: 6C0D0BD6CEAFB9783B31023FD455DAC6
+ 9: FBE6F26B7CA322A45312856D586DE2EE
+10: 1F269EC072D0FBA72E87CA77F8B983FB
+11: CFFAE9ADE3006BD511ED172D42F16D05
+12: 73F0E9DE89F4C7541506F052D181BAC2
+13: FCFA3E2E89FF769834295C77431EF7CE
+14: 0452360383D56F827C81263F6B0855BC
+15: 40744E07299D6A2A210BE5598835221B
+16: 2F0FC61148C36F4C7B42DF274AD0DDE0
+17: 2EA0E9BE9E4E4DF85488FE6E7CFCD6E3
+18: 0AD1254FA64C3996BBD485D41A3687A0
+19: 5B55988652DF200348A114F802FD3C03
+20: C32906AF76934C1436CA60BAD58A0C66
+21: 59D87987DE9DD485C4537F3A95A164A0
+22: 0A706ADF488D84632C96F4BEC43D9FA8
+23: 0B74E0CDD14D984B37491E2D9FA63CAE
+24: 47CB1827D151A60473E67BD5D233102F
+25: F455B4B665D3D0AFB25FDE4A3312AFF6
+26: F9A0649421D45DF604206854F681DBDB
+27: 21477F5546339E4B6D8215368EE9F884
+28: 577640F23CA73345701B0906DFABA4B7
+29: 89F8D08A6E173759020DD7301E0FE361
+30: 44EF7AF7043FD4B8112345CEE42BC969
+31: D7CF0CE04A57253F4C63CABC4A5CB034
+32: AF73D3F4CED32593B315E27079131D22
+33: F6E603E3455359FE43A3B83AAF3AF0C5
+34: DCC3FB557F2C301B631DEF499097E4FD
+35: 8285A25CF6F7E701644708E12081C62C
+36: EC702DD0293F4C646B1C9C2606762816
+37: 289491E5A65DCA605B78E88DA8A9F8AB
+38: D82FBC14452BE34C5840DAD81FC2A65E
+39: B88A340EB1BF8D5ADE6A4E6C16104FC8
+40: C9FC3D70D2BA26C4059BD3D34134264C
+41: 18CE3D2920E3BDEFA91C369E9DE57BF4
+42: 50917AE58278E15A18A47B284D8027A3
+43: BDA6F9DE33704302CE056412143B4F82
+44: C287898C1451774675EB7A964C004E0D
+45: 3BDE73E0D357319AB06D3675F1D3E28D
+46: 30FF4326C89C0FFE4D31D2E92CC0BF9B
+47: F69816F304ED892232F220F290320A8D
+48: 1368153F1A54EFF8D61F93A2D6AF21E3
+49: 06DD274894B6EDF3159A1403F47F09C7
+
+Key Size: 28 bytes
+ 0: 7828B1997D3D050201DC6EE45C8521B5
+ 1: 0D77F896F9CEF16DAAFCF962C2257AAE
+ 2: 89C27B0623F5EECCA38BAE1AD86AE156
+ 3: 44EC09834052009CC3CD66E1BA11AF01
+ 4: F922BFDB03FB186A069C1E7B48222E3D
+ 5: 277F7971955D8984AAECF287C32B8211
+ 6: E77ED0144A3ED827B71453B91562FE25
+ 7: 1760EFD04477AE527BC37F72C8BBBCAE
+ 8: 26259425ACD58207AE328B3F1A217AC1
+ 9: 0876C4DC51D22657C4121E9067C2C3BA
+10: 0214981592C9CEDD4D654F84AF1793A5
+11: 3E11FA027BC4F15048D27B187062259A
+12: 24E7D61BB21EA90B5282B43AAFB0DBDC
+13: 688F56ECB45B7C242000653460F04A23
+14: DFA587501A875ACDE8687A04AE404861
+15: 4C21CC3FBB768CC9AF2242FA206FE406
+16: 5CA0B03FA7751DEBBE70CB21AA61765A
+17: 4879B3AC26270C422645B9CA29CAD8BB
+18: 24F941E1B9AF84C18D03885EAACE16E3
+19: 05E163A0150123C2664131A81B20AFC1
+20: D606CAA85362E23598E5B8BD60C60506
+21: 33BD0AE751019BB751C151AE47BD5811
+22: 75DA523F5F793F90034144A3599DC5E6
+23: CD4709B56521EA306F5AD95CCA878183
+24: 6A4EC2EDDEBBBFEB62C1F13F7A59BF20
+25: 2A36272DC4EFDFC03F4DCF049ED2ADFF
+26: FD4F3904E8E37E7C31508E5829482965
+27: BA64BAE1C2ABB8599A31B245DBAD1153
+28: 757E0151783A50FC92AE55861DCD797D
+29: 5E63BDA3217ECB544972CA14A9074DA5
+30: E52F1195921767FA2410BA095EA5C328
+31: 6D7E42D67E329D669299B5A590017E8D
+32: 0516F6F7D99ADE5DC42E635BB5832E80
+33: 57FB4E6B82ED2A3091248DCEF9C27F14
+34: 25231D0E9B96534977D2F2AF93DD10AB
+35: 847C4C524A586568D19EFA3ECA343F1C
+36: 52448814064E0F33A4EA89368C2E1ACC
+37: 461275466FAA7BC16ABAD9EC459BD67A
+38: 16C8324A383A00DA06DBEC419B69C551
+39: 5F26F7CF715FF2649DCC3C71EB6B92DF
+40: 575363411FB07C067CD4357A1CD1D695
+41: AB70F08BAB51C5F57139A107EE858A12
+42: 887F62AE3D700EC5323EDA231C6B4C48
+43: 7B9851B01DC9083293F3B226690A54F4
+44: 36E03DF51C574E35EF2077DB7A49548E
+45: E238A564246B163F97EDD733A235EDEB
+46: 30679CE080915DC3BFA91D0DAFF5E82E
+47: 7C2E8145D803D4FE18EE32995AAC16B0
+48: 24D6F61ECC87206804885D33BFA7B2CA
+49: 1F4F81751CB3FAFDC9F9C27E639F370B
+
+Key Size: 40 bytes
+ 0: 31C3221C218E4CA1762B0DE77B964528
+ 1: 0B6E4BD937773597647FFE0A3859BB12
+ 2: 67A116E5F762619DE72F99AD1562A943
+ 3: B6A841663FB466ACAF89C8DA5BA080F0
+ 4: 0442708BF804642B9B1C69F5D905817E
+ 5: BC77391EAB530B96CA35319E510DB306
+ 6: AED37991A50AECB70C1B99137D5B38F2
+ 7: 8735F7AF0BF6C5C7E3C98021E83A31EE
+ 8: A614243B1B871D80BDCE4A23AD00F9FA
+ 9: 16AC67B139A92AD777871C990D3DA571
+10: B1774A2A12A8CAB25D28A575B67CEF5D
+11: 4C9B1A120BC6A33C62AF903FEEC3AF5F
+12: 7B128F00480E497C5754EE333457EE5E
+13: AB56D578229492B95ED309C0EC566658
+14: 42FAF577855FEDB3446D40B4B6677445
+15: 84E0C19B4A4512001F663E22D3184F0A
+16: 8B01680D049F5A9421BA9BED100CC272
+17: 2B1D70B92A5DF12CE0FA6A7AA43E4CEE
+18: C7F61340D1B2321A1884E54D74576657
+19: 153C07C56B32530866722C4DEAC86A50
+20: 2EACBEFC4A29D1250EEAFD12A1D4AE77
+21: FCCB40B0997E47512295066F1A0344DD
+22: C149A543345E2A1B8249F71CB9F903A4
+23: 3FD0688A8D0BE5F06F157C234C29BF9A
+24: 6A3F813F396D77C7F4641ECC3E0BF3AA
+25: E2888B9D2A6D819367F61C5792866A8F
+26: 1A8A000F91AF4E600DDD88E098BD938B
+27: 2283E758C04548EF8C37FA9F5700A7AD
+28: 4FD6D8E1678D2B85520B96C038C582BF
+29: D13C0B228F792EF88F09ED192C571029
+30: 1A2A06B1987BE0DADA4B558AE5E6A128
+31: 097B0460C47F1801986F5706A69EB01C
+32: DD17BAC0737515C6386ECA6A6D6C02B6
+33: 5989BD1D46FD6EC14D4C55D5D6D17F99
+34: 431002E0224BD34B0B93988356C19E7C
+35: 37DB7570296DCCE45ABDDE36EBE4731D
+36: 4731DE78EEBAA1D02568EEEA2E04A2F5
+37: 1F879753A7964AF44C84FD5765D8E080
+38: 54F120726F68EA4B0501365CD2A84759
+39: 366E43BB744C615999E896D01A0D1D0E
+40: 18747BD79F1D0529D09CAC70F4D08948
+41: 4F9854BAE0834A0C5FD12381225958F2
+42: 7C14ADF94A0B61828996D902E4CCFF3E
+43: 242F0E9CE96E4E208A9E0C5D76F8E698
+44: 27EE179E2A9301B521B2C94ED3D36A77
+45: 892C84A5E77E88A67F5F00F3597F4C04
+46: FC7880D7860E90DE17E935700FC8C030
+47: BC49373F775BF9CD6BDC22C87F71E192
+48: 365646D0DE092AF42EC8F12A19840342
+49: 62D0E9C210A20ECD2FF191AD3495DE6F
+
+
+Cipher: khazad
+Key Size: 16 bytes
+ 0: 9C4C292A989175FC
+ 1: F49E366AF89BD6B7
+ 2: 9E859C8F323666F9
+ 3: 349EC57A02451059
+ 4: 59E34CF03134A662
+ 5: 436C16BAB80E3E2D
+ 6: 81C35012B08A194C
+ 7: 056CCC9991C1F087
+ 8: 0A59F24C4715B303
+ 9: 3C2CFF98AE8500FD
+10: 9136C3FCC332D974
+11: FA3FA726E6BEBA65
+12: DD84E4F9F39FB7EE
+13: A3F397CC9FB771F5
+14: E2D6ECC1F40A51C7
+15: 6704A1A705163A02
+16: BD820F5AF7DEEB04
+17: E21E37CC122027FF
+18: E319085D8E2C1F4F
+19: 0DDFE55B199A49A9
+20: B70F39CCCB2BA9A6
+21: 3F2F25723AED2E29
+22: 751FACD5F517AB2F
+23: D32CE55FBF217CE9
+24: 91393018EA847012
+25: D50F1C54BABE7081
+26: C73350FBC5B3A82B
+27: E9A054F709FD5C57
+28: 94BD5121B25746D4
+29: EE19F88B28BEB4B7
+30: CE6845FD13A3B78A
+31: 566729D0183496BC
+32: DC0E1D38CB5E03A8
+33: 251AD2B2842C75E3
+34: D344AC41190F3594
+35: 579B956A36ADA3A8
+36: 5F83D3AFEE9A6F25
+37: 2D3FF8708A03C600
+38: 32A732C7BEEBB693
+39: F437276FAA05BB39
+40: 58DDD4CD0281C5FD
+41: ECC2C84BD8C0A4DC
+42: BAB24C2CEFE23531
+43: 5244BFA3E2821E7D
+44: A4B273E960946B2C
+45: 039376D02A8D6788
+46: D3EB7074E3B05206
+47: 89C18FFA26ED0836
+48: 1F05A2D2D78927D9
+49: 0133E1745856C44C
+
+
diff --git a/notes/eax_tv.txt b/notes/eax_tv.txt
index bf4a52a1..95cd7c1a 100644
--- a/notes/eax_tv.txt
+++ b/notes/eax_tv.txt
@@ -199,6 +199,82 @@ EAX-twofish (16 byte key)
31: 2DC26D449379997D110309B2A0DC2760FCE8CADB4B14ED580F86C70F69C9BA, EFCB60EB2B25737E256BC76700B198EF
32: 2B1890EB9FC0B8293E45D42D2126F4072754AA54E220C853C5F20FBA86BE0795, 1A1B15BBC287372FB9AF035FB124B6A1
+EAX-safer-k64 (8 byte key)
+ 0: , 9065118C8F6F7842
+ 1: A1, 1926B3F5112C33BA
+ 2: 2E9A, 5FA6078A0AA7B7C8
+ 3: 56FCE2, 984E385F9441FEC8
+ 4: C33ACE8A, 24AC1CBBCCD0D00A
+ 5: 24307E196B, DD2D52EFCA571B68
+ 6: 31471EAA5155, EB41C2B36FAAA774
+ 7: 03D397F6CFFF62, 7DFBC8485C8B169B
+ 8: 8FA39E282C21B5B2, 2C7EC769966B36D7
+ 9: FEA5402D9A8BE34946, A058E165B5FFB556
+ 10: 6CDEF76554CA845193F0, FED516001FFE039A
+ 11: DC50D19E98463543D94820, 8F9CCF32394498A1
+ 12: 42D8DC34F1974FB4EB2535D7, 77F648526BCBB5AF
+ 13: B75F1299EF6211A6318F6A8EAA, C5086AEA1BE7640B
+ 14: 1E28D68373330829DD1FFC5D083E, 33EDA06A7B5929A2
+ 15: 85529CF87C4706751B0D47CC89CEA6, D031905D6141CBED
+ 16: FE5CB61BAF93B30ED3C296EE85F51864, CC484888F0ABD922
+
+EAX-safer-sk64 (8 byte key)
+ 0: , 5254AB3079CDCB78
+ 1: 75, 798DCF14FEF8F4D1
+ 2: 0300, D5FCA75DAC97849C
+ 3: 520F98, 10E357957CE20898
+ 4: 80E2764D, 5C7F46656C6A46EA
+ 5: C48960CDAA, 3CCF44BD41F01CA8
+ 6: E0E60BD9AA2C, EBB493983FCEE79D
+ 7: D13D8804906A1B, 6EDDCA919978F0B6
+ 8: B7AE14C37A343BFB, 2369E38A9B686747
+ 9: 5DE326BBCC7D0D35E9, 041E5EE8568E941C
+ 10: 13494F5B0635BA3D6E53, EAEEA8AFA55141DD
+ 11: A9BB35B14C831FDA0D83F7, 4002A696F1363987
+ 12: E242043A1C355409819FABFC, 63A085B8886C5FDC
+ 13: 204598B889272C6FE694BDBB4D, 194A1530138EFECE
+ 14: EE3F39E0823A82615679C664DEBF, 1EFF8134C8BEFB3A
+ 15: 8579D87FD3B5E2780BC229665F1D1B, A832CD3E1C1C2289
+ 16: 74D7290D72DA67C4A9EAD434AE3A0A85, 96BAA615A5253CB5
+
+EAX-safer-k128 (16 byte key)
+ 0: , 7E32E3F943777EE7
+ 1: D1, BA00336F561731A7
+ 2: F6D7, 8E3862846CD1F482
+ 3: 5323B5, BD1B8C27B061969B
+ 4: A3EC3416, 170BBB9CE17D1D62
+ 5: 0C74D66716, 7BD024B890C5CE01
+ 6: 6158A630EB37, B5C5BD0652ACB712
+ 7: 17F2D0E019947D, F9FF81E2638EC21C
+ 8: 68E135CC154509C8, AA9EAEF8426886AA
+ 9: EDB1ABE0B486749C21, 355C99E4651C0400
+ 10: DB0C30E9367A72E8F5B2, 631B5671B8A1DB9A
+ 11: D4E5453D9A4C9DB5170FCE, 75A2DF0042E14D82
+ 12: 3F429CC9A550CBDA44107AA7, 2C2977EA13FEBD45
+ 13: A7CA22A97C2361171B415E7083, BFE81185F31727A8
+ 14: 170F79D8B0E3F77299C44208C5B1, D5ED9F9459DF9C22
+ 15: 2E24312D2AE5D5F09D5410900A4BBA, 2FC865CA96EA5A7E
+ 16: 8F3C49A316BA27067FF2C6D99EC8C846, 9D840F40CDB62E4B
+
+EAX-safer-sk128 (16 byte key)
+ 0: , 22D90A75BBA5F298
+ 1: 3F, 98C31AB2DE61DE82
+ 2: 584D, F4701D4A1A09928C
+ 3: B9DEAD, 6E221A98505153DA
+ 4: 06D4A6EB, 0E57C51B96BA13B6
+ 5: 7B58B441CA, E28CCF271F5D0A29
+ 6: 7950E0D1EC24, 2ACDDE6E38180C07
+ 7: 65A4F4E098D7C6, 7DC1C9E9602BACF2
+ 8: FEBE4E72BAA0848F, C4607EA3F138BAD9
+ 9: 9B7BD6D6D655985AA3, 8B2C58A9530EA6AC
+ 10: 60C92F925D1478470203, 51E6F5F6DC996F84
+ 11: 7B40769370E651F64AA654, 74F1F8A8D3F4B9AF
+ 12: 7215832C2FB9C54DF7A9C686, 9BF9AEF14F9151D1
+ 13: AD0F9C79008572AB8AE2466EFF, F375D0583D921B69
+ 14: C05076E2C330A0D25D7CEC80597F, 843C12F84B00A8E0
+ 15: D18F0563AB0278140B0CD9A9B07B34, 262B1688E16A171E
+ 16: 650747091F5C532EE37D2D78EE1EC605, 1BAC36144F9A0E8D
+
EAX-rc2 (8 byte key)
0: , D6CC8632EEE0F46B
1: 4C, EA19572CB8970CB4
@@ -329,3 +405,57 @@ EAX-skipjack (10 byte key)
15: 07AF486D1C458AAB2DBF13C3243FAD, 87288E41A9E64089
16: 84059283DF9A2A8563E7AF69235F26DF, 351652A0DBCE9D6E
+EAX-anubis (16 byte key)
+ 0: , 8E20F19D9BA22ABA09FB86FDE6B9EF38
+ 1: 3B, F4201E546A9160F989191942EC8FD1D3
+ 2: 9F38, 4E3CEAE3E1CB954E021A10E814B71732
+ 3: 4F4769, 3E8F35A6A5B11200E9F1AA38590066CD
+ 4: AB41F5FC, EC4C97A8892AAF5433106D4AC8A49843
+ 5: 414F95D61B, BF831E34D1E3FECB973A8C730ECA2E6D
+ 6: 4798322F06D1, 005BBC30BFEDBE6463536C4F80D1A071
+ 7: F256B6CD1BF4F5, 468A28F0661884B846B191B530C8D064
+ 8: 90906F27A633ADDE, 6D9200A37A7F6A456CB103673184C2E5
+ 9: 16CD3C17C9B4EAB135, 6D716E23D7B35109F55B036EDFA7742E
+ 10: 7AD1C22F1F06298DFB25, B076990F8193543C8F3185D3792BCE56
+ 11: 0476F2ABCD057FE6FEE39D, BB2876DB18C00038FADBBD9B264ACC3C
+ 12: B69EDE336407DBC2EE735857, AB63E5906116A8BE22C52B5DA31B1839
+ 13: C3864C1354065A56470669E602, C72BFD3A0BC73BFF051C9AB2F0DFED93
+ 14: 296D8F183A59020D33890420DD7B, C9D90B9EB42C32EDCF6223587D1598A6
+ 15: 256ED8E9D982616680559979BDF2E9, 179FE4E7BA7E966050D35900317E9916
+ 16: D4ED8F30FF9C0470D75B3B16750A3AE4, 5D50F05BB270A292DFF9F67A3BA84675
+ 17: 40CDEB6388274143CA3C4F6020BD9A4875, B27C7DFB1BFBB3FCCEE0171852C7924E
+ 18: 54EF262EC1801D505C7629D038654EBA0594, 9D2060FCD0A2C577511C7752ADE60BBE
+ 19: F39EE54A37F16DD38B624D7AB8F0D9CBD4B981, BC056C7D2C09D813703CDD63C1C69F44
+ 20: F4E7AD474FCA153ABD670E43081ED09EB2C4CC1A, F244BD4D630272F0D98FCA04226C04F1
+ 21: 039ECC36A0A16273E7246CA1FF19D213AC87B53F29, 3056DB6916C925DF220B6C9980EE141A
+ 22: 7DE1DCDEF01447CA2FE83375A48DD84E4A7CB7C01992, 79AFEA4816EAF8DAC8A5E93960F1594F
+ 23: A886C4B914BF0983003272F226F9B2197EF2DC05ACDDE0, B59D85A0FDA5FA4422F7203C055B97A9
+ 24: 00B3E1E91448E250AAFB695C0643A6577AB453EFECFABF53, 4A7EFF1CBC1AB535122A017203616D85
+ 25: 85E972E774D66D0531E40B8FE9E264A77B50FA883AB0943080, B18E164BF89B7E7AB0DC256DFEC7C72F
+ 26: 004849E39334969B392CB0CF3FDEFB3D792DCBBC15F8328C7EDC, 3C51295711F5F878DE8F0B2B5A26A227
+ 27: A0BAD6C2264AB1578993BA49E59D4598822FFED20A57D88F756FF1, 2EB9D525697A419A10DB2A84AEEA5FBC
+ 28: C34DD806EAB5AD823D78BCA78A7709A705FC94ECC521A367D76C9588, 3C57580C7903039D645C06DBAF07B477
+ 29: C447EC77512938CF7862388C32AF22ACE6B5E4CBAA998BE4F5CBC4D215, 43425D09B7ACFD90371C08953946A955
+ 30: 2C16993AAE624CBA4CDAF34FE3D368559E6BE548292B281439866375013B, 3B7360C3FA8FB1C15D19F567153CB46C
+ 31: 538E5DFAF14854A786851E4165F2E01CDDA963E318FCE4FB58E31A6B5CFC33, 2F8EA13B7A6873FE556CA535ABA0968B
+ 32: 5E29CDB7D9695A110043E9C260104BDF020A3A2A139D4112E918AB584BDD7EDA, 9133213AA7BCF062D2BD37F866683D3F
+
+EAX-khazad (16 byte key)
+ 0: , 75968E54452F6781
+ 1: 95, ADAF5949F09B5A22
+ 2: 6B8F, A06B201947424A11
+ 3: 5BE668, 3251416625DF347A
+ 4: 5A92E82B, 33E25772427D9786
+ 5: 62F9F2ABCC, DE714F5F5D17D6D0
+ 6: 0E3CD825BD8D, A7991C8CB8975ED9
+ 7: 4AD0D999503AAD, 53A827D7886F7227
+ 8: BB08E6FAED1DAEE8, 91A118749B7AB9F3
+ 9: 16E30CB12E20D18495, F8F8B8C1280158F9
+ 10: 616DBCC6346959D89E4A, 506BF35A70297D53
+ 11: F86B022D4B28FDB1F0B7D3, EA42220C805FD759
+ 12: 9B8A3D9CDBADD9BBCCCD2B28, BB478D3CE9A229C9
+ 13: CDC4AB4EF2D5B46E87827241F0, 658EDB9497A91823
+ 14: 1A113D96B21B4AEBDB13E34C381A, 63AD0C4084AC84B0
+ 15: 14DA751E5AF7E01F35B3CE74EE1ACF, 3C76AB64E1724DCE
+ 16: A13BBC7E408D2C550634CBC64690B8FE, 3D4BBC0C76536730
+
diff --git a/notes/etc/saferp_optimizer.c b/notes/etc/saferp_optimizer.c
new file mode 100644
index 00000000..664661ad
--- /dev/null
+++ b/notes/etc/saferp_optimizer.c
@@ -0,0 +1,173 @@
+/* emits an optimized version of SAFER+ ... only does encrypt so far... */
+
+#include <stdio.h>
+#include <string.h>
+
+/* This is the "Armenian" Shuffle. It takes the input from b and stores it in b2 */
+#define SHUF\
+ b2[0] = b[8]; b2[1] = b[11]; b2[2] = b[12]; b2[3] = b[15]; \
+ b2[4] = b[2]; b2[5] = b[1]; b2[6] = b[6]; b2[7] = b[5]; \
+ b2[8] = b[10]; b2[9] = b[9]; b2[10] = b[14]; b2[11] = b[13]; \
+ b2[12] = b[0]; b2[13] = b[7]; b2[14] = b[4]; b2[15] = b[3]; memcpy(b, b2, sizeof(b));
+
+/* This is the inverse shuffle. It takes from b and gives to b2 */
+#define iSHUF(b, b2) \
+ b2[0] = b[12]; b2[1] = b[5]; b2[2] = b[4]; b2[3] = b[15]; \
+ b2[4] = b[14]; b2[5] = b[7]; b2[6] = b[6]; b2[7] = b[13]; \
+ b2[8] = b[0]; b2[9] = b[9]; b2[10] = b[8]; b2[11] = b[1]; \
+ b2[12] = b[2]; b2[13] = b[11]; b2[14] = b[10]; b2[15] = b[3]; memcpy(b, b2, sizeof(b));
+
+#define ROUND(b, i) \
+ b[0] = (safer_ebox[(b[0] ^ skey->saferp.K[i][0]) & 255] + skey->saferp.K[i+1][0]) & 255; \
+ b[1] = safer_lbox[(b[1] + skey->saferp.K[i][1]) & 255] ^ skey->saferp.K[i+1][1]; \
+ b[2] = safer_lbox[(b[2] + skey->saferp.K[i][2]) & 255] ^ skey->saferp.K[i+1][2]; \
+ b[3] = (safer_ebox[(b[3] ^ skey->saferp.K[i][3]) & 255] + skey->saferp.K[i+1][3]) & 255; \
+ b[4] = (safer_ebox[(b[4] ^ skey->saferp.K[i][4]) & 255] + skey->saferp.K[i+1][4]) & 255; \
+ b[5] = safer_lbox[(b[5] + skey->saferp.K[i][5]) & 255] ^ skey->saferp.K[i+1][5]; \
+ b[6] = safer_lbox[(b[6] + skey->saferp.K[i][6]) & 255] ^ skey->saferp.K[i+1][6]; \
+ b[7] = (safer_ebox[(b[7] ^ skey->saferp.K[i][7]) & 255] + skey->saferp.K[i+1][7]) & 255; \
+ b[8] = (safer_ebox[(b[8] ^ skey->saferp.K[i][8]) & 255] + skey->saferp.K[i+1][8]) & 255; \
+ b[9] = safer_lbox[(b[9] + skey->saferp.K[i][9]) & 255] ^ skey->saferp.K[i+1][9]; \
+ b[10] = safer_lbox[(b[10] + skey->saferp.K[i][10]) & 255] ^ skey->saferp.K[i+1][10]; \
+ b[11] = (safer_ebox[(b[11] ^ skey->saferp.K[i][11]) & 255] + skey->saferp.K[i+1][11]) & 255; \
+ b[12] = (safer_ebox[(b[12] ^ skey->saferp.K[i][12]) & 255] + skey->saferp.K[i+1][12]) & 255; \
+ b[13] = safer_lbox[(b[13] + skey->saferp.K[i][13]) & 255] ^ skey->saferp.K[i+1][13]; \
+ b[14] = safer_lbox[(b[14] + skey->saferp.K[i][14]) & 255] ^ skey->saferp.K[i+1][14]; \
+ b[15] = (safer_ebox[(b[15] ^ skey->saferp.K[i][15]) & 255] + skey->saferp.K[i+1][15]) & 255;
+
+int main(void)
+{
+ int b[16], b2[16], x, y, z;
+
+/* -- ENCRYPT --- */
+ for (x = 0; x < 16; x++) b[x] = x;
+ /* emit encrypt preabmle */
+printf(
+"void saferp_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)\n"
+"{\n"
+" int x;\n"
+" unsigned char b[16];\n"
+"\n"
+" LTC_ARGCHK(pt != NULL);\n"
+" LTC_ARGCHK(ct != NULL);\n"
+" LTC_ARGCHK(skey != NULL);\n"
+"\n"
+" /* do eight rounds */\n"
+" for (x = 0; x < 16; x++) {\n"
+" b[x] = pt[x];\n"
+" }\n");
+
+ /* do 8 rounds of ROUND; LT; */
+ for (x = 0; x < 8; x++) {
+ /* ROUND(..., x*2) */
+ for (y = 0; y < 16; y++) {
+printf("b[%d] = (safer_%cbox[(b[%d] %c skey->saferp.K[%d][%d]) & 255] %c skey->saferp.K[%d][%d]) & 255;\n",
+ b[y], "elle"[y&3], b[y], "^++^"[y&3], x*2, y, "+^^+"[y&3], x*2+1, y);
+ }
+
+ /* LT */
+ for (y = 0; y < 4; y++) {
+printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[0], b[0], b[1], b[0], b[1]);
+printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[2], b[2], b[3], b[3], b[2]);
+printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[4], b[4], b[5], b[5], b[4]);
+printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[6], b[6], b[7], b[7], b[6]);
+printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[8], b[8], b[9], b[9], b[8]);
+printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[10], b[10], b[11], b[11], b[10]);
+printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[12], b[12], b[13], b[13], b[12]);
+printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[14], b[14], b[15], b[15], b[14]);
+ if (y < 3) {
+ SHUF;
+ }
+ }
+ }
+
+printf(
+" if (skey->saferp.rounds <= 8) {\n");
+/* finish */
+ for (x = 0; x < 16; x++) {
+ printf(
+" ct[%d] = (b[%d] %c skey->saferp.K[skey->saferp.rounds*2][%d]) & 255;\n",
+ x, b[x], "^++^"[x&3], x);
+ }
+ printf(" return;\n }\n");
+
+ /* 192-bit keys */
+printf(
+" /* 192-bit key? */\n"
+" if (skey->saferp.rounds > 8) {\n");
+
+ /* do 4 rounds of ROUND; LT; */
+ for (x = 8; x < 12; x++) {
+ /* ROUND(..., x*2) */
+ for (y = 0; y < 16; y++) {
+printf("b[%d] = (safer_%cbox[(b[%d] %c skey->saferp.K[%d][%d]) & 255] %c skey->saferp.K[%d][%d]) & 255;\n",
+ b[y], "elle"[y&3], b[y], "^++^"[y&3], x*2, y, "+^^+"[y&3], x*2+1, y);
+ }
+
+ /* LT */
+ for (y = 0; y < 4; y++) {
+printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[0], b[0], b[1], b[0], b[1]);
+printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[2], b[2], b[3], b[3], b[2]);
+printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[4], b[4], b[5], b[5], b[4]);
+printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[6], b[6], b[7], b[7], b[6]);
+printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[8], b[8], b[9], b[9], b[8]);
+printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[10], b[10], b[11], b[11], b[10]);
+printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[12], b[12], b[13], b[13], b[12]);
+printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[14], b[14], b[15], b[15], b[14]);
+ if (y < 3) {
+ SHUF;
+ }
+ }
+ }
+printf("}\n");
+
+printf(
+" if (skey->saferp.rounds <= 12) {\n");
+/* finish */
+ for (x = 0; x < 16; x++) {
+ printf(
+" ct[%d] = (b[%d] %c skey->saferp.K[skey->saferp.rounds*2][%d]) & 255;\n",
+ x, b[x], "^++^"[x&3], x);
+ }
+ printf(" return;\n }\n");
+
+ /* 256-bit keys */
+printf(
+" /* 256-bit key? */\n"
+" if (skey->saferp.rounds > 12) {\n");
+
+ /* do 4 rounds of ROUND; LT; */
+ for (x = 12; x < 16; x++) {
+ /* ROUND(..., x*2) */
+ for (y = 0; y < 16; y++) {
+printf("b[%d] = (safer_%cbox[(b[%d] %c skey->saferp.K[%d][%d]) & 255] %c skey->saferp.K[%d][%d]) & 255;\n",
+ b[y], "elle"[y&3], b[y], "^++^"[y&3], x*2, y, "+^^+"[y&3], x*2+1, y);
+ }
+
+ /* LT */
+ for (y = 0; y < 4; y++) {
+printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[0], b[0], b[1], b[0], b[1]);
+printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[2], b[2], b[3], b[3], b[2]);
+printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[4], b[4], b[5], b[5], b[4]);
+printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[6], b[6], b[7], b[7], b[6]);
+printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[8], b[8], b[9], b[9], b[8]);
+printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[10], b[10], b[11], b[11], b[10]);
+printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[12], b[12], b[13], b[13], b[12]);
+printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[14], b[14], b[15], b[15], b[14]);
+ if (y < 3) {
+ SHUF;
+ }
+ }
+ }
+/* finish */
+ for (x = 0; x < 16; x++) {
+ printf(
+" ct[%d] = (b[%d] %c skey->saferp.K[skey->saferp.rounds*2][%d]) & 255;\n",
+ x, b[x], "^++^"[x&3], x);
+ }
+ printf(" return;\n");
+printf(" }\n}\n\n");
+
+ return 0;
+}
+
diff --git a/notes/gcm_tv.txt b/notes/gcm_tv.txt
new file mode 100644
index 00000000..79d3b8d6
--- /dev/null
+++ b/notes/gcm_tv.txt
@@ -0,0 +1,214 @@
+GCM Test Vectors. Uses the 00010203...NN-1 pattern for nonce/header/plaintext/key. The outputs
+are of the form ciphertext,tag for a given NN. The key for step N>1 is the tag of the previous
+step repeated sufficiently. The nonce is fixed throughout at 13 bytes 000102...
+
+GCM-aes (16 byte key)
+ 0: , C6A13B37878F5B826F4F8162A1C8D879
+ 1: F1, 397F649A20F3F89A00F45BF230F26B61
+ 2: D6B8, 1653F67C9C716D0FC59F3B14154DECBF
+ 3: 673456, E82EFC79B30CA5235E2DC8BE4C14265D
+ 4: 26DD7C26, B8D1F4DB845F7D7079DEB8920949C14D
+ 5: DA62AD1487, 828A42329320764E5FB74D44A6108F4B
+ 6: FB79F7D51742, 865415BD049E86F3DA2E0B6E25E1A50C
+ 7: 9D96D1034166BF, 50669247A5B338E183DE5139831CD6A4
+ 8: B466050E1330B20A, CB264FA7853A1FFE86E1A07CFA7C7319
+ 9: CF16F0B3D9FC6183DF, 647DD6E1F40F385E1DFE6676FB036242
+ 10: 14D90928C7236050096F, 930CAAA5536406218885475CA823A973
+ 11: 4F2322D66A7079BD7DF519, 3B3931D47413042FAF1313F1041509A3
+ 12: F1497906F1D8F4F9E47E4BE9, 469FB0D62828427C2E9BA04041A1424F
+ 13: 2FAFA2A3EEA4C000702E58D1D4, C9A484FC4ED8644A06060DAE2C3D1568
+ 14: 5D707F8ACF319413D220AA2FC2B2, 0EE9AAF5B1CF622ECF6C4F5E5FF4656A
+ 15: 2C19DBF966D24B2713F82B69934060, 8676246A2F7795ABD435B3C6B4EA6E7A
+ 16: B3FED6C2315CE6D98729DBE69270A11E, B8AC739AD154744A33E906C34D91BD4B
+ 17: B2BC44CE088BC3F654B9703D9C691F17B3, BAD8314A171BC0119942136C5876AACC
+ 18: C6E958E3E9AC836C9626BD66478974D26B0C, 4E6D61833E9DB839117B665A96DC686C
+ 19: D40FADD078B474EBCE130FB44DDB4824077988, F43E3CD978A6E328AF039CC70E291E1C
+ 20: E177B3DF83A117E55F255A6C2CD78AFDAFDA307F, EEF1ABAAB9CBE0EE317CC79E7E5E24B8
+ 21: DBB4569B3E305E4525F1F7B3D2AFEF226F397E661D, 65ACFB70132EEE1D47319A550A506DB5
+ 22: AC2CAF77718DE59131A6B745DE9F3A9897B17580EC71, D8DB9006A9597F640F2594340D69E551
+ 23: 8F62022F72A0D769D2D095A55E28832950870B2B44B0BE, A7E196F869071B7BB713E8A2D15627E9
+ 24: 37F5640F820384B35F13F8C8C7DC31BDE1E4F29DCFBDA321, D5765C39DBCA72AC89100CCB8864E1DB
+ 25: 25059BFC302D0F8DD41BB22CF2391D456630C06F1DAF4DFA86, DC2FFD153C788C28D251B78AB8B7388C
+ 26: 151F158CC4BA9393FDB153C4C72911C120BAB519FAF64719133D, C61915006038BF15DED603832FD179DE
+ 27: F5DCF4231482F72D02F8B9BE0A41113D35AEA1CD85021CEC978D9C, 9CBD02C557180FBD0868C87A0BEA25AE
+ 28: 5D88B5554A2ED73054226473676FAA7159CE12B5357D635DDED35B5A, 5AD11CD6B14C59E64B5B26DFBD00FB5C
+ 29: 5696C7066EA09A30FC8BCBAD96D48A5E5FBCC8756B770F0A89B8711911, B9EA5F3BEF0599D385A9ACEBE4064498
+ 30: 1240FED47B305AC1883F8CF137D58E79052B4E686DCA1423A6A2BECBD5F5, 036A5EA5F4F2D0BF397E8896EB7AB03D
+ 31: AD9517BF392C1EB56D78EDE1C41F3C73B72304DA47F400C390C86B37A50C2A, EB3E026D518EED47F6C927525746AC54
+ 32: 2AE1CEED83C6490A7E5752E91532406EAC6FF4B11AA770EFFF1B255FDB77C528, 74BFBC7F120B58FA2B5E988A41EAF7AC
+
+GCM-rc6 (16 byte key)
+ 0: , D595FEDAB06C62D8C5290E76ED84601D
+ 1: 4D, 47A6EDEF8286F9C144B7B51C9BCCCACF
+ 2: 0085, 9788DDF89843EC51120B132EB0D0F833
+ 3: 463701, 673CB8D248E6BECD5A6A7B0B08465EF6
+ 4: F5B3222C, 1C424282D7FB427E55285E20FC2ABFF9
+ 5: 3A4A8361B2, BD40E631B054F280C7973E5AB3F06B42
+ 6: A475866BF2C5, 2067F42FAAA6274270CF9E65D833FDED
+ 7: 689D0D407172C8, 3BCCFFC64E56D5B753352E1DDD5CCAA3
+ 8: D9CE4B051202A1D3, 79B0CCDA3D0B9C9BCF640BC9E6D9CE0D
+ 9: 0317D68BE098D276B7, AF35043DB6213DC5D4F3DFB8E29EE537
+ 10: 154CEF0C6F37AA0A73C4, 61E598A8C6D17B639F9E27AF55DD00F3
+ 11: C3DB1B2B6CCC9170B9C05F, 966871DDD6E110711FB9DD733B6B2B3A
+ 12: E4F22383C75BC0FB0E59C5E8, 971536AF878F4EED68F59046C928EAC8
+ 13: 2FBFB99AABC6209FB8664916DD, 68D0BF2144AD1ADECC4074DAE58540C2
+ 14: 5FEEDFD09BF89719A34CDCCD2AAA, 64DEB7D5E6891103AA54C0EB366715D0
+ 15: E063A076E0C770FB010D26C3AC3EB5, 0CA321B2A7448FEEF84D4E0AD5BA2DA4
+ 16: AFB0DB9959F0906BD346C2D81DC5412C, 425627895E2C4C9546D3227975585459
+ 17: 79179C0D4D6C5E0741DD4CA1E8CF28C75C, D0188A344A1CEE52272FE6368DB0FB75
+ 18: 8A75521139B0DE3C08C9EAEB77D8018A39FE, 47FCC200D8A384320D2F1A5E803A9991
+ 19: 0399381D0A975AE3980A9FB75B991C055AF367, 034915370AF94B96A8A4E50FF9B134CC
+ 20: 8C189094DB13FBE62EA5C4A53C29A428ED587BA2, 99C58F838423033298897841ED526347
+ 21: D91F5144B525AF5D47EF4D5F0AF9915447A55927F9, F6750BF7E089515D35B47BC1C65E2E3A
+ 22: A4E26B554AA277057A5FE3FA08A6138CEEC6D69BB1D8, 7BBEBF52D8251108C7AA1025E213EC44
+ 23: 5C1A8C3A46FCA90D73675706313CADFBB90A535A4B3D5A, E35244A2633478BBDAFCC81161F28B80
+ 24: D69F7264FC594057B89181B83582D799AE54E9EE4FE8AD48, D4B29E5C25F9477D9345526DBDE9372A
+ 25: AFD322D0AC4AF38D5B9CBE0DFE85618C001A7A77CD8FFFCB3E, AD06BB9C59D23D258D6A2AEDD946AA20
+ 26: 179CA8395CD8E75B4E5EA07D25C8036AF08B1A1C330492523D36, E3704C4341A834C087500E332B7DEAE9
+ 27: B9178EF7774684F43F1FCE99A4319B5A4D167B0A848551F562CD7C, 5D5082FB02B9B494D5883DF49DB3B84B
+ 28: 830FCD15A09EC61245D7DA258E308E76D3B542F2345DBFC11AE983A3, F50C3332F8D91911BDACCFE228565E5C
+ 29: 179619B8C7EE9B3121405BBED2AC102A027E6C97EAEDB5ECFEB13792EF, 859EBA3BADCE6E5AB271A261B26DE28C
+ 30: 14264C7E0A154119BF24B7FCF434E81440D42D54738F0BAE55836849AB85, 0B6C9B9CADB1B6EC71CEA090C8C72834
+ 31: 0D7A316F8B873F62CF26CFC569179AB11CBF09D3467936A85ADC265B2C9A8F, 866AE7C51EC2D9DEB32748A1C8B61143
+ 32: F8FD1F967CD3632805AD7FA8ECB40F530927DD5C49D31FDBAE49738E2315905D, 9CB1CB84A727C9F42555EB566E0A1DEE
+
+GCM-safer+ (16 byte key)
+ 0: , F769B436C7FB7C0C822E24BB2B2555D3
+ 1: CA, B156298625F5634FA012B23044437807
+ 2: 4960, A64C73E890F3D77B2C3B3C76C2D913C6
+ 3: DBBB8D, 686651A017F89A22F9FE96533C85C52C
+ 4: 150AD99A, 177F7DE9E897DACCAB7EACEE3CDE7601
+ 5: 077055065F, 48B4309C76CAC37BDF11842311BA6CD3
+ 6: B2F8CE062C06, ED04DF96C06959524956E8AC5C338457
+ 7: DCE718211410D8, 3F8D8180BDEAC2F018EA81615177CC8F
+ 8: 0F71E2772402AC83, 2130481B2CA7B4B4C8F3EE73B3B3C28F
+ 9: B69030734E5ADF753C, 8CC4B62BFBC3EA56CCDBF0ED318C784D
+ 10: 6B8A91ABC1BF2F2D0176, 86EAAD80D148A48086987A40A5631DEF
+ 11: 44AD00799EC8E62E34D6A1, 016830D58F06F75E54531B45D9E785F9
+ 12: 0C4B9381D78E0F0A78B3CEAA, 4A79C58DAB131A22F172F9177DC4158B
+ 13: 2C56D4625876524B4D8D5F079B, 7B407F704225B25F1F136C984E564147
+ 14: 36424D69BACC56407D345B3D7B4D, EB126C255A2DCFD32F69DD5CB61876C7
+ 15: FDD3E091C0420D1A4D4A848757FCC2, D319C5C07134D67BA42A4BF312CD874D
+ 16: EFAF6F117EA9A4B4B83052BBF5A07DB9, BB09D473FE82257146E7ABC2EFF6F631
+ 17: 19B71383C414BAC3EF252FFF09F5ACD777, 526DC9AE6895ED33A34A9A4ADB07E1B6
+ 18: 9AB6DFDB930D26E00B3D98DD5AD014E08756, D70B95B20C106A5A03F9B803D2CAC3A0
+ 19: EEB3C236C3031DE4C3F94BD746677AE84B271D, 9483BBCBBFDBA1CC5F6392DABA2ACC19
+ 20: 3A0EBC7536F8717E8FDAFEDAC39E8F1F43C0627A, 3DA7DC2475466CEDF01EB543870A74FA
+ 21: 79D28D2F149E1D97E910342DF383FCEECF5AFD4C6A, 2364F33BCF6F07E381F7E26DAF802D83
+ 22: F1D7C319BAFB740332CA19AB0C9B71728D3AE69BFAC2, 3D4AEE9780A5C98CBC69606CDDDB31F8
+ 23: 1A0D80381A186673FB7B52C40AB6C46A11AB0889333C20, AF5C17E3D0D9724EDC1FC438A16B4EBB
+ 24: 5E503440B22DD6AE6401BA4355C8791BACC598C9E0F1412E, 156D8221BD61F5C108FC18FB2F50D159
+ 25: 7784EFDC6F0FC56FCADAFF17BB52DEB35B64FA19C3F391BDFD, A291E8238EF158A2379692077F70E8D0
+ 26: 184B6E18032D1A70CE5027912E447C357C72EEF7B20EF0FB256C, 0FA0138FB9480E0C4C237BF5D6099777
+ 27: 7AC8FCB64F35B71C5ED0CCD776B1FF76CE352EB57244085ED34FE8, D995B3C1350CC777878108640C1CADAE
+ 28: 86C7A01FB2262A8E37FF38CC99BF3EFAEB8B36166D24913BDD3B91DA, 25EC6D9F69168C5FA32C39631B606B55
+ 29: 91F5D3E3FE0B1976E2915B8DA3E785F4D55768FD727AEF19FA1552F506, AF902DED55E386F0FC4210C97DB9446E
+ 30: 7ABF5BD9CB2EFF8382C6D2B28C1B0B25540E434123AC252046BDDA74DA32, 713259EDDA9B1B63EB68E0283D0259DB
+ 31: 5634B23ACEF2874BE0591BE3268C4538698FF2D93D59B39BC86D0137DACBAD, C4054796AFD335B43C60E7E634122BAF
+ 32: F26C68C36B1E56449595EA4E162391E0C6A306592949F69797B6C2327E533ADB, 7B392AF776A94983078814B6B8428BFE
+
+GCM-twofish (16 byte key)
+ 0: , 6275E8CA35B36C108AD6D5F84F0CC5A3
+ 1: 38, A714210792F9ED12A28F25CAE3B3BC5E
+ 2: 8E2F, 6357C1F125723F2244DAF344CDFCD47B
+ 3: 900A4C, ED4E0B318346D5B9B646441E946204E9
+ 4: 087EAFF8, B871ED95C873F1EFA24EF8B6915F447D
+ 5: 63FC9EFBD4, 650D0ED98CBECA07040AB97B97129360
+ 6: B6081E94AA19, 6A3BDA8030C5A79B6B9087555A1DA67B
+ 7: E10A7B9CBB20C2, 59EB55DFD0A37C55A869834E597373AF
+ 8: 94E947FEE05780EE, 354918527F855264E37DB6892E868050
+ 9: 9A80C567AA50220862, 814EE57CC9D51D7D900AB4840C4B072F
+ 10: A8741BE1E42BE207C416, 2B28AFD8ABE20664D8BAD7535F82F11A
+ 11: 6AB7E3C68B6682023E8190, 5E48B67541FE83969952394F84D29E93
+ 12: 4F66FB634EB258CEE2955D84, F2632C2135B6E1144673B0EF73499818
+ 13: B29042F3877C2F5E694953C5F6, 03268A30499D57A06AA873EF00160C3C
+ 14: DCC7B5D9F58C88F54A9611389B8D, 5515426FF7CF2EEA91BE2B3752371CE0
+ 15: B665488BCD75FC02A0DF7994B7CF98, B721531E2A317C254FA2ED306ADCF96C
+ 16: 9535DC8A72645E34F948B71A5159AA9B, 5CEED93DE128044F0471C65AA8F21D29
+ 17: 5CBFC61A23D28562FCA929375E5B585327, 3AA842B21631968D1B58B72FEE090EE1
+ 18: 2AC3F780B956A933C0B8565EE527173B8CC8, 16EC4B6D8E2CF3CD0D16E7A5F401C78E
+ 19: 5067FD65870A4EBF6C7FA811A15270E7F8F17D, 9A7563BEDADFA6B6E48F5C13FCEAED6E
+ 20: E3A65A188077E5DC171CFF30BE8B27F10F015166, BD5B3D84D0C1DD51A3909F849141B57F
+ 21: 88D0A65C105823E68BE3987CB205AE0C1A27588FCD, B280221AD0BD83E1D6B37F331F326AB5
+ 22: 7C56D987FEF6807EEFAFD4C7EB9D72AA0E037979D91E, 686E1268A8DC9CD0192A383EA6C2D975
+ 23: B23CCD0A076CB122750B634B9E6551E0585EDEA18C3245, 6DF30A7F0728E2D549AA411AE375E569
+ 24: 767BC3AF206E67C9E27A4D7E814F3B3A65D27BB70BA9DD4D, AB2B16C031FB2C8E85B3B2B38A5CBA4E
+ 25: 9ABF34ABD43705D62F377449461C5DC239A2A86E5A98AFB159, 3DEDEDA85E6BFB53C6F18726CD561604
+ 26: FE756344C05CB12AA0673F1C2069A86556E583FF4B7313A0D395, 21CB0E0BABC3C7E547F5CB207295C0EE
+ 27: B70F16AD19A6B0AF6D8DBF4E98D7D5ADB944D91BD889D9390C3E21, 2AE67812A22C1C785D3BFC184A1C74EA
+ 28: A6389032AA9D08BDBAAA5E230E5130665FB4F0CB868F3F20C4C5438B, ECA054EFA3F39400A587839C4F0605C7
+ 29: A55A41315EAF3A67A0FD0E14C6E04D03A5E38D0F756719F4A0800B290A, 7A5277809D4B65E663603099B4DFFBD8
+ 30: E739633579AA6201A024B9873F28412BB08B08B8616D611BC9D07979BD3A, 390038A93AFD326C5CC1525A24CA91AD
+ 31: ED3266F8B0DAA7C3DB7814427E8139831CFC0EDE668F0DA83FF7090154410D, DE440EC2C6080048BFF3C5455E1BB33F
+ 32: 4D0F751B55DA3A2E0B28DE59E9680669FCB5984E9C0DB942DBAACDDEF0879731, 62F96CFE31D3D6AAA0B9F5130ED1B21B
+
+GCM-noekeon (16 byte key)
+ 0: , EB5A8E30D5C16311864E2D8D32859ACB
+ 1: 88, EAB88DE1EB7BC784A706B2D7946798D7
+ 2: BA1F, DC3CEC6AA324AC7D053EFF7A99AD3069
+ 3: 9A1457, 4AB65831DE378DFF71C20249C7BEC05E
+ 4: 2F9496D6, 800745CF95EAE3A698EDF9EC949D92B7
+ 5: 84153177A2, F6A05B654435ABDF5F696C0E0588CB5C
+ 6: F80B7865C766, 2334D0061FD488D15A6AC8E44EA1F4B9
+ 7: 872EA486B4EA9D, 3A49671DE347F675AD7904DDF4255F3D
+ 8: A4EE5750507FC831, 956D09F7C5FE812C6FB982E1DDBE864A
+ 9: B5874AC964FBFC1A97, 90FBC75F45BFF58B3A1100393955D0C2
+ 10: 92FF5FCF1EC675E02E71, 983C96A7BD4A0DB5D3B877911CE8A6B3
+ 11: F7BCA69A9C7033D84A2BA0, D4ECE5BB9FFCBB331A646D9CE8078634
+ 12: 5E1041B4554C8CDD14AAF16D, 1EF777F307CB96788B9120FFF8A8BC2F
+ 13: 7BB7289FCAD209D7992EB7AEDC, E8AEFB830DBAED2B4A790FFEF940A20B
+ 14: 12776A7C937A648F0A8628AD8C5C, F070283852AC030819EA67BF82C719AA
+ 15: 7293476D9E935EAE9DEB66F697F662, D6322603671153A1EC1453CDA5978E15
+ 16: DC12A86C85E7358919BABB15A3BF5FD7, BBBFA467EBA8124DFEC82DB0137D56B9
+ 17: 0CC1DAD00A987F9C57E3660D9417F226E5, BB8AF5A0B5BC79BD11C5D41CA80CDE2C
+ 18: D0049115D6EB5495FB391CDC494022AEAA48, 682FF357B2BC059765C29AE6CA668D0C
+ 19: 48FC54A401B4C06CE8567AD298B672191C7E84, 493A4AF4C2A8828FED8442C4EFF877F6
+ 20: 90779795821CB1B7DBD97028E29DC1CE7D0CFAE0, E126F485F73B6F7B3894B4CF7E1C5DDE
+ 21: 8CA5C246C8B7C04BD7171CAE2D1A892D66302433F8, 5D73149A3635A86B3C34DEA5B95CCBCB
+ 22: DF082B665F7A952B2604C04554B81393FCC7C0B816C8, D3569ED7D431176B286EF22414E4CBA8
+ 23: 761908530C9069E189649ED24B6A68A89B067C31E9868C, A258BCD83D3FBC7AE2AEF7516025AB36
+ 24: 717048F5A31F3C89D3704F90069AC5D5174118770C65BDA1, 067EBF18F7E3DF4EA13F9ABAC682C2A2
+ 25: 08C6FCC5D3099347C3FEBA3858A6C22C51298CB591DDB77827, B57BFBA40BE99DF5031918A1A4E2CA80
+ 26: 2CC53EF7EB954234E64CD4D60FB1D7157A489ABABC10900FFCDB, 236E769611D16EB7F463B7578770F886
+ 27: 2556B46F2E831223D632F2691329A874F517687AF81B8322AC55D7, E213A90DBC31DC261A45A9AE41CFEEC3
+ 28: 71241792728594D69791B80AD6DBC6417D1D14D222DF5E6F834B82C8, 601F97617708B1945BCDA8A82496EFB1
+ 29: 5003DC2EAAA23F9E2221CCBB9E20116692CCC99B3CFBD0DDD3A8491E7C, 3743155B792012845550205C8949B73E
+ 30: D0589675357E850333F854FBA160688F06D122DEC00CC2620DA0B2770765, 20E085752FC4D37791C22501ED1DB6AD
+ 31: 645B46D2D114EE7329F14AC1D94E6817EB385EB80C61F014F90530749079EC, 8A18DE86F9555A1070D0BFEDAC15B14F
+ 32: 068389206D37BF5A41C58075FC98901C3B42E6F2F13C09F4E92524021BB1C1C8, 370B86914D63CFEE8303D538A6BEA0E7
+
+GCM-anubis (16 byte key)
+ 0: , A0061C2F3B2295BFA33BC74C037EA8DA
+ 1: ED, 9E5648DCE40DE37B56C557D26CB18D83
+ 2: 6719, A6605253C59A101FF85C5102CE92BE45
+ 3: B8873D, 13F3E3ED3646BB296EE4ED5D6379A21B
+ 4: 5AA6E2CB, 1812E8385D15B5BAE043E4E860BEF490
+ 5: 4F6F4CD8E9, 8A80BC5E08929C42A5A74C5D9ACC0C6D
+ 6: 2F0D8B483CE4, 316F588F78FC6A9196C97CE59B9B63B6
+ 7: 82D885FDE1F948, 7160BF556614511F53738A92B5277056
+ 8: E4931462AD41B6DC, 7CE24C4D6B499975FCB72B5E2275ED56
+ 9: 503AA70BE698BC5B41, 10EA0C61FDBA8FF7B4E9927BCCEFD911
+ 10: 6B2D213D14B5D25EBE36, DC3222AED12EE26D3D14E2E733EDB2A7
+ 11: 7D8B0BC1B7443E7267371E, FCACFC73E391865BE86E041F51C45E81
+ 12: 9EF3BF8609E133BEB10565AF, D84326D4CAC9D5B74FCFD8CBAFE79E77
+ 13: 59AE7B1FDE1178CEE7F63C4894, E1BCFCDCA86CAB9C684F7D21962D580D
+ 14: 564E7B8BAC5582A3BF1178916569, 54804D8DF4D7577EF65C15487695F840
+ 15: 758A6DC437C8821274B0F16F911BAA, 19DD27500915F425F34F67CC2374DC36
+ 16: 0468C94A88A27AEEE2B3A973065E53CC, C743996C6F49363B2F4613F24703EF7E
+ 17: 3B0CABA5EEE44B7BFF0D726ECED54763FF, 14D9D09815BCD91DCCE2F5AE1A9929CF
+ 18: 5B945D83B98C43B0248F9BC0479E332869AB, 67A275F0313D4245B1965411CFCC8F17
+ 19: 97332441CA96DE8553A3C6D898FC6D90C86DBF, 73150EC3D6327E3FC8015A6192652D3B
+ 20: B9A1778FAF9767160D0D87816ECE1B99AA727087, 0C173D3C4078392CE377313C48D2BAE8
+ 21: 5882B73911C7D26EFDCCA3AED2EDC8A8BFFE75B1F8, 8F8C535639A0B59537E590C7FC9D2E53
+ 22: 70AEBED8CCFFF6E5CF06F3E841D12387EF8D6C7B4BDE, 4B00C27FCA9BEB82331CC8EB13DCC580
+ 23: 345CCB52BC20DC5F1BF5EEDF5D72A6C48F402557FFD342, 1A790A39573B853DBB8E2E73B7331014
+ 24: 0637C78A817E91D63CE18CEAF8D65C6107283A90C5A97842, 52786CB81724E12C76A0D23D4680E36B
+ 25: 59526D1E86A473DFB720FF25E97D6571077845F73C5E8322F1, 369FBA7823FC83D727FFD25D10130987
+ 26: 2933BB4E7603C313B62332827601F8189E14C1F08EA547E15AB5, 204520E365DAFF6551B01562A4CEFDFB
+ 27: A4098CF2A48A1DC2BCCE65CCE8DF825AF51E7E5F94B6186FF85D77, 9833EBB9A1D5CD0356E023E2C3761C2B
+ 28: 26557B942FD6913D806672EB01526DBD5D6F532F78AB6759DE3415C5, EDAACDD101BC40EE6530D8B5DC031F31
+ 29: DB92C3D77DF0C8F4C98845AA9AD43FB800192E57A53E083862B7E3FAF0, 628DEB1E345303A40700289052080FF8
+ 30: FC57BFAC2C77781723C2B721886D44ED67A52D9AD827874BC4EEC0A97281, 9A222DBC47B4AB4E520D3CC5850D4DEF
+ 31: 72DFB9E91A78EAFE758B4542206A4A957B4523A58428398C11BCF2AEAE1938, 307D0B876130E82804C1167E03B69B2F
+ 32: 7275C6EBDC2680DFCB73326A987D2FBCE83E40A9AEFE6351CFDA7251A6FE10A6, 895E6EEAA9BD88594903325A063CA45F
+
diff --git a/notes/ocb_tv.txt b/notes/ocb_tv.txt
index aefd8fd0..6429228f 100644
--- a/notes/ocb_tv.txt
+++ b/notes/ocb_tv.txt
@@ -199,6 +199,82 @@ OCB-twofish (16 byte key)
31: F175230606040ADACEBAFE4D58BBD140B2D45E8BF7E5C904510B58E4B53D3F, DAF579E1A12481D39F4DCFB7C28794B1
32: 261388D491EF1CB92C261FD9B91CAD5B95440DE0A747144EB8697699F600801D, 749056EBEAF4F20CD8746AA8C8846C47
+OCB-safer-k64 (8 byte key)
+ 0: , 0EDD2A1AB692AA7A
+ 1: 3E, 306F814F3C2C109E
+ 2: 0593, 063D19B734C34715
+ 3: CA72C6, DF6DAAFAD91BE697
+ 4: 08924AEE, 15095FA49E789483
+ 5: 359908A6CD, 16CB7F0741BA4091
+ 6: 97F3BD820CF4, A59DB15B67B95EE8
+ 7: 0A267201AC039E, B4FFC31DBCD8284A
+ 8: 9F6ACD9705C9ECC5, 6B41A938F0B1CAEB
+ 9: F355D5A937DD1582C2, 9D1F932E521CB955
+ 10: ED39758CAF89E7932E48, 398EF517015F118F
+ 11: D8ACF19363A0E0ADC9321B, F98B2A30217766AA
+ 12: F8F54A8202B0F281ED610F33, 36EF7FA4A20E04B7
+ 13: 0F8677DF64B5982DB6E2299140, 4DED2DA806834C81
+ 14: 0C357A9DC321C93B3872881503B0, 7814D1C0C6A8900A
+ 15: 10B6B1A261C3015A18110AD200A7B6, 9A814D6D2BAD850C
+ 16: AA9EA9D1BA7818C0D2EBF23781A5467D, 236A24FC98826702
+
+OCB-safer-sk64 (8 byte key)
+ 0: , 76F16BDCE55B3E23
+ 1: 63, F34B0B471F6F8F75
+ 2: 8651, D7EFE17943D35193
+ 3: D45504, 263224E50E7E9E75
+ 4: 57B414C3, A553D6CABCA0F285
+ 5: 4976E3B303, AC5E9969F739EBD9
+ 6: F10AB8EB94E0, 8301FFE68848D46D
+ 7: 6E954593AC427D, C1CF93BBC0F92644
+ 8: F48F44441B898C0F, 698FFAED1A95E8E4
+ 9: 1DC60156D62782E3D0, 6AFF0DCC65D4C933
+ 10: 71920ADC8997CB8B3A72, 1C101C6A27CFBBBD
+ 11: 890ED7492ED914AC20391B, F66DCD6205D945C6
+ 12: 1B9FAB84A8748BAC187C7393, B450757FCAFAAD52
+ 13: B4C89E1BB280DBC265E43ACE15, AE6BB3D2E6A371FF
+ 14: 24B0C28944BDF22048E2E86644F5, 84E93E2191CEF17A
+ 15: 8F2D5694D55EE235168AAA735943AF, 514252AEF2F2A2D9
+ 16: 568B7E31FFDA726718E40397CFC8DCC6, 3C80BA7FCA9E419E
+
+OCB-safer-k128 (16 byte key)
+ 0: , 4919F68F6BC44ABC
+ 1: 65, C6785F7BE4DE54D3
+ 2: E1B0, C197C93B63F58355
+ 3: BB7247, DFE092EF8184443B
+ 4: 38C2D022, 943FD999227C5596
+ 5: D71E4FD0ED, 51040FE9A01EA901
+ 6: C4B211EADC2A, 329429BE3366F22F
+ 7: 426DEB3FC3A4BC, CF1C976F6A19CE88
+ 8: A6F813C09CE84800, 98D9FF427B3BD571
+ 9: 4D1A9948FD157814B4, 5A389FAEEB85B8C6
+ 10: EC3EA142C3F07F5A9EEB, 31E26E13F032A48F
+ 11: A75FB14365D1533CD3FBE7, 8EF01ACC568C0591
+ 12: 891582B5853DD546FF3EA071, E013CFFE43219C21
+ 13: 54CA848C49DCDEE076780F21F4, 298EFC7B4D6B6CFE
+ 14: EA7611C69A60F1A2EF71D6A7762D, 7D9AA51CFCEC8101
+ 15: B2D1A211BC524B965A084BB4B21710, 7B2AC0EEB5216892
+ 16: 5E81F1BFA270E804A488C9BFAB75811D, A67F627CE1E37851
+
+OCB-safer-sk128 (16 byte key)
+ 0: , E523C6DBB3CA178D
+ 1: 5E, B1CB7EBE5780DF98
+ 2: F4D8, 8036235F2BE7A817
+ 3: 4FE268, 123320394EAC24F6
+ 4: A5BA02B4, B8276B5E027D45DA
+ 5: 1571859CCC, 29406C5F2DF2CFC4
+ 6: CA1E47447B95, 5D4FAF8FD5341791
+ 7: 8710DB37022D96, E10040FEA9AEA9C2
+ 8: 205990DC9A34DA3C, AE25CB49AA7A697B
+ 9: 757AFCB3191DC811C3, AA8CADA8638D6118
+ 10: 6994F8C153522361BB92, 1BCEE09E928EB18B
+ 11: A86FA0CDD051BB60AF5AA8, 50A38F8E9889354D
+ 12: 8D3FD3EB7FF2269AACFD24BA, CB51CF84CEFC45F0
+ 13: 03D2A313925D9490FC5547F95F, A1FF9D72E11C420B
+ 14: D77C0F0F600FE92F14F479FA457C, 1EBE1B4B9685EDFA
+ 15: 0CAF0A8BEB864E26058C7DF8EBA0EB, 1B153DDAE807561F
+ 16: 113D12716DFE0596A2F30C875EC6BA0E, C61F5AC0245154A6
+
OCB-rc2 (8 byte key)
0: , 1A073F25FF5690BE
1: F4, 3D3221E92E40F634
@@ -329,3 +405,57 @@ OCB-skipjack (10 byte key)
15: 1D5A7AD556FF3078284BB21A536DAA, 01FAE2F4936ED9D2
16: 4B8B71396924880CB33EA6EC6593F969, A0F4B1BE3B9B4CCE
+OCB-anubis (16 byte key)
+ 0: , D22ACF880B297DB0513DFAF0D2DF57D9
+ 1: 59, 210A179469D6568AB9470C760415574E
+ 2: AFA5, 1223F9CD160ABE2F257164C6E5533C87
+ 3: 969BEC, A57EC767543CA2ADBA4F5A7423ECA78A
+ 4: CF8B31F1, 13B5BF9CD87CE15CE696F3AF1B082650
+ 5: 9B22DF3852, 4937FDDA0AFDDA04CCD53CCBB0A82745
+ 6: E11719B2F0F8, 6847931DBF0223F5CEF66AE3F4DFCF9B
+ 7: 5A85E0F6DD2266, A1A0AF45A68A681CC396615FE1E1DFB5
+ 8: 7F2DFCC65ED86976, 13614A3C6E0E08611D8DF8EE5B7D788F
+ 9: 1DAF10DFA3F1D53E50, 673632B6DD553BAE90E9E6CC8CDE0FA5
+ 10: AF74FD9671F9C0A9879C, B8B4DD448FE967207227B84E42126D90
+ 11: 49421CED1167A882E26297, 21C8951A1761E4BD13BC85CBD14D30BD
+ 12: BC0BC779B83F07D30CB340DA, FAABD25E14FFD8D468AD6616021F604C
+ 13: 843D7E00F94E61AE950B9AA191, 08933ED5FBDCAF72F788393CD5422D0F
+ 14: 296F15C383C511C36258F528E331, 8BFFADF5655C1864057D69A6706D1739
+ 15: E31D2E80B2DBA4FBFAF52DB0513838, C4CD36821EC631CCBF1F258EE9931288
+ 16: 87F319FE9A48E2D087EDF95563896EE5, 517960488E5A118D150A1573E76C290A
+ 17: 9632B7DC1740BBE0A7AEEFD0F535B5AE8A, 0C24D0950873621D319A928862D3A6AC
+ 18: 359431ED4B3AC537238CAC2F86126972D403, 4A0CED2F4BFA3355C17D6C5DF9FABFAA
+ 19: E15B50172EE8DA9C552D448A5A48BEEAA2F11D, 8166B2A2D3A0745D1055F9F503FD6C03
+ 20: 75842DDC0D5E3BD80225E4BFBD1298421244D7EF, BB957BB2582B67B63978BCFD7A949EDD
+ 21: 3DD69162716D5F3E096E614991CAD7ED8E01F926B8, 40A954F31F5B0A2C5DD220ACED8D2B3E
+ 22: 8A49AC14F59593D5399A10F9346E2FD36F47F64ED419, 4324D408CE7F86370495AF14FBD1A859
+ 23: 6AA8FA353BCAAB4262211D75F13D27BE173526B8BC3CFC, BA3A27D79EC8ECBC5A78CB9FD095B766
+ 24: B918192BB72CFEF980298EEE570460356A4BA1755576FEAA, EB341ECE0A070E769F498600EE4EBF77
+ 25: BEFAE0B77E42A2FD18958D9E43202E8A338562AFF8317461B0, 444C1D6BDC026A01012BB2CEEAD89C2C
+ 26: 07E86D49CFFE6FB08FDF44584033AF321447003D8AD3862C00C9, DA9355A79B224EF662DA65F19BE494A7
+ 27: 911BB223AC6F6E54082FBFEDEC300D73FCAF715CCA35949212B372, 3496160A46A21DCDB5A4C179F159D860
+ 28: ABB563FC803715F59AA35460E98470E2E94E4270455ACEBF4297641B, 899CFE1946A060DE620879B8A7464718
+ 29: 47D98E83B5849CDE19B14ABCF9EA6CA9684AB49A3AB36BD14F328D808C, 6D76CD5EFF6D4AD3B67A56DF1EB42E05
+ 30: C8BF0B71A95884FFB93D64C57E327A4754EC5A1EE26632CF8E0B6B26CBDE, 2B3BE785263B1A400E5893273AFD09AE
+ 31: 9804D668CF2D75CA58C9671F65630E33909269B9511AF9119BE88EBB35F00C, 3DDA028B1A2339CA817DC8D9371E0FF8
+ 32: F6E038A82A09BCD20BAAC7926B2296B78F9CBA9DD12C497C47EA08DBCD8CEA3A, A203FC1E68E21A52E72224891AC10EE2
+
+OCB-khazad (16 byte key)
+ 0: , BDEDFF7AA0070063
+ 1: 00, 67E951582D66ED93
+ 2: 5FED, 09DC8AEAD70673DE
+ 3: 26A7CC, CE1436CE1E37D4B0
+ 4: 3D2BD063, 574C24395F31511A
+ 5: 597F1AFCB1, 6FBBE820C6F26CDB
+ 6: 202DAE442DF6, 58CA6E5706C9852D
+ 7: 7C20EDA18E9444, AABF0DA252A1BAAD
+ 8: DEC02BF76DFD5B77, A0A97446B80EACB6
+ 9: 5D7A42F73843F9200E, A1DD603372D124CB
+ 10: 0D4710E454C19B68369E, CC78E9D7EAA6A39F
+ 11: 126694191BF09A29DCF40E, 76C9B84FA3E8913F
+ 12: A94EBB86BD325B4FA1942FA5, 613DE312DB1666F7
+ 13: 4F9462386469EA0EFDC1BFAFE9, 5247244FD4BBAA6F
+ 14: 4EB794DFCF3823BDC38FA5EF3B23, 0C12017B5E058398
+ 15: D870479780CC5B3B13A7A39029A56F, 003D3FCD31D497B5
+ 16: A47BF1218AC86A60F6002CE004AF5E50, B4EC27091D5DCD58
+
diff --git a/notes/omac_tv.txt b/notes/omac_tv.txt
index e74f76f3..56d8da6f 100644
--- a/notes/omac_tv.txt
+++ b/notes/omac_tv.txt
@@ -199,6 +199,82 @@ OMAC-twofish (16 byte key)
31: C24FCA5DD4AE0DF2BFF17364D17D6743
32: DC6738080478AF9AF7CA833295031E06
+OMAC-safer-k64 (8 byte key)
+ 0: 726FE2DD40A43924
+ 1: 2A138B65EB352621
+ 2: 9588A1B53E29616C
+ 3: C025DEFDE1A59850
+ 4: 73D062F1B6D8E003
+ 5: 944598A2FC8A2D76
+ 6: B176C25D8CAFFC98
+ 7: 14F05014DE6A090A
+ 8: A7B9847B2CE22D0F
+ 9: FCD71310CBAA3A62
+ 10: BFF00CE5D4A20331
+ 11: BEE12A2171333ED5
+ 12: 333FD849BEB4A64A
+ 13: D048EC7E93B90435
+ 14: F04960356689CFEF
+ 15: 9E63D9744BF1B61A
+ 16: 7C744982F32F8889
+
+OMAC-safer-sk64 (8 byte key)
+ 0: E96711BA37D53743
+ 1: 7DCFF26A03509FE1
+ 2: 0A20EF19C8EE9BF2
+ 3: FE2883748A6963CF
+ 4: 557060195B820A18
+ 5: 771A7931FBBE5C0F
+ 6: 6BDBCE5F96CF91D8
+ 7: F3B924CCE8724595
+ 8: EC7191286D83C2C3
+ 9: 94F55B19BB7A8AC1
+ 10: 2189F4F2B06A8CA4
+ 11: 99853DAEBCA33A46
+ 12: 66EAC37A033802D7
+ 13: 845D7AA866F8A8AD
+ 14: 33A874DFECAC22AC
+ 15: 63DD9F7A7F3683DF
+ 16: EAC277D951676C44
+
+OMAC-safer-k128 (16 byte key)
+ 0: 8037B89AF193F129
+ 1: FF2314E87BA6AFE1
+ 2: C3243DF896B61D85
+ 3: 0F61C715CE821AB8
+ 4: EBFDC6A9CFD2F5A4
+ 5: AB6497D7AF2C7FFF
+ 6: C920CEEB7C1819C2
+ 7: 3E186951B545A7E5
+ 8: 5EA36A93C94AF4AC
+ 9: 6A2C59FAE33709BE
+ 10: BF1BAFAF9FC39C19
+ 11: 69EB6EF046677B7C
+ 12: CDDCEE6B20453094
+ 13: A3833BD3FED6895C
+ 14: B6C05E51F01E049B
+ 15: 90A2D0EAB739D39B
+ 16: 07BF607A161D0A66
+
+OMAC-safer-sk128 (16 byte key)
+ 0: 5E8B137A3946A557
+ 1: 0228FA66B13F3C7E
+ 2: A6F9BBAFF050DCDD
+ 3: F75880F684A796CE
+ 4: E0AEFB8E32040EBD
+ 5: 9F65D658B86D310F
+ 6: 3FA52804FB46CCAA
+ 7: 2F6D12D199FCD2FB
+ 8: CB56AF60AFB4D2BB
+ 9: 8E6F0FF6FDD262FD
+ 10: 490245BE3CCCEDE2
+ 11: EFD319AE46C73005
+ 12: 43E00E545C848995
+ 13: 10444B41ECA15EBE
+ 14: 521775C389D5BE71
+ 15: 9B683EF8B097FEBA
+ 16: 3C5D746EED09530A
+
OMAC-rc2 (8 byte key)
0: F001FE9BBC3A97B0
1: 8F8DC9C952897FBD
@@ -329,3 +405,57 @@ OMAC-skipjack (10 byte key)
15: ED91F98DA98F42C4
16: D8D0FA5CE96B08BF
+OMAC-anubis (16 byte key)
+ 0: E672617CAA1E641C0E7B4B4CC4787455
+ 1: C0C16E8FD63907C08A8ABBB7B73376D3
+ 2: 23F97CED54939361830396224A7BDD91
+ 3: 7FD87DEA9F05E07212DDF61292D9E13D
+ 4: 929A11A4D0991A6446B1051926A6048D
+ 5: 4EB74F1CC0150D86126BC6FE1FC8253D
+ 6: 33C2C3C072D05BB6D54F87579C23B116
+ 7: DE350181C9E90A79879813A609BE77E2
+ 8: DB519EB9EF0E154D9D248734FD3D3724
+ 9: 4F7F2E6D3FC72BA94FE24EC0ABBF4E66
+ 10: D646389DBCEEDD59EBB6E8F09C422930
+ 11: 8547658AE1CE6A8B8D010A1E1FEA7AF4
+ 12: C9BE2B7F3630EFDFBD3AEA6A108C86EA
+ 13: 290417C57096B8B9A1BA3C20FD91285B
+ 14: 9AF60E99692C5F911CBF969A6E11DC14
+ 15: CDA433BE58C98E49EBA8A7108E50DE2B
+ 16: 7430D0EE631A4659351B8A4489A78D46
+ 17: DCC74C0FD0415768FE00225CA14B7DC2
+ 18: 0CF2432B1B465F2A8C5FACAAF2FEF619
+ 19: DA020680C64E93AE5FCA3D71466D01C1
+ 20: B9C33A86E6ED9FCCDCD973382DD1B6A3
+ 21: 6631236B9F2F810DD4D97E6046F41AF2
+ 22: 0312C322F4D634CF4FBC0C2624E3E9F2
+ 23: 111E3E9F8FBDC1E4364622723F1CB524
+ 24: 6D2608D7AAF243D5219E14513895BFF6
+ 25: 683BD01B43CBC0430A007ACBAB357DC9
+ 26: 01B8FC65C56B0F1A5BFEBEDCCF6748D9
+ 27: 4D6298D63A80D55491697A6DD8E3694C
+ 28: 6F0205E4E083CAB00747D723300510DF
+ 29: 5183BAEEF05E9402A935EB9AFF0AA2A9
+ 30: 1E673BFAD4944643A740C59D96A5925C
+ 31: 940FB4000E34EEE78E8DB402E4A76502
+ 32: 87B0C48F3D155AD85D0502D94A4572DE
+
+OMAC-khazad (16 byte key)
+ 0: 4EBEFA460499424F
+ 1: 97AEEAD51E541D16
+ 2: 29A35212910C9595
+ 3: ABD1577D622074EA
+ 4: 70A537DE14DD765C
+ 5: 240A19016DE99C51
+ 6: 4D42C10A9F803177
+ 7: F464BC3E0DB5A909
+ 8: 1C65A01A7C08DAC7
+ 9: E49A1428C230C209
+ 10: 16DD0FEB7A6505B8
+ 11: 2DDDB3E35A05C220
+ 12: EC88910C799AC6CC
+ 13: B2A65C9EF39BEC8A
+ 14: F0D2366BA91DFFD5
+ 15: BCAB623CAB7AAA23
+ 16: 9BCEAB857596E478
+
diff --git a/notes/pmac_tv.txt b/notes/pmac_tv.txt
index 6a920cb3..e0a19006 100644
--- a/notes/pmac_tv.txt
+++ b/notes/pmac_tv.txt
@@ -199,6 +199,82 @@ PMAC-twofish (16 byte key)
31: 0D06F2FAEC5AA404A4087AAEBC4DBB36
32: 0F396FE9E3D9D74D17EB7A0BF603AB51
+PMAC-safer-k64 (8 byte key)
+ 0: 2E49792C78C1DA52
+ 1: 7A5136F4FE617C57
+ 2: 6FC8575F6F3D78EC
+ 3: 7C0373CAEAAA640B
+ 4: 9D469E7FF6C35D31
+ 5: 7755D62DD7D88112
+ 6: ADD9E7855A958C9F
+ 7: 752D29BA8150F18E
+ 8: 0954649A99596104
+ 9: 05D4D75A9FAE233D
+ 10: 1AADAFD7B4B250DA
+ 11: E7A8F31ED74DA32B
+ 12: 1A74DF61BDB9DF94
+ 13: C38A67B1955C4E0D
+ 14: EBADAA44746ADF16
+ 15: C0BFBB092CE81D8E
+ 16: 984975657F3FF2B0
+
+PMAC-safer-sk64 (8 byte key)
+ 0: E8917E1629E7403E
+ 1: AE8061A5E412A647
+ 2: C969771CE5A9B0C6
+ 3: 78159C01D0A3A5CB
+ 4: 1DD4382A8FC81921
+ 5: 4086880FD863C048
+ 6: A520B45600A3FA1D
+ 7: 0F0AB5118D7506C4
+ 8: 22E315F2DD03BCC6
+ 9: 5ECB5561EE372016
+ 10: 446A9B2BCB367AD6
+ 11: B2107FE2EB411AE9
+ 12: 5A539B62FB5893DF
+ 13: F44EE1EB3278C2BA
+ 14: 293FEA56D1F6EA81
+ 15: F38F614D2B5F81C4
+ 16: AB23F7F8F4C12A7E
+
+PMAC-safer-k128 (16 byte key)
+ 0: 7E0BDE11EC82FDE6
+ 1: 8942FB017A135520
+ 2: 0B073E6D0F037A02
+ 3: DBF88439D671ED4F
+ 4: B89427ED1121069A
+ 5: AA8573DAC66D2315
+ 6: 12DA3144BEF13FF2
+ 7: EF80413CBA281B3A
+ 8: DFA7114D8505EEBD
+ 9: AE53607F3E6F4A54
+ 10: 3F2C9395CFB9F78F
+ 11: 67EB7C5F02760AED
+ 12: 3EF4CBB4AB5B8D1F
+ 13: 83B63AFA78795A92
+ 14: 5DE400951766992A
+ 15: AA8791A45237CF83
+ 16: 7743B18704B037CF
+
+PMAC-safer-sk128 (16 byte key)
+ 0: 8F1597FFCF6FB7C1
+ 1: AFF8BD8FF9F3888A
+ 2: 65F89D82869D8B42
+ 3: CBE1F06476B2D5BD
+ 4: 4878D47FDFECE23E
+ 5: 4751A9E6D61AB2A2
+ 6: 003AC162AED4DED8
+ 7: 1F617A5555092C22
+ 8: 088EE0C35B607153
+ 9: F840B485086F9908
+ 10: BA99E0FB5D7D0976
+ 11: F04AF6DC4BAF6887
+ 12: 5DBBE40AF2F67E4E
+ 13: 7F52A93E87E29C9D
+ 14: 7B26A14A4BD5B709
+ 15: C34F26E08C64F26B
+ 16: 291A41D479EC1D2A
+
PMAC-rc2 (8 byte key)
0: E5AF80FAC4580444
1: 6A15D6211EB4FF99
@@ -329,3 +405,57 @@ PMAC-skipjack (10 byte key)
15: 2C5BD475AAC44C77
16: FEB892DA66D31A84
+PMAC-anubis (16 byte key)
+ 0: DF33EE541FFEE6A97FE3A1F72F7A38FC
+ 1: 0AB28675AC3923C6DD9F5A8E1E2928D0
+ 2: 2DABF75D6403E1E1CFAB3E6869FB1088
+ 3: 95835D49E09740180B79E394FC2AA744
+ 4: F364D6DC2C2078A519E5BAEFE858AFCA
+ 5: DA4C66A4805FC91FABAECC0D3AEAD850
+ 6: 487660FADCAC7B326C492AA051A1DF49
+ 7: BF07835AA1A548FA7312509AF35CE3F3
+ 8: 3CE8A8B1F324A700923AC0B830D53D99
+ 9: 3C54D99AACFAB26E34FC1B0B6BB9EB22
+ 10: 0A559F9D107ED76FD19227FDD0752B8A
+ 11: BFD9E74ADC40B9C7446FDD09558FA584
+ 12: F1130F663BC0FA3B1066129E0D1910E9
+ 13: 535EAD786F0D211DE7AA78F3CB480803
+ 14: CDF5855F00A4C310D95B26751B01A28B
+ 15: EF6686E999D5A9C35A96D25BB9DBBF57
+ 16: E795733AA0AAF16D8F7AB1A8E9C55E54
+ 17: E03CA85727D5CF06F56BB6465BB3E5C5
+ 18: 6EDDDB6D2292EFF584E382E1BACD1A49
+ 19: 7B7FE0D8821836C1AA95578071FF2FD2
+ 20: 5F8CC568338400746B61A9286B7CF262
+ 21: 32DEE5A11E9EDB04BDF911837CE0FA4D
+ 22: F1A99914F13B17ABF383F36157FEB170
+ 23: 99F541647F382390043CAE5332E3114D
+ 24: 34C5EBB85693A1979F8CFDF8B431A5BB
+ 25: 1BA7266568F1E7B4A77A869D3021AC0F
+ 26: 0FC675C99C24E859F8CE714E86BF5289
+ 27: CBFAB21F5ABC47356A43BED806D873C0
+ 28: 9659AB1A4D334B622629721F98EECE3A
+ 29: 644C8BEE41F03BDE7652B03CAEA31E37
+ 30: 5B3447AFAD934B4D1E4910A8DFD588E7
+ 31: BFF403342E8D50D0447627AEA2F56B23
+ 32: 19F468F0FB05184D00FABD40A18DB7B2
+
+PMAC-khazad (16 byte key)
+ 0: F40CEF2E392BEAEB
+ 1: C6E086BD1CFA0992
+ 2: 513F2851583AD69A
+ 3: 07279D57695D78FF
+ 4: 051E94FE4CC847B6
+ 5: 5E9AAA5989D5C951
+ 6: 310D5D740143369A
+ 7: 9BB1EA8ECD4AF34B
+ 8: CF886800AF0526C8
+ 9: 0B03E2C94729E643
+ 10: 42815B308A900EC7
+ 11: 9A38A58C438D26DD
+ 12: 044BFF68FD2BFF76
+ 13: 7F5ABBDC29852729
+ 14: F81A7D6F7B788A5D
+ 15: 93098DA8A180AA35
+ 16: BACE2F4DA8A89E32
+
diff --git a/ocb_decrypt_verify_memory.c b/ocb_decrypt_verify_memory.c
deleted file mode 100644
index 2e15b553..00000000
--- a/ocb_decrypt_verify_memory.c
+++ /dev/null
@@ -1,65 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-
-/* OCB Implementation by Tom St Denis */
-#include "mycrypt.h"
-
-#ifdef OCB_MODE
-
-int ocb_decrypt_verify_memory(int cipher,
- const unsigned char *key, unsigned long keylen,
- const unsigned char *nonce,
- const unsigned char *ct, unsigned long ctlen,
- unsigned char *pt,
- const unsigned char *tag, unsigned long taglen,
- int *res)
-{
- int err;
- ocb_state *ocb;
-
- _ARGCHK(key != NULL);
- _ARGCHK(nonce != NULL);
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(tag != NULL);
- _ARGCHK(res != NULL);
-
- /* allocate memory */
- ocb = XMALLOC(sizeof(ocb_state));
- if (ocb == NULL) {
- return CRYPT_MEM;
- }
-
- if ((err = ocb_init(ocb, cipher, key, keylen, nonce)) != CRYPT_OK) {
- goto __ERR;
- }
-
- while (ctlen > (unsigned long)ocb->block_len) {
- if ((err = ocb_decrypt(ocb, ct, pt)) != CRYPT_OK) {
- goto __ERR;
- }
- ctlen -= ocb->block_len;
- pt += ocb->block_len;
- ct += ocb->block_len;
- }
-
- err = ocb_done_decrypt(ocb, ct, ctlen, pt, tag, taglen, res);
-__ERR:
-#ifdef CLEAN_STACK
- zeromem(ocb, sizeof(ocb_state));
-#endif
-
- XFREE(ocb);
-
- return err;
-}
-
-#endif
diff --git a/ocb_done_encrypt.c b/ocb_done_encrypt.c
deleted file mode 100644
index 209892eb..00000000
--- a/ocb_done_encrypt.c
+++ /dev/null
@@ -1,29 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-
-/* OCB Implementation by Tom St Denis */
-#include "mycrypt.h"
-
-#ifdef OCB_MODE
-
-int ocb_done_encrypt(ocb_state *ocb, const unsigned char *pt, unsigned long ptlen,
- unsigned char *ct, unsigned char *tag, unsigned long *taglen)
-{
- _ARGCHK(ocb != NULL);
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(tag != NULL);
- _ARGCHK(taglen != NULL);
- return __ocb_done(ocb, pt, ptlen, ct, tag, taglen, 0);
-}
-
-#endif
-
diff --git a/omac_done.c b/omac_done.c
deleted file mode 100644
index 958ee3ef..00000000
--- a/omac_done.c
+++ /dev/null
@@ -1,68 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-/* OMAC1 Support by Tom St Denis (for 64 and 128 bit block ciphers only) */
-#include "mycrypt.h"
-
-#ifdef OMAC
-
-int omac_done(omac_state *state, unsigned char *out, unsigned long *outlen)
-{
- int err, mode;
- unsigned x;
-
- _ARGCHK(state != NULL);
- _ARGCHK(out != NULL);
- _ARGCHK(outlen != NULL);
- if ((err = cipher_is_valid(state->cipher_idx)) != CRYPT_OK) {
- return err;
- }
-
- if ((state->buflen > (int)sizeof(state->block)) || (state->buflen < 0) ||
- (state->blklen > (int)sizeof(state->block)) || (state->buflen > state->blklen)) {
- return CRYPT_INVALID_ARG;
- }
-
- /* figure out mode */
- if (state->buflen != state->blklen) {
- /* add the 0x80 byte */
- state->block[state->buflen++] = 0x80;
-
- /* pad with 0x00 */
- while (state->buflen < state->blklen) {
- state->block[state->buflen++] = 0x00;
- }
- mode = 1;
- } else {
- mode = 0;
- }
-
- /* now xor prev + Lu[mode] */
- for (x = 0; x < (unsigned)state->blklen; x++) {
- state->block[x] ^= state->prev[x] ^ state->Lu[mode][x];
- }
-
- /* encrypt it */
- cipher_descriptor[state->cipher_idx].ecb_encrypt(state->block, state->block, &state->key);
-
- /* output it */
- for (x = 0; x < (unsigned)state->blklen && x < *outlen; x++) {
- out[x] = state->block[x];
- }
- *outlen = x;
-
-#ifdef CLEAN_STACK
- zeromem(state, sizeof(*state));
-#endif
- return CRYPT_OK;
-}
-
-#endif
-
diff --git a/omac_memory.c b/omac_memory.c
deleted file mode 100644
index ca194c9e..00000000
--- a/omac_memory.c
+++ /dev/null
@@ -1,56 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-/* OMAC1 Support by Tom St Denis (for 64 and 128 bit block ciphers only) */
-#include "mycrypt.h"
-
-#ifdef OMAC
-
-int omac_memory(int cipher,
- const unsigned char *key, unsigned long keylen,
- const unsigned char *msg, unsigned long msglen,
- unsigned char *out, unsigned long *outlen)
-{
- int err;
- omac_state *omac;
-
- _ARGCHK(key != NULL);
- _ARGCHK(msg != NULL);
- _ARGCHK(out != NULL);
- _ARGCHK(outlen != NULL);
-
- /* allocate ram for omac state */
- omac = XMALLOC(sizeof(omac_state));
- if (omac == NULL) {
- return CRYPT_MEM;
- }
-
- /* omac process the message */
- if ((err = omac_init(omac, cipher, key, keylen)) != CRYPT_OK) {
- goto __ERR;
- }
- if ((err = omac_process(omac, msg, msglen)) != CRYPT_OK) {
- goto __ERR;
- }
- if ((err = omac_done(omac, out, outlen)) != CRYPT_OK) {
- goto __ERR;
- }
-
- err = CRYPT_OK;
-__ERR:
-#ifdef CLEAN_STACK
- zeromem(omac, sizeof(omac_state));
-#endif
-
- XFREE(omac);
- return err;
-}
-
-#endif
diff --git a/omac_process.c b/omac_process.c
deleted file mode 100644
index 08173594..00000000
--- a/omac_process.c
+++ /dev/null
@@ -1,53 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-/* OMAC1 Support by Tom St Denis (for 64 and 128 bit block ciphers only) */
-#include "mycrypt.h"
-
-#ifdef OMAC
-
-int omac_process(omac_state *state, const unsigned char *buf, unsigned long len)
-{
- int err, n, x;
-
- _ARGCHK(state != NULL);
- _ARGCHK(buf != NULL);
- if ((err = cipher_is_valid(state->cipher_idx)) != CRYPT_OK) {
- return err;
- }
-
- if ((state->buflen > (int)sizeof(state->block)) || (state->buflen < 0) ||
- (state->blklen > (int)sizeof(state->block)) || (state->buflen > state->blklen)) {
- return CRYPT_INVALID_ARG;
- }
-
- while (len != 0) {
- /* ok if the block is full we xor in prev, encrypt and replace prev */
- if (state->buflen == state->blklen) {
- for (x = 0; x < state->blklen; x++) {
- state->block[x] ^= state->prev[x];
- }
- cipher_descriptor[state->cipher_idx].ecb_encrypt(state->block, state->prev, &state->key);
- state->buflen = 0;
- }
-
- /* add bytes */
- n = MIN(len, (unsigned long)(state->blklen - state->buflen));
- XMEMCPY(state->block + state->buflen, buf, n);
- state->buflen += n;
- len -= n;
- buf += n;
- }
-
- return CRYPT_OK;
-}
-
-#endif
-
diff --git a/parsenames.pl b/parsenames.pl
new file mode 100644
index 00000000..d6466c5b
--- /dev/null
+++ b/parsenames.pl
@@ -0,0 +1,22 @@
+#!/usr/bin/perl
+#
+# Splits the list of files and outputs for makefile type files
+# wrapped at 80 chars
+#
+# Tom St Denis
+@a = split(" ", $ARGV[1]);
+$b = "$ARGV[0]=";
+$len = length($b);
+print $b;
+foreach my $obj (@a) {
+ $len = $len + length($obj);
+ $obj =~ s/\*/\$/;
+ if ($len > 100) {
+ printf "\\\n";
+ $len = length($obj);
+ }
+ print "$obj ";
+}
+if ($ARGV[0] eq "HEADERS") { print "testprof/tomcrypt_test.h"; }
+
+print "\n\n";
diff --git a/pmac_memory.c b/pmac_memory.c
deleted file mode 100644
index af2b1970..00000000
--- a/pmac_memory.c
+++ /dev/null
@@ -1,56 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-
-/* PMAC implementation by Tom St Denis */
-#include "mycrypt.h"
-
-#ifdef PMAC
-
-int pmac_memory(int cipher,
- const unsigned char *key, unsigned long keylen,
- const unsigned char *msg, unsigned long msglen,
- unsigned char *out, unsigned long *outlen)
-{
- int err;
- pmac_state *pmac;
-
- _ARGCHK(key != NULL);
- _ARGCHK(msg != NULL);
- _ARGCHK(out != NULL);
- _ARGCHK(outlen != NULL);
-
- /* allocate ram for pmac state */
- pmac = XMALLOC(sizeof(pmac_state));
- if (pmac == NULL) {
- return CRYPT_MEM;
- }
-
- if ((err = pmac_init(pmac, cipher, key, keylen)) != CRYPT_OK) {
- goto __ERR;
- }
- if ((err = pmac_process(pmac, msg, msglen)) != CRYPT_OK) {
- goto __ERR;
- }
- if ((err = pmac_done(pmac, out, outlen)) != CRYPT_OK) {
- goto __ERR;
- }
-
- err = CRYPT_OK;
-__ERR:
-#ifdef CLEAN_STACK
- zeromem(pmac, sizeof(pmac_state));
-#endif
-
- XFREE(pmac);
- return err;
-}
-
-#endif
diff --git a/pmac_process.c b/pmac_process.c
deleted file mode 100644
index 84b8e588..00000000
--- a/pmac_process.c
+++ /dev/null
@@ -1,62 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-
-/* PMAC implementation by Tom St Denis */
-#include "mycrypt.h"
-
-#ifdef PMAC
-
-int pmac_process(pmac_state *state, const unsigned char *buf, unsigned long len)
-{
- int err, n, x;
- unsigned char Z[MAXBLOCKSIZE];
-
- _ARGCHK(state != NULL);
- _ARGCHK(buf != NULL);
- if ((err = cipher_is_valid(state->cipher_idx)) != CRYPT_OK) {
- return err;
- }
-
- if ((state->buflen > (int)sizeof(state->block)) || (state->buflen < 0) ||
- (state->block_len > (int)sizeof(state->block)) || (state->buflen > state->block_len)) {
- return CRYPT_INVALID_ARG;
- }
-
- while (len != 0) {
- /* ok if the block is full we xor in prev, encrypt and replace prev */
- if (state->buflen == state->block_len) {
- pmac_shift_xor(state);
- for (x = 0; x < state->block_len; x++) {
- Z[x] = state->Li[x] ^ state->block[x];
- }
- cipher_descriptor[state->cipher_idx].ecb_encrypt(Z, Z, &state->key);
- for (x = 0; x < state->block_len; x++) {
- state->checksum[x] ^= Z[x];
- }
- state->buflen = 0;
- }
-
- /* add bytes */
- n = MIN(len, (unsigned long)(state->block_len - state->buflen));
- XMEMCPY(state->block + state->buflen, buf, n);
- state->buflen += n;
- len -= n;
- buf += n;
- }
-
-#ifdef CLEAN_STACK
- zeromem(Z, sizeof(Z));
-#endif
-
- return CRYPT_OK;
-}
-
-#endif
diff --git a/pmac_shift_xor.c b/pmac_shift_xor.c
deleted file mode 100644
index 46159fba..00000000
--- a/pmac_shift_xor.c
+++ /dev/null
@@ -1,26 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-
-/* PMAC implementation by Tom St Denis */
-#include "mycrypt.h"
-
-#ifdef PMAC
-
-void pmac_shift_xor(pmac_state *pmac)
-{
- int x, y;
- y = pmac_ntz(pmac->block_index++);
- for (x = 0; x < pmac->block_len; x++) {
- pmac->Li[x] ^= pmac->Ls[y][x];
- }
-}
-
-#endif
diff --git a/pretty.build b/pretty.build
deleted file mode 100644
index 3eac213a..00000000
--- a/pretty.build
+++ /dev/null
@@ -1,84 +0,0 @@
-#!/bin/perl -w
-#
-# Cute little builder for perl
-# Total waste of development time...
-#
-# This will build all the object files and then the archive .a file
-# requires GCC, GNU make and a sense of humour.
-#
-# Tom St Denis
-use strict;
-
-my $count = 0;
-my $starttime = time;
-my $rate = 0;
-print "Scanning for source files...\n";
-foreach my $filename (glob "*.c") {
- if (!($filename =~ "aes_tab.c")) {
- if (!($filename =~ "twofish_tab.c")) {
- if (!($filename =~ "whirltab.c")) {
- if (!($filename =~ "sha224.c")) {
- if (!($filename =~ "sha384.c")) {
- if (!($filename =~ "dh_sys.c")) {
- if (!($filename =~ "ecc_sys.c")) {
- if (!($filename =~ "sober128tab.c")) {
- ++$count;
- }}}}}}}}
-}
-print "Source files to build: $count\nBuilding...\n";
-my $i = 0;
-my $lines = 0;
-my $filesbuilt = 0;
-foreach my $filename (glob "*.c") {
- if (!($filename =~ "aes_tab.c")) {
- if (!($filename =~ "twofish_tab.c")) {
- if (!($filename =~ "whirltab.c")) {
- if (!($filename =~ "sha224.c")) {
- if (!($filename =~ "sha384.c")) {
- if (!($filename =~ "dh_sys.c")) {
- if (!($filename =~ "ecc_sys.c")) {
- if (!($filename =~ "sober128tab.c")) {
- printf("Building %3.2f%%, ", (++$i/$count)*100.0);
- if ($i % 4 == 0) { print "/, "; }
- if ($i % 4 == 1) { print "-, "; }
- if ($i % 4 == 2) { print "\\, "; }
- if ($i % 4 == 3) { print "|, "; }
- if ($rate > 0) {
- my $tleft = ($count - $i) / $rate;
- my $tsec = $tleft%60;
- my $tmin = ($tleft/60)%60;
- my $thour = ($tleft/3600)%60;
- printf("%2d:%02d:%02d left, ", $thour, $tmin, $tsec);
- }
- my $cnt = ($i/$count)*30.0;
- my $x = 0;
- print "[";
- for (; $x < $cnt; $x++) { print "#"; }
- for (; $x < 30; $x++) { print " "; }
- print "]\r";
- my $tmp = $filename;
- $tmp =~ s/\.c/".o"/ge;
- if (open(SRC, "<$tmp")) {
- close SRC;
- } else {
- !system("make $tmp > /dev/null 2>/dev/null") or die "\nERROR: Failed to make $tmp!!!\n";
- open( SRC, "<$filename" ) or die "Couldn't open $filename for reading: $!";
- ++$lines while (<SRC>);
- close SRC or die "Error closing $filename after reading: $!";
- ++$filesbuilt;
- }
-
- # update timer
- if (time != $starttime) {
- my $delay = time - $starttime;
- $rate = $i/$delay;
- }
- }}}}}}}}
-}
-
-# finish building the library
-printf("\nFinished building source (%d seconds, %3.2f files per second).\n", time - $starttime, $rate);
-print "Compiled approximately $filesbuilt files and $lines lines of code.\n";
-print "Doing final make (building archive...)\n";
-!system("make > /dev/null 2>/dev/null") or die "\nERROR: Failed to perform last make command!!!\n";
-print "done.\n";
\ No newline at end of file
diff --git a/rsa_decrypt_key.c b/rsa_decrypt_key.c
deleted file mode 100644
index 47a922cf..00000000
--- a/rsa_decrypt_key.c
+++ /dev/null
@@ -1,77 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-
-#include "mycrypt.h"
-
-#ifdef MRSA
-
-/* (PKCS #1 v2.0) decrypt then OAEP depad */
-int rsa_decrypt_key(const unsigned char *in, unsigned long inlen,
- unsigned char *outkey, unsigned long *keylen,
- const unsigned char *lparam, unsigned long lparamlen,
- prng_state *prng, int prng_idx,
- int hash_idx, int *res,
- rsa_key *key)
-{
- unsigned long modulus_bitlen, modulus_bytelen, x;
- int err;
- unsigned char *tmp;
-
- _ARGCHK(outkey != NULL);
- _ARGCHK(keylen != NULL);
- _ARGCHK(key != NULL);
- _ARGCHK(res != NULL);
-
- /* default to invalid */
- *res = 0;
-
- /* valid hash/prng ? */
- if ((err = prng_is_valid(prng_idx)) != CRYPT_OK) {
- return err;
- }
- if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) {
- return err;
- }
-
- /* get modulus len in bits */
- modulus_bitlen = mp_count_bits(&(key->N));
-
- /* outlen must be at least the size of the modulus */
- modulus_bytelen = mp_unsigned_bin_size(&(key->N));
- if (modulus_bytelen != inlen) {
- return CRYPT_INVALID_PACKET;
- }
-
- /* allocate ram */
- tmp = XMALLOC(inlen);
- if (tmp == NULL) {
- return CRYPT_MEM;
- }
-
- /* rsa decode the packet */
- x = inlen;
- if ((err = rsa_exptmod(in, inlen, tmp, &x, PK_PRIVATE, prng, prng_idx, key)) != CRYPT_OK) {
- XFREE(tmp);
- return err;
- }
-
- /* now OAEP decode the packet */
- err = pkcs_1_oaep_decode(tmp, x, lparam, lparamlen, modulus_bitlen, hash_idx,
- outkey, keylen, res);
- XFREE(tmp);
- return err;
-}
-
-#endif /* MRSA */
-
-
-
-
diff --git a/rsa_export.c b/rsa_export.c
deleted file mode 100644
index bee5cf6a..00000000
--- a/rsa_export.c
+++ /dev/null
@@ -1,56 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-
-#include "mycrypt.h"
-
-#ifdef MRSA
-
-/* This will export either an RSAPublicKey or RSAPrivateKey [defined in PKCS #1 v2.1] */
-int rsa_export(unsigned char *out, unsigned long *outlen, int type, rsa_key *key)
-{
- int err;
-
- _ARGCHK(out != NULL);
- _ARGCHK(outlen != NULL);
- _ARGCHK(key != NULL);
-
- /* type valid? */
- if (!(key->type == PK_PRIVATE) && (type == PK_PRIVATE)) {
- return CRYPT_PK_INVALID_TYPE;
- }
-
- if (type == PK_PRIVATE) {
- /* private key */
- mp_int zero;
-
- /* first INTEGER == 0 to signify two-prime RSA */
- if ((err = mp_init(&zero)) != MP_OKAY) {
- return mpi_to_ltc_error(err);
- }
-
- /* output is
- Version, n, e, d, p, q, d mod (p-1), d mod (q - 1), 1/q mod p
- */
- err = der_put_multi_integer(out, outlen, &zero, &key->N, &key->e,
- &key->d, &key->p, &key->q, &key->dP,
- &key->dQ, &key->qP, NULL);
-
- /* clear zero and return */
- mp_clear(&zero);
- return err;
- } else {
- /* public key */
- return der_put_multi_integer(out, outlen, &key->N, &key->e, NULL);
- }
-}
-
-#endif /* MRSA */
-
diff --git a/rsa_sign_hash.c b/rsa_sign_hash.c
deleted file mode 100644
index a5d2f953..00000000
--- a/rsa_sign_hash.c
+++ /dev/null
@@ -1,59 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-
-#include "mycrypt.h"
-
-#ifdef MRSA
-
-/* (PKCS #1, v2.0) PSS pad then sign */
-int rsa_sign_hash(const unsigned char *msghash, unsigned long msghashlen,
- unsigned char *sig, unsigned long *siglen,
- prng_state *prng, int prng_idx,
- int hash_idx, unsigned long saltlen,
- rsa_key *key)
-{
- unsigned long modulus_bitlen, modulus_bytelen, x;
- int err;
-
- _ARGCHK(msghash != NULL);
- _ARGCHK(sig != NULL);
- _ARGCHK(siglen != NULL);
- _ARGCHK(key != NULL);
-
- /* valid prng and hash ? */
- if ((err = prng_is_valid(prng_idx)) != CRYPT_OK) {
- return err;
- }
- if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) {
- return err;
- }
-
- /* get modulus len in bits */
- modulus_bitlen = mp_count_bits(&(key->N));
-
- /* outlen must be at least the size of the modulus */
- modulus_bytelen = mp_unsigned_bin_size(&(key->N));
- if (modulus_bytelen > *siglen) {
- return CRYPT_BUFFER_OVERFLOW;
- }
-
- /* PSS pad the key */
- x = *siglen;
- if ((err = pkcs_1_pss_encode(msghash, msghashlen, saltlen, prng, prng_idx,
- hash_idx, modulus_bitlen, sig, &x)) != CRYPT_OK) {
- return err;
- }
-
- /* RSA encode it */
- return rsa_exptmod(sig, x, sig, siglen, PK_PRIVATE, prng, prng_idx, key);
-}
-
-#endif /* MRSA */
diff --git a/rsa_v15_decrypt_key.c b/rsa_v15_decrypt_key.c
deleted file mode 100644
index e8c496ba..00000000
--- a/rsa_v15_decrypt_key.c
+++ /dev/null
@@ -1,66 +0,0 @@
- /* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-
-#include "mycrypt.h"
-
-#ifdef MRSA
-
-/* decrypt then PKCS #1 v1.5 depad */
-int rsa_v15_decrypt_key(const unsigned char *in, unsigned long inlen,
- unsigned char *outkey, unsigned long keylen,
- prng_state *prng, int prng_idx,
- int *res, rsa_key *key)
-{
- unsigned long modulus_bitlen, modulus_bytelen, x;
- int err;
- unsigned char *tmp;
-
- _ARGCHK(outkey != NULL);
- _ARGCHK(key != NULL);
- _ARGCHK(res != NULL);
-
- /* default to invalid */
- *res = 0;
-
- /* valid prng ? */
- if ((err = prng_is_valid(prng_idx)) != CRYPT_OK) {
- return err;
- }
-
- /* get modulus len in bits */
- modulus_bitlen = mp_count_bits(&(key->N));
-
- /* outlen must be at least the size of the modulus */
- modulus_bytelen = mp_unsigned_bin_size(&(key->N));
- if (modulus_bytelen != inlen) {
- return CRYPT_INVALID_PACKET;
- }
-
- /* allocate ram */
- tmp = XMALLOC(inlen);
- if (tmp == NULL) {
- return CRYPT_MEM;
- }
-
- /* rsa decode the packet */
- x = inlen;
- if ((err = rsa_exptmod(in, inlen, tmp, &x, PK_PRIVATE, prng, prng_idx, key)) != CRYPT_OK) {
- XFREE(tmp);
- return err;
- }
-
- /* PKCS #1 v1.5 depad */
- err = pkcs_1_v15_es_decode(tmp, x, modulus_bitlen, outkey, keylen, res);
- XFREE(tmp);
- return err;
-}
-
-#endif
diff --git a/rsa_v15_encrypt_key.c b/rsa_v15_encrypt_key.c
deleted file mode 100644
index 3724a725..00000000
--- a/rsa_v15_encrypt_key.c
+++ /dev/null
@@ -1,54 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-
-#include "mycrypt.h"
-
-#ifdef MRSA
-
-/* PKCS #1 v1.5 pad then encrypt */
-int rsa_v15_encrypt_key(const unsigned char *inkey, unsigned long inlen,
- unsigned char *outkey, unsigned long *outlen,
- prng_state *prng, int prng_idx,
- rsa_key *key)
-{
- unsigned long modulus_bitlen, modulus_bytelen, x;
- int err;
-
- _ARGCHK(inkey != NULL);
- _ARGCHK(outkey != NULL);
- _ARGCHK(outlen != NULL);
- _ARGCHK(key != NULL);
-
- /* valid prng? */
- if ((err = prng_is_valid(prng_idx)) != CRYPT_OK) {
- return err;
- }
-
- /* get modulus len in bits */
- modulus_bitlen = mp_count_bits(&(key->N));
-
- /* outlen must be at least the size of the modulus */
- modulus_bytelen = mp_unsigned_bin_size(&(key->N));
- if (modulus_bytelen > *outlen) {
- return CRYPT_BUFFER_OVERFLOW;
- }
-
- /* pad it */
- x = *outlen;
- if ((err = pkcs_1_v15_es_encode(inkey, inlen, modulus_bitlen, prng, prng_idx, outkey, &x)) != CRYPT_OK) {
- return err;
- }
-
- /* encrypt it */
- return rsa_exptmod(outkey, x, outkey, outlen, PK_PUBLIC, prng, prng_idx, key);
-}
-
-#endif
diff --git a/rsa_v15_sign_hash.c b/rsa_v15_sign_hash.c
deleted file mode 100644
index 0a3da2a8..00000000
--- a/rsa_v15_sign_hash.c
+++ /dev/null
@@ -1,57 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-
-#include "mycrypt.h"
-
-#ifdef MRSA
-
-/* PKCS #1 v1.5 pad then sign */
-int rsa_v15_sign_hash(const unsigned char *msghash, unsigned long msghashlen,
- unsigned char *sig, unsigned long *siglen,
- prng_state *prng, int prng_idx,
- int hash_idx, rsa_key *key)
-{
- unsigned long modulus_bitlen, modulus_bytelen, x;
- int err;
-
- _ARGCHK(msghash != NULL);
- _ARGCHK(sig != NULL);
- _ARGCHK(siglen != NULL);
- _ARGCHK(key != NULL);
-
- /* valid prng and hash ? */
- if ((err = prng_is_valid(prng_idx)) != CRYPT_OK) {
- return err;
- }
- if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) {
- return err;
- }
-
- /* get modulus len in bits */
- modulus_bitlen = mp_count_bits(&(key->N));
-
- /* outlen must be at least the size of the modulus */
- modulus_bytelen = mp_unsigned_bin_size(&(key->N));
- if (modulus_bytelen > *siglen) {
- return CRYPT_BUFFER_OVERFLOW;
- }
-
- /* PKCS #1 v1.5 pad the key */
- x = *siglen;
- if ((err = pkcs_1_v15_sa_encode(msghash, msghashlen, hash_idx, modulus_bitlen, sig, &x)) != CRYPT_OK) {
- return err;
- }
-
- /* RSA encode it */
- return rsa_exptmod(sig, x, sig, siglen, PK_PRIVATE, prng, prng_idx, key);
-}
-
-#endif
diff --git a/sprng.c b/sprng.c
deleted file mode 100644
index 090bd013..00000000
--- a/sprng.c
+++ /dev/null
@@ -1,80 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-
-/* A secure PRNG using the RNG functions. Basically this is a
- * wrapper that allows you to use a secure RNG as a PRNG
- * in the various other functions.
- */
-#include "mycrypt.h"
-
-#ifdef SPRNG
-
-const struct _prng_descriptor sprng_desc =
-{
- "sprng", 0,
- &sprng_start,
- &sprng_add_entropy,
- &sprng_ready,
- &sprng_read,
- &sprng_done,
- &sprng_export,
- &sprng_import,
- &sprng_test
-};
-
-int sprng_start(prng_state *prng)
-{
- return CRYPT_OK;
-}
-
-int sprng_add_entropy(const unsigned char *buf, unsigned long len, prng_state *prng)
-{
- return CRYPT_OK;
-}
-
-int sprng_ready(prng_state *prng)
-{
- return CRYPT_OK;
-}
-
-unsigned long sprng_read(unsigned char *buf, unsigned long len, prng_state *prng)
-{
- _ARGCHK(buf != NULL);
- return rng_get_bytes(buf, len, NULL);
-}
-
-int sprng_done(prng_state *prng)
-{
- return CRYPT_OK;
-}
-
-int sprng_export(unsigned char *out, unsigned long *outlen, prng_state *prng)
-{
- _ARGCHK(outlen != NULL);
-
- *outlen = 0;
- return CRYPT_OK;
-}
-
-int sprng_import(const unsigned char *in, unsigned long inlen, prng_state *prng)
-{
- return CRYPT_OK;
-}
-
-int sprng_test(void)
-{
- return CRYPT_OK;
-}
-
-#endif
-
-
-
diff --git a/aes.c b/src/ciphers/aes/aes.c
similarity index 85%
rename from aes.c
rename to src/ciphers/aes/aes.c
index 949c22b6..e698efd7 100644
--- a/aes.c
+++ b/src/ciphers/aes/aes.c
@@ -6,7 +6,7 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
/* AES implementation by Tom St Denis
@@ -25,8 +25,12 @@
* @author Paulo Barreto <paulo.barreto@terra.com.br>
---
*/
+/**
+ @file aes.c
+ Implementation of AES
+*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
#ifdef RIJNDAEL
@@ -35,23 +39,26 @@
#define SETUP rijndael_setup
#define ECB_ENC rijndael_ecb_encrypt
#define ECB_DEC rijndael_ecb_decrypt
+#define ECB_DONE rijndael_done
#define ECB_TEST rijndael_test
#define ECB_KS rijndael_keysize
-const struct _cipher_descriptor rijndael_desc =
+const struct ltc_cipher_descriptor rijndael_desc =
{
"rijndael",
6,
16, 32, 16, 10,
- SETUP, ECB_ENC, ECB_DEC, ECB_TEST, ECB_KS
+ SETUP, ECB_ENC, ECB_DEC, ECB_TEST, ECB_DONE, ECB_KS,
+ NULL, NULL, NULL, NULL, NULL, NULL, NULL
};
-const struct _cipher_descriptor aes_desc =
+const struct ltc_cipher_descriptor aes_desc =
{
"aes",
6,
16, 32, 16, 10,
- SETUP, ECB_ENC, ECB_DEC, ECB_TEST, ECB_KS
+ SETUP, ECB_ENC, ECB_DEC, ECB_TEST, ECB_DONE, ECB_KS,
+ NULL, NULL, NULL, NULL, NULL, NULL, NULL
};
#else
@@ -59,21 +66,24 @@ const struct _cipher_descriptor aes_desc =
#define SETUP rijndael_enc_setup
#define ECB_ENC rijndael_enc_ecb_encrypt
#define ECB_KS rijndael_enc_keysize
+#define ECB_DONE rijndael_enc_done
-const struct _cipher_descriptor rijndael_enc_desc =
+const struct ltc_cipher_descriptor rijndael_enc_desc =
{
"rijndael",
6,
16, 32, 16, 10,
- SETUP, ECB_ENC, NULL, NULL, ECB_KS
+ SETUP, ECB_ENC, NULL, NULL, ECB_DONE, ECB_KS,
+ NULL, NULL, NULL, NULL, NULL, NULL, NULL
};
-const struct _cipher_descriptor aes_enc_desc =
+const struct ltc_cipher_descriptor aes_enc_desc =
{
"aes",
6,
16, 32, 16, 10,
- SETUP, ECB_ENC, NULL, NULL, ECB_KS
+ SETUP, ECB_ENC, NULL, NULL, ECB_DONE, ECB_KS,
+ NULL, NULL, NULL, NULL, NULL, NULL, NULL
};
#endif
@@ -89,7 +99,7 @@ static ulong32 setup_mix(ulong32 temp)
}
#ifndef ENCRYPT_ONLY
-#ifdef SMALL_CODE
+#ifdef LTC_SMALL_CODE
static ulong32 setup_mix2(ulong32 temp)
{
return Td0(255 & Te4[byte(temp, 3)]) ^
@@ -100,21 +110,29 @@ static ulong32 setup_mix2(ulong32 temp)
#endif
#endif
-int SETUP(const unsigned char *key, int keylen, int rounds, symmetric_key *skey)
+ /**
+ Initialize the AES (Rijndael) block cipher
+ @param key The symmetric key you wish to pass
+ @param keylen The key length in bytes
+ @param num_rounds The number of rounds desired (0 for default)
+ @param skey The key in as scheduled by this function.
+ @return CRYPT_OK if successful
+ */
+int SETUP(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey)
{
int i, j;
ulong32 temp, *rk;
#ifndef ENCRYPT_ONLY
ulong32 *rrk;
#endif
- _ARGCHK(key != NULL);
- _ARGCHK(skey != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(skey != NULL);
if (keylen != 16 && keylen != 24 && keylen != 32) {
return CRYPT_INVALID_KEYSIZE;
}
- if (rounds != 0 && rounds != (10 + ((keylen/8)-2)*2)) {
+ if (num_rounds != 0 && num_rounds != (10 + ((keylen/8)-2)*2)) {
return CRYPT_INVALID_ROUNDS;
}
@@ -181,7 +199,7 @@ int SETUP(const unsigned char *key, int keylen, int rounds, symmetric_key *skey)
break;
}
temp = rk[11];
- rk[12] = rk[ 4] ^ setup_mix(ROR(temp, 8));
+ rk[12] = rk[ 4] ^ setup_mix(RORc(temp, 8));
rk[13] = rk[ 5] ^ rk[12];
rk[14] = rk[ 6] ^ rk[13];
rk[15] = rk[ 7] ^ rk[14];
@@ -189,7 +207,7 @@ int SETUP(const unsigned char *key, int keylen, int rounds, symmetric_key *skey)
}
} else {
/* this can't happen */
- j = 4;
+ return CRYPT_ERROR;
}
#ifndef ENCRYPT_ONLY
@@ -208,7 +226,7 @@ int SETUP(const unsigned char *key, int keylen, int rounds, symmetric_key *skey)
for (i = 1; i < skey->rijndael.Nr; i++) {
rrk -= 4;
rk += 4;
- #ifdef SMALL_CODE
+ #ifdef LTC_SMALL_CODE
temp = rrk[0];
rk[0] = setup_mix2(temp);
temp = rrk[1];
@@ -258,7 +276,13 @@ int SETUP(const unsigned char *key, int keylen, int rounds, symmetric_key *skey)
return CRYPT_OK;
}
-#ifdef CLEAN_STACK
+/**
+ Encrypts a block of text with AES
+ @param pt The input plaintext (16 bytes)
+ @param ct The output ciphertext (16 bytes)
+ @param skey The key as scheduled
+*/
+#ifdef LTC_CLEAN_STACK
static void _rijndael_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
#else
void ECB_ENC(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
@@ -267,9 +291,9 @@ void ECB_ENC(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
ulong32 s0, s1, s2, s3, t0, t1, t2, t3, *rk;
int Nr, r;
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(skey != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
Nr = skey->rijndael.Nr;
rk = skey->rijndael.eK;
@@ -284,7 +308,7 @@ void ECB_ENC(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
LOAD32H(s3, pt + 12); s3 ^= rk[3];
-#ifdef SMALL_CODE
+#ifdef LTC_SMALL_CODE
for (r = 0; ; r++) {
rk += 4;
@@ -418,7 +442,7 @@ void ECB_ENC(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
STORE32H(s3, ct+12);
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
void ECB_ENC(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
{
_rijndael_ecb_encrypt(pt, ct, skey);
@@ -428,7 +452,13 @@ void ECB_ENC(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
#ifndef ENCRYPT_ONLY
-#ifdef CLEAN_STACK
+/**
+ Decrypts a block of text with AES
+ @param ct The input ciphertext (16 bytes)
+ @param pt The output plaintext (16 bytes)
+ @param skey The key as scheduled
+*/
+#ifdef LTC_CLEAN_STACK
static void _rijndael_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
#else
void ECB_DEC(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
@@ -437,9 +467,9 @@ void ECB_DEC(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
ulong32 s0, s1, s2, s3, t0, t1, t2, t3, *rk;
int Nr, r;
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(skey != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
Nr = skey->rijndael.Nr;
rk = skey->rijndael.dK;
@@ -453,7 +483,7 @@ void ECB_DEC(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
LOAD32H(s2, ct + 8); s2 ^= rk[2];
LOAD32H(s3, ct + 12); s3 ^= rk[3];
-#ifdef SMALL_CODE
+#ifdef LTC_SMALL_CODE
for (r = 0; ; r++) {
rk += 4;
t0 =
@@ -588,7 +618,7 @@ void ECB_DEC(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
void ECB_DEC(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
{
_rijndael_ecb_decrypt(ct, pt, skey);
@@ -596,6 +626,10 @@ void ECB_DEC(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
}
#endif
+/**
+ Performs a self-test of the AES block cipher
+ @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled
+*/
int ECB_TEST(void)
{
#ifndef LTC_TEST
@@ -679,20 +713,34 @@ int ECB_TEST(void)
#endif /* ENCRYPT_ONLY */
-int ECB_KS(int *desired_keysize)
+
+/** Terminate the context
+ @param skey The scheduled key
+*/
+void ECB_DONE(symmetric_key *skey)
+{
+}
+
+
+/**
+ Gets suitable key size
+ @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable.
+ @return CRYPT_OK if the input key size is acceptable.
+*/
+int ECB_KS(int *keysize)
{
- _ARGCHK(desired_keysize != NULL);
+ LTC_ARGCHK(keysize != NULL);
- if (*desired_keysize < 16)
+ if (*keysize < 16)
return CRYPT_INVALID_KEYSIZE;
- if (*desired_keysize < 24) {
- *desired_keysize = 16;
+ if (*keysize < 24) {
+ *keysize = 16;
return CRYPT_OK;
- } else if (*desired_keysize < 32) {
- *desired_keysize = 24;
+ } else if (*keysize < 32) {
+ *keysize = 24;
return CRYPT_OK;
} else {
- *desired_keysize = 32;
+ *keysize = 32;
return CRYPT_OK;
}
}
diff --git a/aes_tab.c b/src/ciphers/aes/aes_tab.c
similarity index 99%
rename from aes_tab.c
rename to src/ciphers/aes/aes_tab.c
index cb450a77..0ad1dfe0 100644
--- a/aes_tab.c
+++ b/src/ciphers/aes/aes_tab.c
@@ -6,7 +6,7 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
/* The precomputed tables for AES */
/*
@@ -23,6 +23,10 @@ Td3[x] = Si[x].[09, 0d, 0b, 0e];
Td4[x] = Si[x].[01, 01, 01, 01];
*/
+/**
+ @file aes_tab.c
+ AES tables
+*/
static const ulong32 TE0[256] = {
0xc66363a5UL, 0xf87c7c84UL, 0xee777799UL, 0xf67b7b8dUL,
0xfff2f20dUL, 0xd66b6bbdUL, 0xde6f6fb1UL, 0x91c5c554UL,
@@ -295,17 +299,17 @@ static const ulong32 Td4[256] = {
#endif /* ENCRYPT_ONLY */
-#ifdef SMALL_CODE
+#ifdef LTC_SMALL_CODE
#define Te0(x) TE0[x]
-#define Te1(x) ROR(TE0[x], 8)
-#define Te2(x) ROR(TE0[x], 16)
-#define Te3(x) ROR(TE0[x], 24)
+#define Te1(x) RORc(TE0[x], 8)
+#define Te2(x) RORc(TE0[x], 16)
+#define Te3(x) RORc(TE0[x], 24)
#define Td0(x) TD0[x]
-#define Td1(x) ROR(TD0[x], 8)
-#define Td2(x) ROR(TD0[x], 16)
-#define Td3(x) ROR(TD0[x], 24)
+#define Td1(x) RORc(TD0[x], 8)
+#define Td2(x) RORc(TD0[x], 16)
+#define Td3(x) RORc(TD0[x], 24)
#define Te4_0 0x000000FF & Te4
#define Te4_1 0x0000FF00 & Te4
diff --git a/src/ciphers/anubis.c b/src/ciphers/anubis.c
new file mode 100644
index 00000000..7e2af60b
--- /dev/null
+++ b/src/ciphers/anubis.c
@@ -0,0 +1,1550 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+
+/**
+ @file anubis.c
+ Anubis implementation derived from public domain source
+ Authors: Paulo S.L.M. Barreto and Vincent Rijmen.
+*/
+
+#include "tomcrypt.h"
+
+#ifdef ANUBIS
+
+const struct ltc_cipher_descriptor anubis_desc = {
+ "anubis",
+ 19,
+ 16, 40, 16, 12,
+ &anubis_setup,
+ &anubis_ecb_encrypt,
+ &anubis_ecb_decrypt,
+ &anubis_test,
+ &anubis_done,
+ &anubis_keysize,
+ NULL, NULL, NULL, NULL, NULL, NULL, NULL
+};
+
+#define MIN_N 4
+#define MAX_N 10
+#define MIN_ROUNDS (8 + MIN_N)
+#define MAX_ROUNDS (8 + MAX_N)
+#define MIN_KEYSIZEB (4*MIN_N)
+#define MAX_KEYSIZEB (4*MAX_N)
+#define BLOCKSIZE 128
+#define BLOCKSIZEB (BLOCKSIZE/8)
+
+
+/*
+ * Though Anubis is endianness-neutral, the encryption tables are listed
+ * in BIG-ENDIAN format, which is adopted throughout this implementation
+ * (but little-endian notation would be equally suitable if consistently
+ * employed).
+ */
+#if defined(ANUBIS_TWEAK)
+
+static const ulong32 T0[256] = {
+ 0xba69d2bbU, 0x54a84de5U, 0x2f5ebce2U, 0x74e8cd25U,
+ 0x53a651f7U, 0xd3bb6bd0U, 0xd2b96fd6U, 0x4d9a29b3U,
+ 0x50a05dfdU, 0xac458acfU, 0x8d070e09U, 0xbf63c6a5U,
+ 0x70e0dd3dU, 0x52a455f1U, 0x9a29527bU, 0x4c982db5U,
+ 0xeac98f46U, 0xd5b773c4U, 0x97336655U, 0xd1bf63dcU,
+ 0x3366ccaaU, 0x51a259fbU, 0x5bb671c7U, 0xa651a2f3U,
+ 0xdea15ffeU, 0x48903dadU, 0xa84d9ad7U, 0x992f5e71U,
+ 0xdbab4be0U, 0x3264c8acU, 0xb773e695U, 0xfce5d732U,
+ 0xe3dbab70U, 0x9e214263U, 0x913f7e41U, 0x9b2b567dU,
+ 0xe2d9af76U, 0xbb6bd6bdU, 0x4182199bU, 0x6edca579U,
+ 0xa557aef9U, 0xcb8b0b80U, 0x6bd6b167U, 0x95376e59U,
+ 0xa15fbee1U, 0xf3fbeb10U, 0xb17ffe81U, 0x0204080cU,
+ 0xcc851792U, 0xc49537a2U, 0x1d3a744eU, 0x14285078U,
+ 0xc39b2bb0U, 0x63c69157U, 0xdaa94fe6U, 0x5dba69d3U,
+ 0x5fbe61dfU, 0xdca557f2U, 0x7dfae913U, 0xcd871394U,
+ 0x7ffee11fU, 0x5ab475c1U, 0x6cd8ad75U, 0x5cb86dd5U,
+ 0xf7f3fb08U, 0x264c98d4U, 0xffe3db38U, 0xedc79354U,
+ 0xe8cd874aU, 0x9d274e69U, 0x6fdea17fU, 0x8e010203U,
+ 0x19326456U, 0xa05dbae7U, 0xf0fde71aU, 0x890f1e11U,
+ 0x0f1e3c22U, 0x070e1c12U, 0xaf4386c5U, 0xfbebcb20U,
+ 0x08102030U, 0x152a547eU, 0x0d1a342eU, 0x04081018U,
+ 0x01020406U, 0x64c88d45U, 0xdfa35bf8U, 0x76ecc529U,
+ 0x79f2f90bU, 0xdda753f4U, 0x3d7af48eU, 0x162c5874U,
+ 0x3f7efc82U, 0x376edcb2U, 0x6ddaa973U, 0x3870e090U,
+ 0xb96fdeb1U, 0x73e6d137U, 0xe9cf834cU, 0x356ad4beU,
+ 0x55aa49e3U, 0x71e2d93bU, 0x7bf6f107U, 0x8c050a0fU,
+ 0x72e4d531U, 0x880d1a17U, 0xf6f1ff0eU, 0x2a54a8fcU,
+ 0x3e7cf884U, 0x5ebc65d9U, 0x274e9cd2U, 0x468c0589U,
+ 0x0c183028U, 0x65ca8943U, 0x68d0bd6dU, 0x61c2995bU,
+ 0x03060c0aU, 0xc19f23bcU, 0x57ae41efU, 0xd6b17fceU,
+ 0xd9af43ecU, 0x58b07dcdU, 0xd8ad47eaU, 0x66cc8549U,
+ 0xd7b37bc8U, 0x3a74e89cU, 0xc88d078aU, 0x3c78f088U,
+ 0xfae9cf26U, 0x96316253U, 0xa753a6f5U, 0x982d5a77U,
+ 0xecc59752U, 0xb86ddab7U, 0xc7933ba8U, 0xae4182c3U,
+ 0x69d2b96bU, 0x4b9631a7U, 0xab4b96ddU, 0xa94f9ed1U,
+ 0x67ce814fU, 0x0a14283cU, 0x478e018fU, 0xf2f9ef16U,
+ 0xb577ee99U, 0x224488ccU, 0xe5d7b364U, 0xeec19f5eU,
+ 0xbe61c2a3U, 0x2b56acfaU, 0x811f3e21U, 0x1224486cU,
+ 0x831b362dU, 0x1b366c5aU, 0x0e1c3824U, 0x23468ccaU,
+ 0xf5f7f304U, 0x458a0983U, 0x214284c6U, 0xce811f9eU,
+ 0x499239abU, 0x2c58b0e8U, 0xf9efc32cU, 0xe6d1bf6eU,
+ 0xb671e293U, 0x2850a0f0U, 0x172e5c72U, 0x8219322bU,
+ 0x1a34685cU, 0x8b0b161dU, 0xfee1df3eU, 0x8a09121bU,
+ 0x09122436U, 0xc98f038cU, 0x87132635U, 0x4e9c25b9U,
+ 0xe1dfa37cU, 0x2e5cb8e4U, 0xe4d5b762U, 0xe0dda77aU,
+ 0xebcb8b40U, 0x903d7a47U, 0xa455aaffU, 0x1e3c7844U,
+ 0x85172e39U, 0x60c09d5dU, 0x00000000U, 0x254a94deU,
+ 0xf4f5f702U, 0xf1ffe31cU, 0x94356a5fU, 0x0b162c3aU,
+ 0xe7d3bb68U, 0x75eac923U, 0xefc39b58U, 0x3468d0b8U,
+ 0x3162c4a6U, 0xd4b577c2U, 0xd0bd67daU, 0x86112233U,
+ 0x7efce519U, 0xad478ec9U, 0xfde7d334U, 0x2952a4f6U,
+ 0x3060c0a0U, 0x3b76ec9aU, 0x9f234665U, 0xf8edc72aU,
+ 0xc6913faeU, 0x13264c6aU, 0x060c1814U, 0x050a141eU,
+ 0xc59733a4U, 0x11224466U, 0x77eec12fU, 0x7cf8ed15U,
+ 0x7af4f501U, 0x78f0fd0dU, 0x366cd8b4U, 0x1c387048U,
+ 0x3972e496U, 0x59b279cbU, 0x18306050U, 0x56ac45e9U,
+ 0xb37bf68dU, 0xb07dfa87U, 0x244890d8U, 0x204080c0U,
+ 0xb279f28bU, 0x9239724bU, 0xa35bb6edU, 0xc09d27baU,
+ 0x44880d85U, 0x62c49551U, 0x10204060U, 0xb475ea9fU,
+ 0x84152a3fU, 0x43861197U, 0x933b764dU, 0xc2992fb6U,
+ 0x4a9435a1U, 0xbd67cea9U, 0x8f030605U, 0x2d5ab4eeU,
+ 0xbc65caafU, 0x9c254a6fU, 0x6ad4b561U, 0x40801d9dU,
+ 0xcf831b98U, 0xa259b2ebU, 0x801d3a27U, 0x4f9e21bfU,
+ 0x1f3e7c42U, 0xca890f86U, 0xaa4992dbU, 0x42841591U,
+};
+
+static const ulong32 T1[256] = {
+ 0x69babbd2U, 0xa854e54dU, 0x5e2fe2bcU, 0xe87425cdU,
+ 0xa653f751U, 0xbbd3d06bU, 0xb9d2d66fU, 0x9a4db329U,
+ 0xa050fd5dU, 0x45accf8aU, 0x078d090eU, 0x63bfa5c6U,
+ 0xe0703dddU, 0xa452f155U, 0x299a7b52U, 0x984cb52dU,
+ 0xc9ea468fU, 0xb7d5c473U, 0x33975566U, 0xbfd1dc63U,
+ 0x6633aaccU, 0xa251fb59U, 0xb65bc771U, 0x51a6f3a2U,
+ 0xa1defe5fU, 0x9048ad3dU, 0x4da8d79aU, 0x2f99715eU,
+ 0xabdbe04bU, 0x6432acc8U, 0x73b795e6U, 0xe5fc32d7U,
+ 0xdbe370abU, 0x219e6342U, 0x3f91417eU, 0x2b9b7d56U,
+ 0xd9e276afU, 0x6bbbbdd6U, 0x82419b19U, 0xdc6e79a5U,
+ 0x57a5f9aeU, 0x8bcb800bU, 0xd66b67b1U, 0x3795596eU,
+ 0x5fa1e1beU, 0xfbf310ebU, 0x7fb181feU, 0x04020c08U,
+ 0x85cc9217U, 0x95c4a237U, 0x3a1d4e74U, 0x28147850U,
+ 0x9bc3b02bU, 0xc6635791U, 0xa9dae64fU, 0xba5dd369U,
+ 0xbe5fdf61U, 0xa5dcf257U, 0xfa7d13e9U, 0x87cd9413U,
+ 0xfe7f1fe1U, 0xb45ac175U, 0xd86c75adU, 0xb85cd56dU,
+ 0xf3f708fbU, 0x4c26d498U, 0xe3ff38dbU, 0xc7ed5493U,
+ 0xcde84a87U, 0x279d694eU, 0xde6f7fa1U, 0x018e0302U,
+ 0x32195664U, 0x5da0e7baU, 0xfdf01ae7U, 0x0f89111eU,
+ 0x1e0f223cU, 0x0e07121cU, 0x43afc586U, 0xebfb20cbU,
+ 0x10083020U, 0x2a157e54U, 0x1a0d2e34U, 0x08041810U,
+ 0x02010604U, 0xc864458dU, 0xa3dff85bU, 0xec7629c5U,
+ 0xf2790bf9U, 0xa7ddf453U, 0x7a3d8ef4U, 0x2c167458U,
+ 0x7e3f82fcU, 0x6e37b2dcU, 0xda6d73a9U, 0x703890e0U,
+ 0x6fb9b1deU, 0xe67337d1U, 0xcfe94c83U, 0x6a35bed4U,
+ 0xaa55e349U, 0xe2713bd9U, 0xf67b07f1U, 0x058c0f0aU,
+ 0xe47231d5U, 0x0d88171aU, 0xf1f60effU, 0x542afca8U,
+ 0x7c3e84f8U, 0xbc5ed965U, 0x4e27d29cU, 0x8c468905U,
+ 0x180c2830U, 0xca654389U, 0xd0686dbdU, 0xc2615b99U,
+ 0x06030a0cU, 0x9fc1bc23U, 0xae57ef41U, 0xb1d6ce7fU,
+ 0xafd9ec43U, 0xb058cd7dU, 0xadd8ea47U, 0xcc664985U,
+ 0xb3d7c87bU, 0x743a9ce8U, 0x8dc88a07U, 0x783c88f0U,
+ 0xe9fa26cfU, 0x31965362U, 0x53a7f5a6U, 0x2d98775aU,
+ 0xc5ec5297U, 0x6db8b7daU, 0x93c7a83bU, 0x41aec382U,
+ 0xd2696bb9U, 0x964ba731U, 0x4babdd96U, 0x4fa9d19eU,
+ 0xce674f81U, 0x140a3c28U, 0x8e478f01U, 0xf9f216efU,
+ 0x77b599eeU, 0x4422cc88U, 0xd7e564b3U, 0xc1ee5e9fU,
+ 0x61bea3c2U, 0x562bfaacU, 0x1f81213eU, 0x24126c48U,
+ 0x1b832d36U, 0x361b5a6cU, 0x1c0e2438U, 0x4623ca8cU,
+ 0xf7f504f3U, 0x8a458309U, 0x4221c684U, 0x81ce9e1fU,
+ 0x9249ab39U, 0x582ce8b0U, 0xeff92cc3U, 0xd1e66ebfU,
+ 0x71b693e2U, 0x5028f0a0U, 0x2e17725cU, 0x19822b32U,
+ 0x341a5c68U, 0x0b8b1d16U, 0xe1fe3edfU, 0x098a1b12U,
+ 0x12093624U, 0x8fc98c03U, 0x13873526U, 0x9c4eb925U,
+ 0xdfe17ca3U, 0x5c2ee4b8U, 0xd5e462b7U, 0xdde07aa7U,
+ 0xcbeb408bU, 0x3d90477aU, 0x55a4ffaaU, 0x3c1e4478U,
+ 0x1785392eU, 0xc0605d9dU, 0x00000000U, 0x4a25de94U,
+ 0xf5f402f7U, 0xfff11ce3U, 0x35945f6aU, 0x160b3a2cU,
+ 0xd3e768bbU, 0xea7523c9U, 0xc3ef589bU, 0x6834b8d0U,
+ 0x6231a6c4U, 0xb5d4c277U, 0xbdd0da67U, 0x11863322U,
+ 0xfc7e19e5U, 0x47adc98eU, 0xe7fd34d3U, 0x5229f6a4U,
+ 0x6030a0c0U, 0x763b9aecU, 0x239f6546U, 0xedf82ac7U,
+ 0x91c6ae3fU, 0x26136a4cU, 0x0c061418U, 0x0a051e14U,
+ 0x97c5a433U, 0x22116644U, 0xee772fc1U, 0xf87c15edU,
+ 0xf47a01f5U, 0xf0780dfdU, 0x6c36b4d8U, 0x381c4870U,
+ 0x723996e4U, 0xb259cb79U, 0x30185060U, 0xac56e945U,
+ 0x7bb38df6U, 0x7db087faU, 0x4824d890U, 0x4020c080U,
+ 0x79b28bf2U, 0x39924b72U, 0x5ba3edb6U, 0x9dc0ba27U,
+ 0x8844850dU, 0xc4625195U, 0x20106040U, 0x75b49feaU,
+ 0x15843f2aU, 0x86439711U, 0x3b934d76U, 0x99c2b62fU,
+ 0x944aa135U, 0x67bda9ceU, 0x038f0506U, 0x5a2deeb4U,
+ 0x65bcafcaU, 0x259c6f4aU, 0xd46a61b5U, 0x80409d1dU,
+ 0x83cf981bU, 0x59a2ebb2U, 0x1d80273aU, 0x9e4fbf21U,
+ 0x3e1f427cU, 0x89ca860fU, 0x49aadb92U, 0x84429115U,
+};
+
+static const ulong32 T2[256] = {
+ 0xd2bbba69U, 0x4de554a8U, 0xbce22f5eU, 0xcd2574e8U,
+ 0x51f753a6U, 0x6bd0d3bbU, 0x6fd6d2b9U, 0x29b34d9aU,
+ 0x5dfd50a0U, 0x8acfac45U, 0x0e098d07U, 0xc6a5bf63U,
+ 0xdd3d70e0U, 0x55f152a4U, 0x527b9a29U, 0x2db54c98U,
+ 0x8f46eac9U, 0x73c4d5b7U, 0x66559733U, 0x63dcd1bfU,
+ 0xccaa3366U, 0x59fb51a2U, 0x71c75bb6U, 0xa2f3a651U,
+ 0x5ffedea1U, 0x3dad4890U, 0x9ad7a84dU, 0x5e71992fU,
+ 0x4be0dbabU, 0xc8ac3264U, 0xe695b773U, 0xd732fce5U,
+ 0xab70e3dbU, 0x42639e21U, 0x7e41913fU, 0x567d9b2bU,
+ 0xaf76e2d9U, 0xd6bdbb6bU, 0x199b4182U, 0xa5796edcU,
+ 0xaef9a557U, 0x0b80cb8bU, 0xb1676bd6U, 0x6e599537U,
+ 0xbee1a15fU, 0xeb10f3fbU, 0xfe81b17fU, 0x080c0204U,
+ 0x1792cc85U, 0x37a2c495U, 0x744e1d3aU, 0x50781428U,
+ 0x2bb0c39bU, 0x915763c6U, 0x4fe6daa9U, 0x69d35dbaU,
+ 0x61df5fbeU, 0x57f2dca5U, 0xe9137dfaU, 0x1394cd87U,
+ 0xe11f7ffeU, 0x75c15ab4U, 0xad756cd8U, 0x6dd55cb8U,
+ 0xfb08f7f3U, 0x98d4264cU, 0xdb38ffe3U, 0x9354edc7U,
+ 0x874ae8cdU, 0x4e699d27U, 0xa17f6fdeU, 0x02038e01U,
+ 0x64561932U, 0xbae7a05dU, 0xe71af0fdU, 0x1e11890fU,
+ 0x3c220f1eU, 0x1c12070eU, 0x86c5af43U, 0xcb20fbebU,
+ 0x20300810U, 0x547e152aU, 0x342e0d1aU, 0x10180408U,
+ 0x04060102U, 0x8d4564c8U, 0x5bf8dfa3U, 0xc52976ecU,
+ 0xf90b79f2U, 0x53f4dda7U, 0xf48e3d7aU, 0x5874162cU,
+ 0xfc823f7eU, 0xdcb2376eU, 0xa9736ddaU, 0xe0903870U,
+ 0xdeb1b96fU, 0xd13773e6U, 0x834ce9cfU, 0xd4be356aU,
+ 0x49e355aaU, 0xd93b71e2U, 0xf1077bf6U, 0x0a0f8c05U,
+ 0xd53172e4U, 0x1a17880dU, 0xff0ef6f1U, 0xa8fc2a54U,
+ 0xf8843e7cU, 0x65d95ebcU, 0x9cd2274eU, 0x0589468cU,
+ 0x30280c18U, 0x894365caU, 0xbd6d68d0U, 0x995b61c2U,
+ 0x0c0a0306U, 0x23bcc19fU, 0x41ef57aeU, 0x7fced6b1U,
+ 0x43ecd9afU, 0x7dcd58b0U, 0x47ead8adU, 0x854966ccU,
+ 0x7bc8d7b3U, 0xe89c3a74U, 0x078ac88dU, 0xf0883c78U,
+ 0xcf26fae9U, 0x62539631U, 0xa6f5a753U, 0x5a77982dU,
+ 0x9752ecc5U, 0xdab7b86dU, 0x3ba8c793U, 0x82c3ae41U,
+ 0xb96b69d2U, 0x31a74b96U, 0x96ddab4bU, 0x9ed1a94fU,
+ 0x814f67ceU, 0x283c0a14U, 0x018f478eU, 0xef16f2f9U,
+ 0xee99b577U, 0x88cc2244U, 0xb364e5d7U, 0x9f5eeec1U,
+ 0xc2a3be61U, 0xacfa2b56U, 0x3e21811fU, 0x486c1224U,
+ 0x362d831bU, 0x6c5a1b36U, 0x38240e1cU, 0x8cca2346U,
+ 0xf304f5f7U, 0x0983458aU, 0x84c62142U, 0x1f9ece81U,
+ 0x39ab4992U, 0xb0e82c58U, 0xc32cf9efU, 0xbf6ee6d1U,
+ 0xe293b671U, 0xa0f02850U, 0x5c72172eU, 0x322b8219U,
+ 0x685c1a34U, 0x161d8b0bU, 0xdf3efee1U, 0x121b8a09U,
+ 0x24360912U, 0x038cc98fU, 0x26358713U, 0x25b94e9cU,
+ 0xa37ce1dfU, 0xb8e42e5cU, 0xb762e4d5U, 0xa77ae0ddU,
+ 0x8b40ebcbU, 0x7a47903dU, 0xaaffa455U, 0x78441e3cU,
+ 0x2e398517U, 0x9d5d60c0U, 0x00000000U, 0x94de254aU,
+ 0xf702f4f5U, 0xe31cf1ffU, 0x6a5f9435U, 0x2c3a0b16U,
+ 0xbb68e7d3U, 0xc92375eaU, 0x9b58efc3U, 0xd0b83468U,
+ 0xc4a63162U, 0x77c2d4b5U, 0x67dad0bdU, 0x22338611U,
+ 0xe5197efcU, 0x8ec9ad47U, 0xd334fde7U, 0xa4f62952U,
+ 0xc0a03060U, 0xec9a3b76U, 0x46659f23U, 0xc72af8edU,
+ 0x3faec691U, 0x4c6a1326U, 0x1814060cU, 0x141e050aU,
+ 0x33a4c597U, 0x44661122U, 0xc12f77eeU, 0xed157cf8U,
+ 0xf5017af4U, 0xfd0d78f0U, 0xd8b4366cU, 0x70481c38U,
+ 0xe4963972U, 0x79cb59b2U, 0x60501830U, 0x45e956acU,
+ 0xf68db37bU, 0xfa87b07dU, 0x90d82448U, 0x80c02040U,
+ 0xf28bb279U, 0x724b9239U, 0xb6eda35bU, 0x27bac09dU,
+ 0x0d854488U, 0x955162c4U, 0x40601020U, 0xea9fb475U,
+ 0x2a3f8415U, 0x11974386U, 0x764d933bU, 0x2fb6c299U,
+ 0x35a14a94U, 0xcea9bd67U, 0x06058f03U, 0xb4ee2d5aU,
+ 0xcaafbc65U, 0x4a6f9c25U, 0xb5616ad4U, 0x1d9d4080U,
+ 0x1b98cf83U, 0xb2eba259U, 0x3a27801dU, 0x21bf4f9eU,
+ 0x7c421f3eU, 0x0f86ca89U, 0x92dbaa49U, 0x15914284U,
+};
+
+static const ulong32 T3[256] = {
+ 0xbbd269baU, 0xe54da854U, 0xe2bc5e2fU, 0x25cde874U,
+ 0xf751a653U, 0xd06bbbd3U, 0xd66fb9d2U, 0xb3299a4dU,
+ 0xfd5da050U, 0xcf8a45acU, 0x090e078dU, 0xa5c663bfU,
+ 0x3ddde070U, 0xf155a452U, 0x7b52299aU, 0xb52d984cU,
+ 0x468fc9eaU, 0xc473b7d5U, 0x55663397U, 0xdc63bfd1U,
+ 0xaacc6633U, 0xfb59a251U, 0xc771b65bU, 0xf3a251a6U,
+ 0xfe5fa1deU, 0xad3d9048U, 0xd79a4da8U, 0x715e2f99U,
+ 0xe04babdbU, 0xacc86432U, 0x95e673b7U, 0x32d7e5fcU,
+ 0x70abdbe3U, 0x6342219eU, 0x417e3f91U, 0x7d562b9bU,
+ 0x76afd9e2U, 0xbdd66bbbU, 0x9b198241U, 0x79a5dc6eU,
+ 0xf9ae57a5U, 0x800b8bcbU, 0x67b1d66bU, 0x596e3795U,
+ 0xe1be5fa1U, 0x10ebfbf3U, 0x81fe7fb1U, 0x0c080402U,
+ 0x921785ccU, 0xa23795c4U, 0x4e743a1dU, 0x78502814U,
+ 0xb02b9bc3U, 0x5791c663U, 0xe64fa9daU, 0xd369ba5dU,
+ 0xdf61be5fU, 0xf257a5dcU, 0x13e9fa7dU, 0x941387cdU,
+ 0x1fe1fe7fU, 0xc175b45aU, 0x75add86cU, 0xd56db85cU,
+ 0x08fbf3f7U, 0xd4984c26U, 0x38dbe3ffU, 0x5493c7edU,
+ 0x4a87cde8U, 0x694e279dU, 0x7fa1de6fU, 0x0302018eU,
+ 0x56643219U, 0xe7ba5da0U, 0x1ae7fdf0U, 0x111e0f89U,
+ 0x223c1e0fU, 0x121c0e07U, 0xc58643afU, 0x20cbebfbU,
+ 0x30201008U, 0x7e542a15U, 0x2e341a0dU, 0x18100804U,
+ 0x06040201U, 0x458dc864U, 0xf85ba3dfU, 0x29c5ec76U,
+ 0x0bf9f279U, 0xf453a7ddU, 0x8ef47a3dU, 0x74582c16U,
+ 0x82fc7e3fU, 0xb2dc6e37U, 0x73a9da6dU, 0x90e07038U,
+ 0xb1de6fb9U, 0x37d1e673U, 0x4c83cfe9U, 0xbed46a35U,
+ 0xe349aa55U, 0x3bd9e271U, 0x07f1f67bU, 0x0f0a058cU,
+ 0x31d5e472U, 0x171a0d88U, 0x0efff1f6U, 0xfca8542aU,
+ 0x84f87c3eU, 0xd965bc5eU, 0xd29c4e27U, 0x89058c46U,
+ 0x2830180cU, 0x4389ca65U, 0x6dbdd068U, 0x5b99c261U,
+ 0x0a0c0603U, 0xbc239fc1U, 0xef41ae57U, 0xce7fb1d6U,
+ 0xec43afd9U, 0xcd7db058U, 0xea47add8U, 0x4985cc66U,
+ 0xc87bb3d7U, 0x9ce8743aU, 0x8a078dc8U, 0x88f0783cU,
+ 0x26cfe9faU, 0x53623196U, 0xf5a653a7U, 0x775a2d98U,
+ 0x5297c5ecU, 0xb7da6db8U, 0xa83b93c7U, 0xc38241aeU,
+ 0x6bb9d269U, 0xa731964bU, 0xdd964babU, 0xd19e4fa9U,
+ 0x4f81ce67U, 0x3c28140aU, 0x8f018e47U, 0x16eff9f2U,
+ 0x99ee77b5U, 0xcc884422U, 0x64b3d7e5U, 0x5e9fc1eeU,
+ 0xa3c261beU, 0xfaac562bU, 0x213e1f81U, 0x6c482412U,
+ 0x2d361b83U, 0x5a6c361bU, 0x24381c0eU, 0xca8c4623U,
+ 0x04f3f7f5U, 0x83098a45U, 0xc6844221U, 0x9e1f81ceU,
+ 0xab399249U, 0xe8b0582cU, 0x2cc3eff9U, 0x6ebfd1e6U,
+ 0x93e271b6U, 0xf0a05028U, 0x725c2e17U, 0x2b321982U,
+ 0x5c68341aU, 0x1d160b8bU, 0x3edfe1feU, 0x1b12098aU,
+ 0x36241209U, 0x8c038fc9U, 0x35261387U, 0xb9259c4eU,
+ 0x7ca3dfe1U, 0xe4b85c2eU, 0x62b7d5e4U, 0x7aa7dde0U,
+ 0x408bcbebU, 0x477a3d90U, 0xffaa55a4U, 0x44783c1eU,
+ 0x392e1785U, 0x5d9dc060U, 0x00000000U, 0xde944a25U,
+ 0x02f7f5f4U, 0x1ce3fff1U, 0x5f6a3594U, 0x3a2c160bU,
+ 0x68bbd3e7U, 0x23c9ea75U, 0x589bc3efU, 0xb8d06834U,
+ 0xa6c46231U, 0xc277b5d4U, 0xda67bdd0U, 0x33221186U,
+ 0x19e5fc7eU, 0xc98e47adU, 0x34d3e7fdU, 0xf6a45229U,
+ 0xa0c06030U, 0x9aec763bU, 0x6546239fU, 0x2ac7edf8U,
+ 0xae3f91c6U, 0x6a4c2613U, 0x14180c06U, 0x1e140a05U,
+ 0xa43397c5U, 0x66442211U, 0x2fc1ee77U, 0x15edf87cU,
+ 0x01f5f47aU, 0x0dfdf078U, 0xb4d86c36U, 0x4870381cU,
+ 0x96e47239U, 0xcb79b259U, 0x50603018U, 0xe945ac56U,
+ 0x8df67bb3U, 0x87fa7db0U, 0xd8904824U, 0xc0804020U,
+ 0x8bf279b2U, 0x4b723992U, 0xedb65ba3U, 0xba279dc0U,
+ 0x850d8844U, 0x5195c462U, 0x60402010U, 0x9fea75b4U,
+ 0x3f2a1584U, 0x97118643U, 0x4d763b93U, 0xb62f99c2U,
+ 0xa135944aU, 0xa9ce67bdU, 0x0506038fU, 0xeeb45a2dU,
+ 0xafca65bcU, 0x6f4a259cU, 0x61b5d46aU, 0x9d1d8040U,
+ 0x981b83cfU, 0xebb259a2U, 0x273a1d80U, 0xbf219e4fU,
+ 0x427c3e1fU, 0x860f89caU, 0xdb9249aaU, 0x91158442U,
+};
+
+static const ulong32 T4[256] = {
+ 0xbabababaU, 0x54545454U, 0x2f2f2f2fU, 0x74747474U,
+ 0x53535353U, 0xd3d3d3d3U, 0xd2d2d2d2U, 0x4d4d4d4dU,
+ 0x50505050U, 0xacacacacU, 0x8d8d8d8dU, 0xbfbfbfbfU,
+ 0x70707070U, 0x52525252U, 0x9a9a9a9aU, 0x4c4c4c4cU,
+ 0xeaeaeaeaU, 0xd5d5d5d5U, 0x97979797U, 0xd1d1d1d1U,
+ 0x33333333U, 0x51515151U, 0x5b5b5b5bU, 0xa6a6a6a6U,
+ 0xdedededeU, 0x48484848U, 0xa8a8a8a8U, 0x99999999U,
+ 0xdbdbdbdbU, 0x32323232U, 0xb7b7b7b7U, 0xfcfcfcfcU,
+ 0xe3e3e3e3U, 0x9e9e9e9eU, 0x91919191U, 0x9b9b9b9bU,
+ 0xe2e2e2e2U, 0xbbbbbbbbU, 0x41414141U, 0x6e6e6e6eU,
+ 0xa5a5a5a5U, 0xcbcbcbcbU, 0x6b6b6b6bU, 0x95959595U,
+ 0xa1a1a1a1U, 0xf3f3f3f3U, 0xb1b1b1b1U, 0x02020202U,
+ 0xccccccccU, 0xc4c4c4c4U, 0x1d1d1d1dU, 0x14141414U,
+ 0xc3c3c3c3U, 0x63636363U, 0xdadadadaU, 0x5d5d5d5dU,
+ 0x5f5f5f5fU, 0xdcdcdcdcU, 0x7d7d7d7dU, 0xcdcdcdcdU,
+ 0x7f7f7f7fU, 0x5a5a5a5aU, 0x6c6c6c6cU, 0x5c5c5c5cU,
+ 0xf7f7f7f7U, 0x26262626U, 0xffffffffU, 0xededededU,
+ 0xe8e8e8e8U, 0x9d9d9d9dU, 0x6f6f6f6fU, 0x8e8e8e8eU,
+ 0x19191919U, 0xa0a0a0a0U, 0xf0f0f0f0U, 0x89898989U,
+ 0x0f0f0f0fU, 0x07070707U, 0xafafafafU, 0xfbfbfbfbU,
+ 0x08080808U, 0x15151515U, 0x0d0d0d0dU, 0x04040404U,
+ 0x01010101U, 0x64646464U, 0xdfdfdfdfU, 0x76767676U,
+ 0x79797979U, 0xddddddddU, 0x3d3d3d3dU, 0x16161616U,
+ 0x3f3f3f3fU, 0x37373737U, 0x6d6d6d6dU, 0x38383838U,
+ 0xb9b9b9b9U, 0x73737373U, 0xe9e9e9e9U, 0x35353535U,
+ 0x55555555U, 0x71717171U, 0x7b7b7b7bU, 0x8c8c8c8cU,
+ 0x72727272U, 0x88888888U, 0xf6f6f6f6U, 0x2a2a2a2aU,
+ 0x3e3e3e3eU, 0x5e5e5e5eU, 0x27272727U, 0x46464646U,
+ 0x0c0c0c0cU, 0x65656565U, 0x68686868U, 0x61616161U,
+ 0x03030303U, 0xc1c1c1c1U, 0x57575757U, 0xd6d6d6d6U,
+ 0xd9d9d9d9U, 0x58585858U, 0xd8d8d8d8U, 0x66666666U,
+ 0xd7d7d7d7U, 0x3a3a3a3aU, 0xc8c8c8c8U, 0x3c3c3c3cU,
+ 0xfafafafaU, 0x96969696U, 0xa7a7a7a7U, 0x98989898U,
+ 0xececececU, 0xb8b8b8b8U, 0xc7c7c7c7U, 0xaeaeaeaeU,
+ 0x69696969U, 0x4b4b4b4bU, 0xababababU, 0xa9a9a9a9U,
+ 0x67676767U, 0x0a0a0a0aU, 0x47474747U, 0xf2f2f2f2U,
+ 0xb5b5b5b5U, 0x22222222U, 0xe5e5e5e5U, 0xeeeeeeeeU,
+ 0xbebebebeU, 0x2b2b2b2bU, 0x81818181U, 0x12121212U,
+ 0x83838383U, 0x1b1b1b1bU, 0x0e0e0e0eU, 0x23232323U,
+ 0xf5f5f5f5U, 0x45454545U, 0x21212121U, 0xcecececeU,
+ 0x49494949U, 0x2c2c2c2cU, 0xf9f9f9f9U, 0xe6e6e6e6U,
+ 0xb6b6b6b6U, 0x28282828U, 0x17171717U, 0x82828282U,
+ 0x1a1a1a1aU, 0x8b8b8b8bU, 0xfefefefeU, 0x8a8a8a8aU,
+ 0x09090909U, 0xc9c9c9c9U, 0x87878787U, 0x4e4e4e4eU,
+ 0xe1e1e1e1U, 0x2e2e2e2eU, 0xe4e4e4e4U, 0xe0e0e0e0U,
+ 0xebebebebU, 0x90909090U, 0xa4a4a4a4U, 0x1e1e1e1eU,
+ 0x85858585U, 0x60606060U, 0x00000000U, 0x25252525U,
+ 0xf4f4f4f4U, 0xf1f1f1f1U, 0x94949494U, 0x0b0b0b0bU,
+ 0xe7e7e7e7U, 0x75757575U, 0xefefefefU, 0x34343434U,
+ 0x31313131U, 0xd4d4d4d4U, 0xd0d0d0d0U, 0x86868686U,
+ 0x7e7e7e7eU, 0xadadadadU, 0xfdfdfdfdU, 0x29292929U,
+ 0x30303030U, 0x3b3b3b3bU, 0x9f9f9f9fU, 0xf8f8f8f8U,
+ 0xc6c6c6c6U, 0x13131313U, 0x06060606U, 0x05050505U,
+ 0xc5c5c5c5U, 0x11111111U, 0x77777777U, 0x7c7c7c7cU,
+ 0x7a7a7a7aU, 0x78787878U, 0x36363636U, 0x1c1c1c1cU,
+ 0x39393939U, 0x59595959U, 0x18181818U, 0x56565656U,
+ 0xb3b3b3b3U, 0xb0b0b0b0U, 0x24242424U, 0x20202020U,
+ 0xb2b2b2b2U, 0x92929292U, 0xa3a3a3a3U, 0xc0c0c0c0U,
+ 0x44444444U, 0x62626262U, 0x10101010U, 0xb4b4b4b4U,
+ 0x84848484U, 0x43434343U, 0x93939393U, 0xc2c2c2c2U,
+ 0x4a4a4a4aU, 0xbdbdbdbdU, 0x8f8f8f8fU, 0x2d2d2d2dU,
+ 0xbcbcbcbcU, 0x9c9c9c9cU, 0x6a6a6a6aU, 0x40404040U,
+ 0xcfcfcfcfU, 0xa2a2a2a2U, 0x80808080U, 0x4f4f4f4fU,
+ 0x1f1f1f1fU, 0xcacacacaU, 0xaaaaaaaaU, 0x42424242U,
+};
+
+static const ulong32 T5[256] = {
+ 0x00000000U, 0x01020608U, 0x02040c10U, 0x03060a18U,
+ 0x04081820U, 0x050a1e28U, 0x060c1430U, 0x070e1238U,
+ 0x08103040U, 0x09123648U, 0x0a143c50U, 0x0b163a58U,
+ 0x0c182860U, 0x0d1a2e68U, 0x0e1c2470U, 0x0f1e2278U,
+ 0x10206080U, 0x11226688U, 0x12246c90U, 0x13266a98U,
+ 0x142878a0U, 0x152a7ea8U, 0x162c74b0U, 0x172e72b8U,
+ 0x183050c0U, 0x193256c8U, 0x1a345cd0U, 0x1b365ad8U,
+ 0x1c3848e0U, 0x1d3a4ee8U, 0x1e3c44f0U, 0x1f3e42f8U,
+ 0x2040c01dU, 0x2142c615U, 0x2244cc0dU, 0x2346ca05U,
+ 0x2448d83dU, 0x254ade35U, 0x264cd42dU, 0x274ed225U,
+ 0x2850f05dU, 0x2952f655U, 0x2a54fc4dU, 0x2b56fa45U,
+ 0x2c58e87dU, 0x2d5aee75U, 0x2e5ce46dU, 0x2f5ee265U,
+ 0x3060a09dU, 0x3162a695U, 0x3264ac8dU, 0x3366aa85U,
+ 0x3468b8bdU, 0x356abeb5U, 0x366cb4adU, 0x376eb2a5U,
+ 0x387090ddU, 0x397296d5U, 0x3a749ccdU, 0x3b769ac5U,
+ 0x3c7888fdU, 0x3d7a8ef5U, 0x3e7c84edU, 0x3f7e82e5U,
+ 0x40809d3aU, 0x41829b32U, 0x4284912aU, 0x43869722U,
+ 0x4488851aU, 0x458a8312U, 0x468c890aU, 0x478e8f02U,
+ 0x4890ad7aU, 0x4992ab72U, 0x4a94a16aU, 0x4b96a762U,
+ 0x4c98b55aU, 0x4d9ab352U, 0x4e9cb94aU, 0x4f9ebf42U,
+ 0x50a0fdbaU, 0x51a2fbb2U, 0x52a4f1aaU, 0x53a6f7a2U,
+ 0x54a8e59aU, 0x55aae392U, 0x56ace98aU, 0x57aeef82U,
+ 0x58b0cdfaU, 0x59b2cbf2U, 0x5ab4c1eaU, 0x5bb6c7e2U,
+ 0x5cb8d5daU, 0x5dbad3d2U, 0x5ebcd9caU, 0x5fbedfc2U,
+ 0x60c05d27U, 0x61c25b2fU, 0x62c45137U, 0x63c6573fU,
+ 0x64c84507U, 0x65ca430fU, 0x66cc4917U, 0x67ce4f1fU,
+ 0x68d06d67U, 0x69d26b6fU, 0x6ad46177U, 0x6bd6677fU,
+ 0x6cd87547U, 0x6dda734fU, 0x6edc7957U, 0x6fde7f5fU,
+ 0x70e03da7U, 0x71e23bafU, 0x72e431b7U, 0x73e637bfU,
+ 0x74e82587U, 0x75ea238fU, 0x76ec2997U, 0x77ee2f9fU,
+ 0x78f00de7U, 0x79f20befU, 0x7af401f7U, 0x7bf607ffU,
+ 0x7cf815c7U, 0x7dfa13cfU, 0x7efc19d7U, 0x7ffe1fdfU,
+ 0x801d2774U, 0x811f217cU, 0x82192b64U, 0x831b2d6cU,
+ 0x84153f54U, 0x8517395cU, 0x86113344U, 0x8713354cU,
+ 0x880d1734U, 0x890f113cU, 0x8a091b24U, 0x8b0b1d2cU,
+ 0x8c050f14U, 0x8d07091cU, 0x8e010304U, 0x8f03050cU,
+ 0x903d47f4U, 0x913f41fcU, 0x92394be4U, 0x933b4decU,
+ 0x94355fd4U, 0x953759dcU, 0x963153c4U, 0x973355ccU,
+ 0x982d77b4U, 0x992f71bcU, 0x9a297ba4U, 0x9b2b7dacU,
+ 0x9c256f94U, 0x9d27699cU, 0x9e216384U, 0x9f23658cU,
+ 0xa05de769U, 0xa15fe161U, 0xa259eb79U, 0xa35bed71U,
+ 0xa455ff49U, 0xa557f941U, 0xa651f359U, 0xa753f551U,
+ 0xa84dd729U, 0xa94fd121U, 0xaa49db39U, 0xab4bdd31U,
+ 0xac45cf09U, 0xad47c901U, 0xae41c319U, 0xaf43c511U,
+ 0xb07d87e9U, 0xb17f81e1U, 0xb2798bf9U, 0xb37b8df1U,
+ 0xb4759fc9U, 0xb57799c1U, 0xb67193d9U, 0xb77395d1U,
+ 0xb86db7a9U, 0xb96fb1a1U, 0xba69bbb9U, 0xbb6bbdb1U,
+ 0xbc65af89U, 0xbd67a981U, 0xbe61a399U, 0xbf63a591U,
+ 0xc09dba4eU, 0xc19fbc46U, 0xc299b65eU, 0xc39bb056U,
+ 0xc495a26eU, 0xc597a466U, 0xc691ae7eU, 0xc793a876U,
+ 0xc88d8a0eU, 0xc98f8c06U, 0xca89861eU, 0xcb8b8016U,
+ 0xcc85922eU, 0xcd879426U, 0xce819e3eU, 0xcf839836U,
+ 0xd0bddaceU, 0xd1bfdcc6U, 0xd2b9d6deU, 0xd3bbd0d6U,
+ 0xd4b5c2eeU, 0xd5b7c4e6U, 0xd6b1cefeU, 0xd7b3c8f6U,
+ 0xd8adea8eU, 0xd9afec86U, 0xdaa9e69eU, 0xdbabe096U,
+ 0xdca5f2aeU, 0xdda7f4a6U, 0xdea1febeU, 0xdfa3f8b6U,
+ 0xe0dd7a53U, 0xe1df7c5bU, 0xe2d97643U, 0xe3db704bU,
+ 0xe4d56273U, 0xe5d7647bU, 0xe6d16e63U, 0xe7d3686bU,
+ 0xe8cd4a13U, 0xe9cf4c1bU, 0xeac94603U, 0xebcb400bU,
+ 0xecc55233U, 0xedc7543bU, 0xeec15e23U, 0xefc3582bU,
+ 0xf0fd1ad3U, 0xf1ff1cdbU, 0xf2f916c3U, 0xf3fb10cbU,
+ 0xf4f502f3U, 0xf5f704fbU, 0xf6f10ee3U, 0xf7f308ebU,
+ 0xf8ed2a93U, 0xf9ef2c9bU, 0xfae92683U, 0xfbeb208bU,
+ 0xfce532b3U, 0xfde734bbU, 0xfee13ea3U, 0xffe338abU,
+};
+
+/**
+ * The round constants.
+ */
+static const ulong32 rc[] = {
+ 0xba542f74U, 0x53d3d24dU, 0x50ac8dbfU, 0x70529a4cU,
+ 0xead597d1U, 0x33515ba6U, 0xde48a899U, 0xdb32b7fcU,
+ 0xe39e919bU, 0xe2bb416eU, 0xa5cb6b95U, 0xa1f3b102U,
+ 0xccc41d14U, 0xc363da5dU, 0x5fdc7dcdU, 0x7f5a6c5cU,
+ 0xf726ffedU, 0xe89d6f8eU, 0x19a0f089U,
+};
+
+
+
+#else
+
+
+static const ulong32 T0[256] = {
+ 0xa753a6f5U, 0xd3bb6bd0U, 0xe6d1bf6eU, 0x71e2d93bU,
+ 0xd0bd67daU, 0xac458acfU, 0x4d9a29b3U, 0x79f2f90bU,
+ 0x3a74e89cU, 0xc98f038cU, 0x913f7e41U, 0xfce5d732U,
+ 0x1e3c7844U, 0x478e018fU, 0x54a84de5U, 0xbd67cea9U,
+ 0x8c050a0fU, 0xa557aef9U, 0x7af4f501U, 0xfbebcb20U,
+ 0x63c69157U, 0xb86ddab7U, 0xdda753f4U, 0xd4b577c2U,
+ 0xe5d7b364U, 0xb37bf68dU, 0xc59733a4U, 0xbe61c2a3U,
+ 0xa94f9ed1U, 0x880d1a17U, 0x0c183028U, 0xa259b2ebU,
+ 0x3972e496U, 0xdfa35bf8U, 0x2952a4f6U, 0xdaa94fe6U,
+ 0x2b56acfaU, 0xa84d9ad7U, 0xcb8b0b80U, 0x4c982db5U,
+ 0x4b9631a7U, 0x224488ccU, 0xaa4992dbU, 0x244890d8U,
+ 0x4182199bU, 0x70e0dd3dU, 0xa651a2f3U, 0xf9efc32cU,
+ 0x5ab475c1U, 0xe2d9af76U, 0xb07dfa87U, 0x366cd8b4U,
+ 0x7dfae913U, 0xe4d5b762U, 0x3366ccaaU, 0xffe3db38U,
+ 0x60c09d5dU, 0x204080c0U, 0x08102030U, 0x8b0b161dU,
+ 0x5ebc65d9U, 0xab4b96ddU, 0x7ffee11fU, 0x78f0fd0dU,
+ 0x7cf8ed15U, 0x2c58b0e8U, 0x57ae41efU, 0xd2b96fd6U,
+ 0xdca557f2U, 0x6ddaa973U, 0x7efce519U, 0x0d1a342eU,
+ 0x53a651f7U, 0x94356a5fU, 0xc39b2bb0U, 0x2850a0f0U,
+ 0x274e9cd2U, 0x060c1814U, 0x5fbe61dfU, 0xad478ec9U,
+ 0x67ce814fU, 0x5cb86dd5U, 0x55aa49e3U, 0x48903dadU,
+ 0x0e1c3824U, 0x52a455f1U, 0xeac98f46U, 0x42841591U,
+ 0x5bb671c7U, 0x5dba69d3U, 0x3060c0a0U, 0x58b07dcdU,
+ 0x51a259fbU, 0x59b279cbU, 0x3c78f088U, 0x4e9c25b9U,
+ 0x3870e090U, 0x8a09121bU, 0x72e4d531U, 0x14285078U,
+ 0xe7d3bb68U, 0xc6913faeU, 0xdea15ffeU, 0x50a05dfdU,
+ 0x8e010203U, 0x9239724bU, 0xd1bf63dcU, 0x77eec12fU,
+ 0x933b764dU, 0x458a0983U, 0x9a29527bU, 0xce811f9eU,
+ 0x2d5ab4eeU, 0x03060c0aU, 0x62c49551U, 0xb671e293U,
+ 0xb96fdeb1U, 0xbf63c6a5U, 0x96316253U, 0x6bd6b167U,
+ 0x3f7efc82U, 0x070e1c12U, 0x1224486cU, 0xae4182c3U,
+ 0x40801d9dU, 0x3468d0b8U, 0x468c0589U, 0x3e7cf884U,
+ 0xdbab4be0U, 0xcf831b98U, 0xecc59752U, 0xcc851792U,
+ 0xc19f23bcU, 0xa15fbee1U, 0xc09d27baU, 0xd6b17fceU,
+ 0x1d3a744eU, 0xf4f5f702U, 0x61c2995bU, 0x3b76ec9aU,
+ 0x10204060U, 0xd8ad47eaU, 0x68d0bd6dU, 0xa05dbae7U,
+ 0xb17ffe81U, 0x0a14283cU, 0x69d2b96bU, 0x6cd8ad75U,
+ 0x499239abU, 0xfae9cf26U, 0x76ecc529U, 0xc49537a2U,
+ 0x9e214263U, 0x9b2b567dU, 0x6edca579U, 0x992f5e71U,
+ 0xc2992fb6U, 0xb773e695U, 0x982d5a77U, 0xbc65caafU,
+ 0x8f030605U, 0x85172e39U, 0x1f3e7c42U, 0xb475ea9fU,
+ 0xf8edc72aU, 0x11224466U, 0x2e5cb8e4U, 0x00000000U,
+ 0x254a94deU, 0x1c387048U, 0x2a54a8fcU, 0x3d7af48eU,
+ 0x050a141eU, 0x4f9e21bfU, 0x7bf6f107U, 0xb279f28bU,
+ 0x3264c8acU, 0x903d7a47U, 0xaf4386c5U, 0x19326456U,
+ 0xa35bb6edU, 0xf7f3fb08U, 0x73e6d137U, 0x9d274e69U,
+ 0x152a547eU, 0x74e8cd25U, 0xeec19f5eU, 0xca890f86U,
+ 0x9f234665U, 0x0f1e3c22U, 0x1b366c5aU, 0x75eac923U,
+ 0x86112233U, 0x84152a3fU, 0x9c254a6fU, 0x4a9435a1U,
+ 0x97336655U, 0x1a34685cU, 0x65ca8943U, 0xf6f1ff0eU,
+ 0xedc79354U, 0x09122436U, 0xbb6bd6bdU, 0x264c98d4U,
+ 0x831b362dU, 0xebcb8b40U, 0x6fdea17fU, 0x811f3e21U,
+ 0x04081018U, 0x6ad4b561U, 0x43861197U, 0x01020406U,
+ 0x172e5c72U, 0xe1dfa37cU, 0x87132635U, 0xf5f7f304U,
+ 0x8d070e09U, 0xe3dbab70U, 0x23468ccaU, 0x801d3a27U,
+ 0x44880d85U, 0x162c5874U, 0x66cc8549U, 0x214284c6U,
+ 0xfee1df3eU, 0xd5b773c4U, 0x3162c4a6U, 0xd9af43ecU,
+ 0x356ad4beU, 0x18306050U, 0x0204080cU, 0x64c88d45U,
+ 0xf2f9ef16U, 0xf1ffe31cU, 0x56ac45e9U, 0xcd871394U,
+ 0x8219322bU, 0xc88d078aU, 0xba69d2bbU, 0xf0fde71aU,
+ 0xefc39b58U, 0xe9cf834cU, 0xe8cd874aU, 0xfde7d334U,
+ 0x890f1e11U, 0xd7b37bc8U, 0xc7933ba8U, 0xb577ee99U,
+ 0xa455aaffU, 0x2f5ebce2U, 0x95376e59U, 0x13264c6aU,
+ 0x0b162c3aU, 0xf3fbeb10U, 0xe0dda77aU, 0x376edcb2U,
+};
+
+static const ulong32 T1[256] = {
+ 0x53a7f5a6U, 0xbbd3d06bU, 0xd1e66ebfU, 0xe2713bd9U,
+ 0xbdd0da67U, 0x45accf8aU, 0x9a4db329U, 0xf2790bf9U,
+ 0x743a9ce8U, 0x8fc98c03U, 0x3f91417eU, 0xe5fc32d7U,
+ 0x3c1e4478U, 0x8e478f01U, 0xa854e54dU, 0x67bda9ceU,
+ 0x058c0f0aU, 0x57a5f9aeU, 0xf47a01f5U, 0xebfb20cbU,
+ 0xc6635791U, 0x6db8b7daU, 0xa7ddf453U, 0xb5d4c277U,
+ 0xd7e564b3U, 0x7bb38df6U, 0x97c5a433U, 0x61bea3c2U,
+ 0x4fa9d19eU, 0x0d88171aU, 0x180c2830U, 0x59a2ebb2U,
+ 0x723996e4U, 0xa3dff85bU, 0x5229f6a4U, 0xa9dae64fU,
+ 0x562bfaacU, 0x4da8d79aU, 0x8bcb800bU, 0x984cb52dU,
+ 0x964ba731U, 0x4422cc88U, 0x49aadb92U, 0x4824d890U,
+ 0x82419b19U, 0xe0703dddU, 0x51a6f3a2U, 0xeff92cc3U,
+ 0xb45ac175U, 0xd9e276afU, 0x7db087faU, 0x6c36b4d8U,
+ 0xfa7d13e9U, 0xd5e462b7U, 0x6633aaccU, 0xe3ff38dbU,
+ 0xc0605d9dU, 0x4020c080U, 0x10083020U, 0x0b8b1d16U,
+ 0xbc5ed965U, 0x4babdd96U, 0xfe7f1fe1U, 0xf0780dfdU,
+ 0xf87c15edU, 0x582ce8b0U, 0xae57ef41U, 0xb9d2d66fU,
+ 0xa5dcf257U, 0xda6d73a9U, 0xfc7e19e5U, 0x1a0d2e34U,
+ 0xa653f751U, 0x35945f6aU, 0x9bc3b02bU, 0x5028f0a0U,
+ 0x4e27d29cU, 0x0c061418U, 0xbe5fdf61U, 0x47adc98eU,
+ 0xce674f81U, 0xb85cd56dU, 0xaa55e349U, 0x9048ad3dU,
+ 0x1c0e2438U, 0xa452f155U, 0xc9ea468fU, 0x84429115U,
+ 0xb65bc771U, 0xba5dd369U, 0x6030a0c0U, 0xb058cd7dU,
+ 0xa251fb59U, 0xb259cb79U, 0x783c88f0U, 0x9c4eb925U,
+ 0x703890e0U, 0x098a1b12U, 0xe47231d5U, 0x28147850U,
+ 0xd3e768bbU, 0x91c6ae3fU, 0xa1defe5fU, 0xa050fd5dU,
+ 0x018e0302U, 0x39924b72U, 0xbfd1dc63U, 0xee772fc1U,
+ 0x3b934d76U, 0x8a458309U, 0x299a7b52U, 0x81ce9e1fU,
+ 0x5a2deeb4U, 0x06030a0cU, 0xc4625195U, 0x71b693e2U,
+ 0x6fb9b1deU, 0x63bfa5c6U, 0x31965362U, 0xd66b67b1U,
+ 0x7e3f82fcU, 0x0e07121cU, 0x24126c48U, 0x41aec382U,
+ 0x80409d1dU, 0x6834b8d0U, 0x8c468905U, 0x7c3e84f8U,
+ 0xabdbe04bU, 0x83cf981bU, 0xc5ec5297U, 0x85cc9217U,
+ 0x9fc1bc23U, 0x5fa1e1beU, 0x9dc0ba27U, 0xb1d6ce7fU,
+ 0x3a1d4e74U, 0xf5f402f7U, 0xc2615b99U, 0x763b9aecU,
+ 0x20106040U, 0xadd8ea47U, 0xd0686dbdU, 0x5da0e7baU,
+ 0x7fb181feU, 0x140a3c28U, 0xd2696bb9U, 0xd86c75adU,
+ 0x9249ab39U, 0xe9fa26cfU, 0xec7629c5U, 0x95c4a237U,
+ 0x219e6342U, 0x2b9b7d56U, 0xdc6e79a5U, 0x2f99715eU,
+ 0x99c2b62fU, 0x73b795e6U, 0x2d98775aU, 0x65bcafcaU,
+ 0x038f0506U, 0x1785392eU, 0x3e1f427cU, 0x75b49feaU,
+ 0xedf82ac7U, 0x22116644U, 0x5c2ee4b8U, 0x00000000U,
+ 0x4a25de94U, 0x381c4870U, 0x542afca8U, 0x7a3d8ef4U,
+ 0x0a051e14U, 0x9e4fbf21U, 0xf67b07f1U, 0x79b28bf2U,
+ 0x6432acc8U, 0x3d90477aU, 0x43afc586U, 0x32195664U,
+ 0x5ba3edb6U, 0xf3f708fbU, 0xe67337d1U, 0x279d694eU,
+ 0x2a157e54U, 0xe87425cdU, 0xc1ee5e9fU, 0x89ca860fU,
+ 0x239f6546U, 0x1e0f223cU, 0x361b5a6cU, 0xea7523c9U,
+ 0x11863322U, 0x15843f2aU, 0x259c6f4aU, 0x944aa135U,
+ 0x33975566U, 0x341a5c68U, 0xca654389U, 0xf1f60effU,
+ 0xc7ed5493U, 0x12093624U, 0x6bbbbdd6U, 0x4c26d498U,
+ 0x1b832d36U, 0xcbeb408bU, 0xde6f7fa1U, 0x1f81213eU,
+ 0x08041810U, 0xd46a61b5U, 0x86439711U, 0x02010604U,
+ 0x2e17725cU, 0xdfe17ca3U, 0x13873526U, 0xf7f504f3U,
+ 0x078d090eU, 0xdbe370abU, 0x4623ca8cU, 0x1d80273aU,
+ 0x8844850dU, 0x2c167458U, 0xcc664985U, 0x4221c684U,
+ 0xe1fe3edfU, 0xb7d5c473U, 0x6231a6c4U, 0xafd9ec43U,
+ 0x6a35bed4U, 0x30185060U, 0x04020c08U, 0xc864458dU,
+ 0xf9f216efU, 0xfff11ce3U, 0xac56e945U, 0x87cd9413U,
+ 0x19822b32U, 0x8dc88a07U, 0x69babbd2U, 0xfdf01ae7U,
+ 0xc3ef589bU, 0xcfe94c83U, 0xcde84a87U, 0xe7fd34d3U,
+ 0x0f89111eU, 0xb3d7c87bU, 0x93c7a83bU, 0x77b599eeU,
+ 0x55a4ffaaU, 0x5e2fe2bcU, 0x3795596eU, 0x26136a4cU,
+ 0x160b3a2cU, 0xfbf310ebU, 0xdde07aa7U, 0x6e37b2dcU,
+};
+
+static const ulong32 T2[256] = {
+ 0xa6f5a753U, 0x6bd0d3bbU, 0xbf6ee6d1U, 0xd93b71e2U,
+ 0x67dad0bdU, 0x8acfac45U, 0x29b34d9aU, 0xf90b79f2U,
+ 0xe89c3a74U, 0x038cc98fU, 0x7e41913fU, 0xd732fce5U,
+ 0x78441e3cU, 0x018f478eU, 0x4de554a8U, 0xcea9bd67U,
+ 0x0a0f8c05U, 0xaef9a557U, 0xf5017af4U, 0xcb20fbebU,
+ 0x915763c6U, 0xdab7b86dU, 0x53f4dda7U, 0x77c2d4b5U,
+ 0xb364e5d7U, 0xf68db37bU, 0x33a4c597U, 0xc2a3be61U,
+ 0x9ed1a94fU, 0x1a17880dU, 0x30280c18U, 0xb2eba259U,
+ 0xe4963972U, 0x5bf8dfa3U, 0xa4f62952U, 0x4fe6daa9U,
+ 0xacfa2b56U, 0x9ad7a84dU, 0x0b80cb8bU, 0x2db54c98U,
+ 0x31a74b96U, 0x88cc2244U, 0x92dbaa49U, 0x90d82448U,
+ 0x199b4182U, 0xdd3d70e0U, 0xa2f3a651U, 0xc32cf9efU,
+ 0x75c15ab4U, 0xaf76e2d9U, 0xfa87b07dU, 0xd8b4366cU,
+ 0xe9137dfaU, 0xb762e4d5U, 0xccaa3366U, 0xdb38ffe3U,
+ 0x9d5d60c0U, 0x80c02040U, 0x20300810U, 0x161d8b0bU,
+ 0x65d95ebcU, 0x96ddab4bU, 0xe11f7ffeU, 0xfd0d78f0U,
+ 0xed157cf8U, 0xb0e82c58U, 0x41ef57aeU, 0x6fd6d2b9U,
+ 0x57f2dca5U, 0xa9736ddaU, 0xe5197efcU, 0x342e0d1aU,
+ 0x51f753a6U, 0x6a5f9435U, 0x2bb0c39bU, 0xa0f02850U,
+ 0x9cd2274eU, 0x1814060cU, 0x61df5fbeU, 0x8ec9ad47U,
+ 0x814f67ceU, 0x6dd55cb8U, 0x49e355aaU, 0x3dad4890U,
+ 0x38240e1cU, 0x55f152a4U, 0x8f46eac9U, 0x15914284U,
+ 0x71c75bb6U, 0x69d35dbaU, 0xc0a03060U, 0x7dcd58b0U,
+ 0x59fb51a2U, 0x79cb59b2U, 0xf0883c78U, 0x25b94e9cU,
+ 0xe0903870U, 0x121b8a09U, 0xd53172e4U, 0x50781428U,
+ 0xbb68e7d3U, 0x3faec691U, 0x5ffedea1U, 0x5dfd50a0U,
+ 0x02038e01U, 0x724b9239U, 0x63dcd1bfU, 0xc12f77eeU,
+ 0x764d933bU, 0x0983458aU, 0x527b9a29U, 0x1f9ece81U,
+ 0xb4ee2d5aU, 0x0c0a0306U, 0x955162c4U, 0xe293b671U,
+ 0xdeb1b96fU, 0xc6a5bf63U, 0x62539631U, 0xb1676bd6U,
+ 0xfc823f7eU, 0x1c12070eU, 0x486c1224U, 0x82c3ae41U,
+ 0x1d9d4080U, 0xd0b83468U, 0x0589468cU, 0xf8843e7cU,
+ 0x4be0dbabU, 0x1b98cf83U, 0x9752ecc5U, 0x1792cc85U,
+ 0x23bcc19fU, 0xbee1a15fU, 0x27bac09dU, 0x7fced6b1U,
+ 0x744e1d3aU, 0xf702f4f5U, 0x995b61c2U, 0xec9a3b76U,
+ 0x40601020U, 0x47ead8adU, 0xbd6d68d0U, 0xbae7a05dU,
+ 0xfe81b17fU, 0x283c0a14U, 0xb96b69d2U, 0xad756cd8U,
+ 0x39ab4992U, 0xcf26fae9U, 0xc52976ecU, 0x37a2c495U,
+ 0x42639e21U, 0x567d9b2bU, 0xa5796edcU, 0x5e71992fU,
+ 0x2fb6c299U, 0xe695b773U, 0x5a77982dU, 0xcaafbc65U,
+ 0x06058f03U, 0x2e398517U, 0x7c421f3eU, 0xea9fb475U,
+ 0xc72af8edU, 0x44661122U, 0xb8e42e5cU, 0x00000000U,
+ 0x94de254aU, 0x70481c38U, 0xa8fc2a54U, 0xf48e3d7aU,
+ 0x141e050aU, 0x21bf4f9eU, 0xf1077bf6U, 0xf28bb279U,
+ 0xc8ac3264U, 0x7a47903dU, 0x86c5af43U, 0x64561932U,
+ 0xb6eda35bU, 0xfb08f7f3U, 0xd13773e6U, 0x4e699d27U,
+ 0x547e152aU, 0xcd2574e8U, 0x9f5eeec1U, 0x0f86ca89U,
+ 0x46659f23U, 0x3c220f1eU, 0x6c5a1b36U, 0xc92375eaU,
+ 0x22338611U, 0x2a3f8415U, 0x4a6f9c25U, 0x35a14a94U,
+ 0x66559733U, 0x685c1a34U, 0x894365caU, 0xff0ef6f1U,
+ 0x9354edc7U, 0x24360912U, 0xd6bdbb6bU, 0x98d4264cU,
+ 0x362d831bU, 0x8b40ebcbU, 0xa17f6fdeU, 0x3e21811fU,
+ 0x10180408U, 0xb5616ad4U, 0x11974386U, 0x04060102U,
+ 0x5c72172eU, 0xa37ce1dfU, 0x26358713U, 0xf304f5f7U,
+ 0x0e098d07U, 0xab70e3dbU, 0x8cca2346U, 0x3a27801dU,
+ 0x0d854488U, 0x5874162cU, 0x854966ccU, 0x84c62142U,
+ 0xdf3efee1U, 0x73c4d5b7U, 0xc4a63162U, 0x43ecd9afU,
+ 0xd4be356aU, 0x60501830U, 0x080c0204U, 0x8d4564c8U,
+ 0xef16f2f9U, 0xe31cf1ffU, 0x45e956acU, 0x1394cd87U,
+ 0x322b8219U, 0x078ac88dU, 0xd2bbba69U, 0xe71af0fdU,
+ 0x9b58efc3U, 0x834ce9cfU, 0x874ae8cdU, 0xd334fde7U,
+ 0x1e11890fU, 0x7bc8d7b3U, 0x3ba8c793U, 0xee99b577U,
+ 0xaaffa455U, 0xbce22f5eU, 0x6e599537U, 0x4c6a1326U,
+ 0x2c3a0b16U, 0xeb10f3fbU, 0xa77ae0ddU, 0xdcb2376eU,
+};
+
+static const ulong32 T3[256] = {
+ 0xf5a653a7U, 0xd06bbbd3U, 0x6ebfd1e6U, 0x3bd9e271U,
+ 0xda67bdd0U, 0xcf8a45acU, 0xb3299a4dU, 0x0bf9f279U,
+ 0x9ce8743aU, 0x8c038fc9U, 0x417e3f91U, 0x32d7e5fcU,
+ 0x44783c1eU, 0x8f018e47U, 0xe54da854U, 0xa9ce67bdU,
+ 0x0f0a058cU, 0xf9ae57a5U, 0x01f5f47aU, 0x20cbebfbU,
+ 0x5791c663U, 0xb7da6db8U, 0xf453a7ddU, 0xc277b5d4U,
+ 0x64b3d7e5U, 0x8df67bb3U, 0xa43397c5U, 0xa3c261beU,
+ 0xd19e4fa9U, 0x171a0d88U, 0x2830180cU, 0xebb259a2U,
+ 0x96e47239U, 0xf85ba3dfU, 0xf6a45229U, 0xe64fa9daU,
+ 0xfaac562bU, 0xd79a4da8U, 0x800b8bcbU, 0xb52d984cU,
+ 0xa731964bU, 0xcc884422U, 0xdb9249aaU, 0xd8904824U,
+ 0x9b198241U, 0x3ddde070U, 0xf3a251a6U, 0x2cc3eff9U,
+ 0xc175b45aU, 0x76afd9e2U, 0x87fa7db0U, 0xb4d86c36U,
+ 0x13e9fa7dU, 0x62b7d5e4U, 0xaacc6633U, 0x38dbe3ffU,
+ 0x5d9dc060U, 0xc0804020U, 0x30201008U, 0x1d160b8bU,
+ 0xd965bc5eU, 0xdd964babU, 0x1fe1fe7fU, 0x0dfdf078U,
+ 0x15edf87cU, 0xe8b0582cU, 0xef41ae57U, 0xd66fb9d2U,
+ 0xf257a5dcU, 0x73a9da6dU, 0x19e5fc7eU, 0x2e341a0dU,
+ 0xf751a653U, 0x5f6a3594U, 0xb02b9bc3U, 0xf0a05028U,
+ 0xd29c4e27U, 0x14180c06U, 0xdf61be5fU, 0xc98e47adU,
+ 0x4f81ce67U, 0xd56db85cU, 0xe349aa55U, 0xad3d9048U,
+ 0x24381c0eU, 0xf155a452U, 0x468fc9eaU, 0x91158442U,
+ 0xc771b65bU, 0xd369ba5dU, 0xa0c06030U, 0xcd7db058U,
+ 0xfb59a251U, 0xcb79b259U, 0x88f0783cU, 0xb9259c4eU,
+ 0x90e07038U, 0x1b12098aU, 0x31d5e472U, 0x78502814U,
+ 0x68bbd3e7U, 0xae3f91c6U, 0xfe5fa1deU, 0xfd5da050U,
+ 0x0302018eU, 0x4b723992U, 0xdc63bfd1U, 0x2fc1ee77U,
+ 0x4d763b93U, 0x83098a45U, 0x7b52299aU, 0x9e1f81ceU,
+ 0xeeb45a2dU, 0x0a0c0603U, 0x5195c462U, 0x93e271b6U,
+ 0xb1de6fb9U, 0xa5c663bfU, 0x53623196U, 0x67b1d66bU,
+ 0x82fc7e3fU, 0x121c0e07U, 0x6c482412U, 0xc38241aeU,
+ 0x9d1d8040U, 0xb8d06834U, 0x89058c46U, 0x84f87c3eU,
+ 0xe04babdbU, 0x981b83cfU, 0x5297c5ecU, 0x921785ccU,
+ 0xbc239fc1U, 0xe1be5fa1U, 0xba279dc0U, 0xce7fb1d6U,
+ 0x4e743a1dU, 0x02f7f5f4U, 0x5b99c261U, 0x9aec763bU,
+ 0x60402010U, 0xea47add8U, 0x6dbdd068U, 0xe7ba5da0U,
+ 0x81fe7fb1U, 0x3c28140aU, 0x6bb9d269U, 0x75add86cU,
+ 0xab399249U, 0x26cfe9faU, 0x29c5ec76U, 0xa23795c4U,
+ 0x6342219eU, 0x7d562b9bU, 0x79a5dc6eU, 0x715e2f99U,
+ 0xb62f99c2U, 0x95e673b7U, 0x775a2d98U, 0xafca65bcU,
+ 0x0506038fU, 0x392e1785U, 0x427c3e1fU, 0x9fea75b4U,
+ 0x2ac7edf8U, 0x66442211U, 0xe4b85c2eU, 0x00000000U,
+ 0xde944a25U, 0x4870381cU, 0xfca8542aU, 0x8ef47a3dU,
+ 0x1e140a05U, 0xbf219e4fU, 0x07f1f67bU, 0x8bf279b2U,
+ 0xacc86432U, 0x477a3d90U, 0xc58643afU, 0x56643219U,
+ 0xedb65ba3U, 0x08fbf3f7U, 0x37d1e673U, 0x694e279dU,
+ 0x7e542a15U, 0x25cde874U, 0x5e9fc1eeU, 0x860f89caU,
+ 0x6546239fU, 0x223c1e0fU, 0x5a6c361bU, 0x23c9ea75U,
+ 0x33221186U, 0x3f2a1584U, 0x6f4a259cU, 0xa135944aU,
+ 0x55663397U, 0x5c68341aU, 0x4389ca65U, 0x0efff1f6U,
+ 0x5493c7edU, 0x36241209U, 0xbdd66bbbU, 0xd4984c26U,
+ 0x2d361b83U, 0x408bcbebU, 0x7fa1de6fU, 0x213e1f81U,
+ 0x18100804U, 0x61b5d46aU, 0x97118643U, 0x06040201U,
+ 0x725c2e17U, 0x7ca3dfe1U, 0x35261387U, 0x04f3f7f5U,
+ 0x090e078dU, 0x70abdbe3U, 0xca8c4623U, 0x273a1d80U,
+ 0x850d8844U, 0x74582c16U, 0x4985cc66U, 0xc6844221U,
+ 0x3edfe1feU, 0xc473b7d5U, 0xa6c46231U, 0xec43afd9U,
+ 0xbed46a35U, 0x50603018U, 0x0c080402U, 0x458dc864U,
+ 0x16eff9f2U, 0x1ce3fff1U, 0xe945ac56U, 0x941387cdU,
+ 0x2b321982U, 0x8a078dc8U, 0xbbd269baU, 0x1ae7fdf0U,
+ 0x589bc3efU, 0x4c83cfe9U, 0x4a87cde8U, 0x34d3e7fdU,
+ 0x111e0f89U, 0xc87bb3d7U, 0xa83b93c7U, 0x99ee77b5U,
+ 0xffaa55a4U, 0xe2bc5e2fU, 0x596e3795U, 0x6a4c2613U,
+ 0x3a2c160bU, 0x10ebfbf3U, 0x7aa7dde0U, 0xb2dc6e37U,
+};
+
+static const ulong32 T4[256] = {
+ 0xa7a7a7a7U, 0xd3d3d3d3U, 0xe6e6e6e6U, 0x71717171U,
+ 0xd0d0d0d0U, 0xacacacacU, 0x4d4d4d4dU, 0x79797979U,
+ 0x3a3a3a3aU, 0xc9c9c9c9U, 0x91919191U, 0xfcfcfcfcU,
+ 0x1e1e1e1eU, 0x47474747U, 0x54545454U, 0xbdbdbdbdU,
+ 0x8c8c8c8cU, 0xa5a5a5a5U, 0x7a7a7a7aU, 0xfbfbfbfbU,
+ 0x63636363U, 0xb8b8b8b8U, 0xddddddddU, 0xd4d4d4d4U,
+ 0xe5e5e5e5U, 0xb3b3b3b3U, 0xc5c5c5c5U, 0xbebebebeU,
+ 0xa9a9a9a9U, 0x88888888U, 0x0c0c0c0cU, 0xa2a2a2a2U,
+ 0x39393939U, 0xdfdfdfdfU, 0x29292929U, 0xdadadadaU,
+ 0x2b2b2b2bU, 0xa8a8a8a8U, 0xcbcbcbcbU, 0x4c4c4c4cU,
+ 0x4b4b4b4bU, 0x22222222U, 0xaaaaaaaaU, 0x24242424U,
+ 0x41414141U, 0x70707070U, 0xa6a6a6a6U, 0xf9f9f9f9U,
+ 0x5a5a5a5aU, 0xe2e2e2e2U, 0xb0b0b0b0U, 0x36363636U,
+ 0x7d7d7d7dU, 0xe4e4e4e4U, 0x33333333U, 0xffffffffU,
+ 0x60606060U, 0x20202020U, 0x08080808U, 0x8b8b8b8bU,
+ 0x5e5e5e5eU, 0xababababU, 0x7f7f7f7fU, 0x78787878U,
+ 0x7c7c7c7cU, 0x2c2c2c2cU, 0x57575757U, 0xd2d2d2d2U,
+ 0xdcdcdcdcU, 0x6d6d6d6dU, 0x7e7e7e7eU, 0x0d0d0d0dU,
+ 0x53535353U, 0x94949494U, 0xc3c3c3c3U, 0x28282828U,
+ 0x27272727U, 0x06060606U, 0x5f5f5f5fU, 0xadadadadU,
+ 0x67676767U, 0x5c5c5c5cU, 0x55555555U, 0x48484848U,
+ 0x0e0e0e0eU, 0x52525252U, 0xeaeaeaeaU, 0x42424242U,
+ 0x5b5b5b5bU, 0x5d5d5d5dU, 0x30303030U, 0x58585858U,
+ 0x51515151U, 0x59595959U, 0x3c3c3c3cU, 0x4e4e4e4eU,
+ 0x38383838U, 0x8a8a8a8aU, 0x72727272U, 0x14141414U,
+ 0xe7e7e7e7U, 0xc6c6c6c6U, 0xdedededeU, 0x50505050U,
+ 0x8e8e8e8eU, 0x92929292U, 0xd1d1d1d1U, 0x77777777U,
+ 0x93939393U, 0x45454545U, 0x9a9a9a9aU, 0xcecececeU,
+ 0x2d2d2d2dU, 0x03030303U, 0x62626262U, 0xb6b6b6b6U,
+ 0xb9b9b9b9U, 0xbfbfbfbfU, 0x96969696U, 0x6b6b6b6bU,
+ 0x3f3f3f3fU, 0x07070707U, 0x12121212U, 0xaeaeaeaeU,
+ 0x40404040U, 0x34343434U, 0x46464646U, 0x3e3e3e3eU,
+ 0xdbdbdbdbU, 0xcfcfcfcfU, 0xececececU, 0xccccccccU,
+ 0xc1c1c1c1U, 0xa1a1a1a1U, 0xc0c0c0c0U, 0xd6d6d6d6U,
+ 0x1d1d1d1dU, 0xf4f4f4f4U, 0x61616161U, 0x3b3b3b3bU,
+ 0x10101010U, 0xd8d8d8d8U, 0x68686868U, 0xa0a0a0a0U,
+ 0xb1b1b1b1U, 0x0a0a0a0aU, 0x69696969U, 0x6c6c6c6cU,
+ 0x49494949U, 0xfafafafaU, 0x76767676U, 0xc4c4c4c4U,
+ 0x9e9e9e9eU, 0x9b9b9b9bU, 0x6e6e6e6eU, 0x99999999U,
+ 0xc2c2c2c2U, 0xb7b7b7b7U, 0x98989898U, 0xbcbcbcbcU,
+ 0x8f8f8f8fU, 0x85858585U, 0x1f1f1f1fU, 0xb4b4b4b4U,
+ 0xf8f8f8f8U, 0x11111111U, 0x2e2e2e2eU, 0x00000000U,
+ 0x25252525U, 0x1c1c1c1cU, 0x2a2a2a2aU, 0x3d3d3d3dU,
+ 0x05050505U, 0x4f4f4f4fU, 0x7b7b7b7bU, 0xb2b2b2b2U,
+ 0x32323232U, 0x90909090U, 0xafafafafU, 0x19191919U,
+ 0xa3a3a3a3U, 0xf7f7f7f7U, 0x73737373U, 0x9d9d9d9dU,
+ 0x15151515U, 0x74747474U, 0xeeeeeeeeU, 0xcacacacaU,
+ 0x9f9f9f9fU, 0x0f0f0f0fU, 0x1b1b1b1bU, 0x75757575U,
+ 0x86868686U, 0x84848484U, 0x9c9c9c9cU, 0x4a4a4a4aU,
+ 0x97979797U, 0x1a1a1a1aU, 0x65656565U, 0xf6f6f6f6U,
+ 0xededededU, 0x09090909U, 0xbbbbbbbbU, 0x26262626U,
+ 0x83838383U, 0xebebebebU, 0x6f6f6f6fU, 0x81818181U,
+ 0x04040404U, 0x6a6a6a6aU, 0x43434343U, 0x01010101U,
+ 0x17171717U, 0xe1e1e1e1U, 0x87878787U, 0xf5f5f5f5U,
+ 0x8d8d8d8dU, 0xe3e3e3e3U, 0x23232323U, 0x80808080U,
+ 0x44444444U, 0x16161616U, 0x66666666U, 0x21212121U,
+ 0xfefefefeU, 0xd5d5d5d5U, 0x31313131U, 0xd9d9d9d9U,
+ 0x35353535U, 0x18181818U, 0x02020202U, 0x64646464U,
+ 0xf2f2f2f2U, 0xf1f1f1f1U, 0x56565656U, 0xcdcdcdcdU,
+ 0x82828282U, 0xc8c8c8c8U, 0xbabababaU, 0xf0f0f0f0U,
+ 0xefefefefU, 0xe9e9e9e9U, 0xe8e8e8e8U, 0xfdfdfdfdU,
+ 0x89898989U, 0xd7d7d7d7U, 0xc7c7c7c7U, 0xb5b5b5b5U,
+ 0xa4a4a4a4U, 0x2f2f2f2fU, 0x95959595U, 0x13131313U,
+ 0x0b0b0b0bU, 0xf3f3f3f3U, 0xe0e0e0e0U, 0x37373737U,
+};
+
+static const ulong32 T5[256] = {
+ 0x00000000U, 0x01020608U, 0x02040c10U, 0x03060a18U,
+ 0x04081820U, 0x050a1e28U, 0x060c1430U, 0x070e1238U,
+ 0x08103040U, 0x09123648U, 0x0a143c50U, 0x0b163a58U,
+ 0x0c182860U, 0x0d1a2e68U, 0x0e1c2470U, 0x0f1e2278U,
+ 0x10206080U, 0x11226688U, 0x12246c90U, 0x13266a98U,
+ 0x142878a0U, 0x152a7ea8U, 0x162c74b0U, 0x172e72b8U,
+ 0x183050c0U, 0x193256c8U, 0x1a345cd0U, 0x1b365ad8U,
+ 0x1c3848e0U, 0x1d3a4ee8U, 0x1e3c44f0U, 0x1f3e42f8U,
+ 0x2040c01dU, 0x2142c615U, 0x2244cc0dU, 0x2346ca05U,
+ 0x2448d83dU, 0x254ade35U, 0x264cd42dU, 0x274ed225U,
+ 0x2850f05dU, 0x2952f655U, 0x2a54fc4dU, 0x2b56fa45U,
+ 0x2c58e87dU, 0x2d5aee75U, 0x2e5ce46dU, 0x2f5ee265U,
+ 0x3060a09dU, 0x3162a695U, 0x3264ac8dU, 0x3366aa85U,
+ 0x3468b8bdU, 0x356abeb5U, 0x366cb4adU, 0x376eb2a5U,
+ 0x387090ddU, 0x397296d5U, 0x3a749ccdU, 0x3b769ac5U,
+ 0x3c7888fdU, 0x3d7a8ef5U, 0x3e7c84edU, 0x3f7e82e5U,
+ 0x40809d3aU, 0x41829b32U, 0x4284912aU, 0x43869722U,
+ 0x4488851aU, 0x458a8312U, 0x468c890aU, 0x478e8f02U,
+ 0x4890ad7aU, 0x4992ab72U, 0x4a94a16aU, 0x4b96a762U,
+ 0x4c98b55aU, 0x4d9ab352U, 0x4e9cb94aU, 0x4f9ebf42U,
+ 0x50a0fdbaU, 0x51a2fbb2U, 0x52a4f1aaU, 0x53a6f7a2U,
+ 0x54a8e59aU, 0x55aae392U, 0x56ace98aU, 0x57aeef82U,
+ 0x58b0cdfaU, 0x59b2cbf2U, 0x5ab4c1eaU, 0x5bb6c7e2U,
+ 0x5cb8d5daU, 0x5dbad3d2U, 0x5ebcd9caU, 0x5fbedfc2U,
+ 0x60c05d27U, 0x61c25b2fU, 0x62c45137U, 0x63c6573fU,
+ 0x64c84507U, 0x65ca430fU, 0x66cc4917U, 0x67ce4f1fU,
+ 0x68d06d67U, 0x69d26b6fU, 0x6ad46177U, 0x6bd6677fU,
+ 0x6cd87547U, 0x6dda734fU, 0x6edc7957U, 0x6fde7f5fU,
+ 0x70e03da7U, 0x71e23bafU, 0x72e431b7U, 0x73e637bfU,
+ 0x74e82587U, 0x75ea238fU, 0x76ec2997U, 0x77ee2f9fU,
+ 0x78f00de7U, 0x79f20befU, 0x7af401f7U, 0x7bf607ffU,
+ 0x7cf815c7U, 0x7dfa13cfU, 0x7efc19d7U, 0x7ffe1fdfU,
+ 0x801d2774U, 0x811f217cU, 0x82192b64U, 0x831b2d6cU,
+ 0x84153f54U, 0x8517395cU, 0x86113344U, 0x8713354cU,
+ 0x880d1734U, 0x890f113cU, 0x8a091b24U, 0x8b0b1d2cU,
+ 0x8c050f14U, 0x8d07091cU, 0x8e010304U, 0x8f03050cU,
+ 0x903d47f4U, 0x913f41fcU, 0x92394be4U, 0x933b4decU,
+ 0x94355fd4U, 0x953759dcU, 0x963153c4U, 0x973355ccU,
+ 0x982d77b4U, 0x992f71bcU, 0x9a297ba4U, 0x9b2b7dacU,
+ 0x9c256f94U, 0x9d27699cU, 0x9e216384U, 0x9f23658cU,
+ 0xa05de769U, 0xa15fe161U, 0xa259eb79U, 0xa35bed71U,
+ 0xa455ff49U, 0xa557f941U, 0xa651f359U, 0xa753f551U,
+ 0xa84dd729U, 0xa94fd121U, 0xaa49db39U, 0xab4bdd31U,
+ 0xac45cf09U, 0xad47c901U, 0xae41c319U, 0xaf43c511U,
+ 0xb07d87e9U, 0xb17f81e1U, 0xb2798bf9U, 0xb37b8df1U,
+ 0xb4759fc9U, 0xb57799c1U, 0xb67193d9U, 0xb77395d1U,
+ 0xb86db7a9U, 0xb96fb1a1U, 0xba69bbb9U, 0xbb6bbdb1U,
+ 0xbc65af89U, 0xbd67a981U, 0xbe61a399U, 0xbf63a591U,
+ 0xc09dba4eU, 0xc19fbc46U, 0xc299b65eU, 0xc39bb056U,
+ 0xc495a26eU, 0xc597a466U, 0xc691ae7eU, 0xc793a876U,
+ 0xc88d8a0eU, 0xc98f8c06U, 0xca89861eU, 0xcb8b8016U,
+ 0xcc85922eU, 0xcd879426U, 0xce819e3eU, 0xcf839836U,
+ 0xd0bddaceU, 0xd1bfdcc6U, 0xd2b9d6deU, 0xd3bbd0d6U,
+ 0xd4b5c2eeU, 0xd5b7c4e6U, 0xd6b1cefeU, 0xd7b3c8f6U,
+ 0xd8adea8eU, 0xd9afec86U, 0xdaa9e69eU, 0xdbabe096U,
+ 0xdca5f2aeU, 0xdda7f4a6U, 0xdea1febeU, 0xdfa3f8b6U,
+ 0xe0dd7a53U, 0xe1df7c5bU, 0xe2d97643U, 0xe3db704bU,
+ 0xe4d56273U, 0xe5d7647bU, 0xe6d16e63U, 0xe7d3686bU,
+ 0xe8cd4a13U, 0xe9cf4c1bU, 0xeac94603U, 0xebcb400bU,
+ 0xecc55233U, 0xedc7543bU, 0xeec15e23U, 0xefc3582bU,
+ 0xf0fd1ad3U, 0xf1ff1cdbU, 0xf2f916c3U, 0xf3fb10cbU,
+ 0xf4f502f3U, 0xf5f704fbU, 0xf6f10ee3U, 0xf7f308ebU,
+ 0xf8ed2a93U, 0xf9ef2c9bU, 0xfae92683U, 0xfbeb208bU,
+ 0xfce532b3U, 0xfde734bbU, 0xfee13ea3U, 0xffe338abU,
+};
+
+/**
+ * The round constants.
+ */
+static const ulong32 rc[] = {
+ 0xa7d3e671U, 0xd0ac4d79U, 0x3ac991fcU, 0x1e4754bdU,
+ 0x8ca57afbU, 0x63b8ddd4U, 0xe5b3c5beU, 0xa9880ca2U,
+ 0x39df29daU, 0x2ba8cb4cU, 0x4b22aa24U, 0x4170a6f9U,
+ 0x5ae2b036U, 0x7de433ffU, 0x6020088bU, 0x5eab7f78U,
+ 0x7c2c57d2U, 0xdc6d7e0dU, 0x5394c328U,
+};
+
+#endif
+
+ /**
+ Initialize the Anubis block cipher
+ @param key The symmetric key you wish to pass
+ @param keylen The key length in bytes
+ @param num_rounds The number of rounds desired (0 for default)
+ @param skey The key in as scheduled by this function.
+ @return CRYPT_OK if successful
+ */
+#ifdef CLEAN_STACK
+static int _anubis_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey)
+#else
+int anubis_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey)
+#endif
+{
+ int N, R, i, pos, r;
+ ulong32 kappa[MAX_N];
+ ulong32 inter[MAX_N];
+ ulong32 v, K0, K1, K2, K3;
+
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(skey != NULL);
+
+ /* Valid sizes (in bytes) are 16, 20, 24, 28, 32, 36, and 40. */
+ if ((keylen & 3) || (keylen < 16) || (keylen > 40)) {
+ return CRYPT_INVALID_KEYSIZE;
+ }
+ skey->anubis.keyBits = keylen*8;
+
+ /*
+ * determine the N length parameter:
+ * (N.B. it is assumed that the key length is valid!)
+ */
+ N = skey->anubis.keyBits >> 5;
+
+ /*
+ * determine number of rounds from key size:
+ */
+ skey->anubis.R = R = 8 + N;
+
+ if (num_rounds != 0 && num_rounds != skey->anubis.R) {
+ return CRYPT_INVALID_ROUNDS;
+ }
+
+ /*
+ * map cipher key to initial key state (mu):
+ */
+ for (i = 0, pos = 0; i < N; i++, pos += 4) {
+ kappa[i] =
+ (key[pos ] << 24) ^
+ (key[pos + 1] << 16) ^
+ (key[pos + 2] << 8) ^
+ (key[pos + 3] );
+ }
+
+ /*
+ * generate R + 1 round keys:
+ */
+ for (r = 0; r <= R; r++) {
+ /*
+ * generate r-th round key K^r:
+ */
+ K0 = T4[(kappa[N - 1] >> 24) ];
+ K1 = T4[(kappa[N - 1] >> 16) & 0xff];
+ K2 = T4[(kappa[N - 1] >> 8) & 0xff];
+ K3 = T4[(kappa[N - 1] ) & 0xff];
+ for (i = N - 2; i >= 0; i--) {
+ K0 = T4[(kappa[i] >> 24) ] ^
+ (T5[(K0 >> 24) ] & 0xff000000U) ^
+ (T5[(K0 >> 16) & 0xff] & 0x00ff0000U) ^
+ (T5[(K0 >> 8) & 0xff] & 0x0000ff00U) ^
+ (T5[(K0 ) & 0xff] & 0x000000ffU);
+ K1 = T4[(kappa[i] >> 16) & 0xff] ^
+ (T5[(K1 >> 24) ] & 0xff000000U) ^
+ (T5[(K1 >> 16) & 0xff] & 0x00ff0000U) ^
+ (T5[(K1 >> 8) & 0xff] & 0x0000ff00U) ^
+ (T5[(K1 ) & 0xff] & 0x000000ffU);
+ K2 = T4[(kappa[i] >> 8) & 0xff] ^
+ (T5[(K2 >> 24) ] & 0xff000000U) ^
+ (T5[(K2 >> 16) & 0xff] & 0x00ff0000U) ^
+ (T5[(K2 >> 8) & 0xff] & 0x0000ff00U) ^
+ (T5[(K2 ) & 0xff] & 0x000000ffU);
+ K3 = T4[(kappa[i] ) & 0xff] ^
+ (T5[(K3 >> 24) ] & 0xff000000U) ^
+ (T5[(K3 >> 16) & 0xff] & 0x00ff0000U) ^
+ (T5[(K3 >> 8) & 0xff] & 0x0000ff00U) ^
+ (T5[(K3 ) & 0xff] & 0x000000ffU);
+ }
+ /*
+ -- this is the code to use with the large U tables:
+ K0 = K1 = K2 = K3 = 0;
+ for (i = 0; i < N; i++) {
+ K0 ^= U[i][(kappa[i] >> 24) ];
+ K1 ^= U[i][(kappa[i] >> 16) & 0xff];
+ K2 ^= U[i][(kappa[i] >> 8) & 0xff];
+ K3 ^= U[i][(kappa[i] ) & 0xff];
+ }
+ */
+ skey->anubis.roundKeyEnc[r][0] = K0;
+ skey->anubis.roundKeyEnc[r][1] = K1;
+ skey->anubis.roundKeyEnc[r][2] = K2;
+ skey->anubis.roundKeyEnc[r][3] = K3;
+
+ /*
+ * compute kappa^{r+1} from kappa^r:
+ */
+ if (r == R) {
+ break;
+ }
+ for (i = 0; i < N; i++) {
+ int j = i;
+ inter[i] = T0[(kappa[j--] >> 24) ]; if (j < 0) j = N - 1;
+ inter[i] ^= T1[(kappa[j--] >> 16) & 0xff]; if (j < 0) j = N - 1;
+ inter[i] ^= T2[(kappa[j--] >> 8) & 0xff]; if (j < 0) j = N - 1;
+ inter[i] ^= T3[(kappa[j ] ) & 0xff];
+ }
+ kappa[0] = inter[0] ^ rc[r];
+ for (i = 1; i < N; i++) {
+ kappa[i] = inter[i];
+ }
+ }
+
+ /*
+ * generate inverse key schedule: K'^0 = K^R, K'^R = K^0, K'^r = theta(K^{R-r}):
+ */
+ for (i = 0; i < 4; i++) {
+ skey->anubis.roundKeyDec[0][i] = skey->anubis.roundKeyEnc[R][i];
+ skey->anubis.roundKeyDec[R][i] = skey->anubis.roundKeyEnc[0][i];
+ }
+ for (r = 1; r < R; r++) {
+ for (i = 0; i < 4; i++) {
+ v = skey->anubis.roundKeyEnc[R - r][i];
+ skey->anubis.roundKeyDec[r][i] =
+ T0[T4[(v >> 24) ] & 0xff] ^
+ T1[T4[(v >> 16) & 0xff] & 0xff] ^
+ T2[T4[(v >> 8) & 0xff] & 0xff] ^
+ T3[T4[(v ) & 0xff] & 0xff];
+ }
+ }
+
+ return CRYPT_OK;
+}
+
+#ifdef CLEAN_STACK
+int anubis_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey)
+{
+ int err;
+ err = _anubis_setup(key, keylen, num_rounds, skey);
+ burn_stack(sizeof(int) * 5 + sizeof(ulong32) * (MAX_N + MAX_N + 5));
+ return err;
+}
+#endif
+
+
+static void anubis_crypt(const unsigned char *plaintext, unsigned char *ciphertext,
+ ulong32 roundKey[18 + 1][4], int R) {
+ int i, pos, r;
+ ulong32 state[4];
+ ulong32 inter[4];
+
+ /*
+ * map plaintext block to cipher state (mu)
+ * and add initial round key (sigma[K^0]):
+ */
+ for (i = 0, pos = 0; i < 4; i++, pos += 4) {
+ state[i] =
+ (plaintext[pos ] << 24) ^
+ (plaintext[pos + 1] << 16) ^
+ (plaintext[pos + 2] << 8) ^
+ (plaintext[pos + 3] ) ^
+ roundKey[0][i];
+ }
+
+ /*
+ * R - 1 full rounds:
+ */
+ for (r = 1; r < R; r++) {
+ inter[0] =
+ T0[(state[0] >> 24) ] ^
+ T1[(state[1] >> 24) ] ^
+ T2[(state[2] >> 24) ] ^
+ T3[(state[3] >> 24) ] ^
+ roundKey[r][0];
+ inter[1] =
+ T0[(state[0] >> 16) & 0xff] ^
+ T1[(state[1] >> 16) & 0xff] ^
+ T2[(state[2] >> 16) & 0xff] ^
+ T3[(state[3] >> 16) & 0xff] ^
+ roundKey[r][1];
+ inter[2] =
+ T0[(state[0] >> 8) & 0xff] ^
+ T1[(state[1] >> 8) & 0xff] ^
+ T2[(state[2] >> 8) & 0xff] ^
+ T3[(state[3] >> 8) & 0xff] ^
+ roundKey[r][2];
+ inter[3] =
+ T0[(state[0] ) & 0xff] ^
+ T1[(state[1] ) & 0xff] ^
+ T2[(state[2] ) & 0xff] ^
+ T3[(state[3] ) & 0xff] ^
+ roundKey[r][3];
+ state[0] = inter[0];
+ state[1] = inter[1];
+ state[2] = inter[2];
+ state[3] = inter[3];
+ }
+
+ /*
+ * last round:
+ */
+ inter[0] =
+ (T0[(state[0] >> 24) ] & 0xff000000U) ^
+ (T1[(state[1] >> 24) ] & 0x00ff0000U) ^
+ (T2[(state[2] >> 24) ] & 0x0000ff00U) ^
+ (T3[(state[3] >> 24) ] & 0x000000ffU) ^
+ roundKey[R][0];
+ inter[1] =
+ (T0[(state[0] >> 16) & 0xff] & 0xff000000U) ^
+ (T1[(state[1] >> 16) & 0xff] & 0x00ff0000U) ^
+ (T2[(state[2] >> 16) & 0xff] & 0x0000ff00U) ^
+ (T3[(state[3] >> 16) & 0xff] & 0x000000ffU) ^
+ roundKey[R][1];
+ inter[2] =
+ (T0[(state[0] >> 8) & 0xff] & 0xff000000U) ^
+ (T1[(state[1] >> 8) & 0xff] & 0x00ff0000U) ^
+ (T2[(state[2] >> 8) & 0xff] & 0x0000ff00U) ^
+ (T3[(state[3] >> 8) & 0xff] & 0x000000ffU) ^
+ roundKey[R][2];
+ inter[3] =
+ (T0[(state[0] ) & 0xff] & 0xff000000U) ^
+ (T1[(state[1] ) & 0xff] & 0x00ff0000U) ^
+ (T2[(state[2] ) & 0xff] & 0x0000ff00U) ^
+ (T3[(state[3] ) & 0xff] & 0x000000ffU) ^
+ roundKey[R][3];
+
+ /*
+ * map cipher state to ciphertext block (mu^{-1}):
+ */
+ for (i = 0, pos = 0; i < 4; i++, pos += 4) {
+ ulong32 w = inter[i];
+ ciphertext[pos ] = (unsigned char)(w >> 24);
+ ciphertext[pos + 1] = (unsigned char)(w >> 16);
+ ciphertext[pos + 2] = (unsigned char)(w >> 8);
+ ciphertext[pos + 3] = (unsigned char)(w );
+ }
+}
+
+/**
+ Encrypts a block of text with Anubis
+ @param pt The input plaintext (16 bytes)
+ @param ct The output ciphertext (16 bytes)
+ @param skey The key as scheduled
+*/
+void anubis_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
+{
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
+ anubis_crypt(pt, ct, skey->anubis.roundKeyEnc, skey->anubis.R);
+}
+
+/**
+ Decrypts a block of text with Anubis
+ @param ct The input ciphertext (16 bytes)
+ @param pt The output plaintext (16 bytes)
+ @param skey The key as scheduled
+*/
+void anubis_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
+{
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
+ anubis_crypt(ct, pt, skey->anubis.roundKeyDec, skey->anubis.R);
+}
+
+/**
+ Performs a self-test of the Anubis block cipher
+ @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled
+*/
+int anubis_test(void)
+{
+#if !defined(LTC_TEST)
+ return CRYPT_NOP;
+#else
+ static const struct test {
+ int keylen;
+ unsigned char pt[16], ct[16], key[40];
+ } tests[] = {
+#ifndef ANUBIS_TWEAK
+ /**** ORIGINAL ANUBIS ****/
+ /* 128 bit keys */
+{
+ 16,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0xF0, 0x68, 0x60, 0xFC, 0x67, 0x30, 0xE8, 0x18,
+ 0xF1, 0x32, 0xC7, 0x8A, 0xF4, 0x13, 0x2A, 0xFE },
+ { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }
+}, {
+ 16,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0xA8, 0x66, 0x84, 0x80, 0x07, 0x74, 0x5C, 0x89,
+ 0xFC, 0x5E, 0xB5, 0xBA, 0xD4, 0xFE, 0x32, 0x6D },
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 }
+},
+
+ /* 160-bit keys */
+{
+ 20,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0xBD, 0x5E, 0x32, 0xBE, 0x51, 0x67, 0xA8, 0xE2,
+ 0x72, 0xD7, 0x95, 0x0F, 0x83, 0xC6, 0x8C, 0x31 },
+ { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00 }
+}, {
+ 20,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0x4C, 0x1F, 0x86, 0x2E, 0x11, 0xEB, 0xCE, 0xEB,
+ 0xFE, 0xB9, 0x73, 0xC9, 0xDF, 0xEF, 0x7A, 0xDB },
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x01 }
+},
+
+ /* 192-bit keys */
+{
+ 24,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0x17, 0xAC, 0x57, 0x44, 0x9D, 0x59, 0x61, 0x66,
+ 0xD0, 0xC7, 0x9E, 0x04, 0x7C, 0xC7, 0x58, 0xF0 },
+ { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }
+}, {
+ 24,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0x71, 0x52, 0xB4, 0xEB, 0x1D, 0xAA, 0x36, 0xFD,
+ 0x57, 0x14, 0x5F, 0x57, 0x04, 0x9F, 0x70, 0x74 },
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 }
+},
+
+ /* 224-bit keys */
+{
+ 28,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0xA2, 0xF0, 0xA6, 0xB9, 0x17, 0x93, 0x2A, 0x3B,
+ 0xEF, 0x08, 0xE8, 0x7A, 0x58, 0xD6, 0xF8, 0x53 },
+ { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00 }
+}, {
+ 28,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0xF0, 0xCA, 0xFC, 0x78, 0x8B, 0x4B, 0x4E, 0x53,
+ 0x8B, 0xC4, 0x32, 0x6A, 0xF5, 0xB9, 0x1B, 0x5F },
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x01 }
+},
+
+ /* 256-bit keys */
+{
+ 32,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0xE0, 0x86, 0xAC, 0x45, 0x6B, 0x3C, 0xE5, 0x13,
+ 0xED, 0xF5, 0xDF, 0xDD, 0xD6, 0x3B, 0x71, 0x93 },
+ { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }
+}, {
+ 32,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0x50, 0x01, 0xB9, 0xF5, 0x21, 0xC1, 0xC1, 0x29,
+ 0x00, 0xD5, 0xEC, 0x98, 0x2B, 0x9E, 0xE8, 0x21 },
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 }
+},
+
+ /* 288-bit keys */
+{
+ 36,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0xE8, 0xF4, 0xAF, 0x2B, 0x21, 0xA0, 0x87, 0x9B,
+ 0x41, 0x95, 0xB9, 0x71, 0x75, 0x79, 0x04, 0x7C },
+ { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00 }
+}, {
+ 36,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0xE6, 0xA6, 0xA5, 0xBC, 0x8B, 0x63, 0x6F, 0xE2,
+ 0xBD, 0xA7, 0xA7, 0x53, 0xAB, 0x40, 0x22, 0xE0 },
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x01 }
+},
+
+ /* 320-bit keys */
+{
+ 40,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0x17, 0x04, 0xD7, 0x2C, 0xC6, 0x85, 0x76, 0x02,
+ 0x4B, 0xCC, 0x39, 0x80, 0xD8, 0x22, 0xEA, 0xA4 },
+ { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }
+}, {
+ 40,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0x7A, 0x41, 0xE6, 0x7D, 0x4F, 0xD8, 0x64, 0xF0,
+ 0x44, 0xA8, 0x3C, 0x73, 0x81, 0x7E, 0x53, 0xD8 },
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 }
+}
+#else
+ /**** Tweaked ANUBIS ****/
+ /* 128 bit keys */
+{
+ 16,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0xB8, 0x35, 0xBD, 0xC3, 0x34, 0x82, 0x9D, 0x83,
+ 0x71, 0xBF, 0xA3, 0x71, 0xE4, 0xB3, 0xC4, 0xFD },
+ { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }
+}, {
+ 16,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0xE6, 0x14, 0x1E, 0xAF, 0xEB, 0xE0, 0x59, 0x3C,
+ 0x48, 0xE1, 0xCD, 0xF2, 0x1B, 0xBA, 0xA1, 0x89 },
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 }
+},
+
+ /* 160-bit keys */
+{
+ 20,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0x97, 0x59, 0x79, 0x4B, 0x5C, 0xA0, 0x70, 0x73,
+ 0x24, 0xEF, 0xB3, 0x58, 0x67, 0xCA, 0xD4, 0xB3 },
+ { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00 }
+}, {
+ 20,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0xB8, 0x0D, 0xFB, 0x9B, 0xE4, 0xA1, 0x58, 0x87,
+ 0xB3, 0x76, 0xD5, 0x02, 0x18, 0x95, 0xC1, 0x2E },
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x01 }
+},
+
+ /* 192-bit keys */
+{
+ 24,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0x7D, 0x62, 0x3B, 0x52, 0xC7, 0x4C, 0x64, 0xD8,
+ 0xEB, 0xC7, 0x2D, 0x57, 0x97, 0x85, 0x43, 0x8F },
+ { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }
+}, {
+ 24,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0xB1, 0x0A, 0x59, 0xDD, 0x5D, 0x5D, 0x8D, 0x67,
+ 0xEC, 0xEE, 0x4A, 0xC4, 0xBE, 0x4F, 0xA8, 0x4F },
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 }
+},
+
+ /* 224-bit keys */
+{
+ 28,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0x68, 0x9E, 0x05, 0x94, 0x6A, 0x94, 0x43, 0x8F,
+ 0xE7, 0x8E, 0x37, 0x3D, 0x24, 0x97, 0x92, 0xF5 },
+ { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00 }
+}, {
+ 28,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0xDD, 0xB7, 0xB0, 0xB4, 0xE9, 0xB4, 0x9B, 0x9C,
+ 0x38, 0x20, 0x25, 0x0B, 0x47, 0xC2, 0x1F, 0x89 },
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x01 }
+},
+
+ /* 256-bit keys */
+{
+ 32,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0x96, 0x00, 0xF0, 0x76, 0x91, 0x69, 0x29, 0x87,
+ 0xF5, 0xE5, 0x97, 0xDB, 0xDB, 0xAF, 0x1B, 0x0A },
+ { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }
+}, {
+ 32,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0x69, 0x9C, 0xAF, 0xDD, 0x94, 0xC7, 0xBC, 0x60,
+ 0x44, 0xFE, 0x02, 0x05, 0x8A, 0x6E, 0xEF, 0xBD },
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 }
+},
+
+ /* 288-bit keys */
+{
+ 36,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0x0F, 0xC7, 0xA2, 0xC0, 0x11, 0x17, 0xAC, 0x43,
+ 0x52, 0x5E, 0xDF, 0x6C, 0xF3, 0x96, 0x33, 0x6C },
+ { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00 }
+}, {
+ 36,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0xAD, 0x08, 0x4F, 0xED, 0x55, 0xA6, 0x94, 0x3E,
+ 0x7E, 0x5E, 0xED, 0x05, 0xA1, 0x9D, 0x41, 0xB4 },
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x01 }
+},
+
+ /* 320-bit keys */
+{
+ 40,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0xFE, 0xE2, 0x0E, 0x2A, 0x9D, 0xC5, 0x83, 0xBA,
+ 0xA3, 0xA6, 0xD6, 0xA6, 0xF2, 0xE8, 0x06, 0xA5 },
+ { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }
+}, {
+ 40,
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0x86, 0x3D, 0xCC, 0x4A, 0x60, 0x34, 0x9C, 0x28,
+ 0xA7, 0xDA, 0xA4, 0x3B, 0x0A, 0xD7, 0xFD, 0xC7 },
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 }
+}
+#endif
+};
+ int x, y;
+ unsigned char buf[2][16];
+ symmetric_key skey;
+
+ for (x = 0; x < (int)(sizeof(tests)/sizeof(tests[0])); x++) {
+ anubis_setup(tests[x].key, tests[x].keylen, 0, &skey);
+ anubis_ecb_encrypt(tests[x].pt, buf[0], &skey);
+ anubis_ecb_decrypt(buf[0], buf[1], &skey);
+ if (memcmp(buf[0], tests[x].ct, 16) || memcmp(buf[1], tests[x].pt, 16)) {
+ return CRYPT_FAIL_TESTVECTOR;
+ }
+
+ for (y = 0; y < 1000; y++) anubis_ecb_encrypt(buf[0], buf[0], &skey);
+ for (y = 0; y < 1000; y++) anubis_ecb_decrypt(buf[0], buf[0], &skey);
+ if (memcmp(buf[0], tests[x].ct, 16)) {
+ return CRYPT_FAIL_TESTVECTOR;
+ }
+
+ }
+ return CRYPT_OK;
+#endif
+}
+
+/** Terminate the context
+ @param skey The scheduled key
+*/
+void anubis_done(symmetric_key *skey)
+{
+}
+
+/**
+ Gets suitable key size
+ @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable.
+ @return CRYPT_OK if the input key size is acceptable.
+*/
+int anubis_keysize(int *keysize)
+{
+ LTC_ARGCHK(keysize != NULL);
+ if (*keysize >= 40) {
+ *keysize = 40;
+ } else if (*keysize >= 36) {
+ *keysize = 36;
+ } else if (*keysize >= 32) {
+ *keysize = 32;
+ } else if (*keysize >= 28) {
+ *keysize = 28;
+ } else if (*keysize >= 24) {
+ *keysize = 24;
+ } else if (*keysize >= 20) {
+ *keysize = 20;
+ } else if (*keysize >= 16) {
+ *keysize = 16;
+ } else {
+ return CRYPT_INVALID_KEYSIZE;
+ }
+ return CRYPT_OK;
+}
+
+#endif
+
diff --git a/blowfish.c b/src/ciphers/blowfish.c
similarity index 87%
rename from blowfish.c
rename to src/ciphers/blowfish.c
index 229ba88c..2f0385d4 100644
--- a/blowfish.c
+++ b/src/ciphers/blowfish.c
@@ -6,13 +6,17 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+/**
+ @file blowfish.c
+ Implementation of the Blowfish block cipher, Tom St Denis
+*/
+#include "tomcrypt.h"
#ifdef BLOWFISH
-const struct _cipher_descriptor blowfish_desc =
+const struct ltc_cipher_descriptor blowfish_desc =
{
"blowfish",
0,
@@ -21,7 +25,9 @@ const struct _cipher_descriptor blowfish_desc =
&blowfish_ecb_encrypt,
&blowfish_ecb_decrypt,
&blowfish_test,
- &blowfish_keysize
+ &blowfish_done,
+ &blowfish_keysize,
+ NULL, NULL, NULL, NULL, NULL, NULL, NULL
};
static const ulong32 ORIG_P[16 + 2] = {
@@ -291,14 +297,22 @@ static const ulong32 ORIG_S[4][256] = {
0xB74E6132UL, 0xCE77E25BUL, 0x578FDFE3UL, 0x3AC372E6UL }
};
+ /**
+ Initialize the Blowfish block cipher
+ @param key The symmetric key you wish to pass
+ @param keylen The key length in bytes
+ @param num_rounds The number of rounds desired (0 for default)
+ @param skey The key in as scheduled by this function.
+ @return CRYPT_OK if successful
+ */
int blowfish_setup(const unsigned char *key, int keylen, int num_rounds,
symmetric_key *skey)
{
ulong32 x, y, z, A;
unsigned char B[8];
- _ARGCHK(key != NULL);
- _ARGCHK(skey != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(skey != NULL);
/* check key length */
if (keylen < 8 || keylen > 56) {
@@ -353,7 +367,7 @@ int blowfish_setup(const unsigned char *key, int keylen, int num_rounds,
}
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(B, sizeof(B));
#endif
@@ -363,13 +377,19 @@ int blowfish_setup(const unsigned char *key, int keylen, int num_rounds,
#ifndef __GNUC__
#define F(x) ((S1[byte(x,3)] + S2[byte(x,2)]) ^ S3[byte(x,1)]) + S4[byte(x,0)]
#else
-#define F(x) ((key->blowfish.S[0][byte(x,3)] + key->blowfish.S[1][byte(x,2)]) ^ key->blowfish.S[2][byte(x,1)]) + key->blowfish.S[3][byte(x,0)]
+#define F(x) ((skey->blowfish.S[0][byte(x,3)] + skey->blowfish.S[1][byte(x,2)]) ^ skey->blowfish.S[2][byte(x,1)]) + skey->blowfish.S[3][byte(x,0)]
#endif
-#ifdef CLEAN_STACK
-static void _blowfish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key)
+/**
+ Encrypts a block of text with Blowfish
+ @param pt The input plaintext (8 bytes)
+ @param ct The output ciphertext (8 bytes)
+ @param skey The key as scheduled
+*/
+#ifdef LTC_CLEAN_STACK
+static void _blowfish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
#else
-void blowfish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key)
+void blowfish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
#endif
{
ulong32 L, R;
@@ -378,15 +398,15 @@ void blowfish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_
ulong32 *S1, *S2, *S3, *S4;
#endif
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
#ifndef __GNUC__
- S1 = key->blowfish.S[0];
- S2 = key->blowfish.S[1];
- S3 = key->blowfish.S[2];
- S4 = key->blowfish.S[3];
+ S1 = skey->blowfish.S[0];
+ S2 = skey->blowfish.S[1];
+ S3 = skey->blowfish.S[2];
+ S4 = skey->blowfish.S[3];
#endif
/* load it */
@@ -395,33 +415,39 @@ void blowfish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_
/* do 16 rounds */
for (r = 0; r < 16; ) {
- L ^= key->blowfish.K[r++]; R ^= F(L);
- R ^= key->blowfish.K[r++]; L ^= F(R);
- L ^= key->blowfish.K[r++]; R ^= F(L);
- R ^= key->blowfish.K[r++]; L ^= F(R);
+ L ^= skey->blowfish.K[r++]; R ^= F(L);
+ R ^= skey->blowfish.K[r++]; L ^= F(R);
+ L ^= skey->blowfish.K[r++]; R ^= F(L);
+ R ^= skey->blowfish.K[r++]; L ^= F(R);
}
/* last keying */
- R ^= key->blowfish.K[17];
- L ^= key->blowfish.K[16];
+ R ^= skey->blowfish.K[17];
+ L ^= skey->blowfish.K[16];
/* store */
STORE32H(R, &ct[0]);
STORE32H(L, &ct[4]);
}
-#ifdef CLEAN_STACK
-void blowfish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key)
+#ifdef LTC_CLEAN_STACK
+void blowfish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
{
- _blowfish_ecb_encrypt(pt, ct, key);
+ _blowfish_ecb_encrypt(pt, ct, skey);
burn_stack(sizeof(ulong32) * 2 + sizeof(int));
}
#endif
-#ifdef CLEAN_STACK
-static void _blowfish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key)
+/**
+ Decrypts a block of text with Blowfish
+ @param ct The input ciphertext (8 bytes)
+ @param pt The output plaintext (8 bytes)
+ @param skey The key as scheduled
+*/
+#ifdef LTC_CLEAN_STACK
+static void _blowfish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
#else
-void blowfish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key)
+void blowfish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
#endif
{
ulong32 L, R;
@@ -430,15 +456,15 @@ void blowfish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_
ulong32 *S1, *S2, *S3, *S4;
#endif
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
#ifndef __GNUC__
- S1 = key->blowfish.S[0];
- S2 = key->blowfish.S[1];
- S3 = key->blowfish.S[2];
- S4 = key->blowfish.S[3];
+ S1 = skey->blowfish.S[0];
+ S2 = skey->blowfish.S[1];
+ S3 = skey->blowfish.S[2];
+ S4 = skey->blowfish.S[3];
#endif
/* load it */
@@ -446,15 +472,15 @@ void blowfish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_
LOAD32H(L, &ct[4]);
/* undo last keying */
- R ^= key->blowfish.K[17];
- L ^= key->blowfish.K[16];
+ R ^= skey->blowfish.K[17];
+ L ^= skey->blowfish.K[16];
/* do 16 rounds */
for (r = 15; r > 0; ) {
- L ^= F(R); R ^= key->blowfish.K[r--];
- R ^= F(L); L ^= key->blowfish.K[r--];
- L ^= F(R); R ^= key->blowfish.K[r--];
- R ^= F(L); L ^= key->blowfish.K[r--];
+ L ^= F(R); R ^= skey->blowfish.K[r--];
+ R ^= F(L); L ^= skey->blowfish.K[r--];
+ L ^= F(R); R ^= skey->blowfish.K[r--];
+ R ^= F(L); L ^= skey->blowfish.K[r--];
}
/* store */
@@ -462,15 +488,19 @@ void blowfish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_
STORE32H(R, &pt[4]);
}
-#ifdef CLEAN_STACK
-void blowfish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key)
+#ifdef LTC_CLEAN_STACK
+void blowfish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
{
- _blowfish_ecb_decrypt(ct, pt, key);
+ _blowfish_ecb_decrypt(ct, pt, skey);
burn_stack(sizeof(ulong32) * 2 + sizeof(int));
}
#endif
+/**
+ Performs a self-test of the Blowfish block cipher
+ @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled
+*/
int blowfish_test(void)
{
#ifndef LTC_TEST
@@ -525,14 +555,26 @@ int blowfish_test(void)
#endif
}
-int blowfish_keysize(int *desired_keysize)
+/** Terminate the context
+ @param skey The scheduled key
+*/
+void blowfish_done(symmetric_key *skey)
+{
+}
+
+/**
+ Gets suitable key size
+ @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable.
+ @return CRYPT_OK if the input key size is acceptable.
+*/
+int blowfish_keysize(int *keysize)
{
- _ARGCHK(desired_keysize != NULL);
+ LTC_ARGCHK(keysize != NULL);
- if (*desired_keysize < 8) {
+ if (*keysize < 8) {
return CRYPT_INVALID_KEYSIZE;
- } else if (*desired_keysize > 56) {
- *desired_keysize = 56;
+ } else if (*keysize > 56) {
+ *keysize = 56;
}
return CRYPT_OK;
}
diff --git a/cast5.c b/src/ciphers/cast5.c
similarity index 90%
rename from cast5.c
rename to src/ciphers/cast5.c
index dcb78abe..2b8e4a56 100644
--- a/cast5.c
+++ b/src/ciphers/cast5.c
@@ -6,14 +6,18 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* Implementation of CAST5 (RFC 2144) by Tom St Denis */
-#include "mycrypt.h"
+
+ /**
+ @file cast5.c
+ Implementation of CAST5 (RFC 2144) by Tom St Denis
+ */
+#include "tomcrypt.h"
#ifdef CAST5
-const struct _cipher_descriptor cast5_desc = {
+const struct ltc_cipher_descriptor cast5_desc = {
"cast5",
15,
5, 16, 8, 16,
@@ -21,7 +25,9 @@ const struct _cipher_descriptor cast5_desc = {
&cast5_ecb_encrypt,
&cast5_ecb_decrypt,
&cast5_test,
- &cast5_keysize
+ &cast5_done,
+ &cast5_keysize,
+ NULL, NULL, NULL, NULL, NULL, NULL, NULL
};
static const ulong32 S1[256] = {
@@ -391,7 +397,15 @@ static const ulong32 S8[256] = {
#define GB(x, i) (((x[(15-i)>>2])>>(unsigned)(8*((15-i)&3)))&255)
#endif
-#ifdef CLEAN_STACK
+ /**
+ Initialize the CAST5 block cipher
+ @param key The symmetric key you wish to pass
+ @param keylen The key length in bytes
+ @param num_rounds The number of rounds desired (0 for default)
+ @param skey The key in as scheduled by this function.
+ @return CRYPT_OK if successful
+ */
+#ifdef LTC_CLEAN_STACK
static int _cast5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey)
#else
int cast5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey)
@@ -401,8 +415,8 @@ int cast5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_
unsigned char buf[16];
int y, i;
- _ARGCHK(key != NULL);
- _ARGCHK(skey != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(skey != NULL);
if (num_rounds != 12 && num_rounds != 16 && num_rounds != 0) {
return CRYPT_INVALID_ROUNDS;
@@ -466,7 +480,7 @@ int cast5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_
skey->cast5.keylen = keylen;
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(buf, sizeof(buf));
zeromem(x, sizeof(x));
zeromem(z, sizeof(z));
@@ -475,7 +489,7 @@ int cast5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_
return CRYPT_OK;
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
int cast5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey)
{
int z;
@@ -515,95 +529,111 @@ INLINE static ulong32 FIII(ulong32 R, ulong32 Km, ulong32 Kr)
return ((S1[byte(I, 3)] + S2[byte(I,2)]) ^ S3[byte(I,1)]) - S4[byte(I,0)];
}
-#ifdef CLEAN_STACK
-static void _cast5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key)
+/**
+ Encrypts a block of text with CAST5
+ @param pt The input plaintext (8 bytes)
+ @param ct The output ciphertext (8 bytes)
+ @param skey The key as scheduled
+*/
+#ifdef LTC_CLEAN_STACK
+static void _cast5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
#else
-void cast5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key)
+void cast5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
#endif
{
ulong32 R, L;
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
LOAD32H(L,&pt[0]);
LOAD32H(R,&pt[4]);
- L ^= FI(R, key->cast5.K[0], key->cast5.K[16]);
- R ^= FII(L, key->cast5.K[1], key->cast5.K[17]);
- L ^= FIII(R, key->cast5.K[2], key->cast5.K[18]);
- R ^= FI(L, key->cast5.K[3], key->cast5.K[19]);
- L ^= FII(R, key->cast5.K[4], key->cast5.K[20]);
- R ^= FIII(L, key->cast5.K[5], key->cast5.K[21]);
- L ^= FI(R, key->cast5.K[6], key->cast5.K[22]);
- R ^= FII(L, key->cast5.K[7], key->cast5.K[23]);
- L ^= FIII(R, key->cast5.K[8], key->cast5.K[24]);
- R ^= FI(L, key->cast5.K[9], key->cast5.K[25]);
- L ^= FII(R, key->cast5.K[10], key->cast5.K[26]);
- R ^= FIII(L, key->cast5.K[11], key->cast5.K[27]);
- if (key->cast5.keylen > 10) {
- L ^= FI(R, key->cast5.K[12], key->cast5.K[28]);
- R ^= FII(L, key->cast5.K[13], key->cast5.K[29]);
- L ^= FIII(R, key->cast5.K[14], key->cast5.K[30]);
- R ^= FI(L, key->cast5.K[15], key->cast5.K[31]);
+ L ^= FI(R, skey->cast5.K[0], skey->cast5.K[16]);
+ R ^= FII(L, skey->cast5.K[1], skey->cast5.K[17]);
+ L ^= FIII(R, skey->cast5.K[2], skey->cast5.K[18]);
+ R ^= FI(L, skey->cast5.K[3], skey->cast5.K[19]);
+ L ^= FII(R, skey->cast5.K[4], skey->cast5.K[20]);
+ R ^= FIII(L, skey->cast5.K[5], skey->cast5.K[21]);
+ L ^= FI(R, skey->cast5.K[6], skey->cast5.K[22]);
+ R ^= FII(L, skey->cast5.K[7], skey->cast5.K[23]);
+ L ^= FIII(R, skey->cast5.K[8], skey->cast5.K[24]);
+ R ^= FI(L, skey->cast5.K[9], skey->cast5.K[25]);
+ L ^= FII(R, skey->cast5.K[10], skey->cast5.K[26]);
+ R ^= FIII(L, skey->cast5.K[11], skey->cast5.K[27]);
+ if (skey->cast5.keylen > 10) {
+ L ^= FI(R, skey->cast5.K[12], skey->cast5.K[28]);
+ R ^= FII(L, skey->cast5.K[13], skey->cast5.K[29]);
+ L ^= FIII(R, skey->cast5.K[14], skey->cast5.K[30]);
+ R ^= FI(L, skey->cast5.K[15], skey->cast5.K[31]);
}
STORE32H(R,&ct[0]);
STORE32H(L,&ct[4]);
}
-#ifdef CLEAN_STACK
-void cast5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key)
+#ifdef LTC_CLEAN_STACK
+void cast5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
{
- _cast5_ecb_encrypt(pt,ct,key);
+ _cast5_ecb_encrypt(pt,ct,skey);
burn_stack(sizeof(ulong32)*3);
}
#endif
-#ifdef CLEAN_STACK
-static void _cast5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key)
+/**
+ Decrypts a block of text with CAST5
+ @param ct The input ciphertext (8 bytes)
+ @param pt The output plaintext (8 bytes)
+ @param skey The key as scheduled
+*/
+#ifdef LTC_CLEAN_STACK
+static void _cast5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
#else
-void cast5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key)
+void cast5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
#endif
{
ulong32 R, L;
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
LOAD32H(R,&ct[0]);
LOAD32H(L,&ct[4]);
- if (key->cast5.keylen > 10) {
- R ^= FI(L, key->cast5.K[15], key->cast5.K[31]);
- L ^= FIII(R, key->cast5.K[14], key->cast5.K[30]);
- R ^= FII(L, key->cast5.K[13], key->cast5.K[29]);
- L ^= FI(R, key->cast5.K[12], key->cast5.K[28]);
+ if (skey->cast5.keylen > 10) {
+ R ^= FI(L, skey->cast5.K[15], skey->cast5.K[31]);
+ L ^= FIII(R, skey->cast5.K[14], skey->cast5.K[30]);
+ R ^= FII(L, skey->cast5.K[13], skey->cast5.K[29]);
+ L ^= FI(R, skey->cast5.K[12], skey->cast5.K[28]);
}
- R ^= FIII(L, key->cast5.K[11], key->cast5.K[27]);
- L ^= FII(R, key->cast5.K[10], key->cast5.K[26]);
- R ^= FI(L, key->cast5.K[9], key->cast5.K[25]);
- L ^= FIII(R, key->cast5.K[8], key->cast5.K[24]);
- R ^= FII(L, key->cast5.K[7], key->cast5.K[23]);
- L ^= FI(R, key->cast5.K[6], key->cast5.K[22]);
- R ^= FIII(L, key->cast5.K[5], key->cast5.K[21]);
- L ^= FII(R, key->cast5.K[4], key->cast5.K[20]);
- R ^= FI(L, key->cast5.K[3], key->cast5.K[19]);
- L ^= FIII(R, key->cast5.K[2], key->cast5.K[18]);
- R ^= FII(L, key->cast5.K[1], key->cast5.K[17]);
- L ^= FI(R, key->cast5.K[0], key->cast5.K[16]);
+ R ^= FIII(L, skey->cast5.K[11], skey->cast5.K[27]);
+ L ^= FII(R, skey->cast5.K[10], skey->cast5.K[26]);
+ R ^= FI(L, skey->cast5.K[9], skey->cast5.K[25]);
+ L ^= FIII(R, skey->cast5.K[8], skey->cast5.K[24]);
+ R ^= FII(L, skey->cast5.K[7], skey->cast5.K[23]);
+ L ^= FI(R, skey->cast5.K[6], skey->cast5.K[22]);
+ R ^= FIII(L, skey->cast5.K[5], skey->cast5.K[21]);
+ L ^= FII(R, skey->cast5.K[4], skey->cast5.K[20]);
+ R ^= FI(L, skey->cast5.K[3], skey->cast5.K[19]);
+ L ^= FIII(R, skey->cast5.K[2], skey->cast5.K[18]);
+ R ^= FII(L, skey->cast5.K[1], skey->cast5.K[17]);
+ L ^= FI(R, skey->cast5.K[0], skey->cast5.K[16]);
STORE32H(L,&pt[0]);
STORE32H(R,&pt[4]);
}
-#ifdef CLEAN_STACK
-void cast5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key)
+#ifdef LTC_CLEAN_STACK
+void cast5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
{
- _cast5_ecb_decrypt(ct,pt,key);
+ _cast5_ecb_decrypt(ct,pt,skey);
burn_stack(sizeof(ulong32)*3);
}
#endif
+/**
+ Performs a self-test of the CAST5 block cipher
+ @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled
+*/
int cast5_test(void)
{
#ifndef LTC_TEST
@@ -655,13 +685,25 @@ int cast5_test(void)
#endif
}
-int cast5_keysize(int *desired_keysize)
+/** Terminate the context
+ @param skey The scheduled key
+*/
+void cast5_done(symmetric_key *skey)
+{
+}
+
+/**
+ Gets suitable key size
+ @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable.
+ @return CRYPT_OK if the input key size is acceptable.
+*/
+int cast5_keysize(int *keysize)
{
- _ARGCHK(desired_keysize != NULL);
- if (*desired_keysize < 5) {
+ LTC_ARGCHK(keysize != NULL);
+ if (*keysize < 5) {
return CRYPT_INVALID_KEYSIZE;
- } else if (*desired_keysize > 16) {
- *desired_keysize = 16;
+ } else if (*keysize > 16) {
+ *keysize = 16;
}
return CRYPT_OK;
}
diff --git a/des.c b/src/ciphers/des.c
similarity index 97%
rename from des.c
rename to src/ciphers/des.c
index e6090142..d42c5faa 100644
--- a/des.c
+++ b/src/ciphers/des.c
@@ -6,17 +6,21 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* DES code submitted by Dobes Vandermeer */
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file des.c
+ DES code submitted by Dobes Vandermeer
+*/
#ifdef DES
#define EN0 0
#define DE1 1
-const struct _cipher_descriptor des_desc =
+const struct ltc_cipher_descriptor des_desc =
{
"des",
13,
@@ -25,10 +29,12 @@ const struct _cipher_descriptor des_desc =
&des_ecb_encrypt,
&des_ecb_decrypt,
&des_test,
- &des_keysize
+ &des_done,
+ &des_keysize,
+ NULL, NULL, NULL, NULL, NULL, NULL, NULL
};
-const struct _cipher_descriptor des3_desc =
+const struct ltc_cipher_descriptor des3_desc =
{
"3des",
14,
@@ -37,7 +43,9 @@ const struct _cipher_descriptor des3_desc =
&des3_ecb_encrypt,
&des3_ecb_decrypt,
&des3_test,
- &des3_keysize
+ &des3_done,
+ &des3_keysize,
+ NULL, NULL, NULL, NULL, NULL, NULL, NULL
};
static const ulong32 bytebit[8] =
@@ -239,7 +247,7 @@ static const ulong32 SP8[64] =
0x00001040UL, 0x00040040UL, 0x10000000UL, 0x10041000UL
};
-#ifndef SMALL_CODE
+#ifndef LTC_SMALL_CODE
static const ulong64 des_ip[8][256] = {
@@ -1292,10 +1300,10 @@ static const ulong64 des_fp[8][256] = {
static void cookey(const ulong32 *raw1, ulong32 *keyout);
-#ifdef CLEAN_STACK
-void _deskey(const unsigned char *key, short edf, ulong32 *keyout)
+#ifdef LTC_CLEAN_STACK
+static void _deskey(const unsigned char *key, short edf, ulong32 *keyout)
#else
-void deskey(const unsigned char *key, short edf, ulong32 *keyout)
+static void deskey(const unsigned char *key, short edf, ulong32 *keyout)
#endif
{
ulong32 i, j, l, m, n, kn[32];
@@ -1344,15 +1352,15 @@ void deskey(const unsigned char *key, short edf, ulong32 *keyout)
cookey(kn, keyout);
}
-#ifdef CLEAN_STACK
-void deskey(const unsigned char *key, short edf, ulong32 *keyout)
+#ifdef LTC_CLEAN_STACK
+static void deskey(const unsigned char *key, short edf, ulong32 *keyout)
{
_deskey(key, edf, keyout);
burn_stack(sizeof(int)*5 + sizeof(ulong32)*32 + sizeof(unsigned char)*112);
}
#endif
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static void _cookey(const ulong32 *raw1, ulong32 *keyout)
#else
static void cookey(const ulong32 *raw1, ulong32 *keyout)
@@ -1380,7 +1388,7 @@ static void cookey(const ulong32 *raw1, ulong32 *keyout)
XMEMCPY(keyout, dough, sizeof dough);
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static void cookey(const ulong32 *raw1, ulong32 *keyout)
{
_cookey(raw1, keyout);
@@ -1388,7 +1396,7 @@ static void cookey(const ulong32 *raw1, ulong32 *keyout)
}
#endif
-#ifndef CLEAN_STACK
+#ifndef LTC_CLEAN_STACK
static void desfunc(ulong32 *block, const ulong32 *keys)
#else
static void _desfunc(ulong32 *block, const ulong32 *keys)
@@ -1400,7 +1408,7 @@ static void _desfunc(ulong32 *block, const ulong32 *keys)
leftt = block[0];
right = block[1];
-#ifdef SMALL_CODE
+#ifdef LTC_SMALL_CODE
work = ((leftt >> 4) ^ right) & 0x0f0f0f0fL;
right ^= work;
leftt ^= (work << 4);
@@ -1417,12 +1425,12 @@ static void _desfunc(ulong32 *block, const ulong32 *keys)
leftt ^= work;
right ^= (work << 8);
- right = ROL(right, 1);
+ right = ROLc(right, 1);
work = (leftt ^ right) & 0xaaaaaaaaL;
leftt ^= work;
right ^= work;
- leftt = ROL(leftt, 1);
+ leftt = ROLc(leftt, 1);
#else
{
ulong64 tmp;
@@ -1440,7 +1448,7 @@ static void _desfunc(ulong32 *block, const ulong32 *keys)
#endif
for (cur_round = 0; cur_round < 8; cur_round++) {
- work = ROR(right, 4) ^ *keys++;
+ work = RORc(right, 4) ^ *keys++;
leftt ^= SP7[work & 0x3fL]
^ SP5[(work >> 8) & 0x3fL]
^ SP3[(work >> 16) & 0x3fL]
@@ -1451,7 +1459,7 @@ static void _desfunc(ulong32 *block, const ulong32 *keys)
^ SP4[(work >> 16) & 0x3fL]
^ SP2[(work >> 24) & 0x3fL];
- work = ROR(leftt, 4) ^ *keys++;
+ work = RORc(leftt, 4) ^ *keys++;
right ^= SP7[ work & 0x3fL]
^ SP5[(work >> 8) & 0x3fL]
^ SP3[(work >> 16) & 0x3fL]
@@ -1463,16 +1471,16 @@ static void _desfunc(ulong32 *block, const ulong32 *keys)
^ SP2[(work >> 24) & 0x3fL];
}
-#ifdef SMALL_CODE
- right = ROR(right, 1);
+#ifdef LTC_SMALL_CODE
+ right = RORc(right, 1);
work = (leftt ^ right) & 0xaaaaaaaaL;
leftt ^= work;
right ^= work;
- leftt = ROR(leftt, 1);
+ leftt = RORc(leftt, 1);
work = ((leftt >> 8) ^ right) & 0x00ff00ffL;
right ^= work;
leftt ^= (work << 8);
- // --
+ /* -- */
work = ((leftt >> 2) ^ right) & 0x33333333L;
right ^= work;
leftt ^= (work << 2);
@@ -1502,7 +1510,7 @@ static void _desfunc(ulong32 *block, const ulong32 *keys)
block[1] = leftt;
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static void desfunc(ulong32 *block, const ulong32 *keys)
{
_desfunc(block, keys);
@@ -1510,10 +1518,18 @@ static void desfunc(ulong32 *block, const ulong32 *keys)
}
#endif
+ /**
+ Initialize the DES block cipher
+ @param key The symmetric key you wish to pass
+ @param keylen The key length in bytes
+ @param num_rounds The number of rounds desired (0 for default)
+ @param skey The key in as scheduled by this function.
+ @return CRYPT_OK if successful
+ */
int des_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey)
{
- _ARGCHK(key != NULL);
- _ARGCHK(skey != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(skey != NULL);
if (num_rounds != 0 && num_rounds != 16) {
return CRYPT_INVALID_ROUNDS;
@@ -1529,10 +1545,18 @@ int des_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_ke
return CRYPT_OK;
}
+ /**
+ Initialize the 3DES-EDE block cipher
+ @param key The symmetric key you wish to pass
+ @param keylen The key length in bytes
+ @param num_rounds The number of rounds desired (0 for default)
+ @param skey The key in as scheduled by this function.
+ @return CRYPT_OK if successful
+ */
int des3_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey)
{
- _ARGCHK(key != NULL);
- _ARGCHK(skey != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(skey != NULL);
if(num_rounds != 0 && num_rounds != 16) {
return CRYPT_INVALID_ROUNDS;
@@ -1553,63 +1577,91 @@ int des3_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_k
return CRYPT_OK;
}
-void des_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key)
+/**
+ Encrypts a block of text with DES
+ @param pt The input plaintext (8 bytes)
+ @param ct The output ciphertext (8 bytes)
+ @param skey The key as scheduled
+*/
+void des_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
{
ulong32 work[2];
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
LOAD32H(work[0], pt+0);
LOAD32H(work[1], pt+4);
- desfunc(work, key->des.ek);
+ desfunc(work, skey->des.ek);
STORE32H(work[0],ct+0);
STORE32H(work[1],ct+4);
}
-void des_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key)
+/**
+ Decrypts a block of text with DES
+ @param ct The input ciphertext (8 bytes)
+ @param pt The output plaintext (8 bytes)
+ @param skey The key as scheduled
+*/
+void des_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
{
ulong32 work[2];
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
LOAD32H(work[0], ct+0);
LOAD32H(work[1], ct+4);
- desfunc(work, key->des.dk);
+ desfunc(work, skey->des.dk);
STORE32H(work[0],pt+0);
STORE32H(work[1],pt+4);
}
-void des3_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key)
+/**
+ Encrypts a block of text with 3DES-EDE
+ @param pt The input plaintext (8 bytes)
+ @param ct The output ciphertext (8 bytes)
+ @param skey The key as scheduled
+*/
+void des3_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
{
ulong32 work[2];
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
LOAD32H(work[0], pt+0);
LOAD32H(work[1], pt+4);
- desfunc(work, key->des3.ek[0]);
- desfunc(work, key->des3.ek[1]);
- desfunc(work, key->des3.ek[2]);
+ desfunc(work, skey->des3.ek[0]);
+ desfunc(work, skey->des3.ek[1]);
+ desfunc(work, skey->des3.ek[2]);
STORE32H(work[0],ct+0);
STORE32H(work[1],ct+4);
}
-void des3_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key)
+/**
+ Decrypts a block of text with 3DES-EDE
+ @param ct The input ciphertext (8 bytes)
+ @param pt The output plaintext (8 bytes)
+ @param skey The key as scheduled
+*/
+void des3_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
{
ulong32 work[2];
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
LOAD32H(work[0], ct+0);
LOAD32H(work[1], ct+4);
- desfunc(work, key->des3.dk[0]);
- desfunc(work, key->des3.dk[1]);
- desfunc(work, key->des3.dk[2]);
+ desfunc(work, skey->des3.dk[0]);
+ desfunc(work, skey->des3.dk[1]);
+ desfunc(work, skey->des3.dk[2]);
STORE32H(work[0],pt+0);
STORE32H(work[1],pt+4);
}
+/**
+ Performs a self-test of the DES block cipher
+ @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled
+*/
int des_test(void)
{
#ifndef LTC_TEST
@@ -1617,7 +1669,7 @@ int des_test(void)
#else
int err;
static const struct des_test_case {
- int num, mode; // mode 1 = encrypt
+ int num, mode; /* mode 1 = encrypt */
unsigned char key[8], txt[8], out[8];
} cases[] = {
{ 1, 1, { 0x10, 0x31, 0x6E, 0x02, 0x8C, 0x8F, 0x3B, 0x4A },
@@ -1789,23 +1841,48 @@ int des3_test(void)
#endif
}
-int des_keysize(int *desired_keysize)
+/** Terminate the context
+ @param skey The scheduled key
+*/
+void des_done(symmetric_key *skey)
+{
+}
+
+/** Terminate the context
+ @param skey The scheduled key
+*/
+void des3_done(symmetric_key *skey)
+{
+}
+
+
+/**
+ Gets suitable key size
+ @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable.
+ @return CRYPT_OK if the input key size is acceptable.
+*/
+int des_keysize(int *keysize)
{
- _ARGCHK(desired_keysize != NULL);
- if(*desired_keysize < 8) {
+ LTC_ARGCHK(keysize != NULL);
+ if(*keysize < 8) {
return CRYPT_INVALID_KEYSIZE;
}
- *desired_keysize = 8;
+ *keysize = 8;
return CRYPT_OK;
}
-int des3_keysize(int *desired_keysize)
+/**
+ Gets suitable key size
+ @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable.
+ @return CRYPT_OK if the input key size is acceptable.
+*/
+int des3_keysize(int *keysize)
{
- _ARGCHK(desired_keysize != NULL);
- if(*desired_keysize < 24) {
+ LTC_ARGCHK(keysize != NULL);
+ if(*keysize < 24) {
return CRYPT_INVALID_KEYSIZE;
}
- *desired_keysize = 24;
+ *keysize = 24;
return CRYPT_OK;
}
diff --git a/src/ciphers/khazad.c b/src/ciphers/khazad.c
new file mode 100644
index 00000000..46269237
--- /dev/null
+++ b/src/ciphers/khazad.c
@@ -0,0 +1,847 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file khazad.c
+ Khazad implementation derived from public domain source
+ Authors: Paulo S.L.M. Barreto and Vincent Rijmen.
+*/
+
+#ifdef KHAZAD
+
+const struct ltc_cipher_descriptor khazad_desc = {
+ "khazad",
+ 18,
+ 16, 16, 8, 8,
+ &khazad_setup,
+ &khazad_ecb_encrypt,
+ &khazad_ecb_decrypt,
+ &khazad_test,
+ &khazad_done,
+ &khazad_keysize,
+ NULL, NULL, NULL, NULL, NULL, NULL, NULL
+};
+
+#define R 8
+#define KEYSIZE 128
+#define KEYSIZEB (KEYSIZE/8)
+#define BLOCKSIZE 64
+#define BLOCKSIZEB (BLOCKSIZE/8)
+
+static const ulong64 T0[256] = {
+ CONST64(0xbad3d268bbb96a01), CONST64(0x54fc4d19e59a66b1), CONST64(0x2f71bc93e26514cd), CONST64(0x749ccdb925871b51),
+ CONST64(0x53f55102f7a257a4), CONST64(0xd3686bb8d0d6be03), CONST64(0xd26b6fbdd6deb504), CONST64(0x4dd72964b35285fe),
+ CONST64(0x50f05d0dfdba4aad), CONST64(0xace98a26cf09e063), CONST64(0x8d8a0e83091c9684), CONST64(0xbfdcc679a5914d1a),
+ CONST64(0x7090ddad3da7374d), CONST64(0x52f65507f1aa5ca3), CONST64(0x9ab352c87ba417e1), CONST64(0x4cd42d61b55a8ef9),
+ CONST64(0xea238f65460320ac), CONST64(0xd56273a6c4e68411), CONST64(0x97a466f155cc68c2), CONST64(0xd16e63b2dcc6a80d),
+ CONST64(0x3355ccffaa85d099), CONST64(0x51f35908fbb241aa), CONST64(0x5bed712ac7e20f9c), CONST64(0xa6f7a204f359ae55),
+ CONST64(0xde7f5f81febec120), CONST64(0x48d83d75ad7aa2e5), CONST64(0xa8e59a32d729cc7f), CONST64(0x99b65ec771bc0ae8),
+ CONST64(0xdb704b90e096e63b), CONST64(0x3256c8faac8ddb9e), CONST64(0xb7c4e65195d11522), CONST64(0xfc19d72b32b3aace),
+ CONST64(0xe338ab48704b7393), CONST64(0x9ebf42dc63843bfd), CONST64(0x91ae7eef41fc52d0), CONST64(0x9bb056cd7dac1ce6),
+ CONST64(0xe23baf4d76437894), CONST64(0xbbd0d66dbdb16106), CONST64(0x41c319589b32f1da), CONST64(0x6eb2a5cb7957e517),
+ CONST64(0xa5f2ae0bf941b35c), CONST64(0xcb400bc08016564b), CONST64(0x6bbdb1da677fc20c), CONST64(0x95a26efb59dc7ecc),
+ CONST64(0xa1febe1fe1619f40), CONST64(0xf308eb1810cbc3e3), CONST64(0xb1cefe4f81e12f30), CONST64(0x0206080a0c10160e),
+ CONST64(0xcc4917db922e675e), CONST64(0xc45137f3a26e3f66), CONST64(0x1d2774694ee8cf53), CONST64(0x143c504478a09c6c),
+ CONST64(0xc3582be8b0560e73), CONST64(0x63a591f2573f9a34), CONST64(0xda734f95e69eed3c), CONST64(0x5de76934d3d2358e),
+ CONST64(0x5fe1613edfc22380), CONST64(0xdc79578bf2aed72e), CONST64(0x7d87e99413cf486e), CONST64(0xcd4a13de94266c59),
+ CONST64(0x7f81e19e1fdf5e60), CONST64(0x5aee752fc1ea049b), CONST64(0x6cb4adc17547f319), CONST64(0x5ce46d31d5da3e89),
+ CONST64(0xf704fb0c08ebefff), CONST64(0x266a98bed42d47f2), CONST64(0xff1cdb2438abb7c7), CONST64(0xed2a937e543b11b9),
+ CONST64(0xe825876f4a1336a2), CONST64(0x9dba4ed3699c26f4), CONST64(0x6fb1a1ce7f5fee10), CONST64(0x8e8f028c03048b8d),
+ CONST64(0x192b647d56c8e34f), CONST64(0xa0fdba1ae7699447), CONST64(0xf00de7171ad3deea), CONST64(0x89861e97113cba98),
+ CONST64(0x0f113c332278692d), CONST64(0x07091c1b12383115), CONST64(0xafec8629c511fd6a), CONST64(0xfb10cb30208b9bdb),
+ CONST64(0x0818202830405838), CONST64(0x153f54417ea8976b), CONST64(0x0d1734392e687f23), CONST64(0x040c101418202c1c),
+ CONST64(0x0103040506080b07), CONST64(0x64ac8de94507ab21), CONST64(0xdf7c5b84f8b6ca27), CONST64(0x769ac5b329970d5f),
+ CONST64(0x798bf9800bef6472), CONST64(0xdd7a538ef4a6dc29), CONST64(0x3d47f4c98ef5b2b3), CONST64(0x163a584e74b08a62),
+ CONST64(0x3f41fcc382e5a4bd), CONST64(0x3759dcebb2a5fc85), CONST64(0x6db7a9c4734ff81e), CONST64(0x3848e0d890dd95a8),
+ CONST64(0xb9d6de67b1a17708), CONST64(0x7395d1a237bf2a44), CONST64(0xe926836a4c1b3da5), CONST64(0x355fd4e1beb5ea8b),
+ CONST64(0x55ff491ce3926db6), CONST64(0x7193d9a83baf3c4a), CONST64(0x7b8df18a07ff727c), CONST64(0x8c890a860f149d83),
+ CONST64(0x7296d5a731b72143), CONST64(0x88851a921734b19f), CONST64(0xf607ff090ee3e4f8), CONST64(0x2a7ea882fc4d33d6),
+ CONST64(0x3e42f8c684edafba), CONST64(0x5ee2653bd9ca2887), CONST64(0x27699cbbd2254cf5), CONST64(0x46ca0543890ac0cf),
+ CONST64(0x0c14303c28607424), CONST64(0x65af89ec430fa026), CONST64(0x68b8bdd56d67df05), CONST64(0x61a399f85b2f8c3a),
+ CONST64(0x03050c0f0a181d09), CONST64(0xc15e23e2bc46187d), CONST64(0x57f94116ef827bb8), CONST64(0xd6677fa9cefe9918),
+ CONST64(0xd976439aec86f035), CONST64(0x58e87d25cdfa1295), CONST64(0xd875479fea8efb32), CONST64(0x66aa85e34917bd2f),
+ CONST64(0xd7647bacc8f6921f), CONST64(0x3a4ee8d29ccd83a6), CONST64(0xc84507cf8a0e4b42), CONST64(0x3c44f0cc88fdb9b4),
+ CONST64(0xfa13cf35268390dc), CONST64(0x96a762f453c463c5), CONST64(0xa7f4a601f551a552), CONST64(0x98b55ac277b401ef),
+ CONST64(0xec29977b52331abe), CONST64(0xb8d5da62b7a97c0f), CONST64(0xc7543bfca876226f), CONST64(0xaeef822cc319f66d),
+ CONST64(0x69bbb9d06b6fd402), CONST64(0x4bdd317aa762bfec), CONST64(0xabe0963ddd31d176), CONST64(0xa9e69e37d121c778),
+ CONST64(0x67a981e64f1fb628), CONST64(0x0a1e28223c504e36), CONST64(0x47c901468f02cbc8), CONST64(0xf20bef1d16c3c8e4),
+ CONST64(0xb5c2ee5b99c1032c), CONST64(0x226688aacc0d6bee), CONST64(0xe532b356647b4981), CONST64(0xee2f9f715e230cb0),
+ CONST64(0xbedfc27ca399461d), CONST64(0x2b7dac87fa4538d1), CONST64(0x819e3ebf217ce2a0), CONST64(0x1236485a6c90a67e),
+ CONST64(0x839836b52d6cf4ae), CONST64(0x1b2d6c775ad8f541), CONST64(0x0e1238362470622a), CONST64(0x23658cafca0560e9),
+ CONST64(0xf502f30604fbf9f1), CONST64(0x45cf094c8312ddc6), CONST64(0x216384a5c61576e7), CONST64(0xce4f1fd19e3e7150),
+ CONST64(0x49db3970ab72a9e2), CONST64(0x2c74b09ce87d09c4), CONST64(0xf916c33a2c9b8dd5), CONST64(0xe637bf596e635488),
+ CONST64(0xb6c7e25493d91e25), CONST64(0x2878a088f05d25d8), CONST64(0x17395c4b72b88165), CONST64(0x829b32b02b64ffa9),
+ CONST64(0x1a2e68725cd0fe46), CONST64(0x8b80169d1d2cac96), CONST64(0xfe1fdf213ea3bcc0), CONST64(0x8a8312981b24a791),
+ CONST64(0x091b242d3648533f), CONST64(0xc94603ca8c064045), CONST64(0x879426a1354cd8b2), CONST64(0x4ed2256bb94a98f7),
+ CONST64(0xe13ea3427c5b659d), CONST64(0x2e72b896e46d1fca), CONST64(0xe431b75362734286), CONST64(0xe03da7477a536e9a),
+ CONST64(0xeb208b60400b2bab), CONST64(0x90ad7aea47f459d7), CONST64(0xa4f1aa0eff49b85b), CONST64(0x1e22786644f0d25a),
+ CONST64(0x85922eab395ccebc), CONST64(0x60a09dfd5d27873d), CONST64(0x0000000000000000), CONST64(0x256f94b1de355afb),
+ CONST64(0xf401f70302f3f2f6), CONST64(0xf10ee3121cdbd5ed), CONST64(0x94a16afe5fd475cb), CONST64(0x0b1d2c273a584531),
+ CONST64(0xe734bb5c686b5f8f), CONST64(0x759fc9bc238f1056), CONST64(0xef2c9b74582b07b7), CONST64(0x345cd0e4b8bde18c),
+ CONST64(0x3153c4f5a695c697), CONST64(0xd46177a3c2ee8f16), CONST64(0xd06d67b7dacea30a), CONST64(0x869722a43344d3b5),
+ CONST64(0x7e82e59b19d75567), CONST64(0xadea8e23c901eb64), CONST64(0xfd1ad32e34bba1c9), CONST64(0x297ba48df6552edf),
+ CONST64(0x3050c0f0a09dcd90), CONST64(0x3b4decd79ac588a1), CONST64(0x9fbc46d9658c30fa), CONST64(0xf815c73f2a9386d2),
+ CONST64(0xc6573ff9ae7e2968), CONST64(0x13354c5f6a98ad79), CONST64(0x060a181e14303a12), CONST64(0x050f14111e28271b),
+ CONST64(0xc55233f6a4663461), CONST64(0x113344556688bb77), CONST64(0x7799c1b62f9f0658), CONST64(0x7c84ed9115c74369),
+ CONST64(0x7a8ef58f01f7797b), CONST64(0x7888fd850de76f75), CONST64(0x365ad8eeb4adf782), CONST64(0x1c24706c48e0c454),
+ CONST64(0x394be4dd96d59eaf), CONST64(0x59eb7920cbf21992), CONST64(0x1828607850c0e848), CONST64(0x56fa4513e98a70bf),
+ CONST64(0xb3c8f6458df1393e), CONST64(0xb0cdfa4a87e92437), CONST64(0x246c90b4d83d51fc), CONST64(0x206080a0c01d7de0),
+ CONST64(0xb2cbf2408bf93239), CONST64(0x92ab72e04be44fd9), CONST64(0xa3f8b615ed71894e), CONST64(0xc05d27e7ba4e137a),
+ CONST64(0x44cc0d49851ad6c1), CONST64(0x62a695f751379133), CONST64(0x103040506080b070), CONST64(0xb4c1ea5e9fc9082b),
+ CONST64(0x84912aae3f54c5bb), CONST64(0x43c511529722e7d4), CONST64(0x93a876e54dec44de), CONST64(0xc25b2fedb65e0574),
+ CONST64(0x4ade357fa16ab4eb), CONST64(0xbddace73a9815b14), CONST64(0x8f8c0689050c808a), CONST64(0x2d77b499ee7502c3),
+ CONST64(0xbcd9ca76af895013), CONST64(0x9cb94ad66f942df3), CONST64(0x6abeb5df6177c90b), CONST64(0x40c01d5d9d3afadd),
+ CONST64(0xcf4c1bd498367a57), CONST64(0xa2fbb210eb798249), CONST64(0x809d3aba2774e9a7), CONST64(0x4fd1216ebf4293f0),
+ CONST64(0x1f217c6342f8d95d), CONST64(0xca430fc5861e5d4c), CONST64(0xaae39238db39da71), CONST64(0x42c61557912aecd3),
+};
+
+static const ulong64 T1[256] = {
+ CONST64(0xd3ba68d2b9bb016a), CONST64(0xfc54194d9ae5b166), CONST64(0x712f93bc65e2cd14), CONST64(0x9c74b9cd8725511b),
+ CONST64(0xf5530251a2f7a457), CONST64(0x68d3b86bd6d003be), CONST64(0x6bd2bd6fded604b5), CONST64(0xd74d642952b3fe85),
+ CONST64(0xf0500d5dbafdad4a), CONST64(0xe9ac268a09cf63e0), CONST64(0x8a8d830e1c098496), CONST64(0xdcbf79c691a51a4d),
+ CONST64(0x9070addda73d4d37), CONST64(0xf6520755aaf1a35c), CONST64(0xb39ac852a47be117), CONST64(0xd44c612d5ab5f98e),
+ CONST64(0x23ea658f0346ac20), CONST64(0x62d5a673e6c41184), CONST64(0xa497f166cc55c268), CONST64(0x6ed1b263c6dc0da8),
+ CONST64(0x5533ffcc85aa99d0), CONST64(0xf3510859b2fbaa41), CONST64(0xed5b2a71e2c79c0f), CONST64(0xf7a604a259f355ae),
+ CONST64(0x7fde815fbefe20c1), CONST64(0xd848753d7aade5a2), CONST64(0xe5a8329a29d77fcc), CONST64(0xb699c75ebc71e80a),
+ CONST64(0x70db904b96e03be6), CONST64(0x5632fac88dac9edb), CONST64(0xc4b751e6d1952215), CONST64(0x19fc2bd7b332ceaa),
+ CONST64(0x38e348ab4b709373), CONST64(0xbf9edc428463fd3b), CONST64(0xae91ef7efc41d052), CONST64(0xb09bcd56ac7de61c),
+ CONST64(0x3be24daf43769478), CONST64(0xd0bb6dd6b1bd0661), CONST64(0xc3415819329bdaf1), CONST64(0xb26ecba5577917e5),
+ CONST64(0xf2a50bae41f95cb3), CONST64(0x40cbc00b16804b56), CONST64(0xbd6bdab17f670cc2), CONST64(0xa295fb6edc59cc7e),
+ CONST64(0xfea11fbe61e1409f), CONST64(0x08f318ebcb10e3c3), CONST64(0xceb14ffee181302f), CONST64(0x06020a08100c0e16),
+ CONST64(0x49ccdb172e925e67), CONST64(0x51c4f3376ea2663f), CONST64(0x271d6974e84e53cf), CONST64(0x3c144450a0786c9c),
+ CONST64(0x58c3e82b56b0730e), CONST64(0xa563f2913f57349a), CONST64(0x73da954f9ee63ced), CONST64(0xe75d3469d2d38e35),
+ CONST64(0xe15f3e61c2df8023), CONST64(0x79dc8b57aef22ed7), CONST64(0x877d94e9cf136e48), CONST64(0x4acdde132694596c),
+ CONST64(0x817f9ee1df1f605e), CONST64(0xee5a2f75eac19b04), CONST64(0xb46cc1ad477519f3), CONST64(0xe45c316ddad5893e),
+ CONST64(0x04f70cfbeb08ffef), CONST64(0x6a26be982dd4f247), CONST64(0x1cff24dbab38c7b7), CONST64(0x2aed7e933b54b911),
+ CONST64(0x25e86f87134aa236), CONST64(0xba9dd34e9c69f426), CONST64(0xb16fcea15f7f10ee), CONST64(0x8f8e8c0204038d8b),
+ CONST64(0x2b197d64c8564fe3), CONST64(0xfda01aba69e74794), CONST64(0x0df017e7d31aeade), CONST64(0x8689971e3c1198ba),
+ CONST64(0x110f333c78222d69), CONST64(0x09071b1c38121531), CONST64(0xecaf298611c56afd), CONST64(0x10fb30cb8b20db9b),
+ CONST64(0x1808282040303858), CONST64(0x3f154154a87e6b97), CONST64(0x170d3934682e237f), CONST64(0x0c04141020181c2c),
+ CONST64(0x030105040806070b), CONST64(0xac64e98d074521ab), CONST64(0x7cdf845bb6f827ca), CONST64(0x9a76b3c597295f0d),
+ CONST64(0x8b7980f9ef0b7264), CONST64(0x7add8e53a6f429dc), CONST64(0x473dc9f4f58eb3b2), CONST64(0x3a164e58b074628a),
+ CONST64(0x413fc3fce582bda4), CONST64(0x5937ebdca5b285fc), CONST64(0xb76dc4a94f731ef8), CONST64(0x4838d8e0dd90a895),
+ CONST64(0xd6b967dea1b10877), CONST64(0x9573a2d1bf37442a), CONST64(0x26e96a831b4ca53d), CONST64(0x5f35e1d4b5be8bea),
+ CONST64(0xff551c4992e3b66d), CONST64(0x9371a8d9af3b4a3c), CONST64(0x8d7b8af1ff077c72), CONST64(0x898c860a140f839d),
+ CONST64(0x9672a7d5b7314321), CONST64(0x8588921a34179fb1), CONST64(0x07f609ffe30ef8e4), CONST64(0x7e2a82a84dfcd633),
+ CONST64(0x423ec6f8ed84baaf), CONST64(0xe25e3b65cad98728), CONST64(0x6927bb9c25d2f54c), CONST64(0xca4643050a89cfc0),
+ CONST64(0x140c3c3060282474), CONST64(0xaf65ec890f4326a0), CONST64(0xb868d5bd676d05df), CONST64(0xa361f8992f5b3a8c),
+ CONST64(0x05030f0c180a091d), CONST64(0x5ec1e22346bc7d18), CONST64(0xf957164182efb87b), CONST64(0x67d6a97ffece1899),
+ CONST64(0x76d99a4386ec35f0), CONST64(0xe858257dfacd9512), CONST64(0x75d89f478eea32fb), CONST64(0xaa66e38517492fbd),
+ CONST64(0x64d7ac7bf6c81f92), CONST64(0x4e3ad2e8cd9ca683), CONST64(0x45c8cf070e8a424b), CONST64(0x443cccf0fd88b4b9),
+ CONST64(0x13fa35cf8326dc90), CONST64(0xa796f462c453c563), CONST64(0xf4a701a651f552a5), CONST64(0xb598c25ab477ef01),
+ CONST64(0x29ec7b973352be1a), CONST64(0xd5b862daa9b70f7c), CONST64(0x54c7fc3b76a86f22), CONST64(0xefae2c8219c36df6),
+ CONST64(0xbb69d0b96f6b02d4), CONST64(0xdd4b7a3162a7ecbf), CONST64(0xe0ab3d9631dd76d1), CONST64(0xe6a9379e21d178c7),
+ CONST64(0xa967e6811f4f28b6), CONST64(0x1e0a2228503c364e), CONST64(0xc9474601028fc8cb), CONST64(0x0bf21defc316e4c8),
+ CONST64(0xc2b55beec1992c03), CONST64(0x6622aa880dccee6b), CONST64(0x32e556b37b648149), CONST64(0x2fee719f235eb00c),
+ CONST64(0xdfbe7cc299a31d46), CONST64(0x7d2b87ac45fad138), CONST64(0x9e81bf3e7c21a0e2), CONST64(0x36125a48906c7ea6),
+ CONST64(0x9883b5366c2daef4), CONST64(0x2d1b776cd85a41f5), CONST64(0x120e363870242a62), CONST64(0x6523af8c05cae960),
+ CONST64(0x02f506f3fb04f1f9), CONST64(0xcf454c091283c6dd), CONST64(0x6321a58415c6e776), CONST64(0x4fced11f3e9e5071),
+ CONST64(0xdb49703972abe2a9), CONST64(0x742c9cb07de8c409), CONST64(0x16f93ac39b2cd58d), CONST64(0x37e659bf636e8854),
+ CONST64(0xc7b654e2d993251e), CONST64(0x782888a05df0d825), CONST64(0x39174b5cb8726581), CONST64(0x9b82b032642ba9ff),
+ CONST64(0x2e1a7268d05c46fe), CONST64(0x808b9d162c1d96ac), CONST64(0x1ffe21dfa33ec0bc), CONST64(0x838a9812241b91a7),
+ CONST64(0x1b092d2448363f53), CONST64(0x46c9ca03068c4540), CONST64(0x9487a1264c35b2d8), CONST64(0xd24e6b254ab9f798),
+ CONST64(0x3ee142a35b7c9d65), CONST64(0x722e96b86de4ca1f), CONST64(0x31e453b773628642), CONST64(0x3de047a7537a9a6e),
+ CONST64(0x20eb608b0b40ab2b), CONST64(0xad90ea7af447d759), CONST64(0xf1a40eaa49ff5bb8), CONST64(0x221e6678f0445ad2),
+ CONST64(0x9285ab2e5c39bcce), CONST64(0xa060fd9d275d3d87), CONST64(0x0000000000000000), CONST64(0x6f25b19435defb5a),
+ CONST64(0x01f403f7f302f6f2), CONST64(0x0ef112e3db1cedd5), CONST64(0xa194fe6ad45fcb75), CONST64(0x1d0b272c583a3145),
+ CONST64(0x34e75cbb6b688f5f), CONST64(0x9f75bcc98f235610), CONST64(0x2cef749b2b58b707), CONST64(0x5c34e4d0bdb88ce1),
+ CONST64(0x5331f5c495a697c6), CONST64(0x61d4a377eec2168f), CONST64(0x6dd0b767ceda0aa3), CONST64(0x9786a4224433b5d3),
+ CONST64(0x827e9be5d7196755), CONST64(0xeaad238e01c964eb), CONST64(0x1afd2ed3bb34c9a1), CONST64(0x7b298da455f6df2e),
+ CONST64(0x5030f0c09da090cd), CONST64(0x4d3bd7ecc59aa188), CONST64(0xbc9fd9468c65fa30), CONST64(0x15f83fc7932ad286),
+ CONST64(0x57c6f93f7eae6829), CONST64(0x35135f4c986a79ad), CONST64(0x0a061e183014123a), CONST64(0x0f051114281e1b27),
+ CONST64(0x52c5f63366a46134), CONST64(0x33115544886677bb), CONST64(0x9977b6c19f2f5806), CONST64(0x847c91edc7156943),
+ CONST64(0x8e7a8ff5f7017b79), CONST64(0x887885fde70d756f), CONST64(0x5a36eed8adb482f7), CONST64(0x241c6c70e04854c4),
+ CONST64(0x4b39dde4d596af9e), CONST64(0xeb592079f2cb9219), CONST64(0x28187860c05048e8), CONST64(0xfa5613458ae9bf70),
+ CONST64(0xc8b345f6f18d3e39), CONST64(0xcdb04afae9873724), CONST64(0x6c24b4903dd8fc51), CONST64(0x6020a0801dc0e07d),
+ CONST64(0xcbb240f2f98b3932), CONST64(0xab92e072e44bd94f), CONST64(0xf8a315b671ed4e89), CONST64(0x5dc0e7274eba7a13),
+ CONST64(0xcc44490d1a85c1d6), CONST64(0xa662f79537513391), CONST64(0x30105040806070b0), CONST64(0xc1b45eeac99f2b08),
+ CONST64(0x9184ae2a543fbbc5), CONST64(0xc54352112297d4e7), CONST64(0xa893e576ec4dde44), CONST64(0x5bc2ed2f5eb67405),
+ CONST64(0xde4a7f356aa1ebb4), CONST64(0xdabd73ce81a9145b), CONST64(0x8c8f89060c058a80), CONST64(0x772d99b475eec302),
+ CONST64(0xd9bc76ca89af1350), CONST64(0xb99cd64a946ff32d), CONST64(0xbe6adfb577610bc9), CONST64(0xc0405d1d3a9dddfa),
+ CONST64(0x4ccfd41b3698577a), CONST64(0xfba210b279eb4982), CONST64(0x9d80ba3a7427a7e9), CONST64(0xd14f6e2142bff093),
+ CONST64(0x211f637cf8425dd9), CONST64(0x43cac50f1e864c5d), CONST64(0xe3aa389239db71da), CONST64(0xc64257152a91d3ec),
+};
+
+static const ulong64 T2[256] = {
+ CONST64(0xd268bad36a01bbb9), CONST64(0x4d1954fc66b1e59a), CONST64(0xbc932f7114cde265), CONST64(0xcdb9749c1b512587),
+ CONST64(0x510253f557a4f7a2), CONST64(0x6bb8d368be03d0d6), CONST64(0x6fbdd26bb504d6de), CONST64(0x29644dd785feb352),
+ CONST64(0x5d0d50f04aadfdba), CONST64(0x8a26ace9e063cf09), CONST64(0x0e838d8a9684091c), CONST64(0xc679bfdc4d1aa591),
+ CONST64(0xddad7090374d3da7), CONST64(0x550752f65ca3f1aa), CONST64(0x52c89ab317e17ba4), CONST64(0x2d614cd48ef9b55a),
+ CONST64(0x8f65ea2320ac4603), CONST64(0x73a6d5628411c4e6), CONST64(0x66f197a468c255cc), CONST64(0x63b2d16ea80ddcc6),
+ CONST64(0xccff3355d099aa85), CONST64(0x590851f341aafbb2), CONST64(0x712a5bed0f9cc7e2), CONST64(0xa204a6f7ae55f359),
+ CONST64(0x5f81de7fc120febe), CONST64(0x3d7548d8a2e5ad7a), CONST64(0x9a32a8e5cc7fd729), CONST64(0x5ec799b60ae871bc),
+ CONST64(0x4b90db70e63be096), CONST64(0xc8fa3256db9eac8d), CONST64(0xe651b7c4152295d1), CONST64(0xd72bfc19aace32b3),
+ CONST64(0xab48e3387393704b), CONST64(0x42dc9ebf3bfd6384), CONST64(0x7eef91ae52d041fc), CONST64(0x56cd9bb01ce67dac),
+ CONST64(0xaf4de23b78947643), CONST64(0xd66dbbd06106bdb1), CONST64(0x195841c3f1da9b32), CONST64(0xa5cb6eb2e5177957),
+ CONST64(0xae0ba5f2b35cf941), CONST64(0x0bc0cb40564b8016), CONST64(0xb1da6bbdc20c677f), CONST64(0x6efb95a27ecc59dc),
+ CONST64(0xbe1fa1fe9f40e161), CONST64(0xeb18f308c3e310cb), CONST64(0xfe4fb1ce2f3081e1), CONST64(0x080a0206160e0c10),
+ CONST64(0x17dbcc49675e922e), CONST64(0x37f3c4513f66a26e), CONST64(0x74691d27cf534ee8), CONST64(0x5044143c9c6c78a0),
+ CONST64(0x2be8c3580e73b056), CONST64(0x91f263a59a34573f), CONST64(0x4f95da73ed3ce69e), CONST64(0x69345de7358ed3d2),
+ CONST64(0x613e5fe12380dfc2), CONST64(0x578bdc79d72ef2ae), CONST64(0xe9947d87486e13cf), CONST64(0x13decd4a6c599426),
+ CONST64(0xe19e7f815e601fdf), CONST64(0x752f5aee049bc1ea), CONST64(0xadc16cb4f3197547), CONST64(0x6d315ce43e89d5da),
+ CONST64(0xfb0cf704efff08eb), CONST64(0x98be266a47f2d42d), CONST64(0xdb24ff1cb7c738ab), CONST64(0x937eed2a11b9543b),
+ CONST64(0x876fe82536a24a13), CONST64(0x4ed39dba26f4699c), CONST64(0xa1ce6fb1ee107f5f), CONST64(0x028c8e8f8b8d0304),
+ CONST64(0x647d192be34f56c8), CONST64(0xba1aa0fd9447e769), CONST64(0xe717f00ddeea1ad3), CONST64(0x1e978986ba98113c),
+ CONST64(0x3c330f11692d2278), CONST64(0x1c1b070931151238), CONST64(0x8629afecfd6ac511), CONST64(0xcb30fb109bdb208b),
+ CONST64(0x2028081858383040), CONST64(0x5441153f976b7ea8), CONST64(0x34390d177f232e68), CONST64(0x1014040c2c1c1820),
+ CONST64(0x040501030b070608), CONST64(0x8de964acab214507), CONST64(0x5b84df7cca27f8b6), CONST64(0xc5b3769a0d5f2997),
+ CONST64(0xf980798b64720bef), CONST64(0x538edd7adc29f4a6), CONST64(0xf4c93d47b2b38ef5), CONST64(0x584e163a8a6274b0),
+ CONST64(0xfcc33f41a4bd82e5), CONST64(0xdceb3759fc85b2a5), CONST64(0xa9c46db7f81e734f), CONST64(0xe0d8384895a890dd),
+ CONST64(0xde67b9d67708b1a1), CONST64(0xd1a273952a4437bf), CONST64(0x836ae9263da54c1b), CONST64(0xd4e1355fea8bbeb5),
+ CONST64(0x491c55ff6db6e392), CONST64(0xd9a871933c4a3baf), CONST64(0xf18a7b8d727c07ff), CONST64(0x0a868c899d830f14),
+ CONST64(0xd5a77296214331b7), CONST64(0x1a928885b19f1734), CONST64(0xff09f607e4f80ee3), CONST64(0xa8822a7e33d6fc4d),
+ CONST64(0xf8c63e42afba84ed), CONST64(0x653b5ee22887d9ca), CONST64(0x9cbb27694cf5d225), CONST64(0x054346cac0cf890a),
+ CONST64(0x303c0c1474242860), CONST64(0x89ec65afa026430f), CONST64(0xbdd568b8df056d67), CONST64(0x99f861a38c3a5b2f),
+ CONST64(0x0c0f03051d090a18), CONST64(0x23e2c15e187dbc46), CONST64(0x411657f97bb8ef82), CONST64(0x7fa9d6679918cefe),
+ CONST64(0x439ad976f035ec86), CONST64(0x7d2558e81295cdfa), CONST64(0x479fd875fb32ea8e), CONST64(0x85e366aabd2f4917),
+ CONST64(0x7bacd764921fc8f6), CONST64(0xe8d23a4e83a69ccd), CONST64(0x07cfc8454b428a0e), CONST64(0xf0cc3c44b9b488fd),
+ CONST64(0xcf35fa1390dc2683), CONST64(0x62f496a763c553c4), CONST64(0xa601a7f4a552f551), CONST64(0x5ac298b501ef77b4),
+ CONST64(0x977bec291abe5233), CONST64(0xda62b8d57c0fb7a9), CONST64(0x3bfcc754226fa876), CONST64(0x822caeeff66dc319),
+ CONST64(0xb9d069bbd4026b6f), CONST64(0x317a4bddbfeca762), CONST64(0x963dabe0d176dd31), CONST64(0x9e37a9e6c778d121),
+ CONST64(0x81e667a9b6284f1f), CONST64(0x28220a1e4e363c50), CONST64(0x014647c9cbc88f02), CONST64(0xef1df20bc8e416c3),
+ CONST64(0xee5bb5c2032c99c1), CONST64(0x88aa22666beecc0d), CONST64(0xb356e5324981647b), CONST64(0x9f71ee2f0cb05e23),
+ CONST64(0xc27cbedf461da399), CONST64(0xac872b7d38d1fa45), CONST64(0x3ebf819ee2a0217c), CONST64(0x485a1236a67e6c90),
+ CONST64(0x36b58398f4ae2d6c), CONST64(0x6c771b2df5415ad8), CONST64(0x38360e12622a2470), CONST64(0x8caf236560e9ca05),
+ CONST64(0xf306f502f9f104fb), CONST64(0x094c45cfddc68312), CONST64(0x84a5216376e7c615), CONST64(0x1fd1ce4f71509e3e),
+ CONST64(0x397049dba9e2ab72), CONST64(0xb09c2c7409c4e87d), CONST64(0xc33af9168dd52c9b), CONST64(0xbf59e63754886e63),
+ CONST64(0xe254b6c71e2593d9), CONST64(0xa088287825d8f05d), CONST64(0x5c4b1739816572b8), CONST64(0x32b0829bffa92b64),
+ CONST64(0x68721a2efe465cd0), CONST64(0x169d8b80ac961d2c), CONST64(0xdf21fe1fbcc03ea3), CONST64(0x12988a83a7911b24),
+ CONST64(0x242d091b533f3648), CONST64(0x03cac94640458c06), CONST64(0x26a18794d8b2354c), CONST64(0x256b4ed298f7b94a),
+ CONST64(0xa342e13e659d7c5b), CONST64(0xb8962e721fcae46d), CONST64(0xb753e43142866273), CONST64(0xa747e03d6e9a7a53),
+ CONST64(0x8b60eb202bab400b), CONST64(0x7aea90ad59d747f4), CONST64(0xaa0ea4f1b85bff49), CONST64(0x78661e22d25a44f0),
+ CONST64(0x2eab8592cebc395c), CONST64(0x9dfd60a0873d5d27), CONST64(0x0000000000000000), CONST64(0x94b1256f5afbde35),
+ CONST64(0xf703f401f2f602f3), CONST64(0xe312f10ed5ed1cdb), CONST64(0x6afe94a175cb5fd4), CONST64(0x2c270b1d45313a58),
+ CONST64(0xbb5ce7345f8f686b), CONST64(0xc9bc759f1056238f), CONST64(0x9b74ef2c07b7582b), CONST64(0xd0e4345ce18cb8bd),
+ CONST64(0xc4f53153c697a695), CONST64(0x77a3d4618f16c2ee), CONST64(0x67b7d06da30adace), CONST64(0x22a48697d3b53344),
+ CONST64(0xe59b7e82556719d7), CONST64(0x8e23adeaeb64c901), CONST64(0xd32efd1aa1c934bb), CONST64(0xa48d297b2edff655),
+ CONST64(0xc0f03050cd90a09d), CONST64(0xecd73b4d88a19ac5), CONST64(0x46d99fbc30fa658c), CONST64(0xc73ff81586d22a93),
+ CONST64(0x3ff9c6572968ae7e), CONST64(0x4c5f1335ad796a98), CONST64(0x181e060a3a121430), CONST64(0x1411050f271b1e28),
+ CONST64(0x33f6c5523461a466), CONST64(0x44551133bb776688), CONST64(0xc1b6779906582f9f), CONST64(0xed917c84436915c7),
+ CONST64(0xf58f7a8e797b01f7), CONST64(0xfd8578886f750de7), CONST64(0xd8ee365af782b4ad), CONST64(0x706c1c24c45448e0),
+ CONST64(0xe4dd394b9eaf96d5), CONST64(0x792059eb1992cbf2), CONST64(0x60781828e84850c0), CONST64(0x451356fa70bfe98a),
+ CONST64(0xf645b3c8393e8df1), CONST64(0xfa4ab0cd243787e9), CONST64(0x90b4246c51fcd83d), CONST64(0x80a020607de0c01d),
+ CONST64(0xf240b2cb32398bf9), CONST64(0x72e092ab4fd94be4), CONST64(0xb615a3f8894eed71), CONST64(0x27e7c05d137aba4e),
+ CONST64(0x0d4944ccd6c1851a), CONST64(0x95f762a691335137), CONST64(0x40501030b0706080), CONST64(0xea5eb4c1082b9fc9),
+ CONST64(0x2aae8491c5bb3f54), CONST64(0x115243c5e7d49722), CONST64(0x76e593a844de4dec), CONST64(0x2fedc25b0574b65e),
+ CONST64(0x357f4adeb4eba16a), CONST64(0xce73bdda5b14a981), CONST64(0x06898f8c808a050c), CONST64(0xb4992d7702c3ee75),
+ CONST64(0xca76bcd95013af89), CONST64(0x4ad69cb92df36f94), CONST64(0xb5df6abec90b6177), CONST64(0x1d5d40c0fadd9d3a),
+ CONST64(0x1bd4cf4c7a579836), CONST64(0xb210a2fb8249eb79), CONST64(0x3aba809de9a72774), CONST64(0x216e4fd193f0bf42),
+ CONST64(0x7c631f21d95d42f8), CONST64(0x0fc5ca435d4c861e), CONST64(0x9238aae3da71db39), CONST64(0x155742c6ecd3912a),
+};
+
+static const ulong64 T3[256] = {
+ CONST64(0x68d2d3ba016ab9bb), CONST64(0x194dfc54b1669ae5), CONST64(0x93bc712fcd1465e2), CONST64(0xb9cd9c74511b8725),
+ CONST64(0x0251f553a457a2f7), CONST64(0xb86b68d303bed6d0), CONST64(0xbd6f6bd204b5ded6), CONST64(0x6429d74dfe8552b3),
+ CONST64(0x0d5df050ad4abafd), CONST64(0x268ae9ac63e009cf), CONST64(0x830e8a8d84961c09), CONST64(0x79c6dcbf1a4d91a5),
+ CONST64(0xaddd90704d37a73d), CONST64(0x0755f652a35caaf1), CONST64(0xc852b39ae117a47b), CONST64(0x612dd44cf98e5ab5),
+ CONST64(0x658f23eaac200346), CONST64(0xa67362d51184e6c4), CONST64(0xf166a497c268cc55), CONST64(0xb2636ed10da8c6dc),
+ CONST64(0xffcc553399d085aa), CONST64(0x0859f351aa41b2fb), CONST64(0x2a71ed5b9c0fe2c7), CONST64(0x04a2f7a655ae59f3),
+ CONST64(0x815f7fde20c1befe), CONST64(0x753dd848e5a27aad), CONST64(0x329ae5a87fcc29d7), CONST64(0xc75eb699e80abc71),
+ CONST64(0x904b70db3be696e0), CONST64(0xfac856329edb8dac), CONST64(0x51e6c4b72215d195), CONST64(0x2bd719fcceaab332),
+ CONST64(0x48ab38e393734b70), CONST64(0xdc42bf9efd3b8463), CONST64(0xef7eae91d052fc41), CONST64(0xcd56b09be61cac7d),
+ CONST64(0x4daf3be294784376), CONST64(0x6dd6d0bb0661b1bd), CONST64(0x5819c341daf1329b), CONST64(0xcba5b26e17e55779),
+ CONST64(0x0baef2a55cb341f9), CONST64(0xc00b40cb4b561680), CONST64(0xdab1bd6b0cc27f67), CONST64(0xfb6ea295cc7edc59),
+ CONST64(0x1fbefea1409f61e1), CONST64(0x18eb08f3e3c3cb10), CONST64(0x4ffeceb1302fe181), CONST64(0x0a0806020e16100c),
+ CONST64(0xdb1749cc5e672e92), CONST64(0xf33751c4663f6ea2), CONST64(0x6974271d53cfe84e), CONST64(0x44503c146c9ca078),
+ CONST64(0xe82b58c3730e56b0), CONST64(0xf291a563349a3f57), CONST64(0x954f73da3ced9ee6), CONST64(0x3469e75d8e35d2d3),
+ CONST64(0x3e61e15f8023c2df), CONST64(0x8b5779dc2ed7aef2), CONST64(0x94e9877d6e48cf13), CONST64(0xde134acd596c2694),
+ CONST64(0x9ee1817f605edf1f), CONST64(0x2f75ee5a9b04eac1), CONST64(0xc1adb46c19f34775), CONST64(0x316de45c893edad5),
+ CONST64(0x0cfb04f7ffefeb08), CONST64(0xbe986a26f2472dd4), CONST64(0x24db1cffc7b7ab38), CONST64(0x7e932aedb9113b54),
+ CONST64(0x6f8725e8a236134a), CONST64(0xd34eba9df4269c69), CONST64(0xcea1b16f10ee5f7f), CONST64(0x8c028f8e8d8b0403),
+ CONST64(0x7d642b194fe3c856), CONST64(0x1abafda0479469e7), CONST64(0x17e70df0eaded31a), CONST64(0x971e868998ba3c11),
+ CONST64(0x333c110f2d697822), CONST64(0x1b1c090715313812), CONST64(0x2986ecaf6afd11c5), CONST64(0x30cb10fbdb9b8b20),
+ CONST64(0x2820180838584030), CONST64(0x41543f156b97a87e), CONST64(0x3934170d237f682e), CONST64(0x14100c041c2c2018),
+ CONST64(0x05040301070b0806), CONST64(0xe98dac6421ab0745), CONST64(0x845b7cdf27cab6f8), CONST64(0xb3c59a765f0d9729),
+ CONST64(0x80f98b797264ef0b), CONST64(0x8e537add29dca6f4), CONST64(0xc9f4473db3b2f58e), CONST64(0x4e583a16628ab074),
+ CONST64(0xc3fc413fbda4e582), CONST64(0xebdc593785fca5b2), CONST64(0xc4a9b76d1ef84f73), CONST64(0xd8e04838a895dd90),
+ CONST64(0x67ded6b90877a1b1), CONST64(0xa2d19573442abf37), CONST64(0x6a8326e9a53d1b4c), CONST64(0xe1d45f358beab5be),
+ CONST64(0x1c49ff55b66d92e3), CONST64(0xa8d993714a3caf3b), CONST64(0x8af18d7b7c72ff07), CONST64(0x860a898c839d140f),
+ CONST64(0xa7d596724321b731), CONST64(0x921a85889fb13417), CONST64(0x09ff07f6f8e4e30e), CONST64(0x82a87e2ad6334dfc),
+ CONST64(0xc6f8423ebaafed84), CONST64(0x3b65e25e8728cad9), CONST64(0xbb9c6927f54c25d2), CONST64(0x4305ca46cfc00a89),
+ CONST64(0x3c30140c24746028), CONST64(0xec89af6526a00f43), CONST64(0xd5bdb86805df676d), CONST64(0xf899a3613a8c2f5b),
+ CONST64(0x0f0c0503091d180a), CONST64(0xe2235ec17d1846bc), CONST64(0x1641f957b87b82ef), CONST64(0xa97f67d61899fece),
+ CONST64(0x9a4376d935f086ec), CONST64(0x257de8589512facd), CONST64(0x9f4775d832fb8eea), CONST64(0xe385aa662fbd1749),
+ CONST64(0xac7b64d71f92f6c8), CONST64(0xd2e84e3aa683cd9c), CONST64(0xcf0745c8424b0e8a), CONST64(0xccf0443cb4b9fd88),
+ CONST64(0x35cf13fadc908326), CONST64(0xf462a796c563c453), CONST64(0x01a6f4a752a551f5), CONST64(0xc25ab598ef01b477),
+ CONST64(0x7b9729ecbe1a3352), CONST64(0x62dad5b80f7ca9b7), CONST64(0xfc3b54c76f2276a8), CONST64(0x2c82efae6df619c3),
+ CONST64(0xd0b9bb6902d46f6b), CONST64(0x7a31dd4becbf62a7), CONST64(0x3d96e0ab76d131dd), CONST64(0x379ee6a978c721d1),
+ CONST64(0xe681a96728b61f4f), CONST64(0x22281e0a364e503c), CONST64(0x4601c947c8cb028f), CONST64(0x1def0bf2e4c8c316),
+ CONST64(0x5beec2b52c03c199), CONST64(0xaa886622ee6b0dcc), CONST64(0x56b332e581497b64), CONST64(0x719f2feeb00c235e),
+ CONST64(0x7cc2dfbe1d4699a3), CONST64(0x87ac7d2bd13845fa), CONST64(0xbf3e9e81a0e27c21), CONST64(0x5a4836127ea6906c),
+ CONST64(0xb5369883aef46c2d), CONST64(0x776c2d1b41f5d85a), CONST64(0x3638120e2a627024), CONST64(0xaf8c6523e96005ca),
+ CONST64(0x06f302f5f1f9fb04), CONST64(0x4c09cf45c6dd1283), CONST64(0xa5846321e77615c6), CONST64(0xd11f4fce50713e9e),
+ CONST64(0x7039db49e2a972ab), CONST64(0x9cb0742cc4097de8), CONST64(0x3ac316f9d58d9b2c), CONST64(0x59bf37e68854636e),
+ CONST64(0x54e2c7b6251ed993), CONST64(0x88a07828d8255df0), CONST64(0x4b5c39176581b872), CONST64(0xb0329b82a9ff642b),
+ CONST64(0x72682e1a46fed05c), CONST64(0x9d16808b96ac2c1d), CONST64(0x21df1ffec0bca33e), CONST64(0x9812838a91a7241b),
+ CONST64(0x2d241b093f534836), CONST64(0xca0346c94540068c), CONST64(0xa1269487b2d84c35), CONST64(0x6b25d24ef7984ab9),
+ CONST64(0x42a33ee19d655b7c), CONST64(0x96b8722eca1f6de4), CONST64(0x53b731e486427362), CONST64(0x47a73de09a6e537a),
+ CONST64(0x608b20ebab2b0b40), CONST64(0xea7aad90d759f447), CONST64(0x0eaaf1a45bb849ff), CONST64(0x6678221e5ad2f044),
+ CONST64(0xab2e9285bcce5c39), CONST64(0xfd9da0603d87275d), CONST64(0x0000000000000000), CONST64(0xb1946f25fb5a35de),
+ CONST64(0x03f701f4f6f2f302), CONST64(0x12e30ef1edd5db1c), CONST64(0xfe6aa194cb75d45f), CONST64(0x272c1d0b3145583a),
+ CONST64(0x5cbb34e78f5f6b68), CONST64(0xbcc99f7556108f23), CONST64(0x749b2cefb7072b58), CONST64(0xe4d05c348ce1bdb8),
+ CONST64(0xf5c4533197c695a6), CONST64(0xa37761d4168feec2), CONST64(0xb7676dd00aa3ceda), CONST64(0xa4229786b5d34433),
+ CONST64(0x9be5827e6755d719), CONST64(0x238eeaad64eb01c9), CONST64(0x2ed31afdc9a1bb34), CONST64(0x8da47b29df2e55f6),
+ CONST64(0xf0c0503090cd9da0), CONST64(0xd7ec4d3ba188c59a), CONST64(0xd946bc9ffa308c65), CONST64(0x3fc715f8d286932a),
+ CONST64(0xf93f57c668297eae), CONST64(0x5f4c351379ad986a), CONST64(0x1e180a06123a3014), CONST64(0x11140f051b27281e),
+ CONST64(0xf63352c5613466a4), CONST64(0x5544331177bb8866), CONST64(0xb6c1997758069f2f), CONST64(0x91ed847c6943c715),
+ CONST64(0x8ff58e7a7b79f701), CONST64(0x85fd8878756fe70d), CONST64(0xeed85a3682f7adb4), CONST64(0x6c70241c54c4e048),
+ CONST64(0xdde44b39af9ed596), CONST64(0x2079eb599219f2cb), CONST64(0x7860281848e8c050), CONST64(0x1345fa56bf708ae9),
+ CONST64(0x45f6c8b33e39f18d), CONST64(0x4afacdb03724e987), CONST64(0xb4906c24fc513dd8), CONST64(0xa0806020e07d1dc0),
+ CONST64(0x40f2cbb23932f98b), CONST64(0xe072ab92d94fe44b), CONST64(0x15b6f8a34e8971ed), CONST64(0xe7275dc07a134eba),
+ CONST64(0x490dcc44c1d61a85), CONST64(0xf795a66233913751), CONST64(0x5040301070b08060), CONST64(0x5eeac1b42b08c99f),
+ CONST64(0xae2a9184bbc5543f), CONST64(0x5211c543d4e72297), CONST64(0xe576a893de44ec4d), CONST64(0xed2f5bc274055eb6),
+ CONST64(0x7f35de4aebb46aa1), CONST64(0x73cedabd145b81a9), CONST64(0x89068c8f8a800c05), CONST64(0x99b4772dc30275ee),
+ CONST64(0x76cad9bc135089af), CONST64(0xd64ab99cf32d946f), CONST64(0xdfb5be6a0bc97761), CONST64(0x5d1dc040ddfa3a9d),
+ CONST64(0xd41b4ccf577a3698), CONST64(0x10b2fba2498279eb), CONST64(0xba3a9d80a7e97427), CONST64(0x6e21d14ff09342bf),
+ CONST64(0x637c211f5dd9f842), CONST64(0xc50f43ca4c5d1e86), CONST64(0x3892e3aa71da39db), CONST64(0x5715c642d3ec2a91),
+};
+
+static const ulong64 T4[256] = {
+ CONST64(0xbbb96a01bad3d268), CONST64(0xe59a66b154fc4d19), CONST64(0xe26514cd2f71bc93), CONST64(0x25871b51749ccdb9),
+ CONST64(0xf7a257a453f55102), CONST64(0xd0d6be03d3686bb8), CONST64(0xd6deb504d26b6fbd), CONST64(0xb35285fe4dd72964),
+ CONST64(0xfdba4aad50f05d0d), CONST64(0xcf09e063ace98a26), CONST64(0x091c96848d8a0e83), CONST64(0xa5914d1abfdcc679),
+ CONST64(0x3da7374d7090ddad), CONST64(0xf1aa5ca352f65507), CONST64(0x7ba417e19ab352c8), CONST64(0xb55a8ef94cd42d61),
+ CONST64(0x460320acea238f65), CONST64(0xc4e68411d56273a6), CONST64(0x55cc68c297a466f1), CONST64(0xdcc6a80dd16e63b2),
+ CONST64(0xaa85d0993355ccff), CONST64(0xfbb241aa51f35908), CONST64(0xc7e20f9c5bed712a), CONST64(0xf359ae55a6f7a204),
+ CONST64(0xfebec120de7f5f81), CONST64(0xad7aa2e548d83d75), CONST64(0xd729cc7fa8e59a32), CONST64(0x71bc0ae899b65ec7),
+ CONST64(0xe096e63bdb704b90), CONST64(0xac8ddb9e3256c8fa), CONST64(0x95d11522b7c4e651), CONST64(0x32b3aacefc19d72b),
+ CONST64(0x704b7393e338ab48), CONST64(0x63843bfd9ebf42dc), CONST64(0x41fc52d091ae7eef), CONST64(0x7dac1ce69bb056cd),
+ CONST64(0x76437894e23baf4d), CONST64(0xbdb16106bbd0d66d), CONST64(0x9b32f1da41c31958), CONST64(0x7957e5176eb2a5cb),
+ CONST64(0xf941b35ca5f2ae0b), CONST64(0x8016564bcb400bc0), CONST64(0x677fc20c6bbdb1da), CONST64(0x59dc7ecc95a26efb),
+ CONST64(0xe1619f40a1febe1f), CONST64(0x10cbc3e3f308eb18), CONST64(0x81e12f30b1cefe4f), CONST64(0x0c10160e0206080a),
+ CONST64(0x922e675ecc4917db), CONST64(0xa26e3f66c45137f3), CONST64(0x4ee8cf531d277469), CONST64(0x78a09c6c143c5044),
+ CONST64(0xb0560e73c3582be8), CONST64(0x573f9a3463a591f2), CONST64(0xe69eed3cda734f95), CONST64(0xd3d2358e5de76934),
+ CONST64(0xdfc223805fe1613e), CONST64(0xf2aed72edc79578b), CONST64(0x13cf486e7d87e994), CONST64(0x94266c59cd4a13de),
+ CONST64(0x1fdf5e607f81e19e), CONST64(0xc1ea049b5aee752f), CONST64(0x7547f3196cb4adc1), CONST64(0xd5da3e895ce46d31),
+ CONST64(0x08ebeffff704fb0c), CONST64(0xd42d47f2266a98be), CONST64(0x38abb7c7ff1cdb24), CONST64(0x543b11b9ed2a937e),
+ CONST64(0x4a1336a2e825876f), CONST64(0x699c26f49dba4ed3), CONST64(0x7f5fee106fb1a1ce), CONST64(0x03048b8d8e8f028c),
+ CONST64(0x56c8e34f192b647d), CONST64(0xe7699447a0fdba1a), CONST64(0x1ad3deeaf00de717), CONST64(0x113cba9889861e97),
+ CONST64(0x2278692d0f113c33), CONST64(0x1238311507091c1b), CONST64(0xc511fd6aafec8629), CONST64(0x208b9bdbfb10cb30),
+ CONST64(0x3040583808182028), CONST64(0x7ea8976b153f5441), CONST64(0x2e687f230d173439), CONST64(0x18202c1c040c1014),
+ CONST64(0x06080b0701030405), CONST64(0x4507ab2164ac8de9), CONST64(0xf8b6ca27df7c5b84), CONST64(0x29970d5f769ac5b3),
+ CONST64(0x0bef6472798bf980), CONST64(0xf4a6dc29dd7a538e), CONST64(0x8ef5b2b33d47f4c9), CONST64(0x74b08a62163a584e),
+ CONST64(0x82e5a4bd3f41fcc3), CONST64(0xb2a5fc853759dceb), CONST64(0x734ff81e6db7a9c4), CONST64(0x90dd95a83848e0d8),
+ CONST64(0xb1a17708b9d6de67), CONST64(0x37bf2a447395d1a2), CONST64(0x4c1b3da5e926836a), CONST64(0xbeb5ea8b355fd4e1),
+ CONST64(0xe3926db655ff491c), CONST64(0x3baf3c4a7193d9a8), CONST64(0x07ff727c7b8df18a), CONST64(0x0f149d838c890a86),
+ CONST64(0x31b721437296d5a7), CONST64(0x1734b19f88851a92), CONST64(0x0ee3e4f8f607ff09), CONST64(0xfc4d33d62a7ea882),
+ CONST64(0x84edafba3e42f8c6), CONST64(0xd9ca28875ee2653b), CONST64(0xd2254cf527699cbb), CONST64(0x890ac0cf46ca0543),
+ CONST64(0x286074240c14303c), CONST64(0x430fa02665af89ec), CONST64(0x6d67df0568b8bdd5), CONST64(0x5b2f8c3a61a399f8),
+ CONST64(0x0a181d0903050c0f), CONST64(0xbc46187dc15e23e2), CONST64(0xef827bb857f94116), CONST64(0xcefe9918d6677fa9),
+ CONST64(0xec86f035d976439a), CONST64(0xcdfa129558e87d25), CONST64(0xea8efb32d875479f), CONST64(0x4917bd2f66aa85e3),
+ CONST64(0xc8f6921fd7647bac), CONST64(0x9ccd83a63a4ee8d2), CONST64(0x8a0e4b42c84507cf), CONST64(0x88fdb9b43c44f0cc),
+ CONST64(0x268390dcfa13cf35), CONST64(0x53c463c596a762f4), CONST64(0xf551a552a7f4a601), CONST64(0x77b401ef98b55ac2),
+ CONST64(0x52331abeec29977b), CONST64(0xb7a97c0fb8d5da62), CONST64(0xa876226fc7543bfc), CONST64(0xc319f66daeef822c),
+ CONST64(0x6b6fd40269bbb9d0), CONST64(0xa762bfec4bdd317a), CONST64(0xdd31d176abe0963d), CONST64(0xd121c778a9e69e37),
+ CONST64(0x4f1fb62867a981e6), CONST64(0x3c504e360a1e2822), CONST64(0x8f02cbc847c90146), CONST64(0x16c3c8e4f20bef1d),
+ CONST64(0x99c1032cb5c2ee5b), CONST64(0xcc0d6bee226688aa), CONST64(0x647b4981e532b356), CONST64(0x5e230cb0ee2f9f71),
+ CONST64(0xa399461dbedfc27c), CONST64(0xfa4538d12b7dac87), CONST64(0x217ce2a0819e3ebf), CONST64(0x6c90a67e1236485a),
+ CONST64(0x2d6cf4ae839836b5), CONST64(0x5ad8f5411b2d6c77), CONST64(0x2470622a0e123836), CONST64(0xca0560e923658caf),
+ CONST64(0x04fbf9f1f502f306), CONST64(0x8312ddc645cf094c), CONST64(0xc61576e7216384a5), CONST64(0x9e3e7150ce4f1fd1),
+ CONST64(0xab72a9e249db3970), CONST64(0xe87d09c42c74b09c), CONST64(0x2c9b8dd5f916c33a), CONST64(0x6e635488e637bf59),
+ CONST64(0x93d91e25b6c7e254), CONST64(0xf05d25d82878a088), CONST64(0x72b8816517395c4b), CONST64(0x2b64ffa9829b32b0),
+ CONST64(0x5cd0fe461a2e6872), CONST64(0x1d2cac968b80169d), CONST64(0x3ea3bcc0fe1fdf21), CONST64(0x1b24a7918a831298),
+ CONST64(0x3648533f091b242d), CONST64(0x8c064045c94603ca), CONST64(0x354cd8b2879426a1), CONST64(0xb94a98f74ed2256b),
+ CONST64(0x7c5b659de13ea342), CONST64(0xe46d1fca2e72b896), CONST64(0x62734286e431b753), CONST64(0x7a536e9ae03da747),
+ CONST64(0x400b2babeb208b60), CONST64(0x47f459d790ad7aea), CONST64(0xff49b85ba4f1aa0e), CONST64(0x44f0d25a1e227866),
+ CONST64(0x395ccebc85922eab), CONST64(0x5d27873d60a09dfd), CONST64(0x0000000000000000), CONST64(0xde355afb256f94b1),
+ CONST64(0x02f3f2f6f401f703), CONST64(0x1cdbd5edf10ee312), CONST64(0x5fd475cb94a16afe), CONST64(0x3a5845310b1d2c27),
+ CONST64(0x686b5f8fe734bb5c), CONST64(0x238f1056759fc9bc), CONST64(0x582b07b7ef2c9b74), CONST64(0xb8bde18c345cd0e4),
+ CONST64(0xa695c6973153c4f5), CONST64(0xc2ee8f16d46177a3), CONST64(0xdacea30ad06d67b7), CONST64(0x3344d3b5869722a4),
+ CONST64(0x19d755677e82e59b), CONST64(0xc901eb64adea8e23), CONST64(0x34bba1c9fd1ad32e), CONST64(0xf6552edf297ba48d),
+ CONST64(0xa09dcd903050c0f0), CONST64(0x9ac588a13b4decd7), CONST64(0x658c30fa9fbc46d9), CONST64(0x2a9386d2f815c73f),
+ CONST64(0xae7e2968c6573ff9), CONST64(0x6a98ad7913354c5f), CONST64(0x14303a12060a181e), CONST64(0x1e28271b050f1411),
+ CONST64(0xa4663461c55233f6), CONST64(0x6688bb7711334455), CONST64(0x2f9f06587799c1b6), CONST64(0x15c743697c84ed91),
+ CONST64(0x01f7797b7a8ef58f), CONST64(0x0de76f757888fd85), CONST64(0xb4adf782365ad8ee), CONST64(0x48e0c4541c24706c),
+ CONST64(0x96d59eaf394be4dd), CONST64(0xcbf2199259eb7920), CONST64(0x50c0e84818286078), CONST64(0xe98a70bf56fa4513),
+ CONST64(0x8df1393eb3c8f645), CONST64(0x87e92437b0cdfa4a), CONST64(0xd83d51fc246c90b4), CONST64(0xc01d7de0206080a0),
+ CONST64(0x8bf93239b2cbf240), CONST64(0x4be44fd992ab72e0), CONST64(0xed71894ea3f8b615), CONST64(0xba4e137ac05d27e7),
+ CONST64(0x851ad6c144cc0d49), CONST64(0x5137913362a695f7), CONST64(0x6080b07010304050), CONST64(0x9fc9082bb4c1ea5e),
+ CONST64(0x3f54c5bb84912aae), CONST64(0x9722e7d443c51152), CONST64(0x4dec44de93a876e5), CONST64(0xb65e0574c25b2fed),
+ CONST64(0xa16ab4eb4ade357f), CONST64(0xa9815b14bddace73), CONST64(0x050c808a8f8c0689), CONST64(0xee7502c32d77b499),
+ CONST64(0xaf895013bcd9ca76), CONST64(0x6f942df39cb94ad6), CONST64(0x6177c90b6abeb5df), CONST64(0x9d3afadd40c01d5d),
+ CONST64(0x98367a57cf4c1bd4), CONST64(0xeb798249a2fbb210), CONST64(0x2774e9a7809d3aba), CONST64(0xbf4293f04fd1216e),
+ CONST64(0x42f8d95d1f217c63), CONST64(0x861e5d4cca430fc5), CONST64(0xdb39da71aae39238), CONST64(0x912aecd342c61557),
+};
+
+static const ulong64 T5[256] = {
+ CONST64(0xb9bb016ad3ba68d2), CONST64(0x9ae5b166fc54194d), CONST64(0x65e2cd14712f93bc), CONST64(0x8725511b9c74b9cd),
+ CONST64(0xa2f7a457f5530251), CONST64(0xd6d003be68d3b86b), CONST64(0xded604b56bd2bd6f), CONST64(0x52b3fe85d74d6429),
+ CONST64(0xbafdad4af0500d5d), CONST64(0x09cf63e0e9ac268a), CONST64(0x1c0984968a8d830e), CONST64(0x91a51a4ddcbf79c6),
+ CONST64(0xa73d4d379070addd), CONST64(0xaaf1a35cf6520755), CONST64(0xa47be117b39ac852), CONST64(0x5ab5f98ed44c612d),
+ CONST64(0x0346ac2023ea658f), CONST64(0xe6c4118462d5a673), CONST64(0xcc55c268a497f166), CONST64(0xc6dc0da86ed1b263),
+ CONST64(0x85aa99d05533ffcc), CONST64(0xb2fbaa41f3510859), CONST64(0xe2c79c0fed5b2a71), CONST64(0x59f355aef7a604a2),
+ CONST64(0xbefe20c17fde815f), CONST64(0x7aade5a2d848753d), CONST64(0x29d77fcce5a8329a), CONST64(0xbc71e80ab699c75e),
+ CONST64(0x96e03be670db904b), CONST64(0x8dac9edb5632fac8), CONST64(0xd1952215c4b751e6), CONST64(0xb332ceaa19fc2bd7),
+ CONST64(0x4b70937338e348ab), CONST64(0x8463fd3bbf9edc42), CONST64(0xfc41d052ae91ef7e), CONST64(0xac7de61cb09bcd56),
+ CONST64(0x437694783be24daf), CONST64(0xb1bd0661d0bb6dd6), CONST64(0x329bdaf1c3415819), CONST64(0x577917e5b26ecba5),
+ CONST64(0x41f95cb3f2a50bae), CONST64(0x16804b5640cbc00b), CONST64(0x7f670cc2bd6bdab1), CONST64(0xdc59cc7ea295fb6e),
+ CONST64(0x61e1409ffea11fbe), CONST64(0xcb10e3c308f318eb), CONST64(0xe181302fceb14ffe), CONST64(0x100c0e1606020a08),
+ CONST64(0x2e925e6749ccdb17), CONST64(0x6ea2663f51c4f337), CONST64(0xe84e53cf271d6974), CONST64(0xa0786c9c3c144450),
+ CONST64(0x56b0730e58c3e82b), CONST64(0x3f57349aa563f291), CONST64(0x9ee63ced73da954f), CONST64(0xd2d38e35e75d3469),
+ CONST64(0xc2df8023e15f3e61), CONST64(0xaef22ed779dc8b57), CONST64(0xcf136e48877d94e9), CONST64(0x2694596c4acdde13),
+ CONST64(0xdf1f605e817f9ee1), CONST64(0xeac19b04ee5a2f75), CONST64(0x477519f3b46cc1ad), CONST64(0xdad5893ee45c316d),
+ CONST64(0xeb08ffef04f70cfb), CONST64(0x2dd4f2476a26be98), CONST64(0xab38c7b71cff24db), CONST64(0x3b54b9112aed7e93),
+ CONST64(0x134aa23625e86f87), CONST64(0x9c69f426ba9dd34e), CONST64(0x5f7f10eeb16fcea1), CONST64(0x04038d8b8f8e8c02),
+ CONST64(0xc8564fe32b197d64), CONST64(0x69e74794fda01aba), CONST64(0xd31aeade0df017e7), CONST64(0x3c1198ba8689971e),
+ CONST64(0x78222d69110f333c), CONST64(0x3812153109071b1c), CONST64(0x11c56afdecaf2986), CONST64(0x8b20db9b10fb30cb),
+ CONST64(0x4030385818082820), CONST64(0xa87e6b973f154154), CONST64(0x682e237f170d3934), CONST64(0x20181c2c0c041410),
+ CONST64(0x0806070b03010504), CONST64(0x074521abac64e98d), CONST64(0xb6f827ca7cdf845b), CONST64(0x97295f0d9a76b3c5),
+ CONST64(0xef0b72648b7980f9), CONST64(0xa6f429dc7add8e53), CONST64(0xf58eb3b2473dc9f4), CONST64(0xb074628a3a164e58),
+ CONST64(0xe582bda4413fc3fc), CONST64(0xa5b285fc5937ebdc), CONST64(0x4f731ef8b76dc4a9), CONST64(0xdd90a8954838d8e0),
+ CONST64(0xa1b10877d6b967de), CONST64(0xbf37442a9573a2d1), CONST64(0x1b4ca53d26e96a83), CONST64(0xb5be8bea5f35e1d4),
+ CONST64(0x92e3b66dff551c49), CONST64(0xaf3b4a3c9371a8d9), CONST64(0xff077c728d7b8af1), CONST64(0x140f839d898c860a),
+ CONST64(0xb73143219672a7d5), CONST64(0x34179fb18588921a), CONST64(0xe30ef8e407f609ff), CONST64(0x4dfcd6337e2a82a8),
+ CONST64(0xed84baaf423ec6f8), CONST64(0xcad98728e25e3b65), CONST64(0x25d2f54c6927bb9c), CONST64(0x0a89cfc0ca464305),
+ CONST64(0x60282474140c3c30), CONST64(0x0f4326a0af65ec89), CONST64(0x676d05dfb868d5bd), CONST64(0x2f5b3a8ca361f899),
+ CONST64(0x180a091d05030f0c), CONST64(0x46bc7d185ec1e223), CONST64(0x82efb87bf9571641), CONST64(0xfece189967d6a97f),
+ CONST64(0x86ec35f076d99a43), CONST64(0xfacd9512e858257d), CONST64(0x8eea32fb75d89f47), CONST64(0x17492fbdaa66e385),
+ CONST64(0xf6c81f9264d7ac7b), CONST64(0xcd9ca6834e3ad2e8), CONST64(0x0e8a424b45c8cf07), CONST64(0xfd88b4b9443cccf0),
+ CONST64(0x8326dc9013fa35cf), CONST64(0xc453c563a796f462), CONST64(0x51f552a5f4a701a6), CONST64(0xb477ef01b598c25a),
+ CONST64(0x3352be1a29ec7b97), CONST64(0xa9b70f7cd5b862da), CONST64(0x76a86f2254c7fc3b), CONST64(0x19c36df6efae2c82),
+ CONST64(0x6f6b02d4bb69d0b9), CONST64(0x62a7ecbfdd4b7a31), CONST64(0x31dd76d1e0ab3d96), CONST64(0x21d178c7e6a9379e),
+ CONST64(0x1f4f28b6a967e681), CONST64(0x503c364e1e0a2228), CONST64(0x028fc8cbc9474601), CONST64(0xc316e4c80bf21def),
+ CONST64(0xc1992c03c2b55bee), CONST64(0x0dccee6b6622aa88), CONST64(0x7b64814932e556b3), CONST64(0x235eb00c2fee719f),
+ CONST64(0x99a31d46dfbe7cc2), CONST64(0x45fad1387d2b87ac), CONST64(0x7c21a0e29e81bf3e), CONST64(0x906c7ea636125a48),
+ CONST64(0x6c2daef49883b536), CONST64(0xd85a41f52d1b776c), CONST64(0x70242a62120e3638), CONST64(0x05cae9606523af8c),
+ CONST64(0xfb04f1f902f506f3), CONST64(0x1283c6ddcf454c09), CONST64(0x15c6e7766321a584), CONST64(0x3e9e50714fced11f),
+ CONST64(0x72abe2a9db497039), CONST64(0x7de8c409742c9cb0), CONST64(0x9b2cd58d16f93ac3), CONST64(0x636e885437e659bf),
+ CONST64(0xd993251ec7b654e2), CONST64(0x5df0d825782888a0), CONST64(0xb872658139174b5c), CONST64(0x642ba9ff9b82b032),
+ CONST64(0xd05c46fe2e1a7268), CONST64(0x2c1d96ac808b9d16), CONST64(0xa33ec0bc1ffe21df), CONST64(0x241b91a7838a9812),
+ CONST64(0x48363f531b092d24), CONST64(0x068c454046c9ca03), CONST64(0x4c35b2d89487a126), CONST64(0x4ab9f798d24e6b25),
+ CONST64(0x5b7c9d653ee142a3), CONST64(0x6de4ca1f722e96b8), CONST64(0x7362864231e453b7), CONST64(0x537a9a6e3de047a7),
+ CONST64(0x0b40ab2b20eb608b), CONST64(0xf447d759ad90ea7a), CONST64(0x49ff5bb8f1a40eaa), CONST64(0xf0445ad2221e6678),
+ CONST64(0x5c39bcce9285ab2e), CONST64(0x275d3d87a060fd9d), CONST64(0x0000000000000000), CONST64(0x35defb5a6f25b194),
+ CONST64(0xf302f6f201f403f7), CONST64(0xdb1cedd50ef112e3), CONST64(0xd45fcb75a194fe6a), CONST64(0x583a31451d0b272c),
+ CONST64(0x6b688f5f34e75cbb), CONST64(0x8f2356109f75bcc9), CONST64(0x2b58b7072cef749b), CONST64(0xbdb88ce15c34e4d0),
+ CONST64(0x95a697c65331f5c4), CONST64(0xeec2168f61d4a377), CONST64(0xceda0aa36dd0b767), CONST64(0x4433b5d39786a422),
+ CONST64(0xd7196755827e9be5), CONST64(0x01c964ebeaad238e), CONST64(0xbb34c9a11afd2ed3), CONST64(0x55f6df2e7b298da4),
+ CONST64(0x9da090cd5030f0c0), CONST64(0xc59aa1884d3bd7ec), CONST64(0x8c65fa30bc9fd946), CONST64(0x932ad28615f83fc7),
+ CONST64(0x7eae682957c6f93f), CONST64(0x986a79ad35135f4c), CONST64(0x3014123a0a061e18), CONST64(0x281e1b270f051114),
+ CONST64(0x66a4613452c5f633), CONST64(0x886677bb33115544), CONST64(0x9f2f58069977b6c1), CONST64(0xc7156943847c91ed),
+ CONST64(0xf7017b798e7a8ff5), CONST64(0xe70d756f887885fd), CONST64(0xadb482f75a36eed8), CONST64(0xe04854c4241c6c70),
+ CONST64(0xd596af9e4b39dde4), CONST64(0xf2cb9219eb592079), CONST64(0xc05048e828187860), CONST64(0x8ae9bf70fa561345),
+ CONST64(0xf18d3e39c8b345f6), CONST64(0xe9873724cdb04afa), CONST64(0x3dd8fc516c24b490), CONST64(0x1dc0e07d6020a080),
+ CONST64(0xf98b3932cbb240f2), CONST64(0xe44bd94fab92e072), CONST64(0x71ed4e89f8a315b6), CONST64(0x4eba7a135dc0e727),
+ CONST64(0x1a85c1d6cc44490d), CONST64(0x37513391a662f795), CONST64(0x806070b030105040), CONST64(0xc99f2b08c1b45eea),
+ CONST64(0x543fbbc59184ae2a), CONST64(0x2297d4e7c5435211), CONST64(0xec4dde44a893e576), CONST64(0x5eb674055bc2ed2f),
+ CONST64(0x6aa1ebb4de4a7f35), CONST64(0x81a9145bdabd73ce), CONST64(0x0c058a808c8f8906), CONST64(0x75eec302772d99b4),
+ CONST64(0x89af1350d9bc76ca), CONST64(0x946ff32db99cd64a), CONST64(0x77610bc9be6adfb5), CONST64(0x3a9dddfac0405d1d),
+ CONST64(0x3698577a4ccfd41b), CONST64(0x79eb4982fba210b2), CONST64(0x7427a7e99d80ba3a), CONST64(0x42bff093d14f6e21),
+ CONST64(0xf8425dd9211f637c), CONST64(0x1e864c5d43cac50f), CONST64(0x39db71dae3aa3892), CONST64(0x2a91d3ecc6425715),
+};
+
+static const ulong64 T6[256] = {
+ CONST64(0x6a01bbb9d268bad3), CONST64(0x66b1e59a4d1954fc), CONST64(0x14cde265bc932f71), CONST64(0x1b512587cdb9749c),
+ CONST64(0x57a4f7a2510253f5), CONST64(0xbe03d0d66bb8d368), CONST64(0xb504d6de6fbdd26b), CONST64(0x85feb35229644dd7),
+ CONST64(0x4aadfdba5d0d50f0), CONST64(0xe063cf098a26ace9), CONST64(0x9684091c0e838d8a), CONST64(0x4d1aa591c679bfdc),
+ CONST64(0x374d3da7ddad7090), CONST64(0x5ca3f1aa550752f6), CONST64(0x17e17ba452c89ab3), CONST64(0x8ef9b55a2d614cd4),
+ CONST64(0x20ac46038f65ea23), CONST64(0x8411c4e673a6d562), CONST64(0x68c255cc66f197a4), CONST64(0xa80ddcc663b2d16e),
+ CONST64(0xd099aa85ccff3355), CONST64(0x41aafbb2590851f3), CONST64(0x0f9cc7e2712a5bed), CONST64(0xae55f359a204a6f7),
+ CONST64(0xc120febe5f81de7f), CONST64(0xa2e5ad7a3d7548d8), CONST64(0xcc7fd7299a32a8e5), CONST64(0x0ae871bc5ec799b6),
+ CONST64(0xe63be0964b90db70), CONST64(0xdb9eac8dc8fa3256), CONST64(0x152295d1e651b7c4), CONST64(0xaace32b3d72bfc19),
+ CONST64(0x7393704bab48e338), CONST64(0x3bfd638442dc9ebf), CONST64(0x52d041fc7eef91ae), CONST64(0x1ce67dac56cd9bb0),
+ CONST64(0x78947643af4de23b), CONST64(0x6106bdb1d66dbbd0), CONST64(0xf1da9b32195841c3), CONST64(0xe5177957a5cb6eb2),
+ CONST64(0xb35cf941ae0ba5f2), CONST64(0x564b80160bc0cb40), CONST64(0xc20c677fb1da6bbd), CONST64(0x7ecc59dc6efb95a2),
+ CONST64(0x9f40e161be1fa1fe), CONST64(0xc3e310cbeb18f308), CONST64(0x2f3081e1fe4fb1ce), CONST64(0x160e0c10080a0206),
+ CONST64(0x675e922e17dbcc49), CONST64(0x3f66a26e37f3c451), CONST64(0xcf534ee874691d27), CONST64(0x9c6c78a05044143c),
+ CONST64(0x0e73b0562be8c358), CONST64(0x9a34573f91f263a5), CONST64(0xed3ce69e4f95da73), CONST64(0x358ed3d269345de7),
+ CONST64(0x2380dfc2613e5fe1), CONST64(0xd72ef2ae578bdc79), CONST64(0x486e13cfe9947d87), CONST64(0x6c59942613decd4a),
+ CONST64(0x5e601fdfe19e7f81), CONST64(0x049bc1ea752f5aee), CONST64(0xf3197547adc16cb4), CONST64(0x3e89d5da6d315ce4),
+ CONST64(0xefff08ebfb0cf704), CONST64(0x47f2d42d98be266a), CONST64(0xb7c738abdb24ff1c), CONST64(0x11b9543b937eed2a),
+ CONST64(0x36a24a13876fe825), CONST64(0x26f4699c4ed39dba), CONST64(0xee107f5fa1ce6fb1), CONST64(0x8b8d0304028c8e8f),
+ CONST64(0xe34f56c8647d192b), CONST64(0x9447e769ba1aa0fd), CONST64(0xdeea1ad3e717f00d), CONST64(0xba98113c1e978986),
+ CONST64(0x692d22783c330f11), CONST64(0x311512381c1b0709), CONST64(0xfd6ac5118629afec), CONST64(0x9bdb208bcb30fb10),
+ CONST64(0x5838304020280818), CONST64(0x976b7ea85441153f), CONST64(0x7f232e6834390d17), CONST64(0x2c1c18201014040c),
+ CONST64(0x0b07060804050103), CONST64(0xab2145078de964ac), CONST64(0xca27f8b65b84df7c), CONST64(0x0d5f2997c5b3769a),
+ CONST64(0x64720beff980798b), CONST64(0xdc29f4a6538edd7a), CONST64(0xb2b38ef5f4c93d47), CONST64(0x8a6274b0584e163a),
+ CONST64(0xa4bd82e5fcc33f41), CONST64(0xfc85b2a5dceb3759), CONST64(0xf81e734fa9c46db7), CONST64(0x95a890dde0d83848),
+ CONST64(0x7708b1a1de67b9d6), CONST64(0x2a4437bfd1a27395), CONST64(0x3da54c1b836ae926), CONST64(0xea8bbeb5d4e1355f),
+ CONST64(0x6db6e392491c55ff), CONST64(0x3c4a3bafd9a87193), CONST64(0x727c07fff18a7b8d), CONST64(0x9d830f140a868c89),
+ CONST64(0x214331b7d5a77296), CONST64(0xb19f17341a928885), CONST64(0xe4f80ee3ff09f607), CONST64(0x33d6fc4da8822a7e),
+ CONST64(0xafba84edf8c63e42), CONST64(0x2887d9ca653b5ee2), CONST64(0x4cf5d2259cbb2769), CONST64(0xc0cf890a054346ca),
+ CONST64(0x74242860303c0c14), CONST64(0xa026430f89ec65af), CONST64(0xdf056d67bdd568b8), CONST64(0x8c3a5b2f99f861a3),
+ CONST64(0x1d090a180c0f0305), CONST64(0x187dbc4623e2c15e), CONST64(0x7bb8ef82411657f9), CONST64(0x9918cefe7fa9d667),
+ CONST64(0xf035ec86439ad976), CONST64(0x1295cdfa7d2558e8), CONST64(0xfb32ea8e479fd875), CONST64(0xbd2f491785e366aa),
+ CONST64(0x921fc8f67bacd764), CONST64(0x83a69ccde8d23a4e), CONST64(0x4b428a0e07cfc845), CONST64(0xb9b488fdf0cc3c44),
+ CONST64(0x90dc2683cf35fa13), CONST64(0x63c553c462f496a7), CONST64(0xa552f551a601a7f4), CONST64(0x01ef77b45ac298b5),
+ CONST64(0x1abe5233977bec29), CONST64(0x7c0fb7a9da62b8d5), CONST64(0x226fa8763bfcc754), CONST64(0xf66dc319822caeef),
+ CONST64(0xd4026b6fb9d069bb), CONST64(0xbfeca762317a4bdd), CONST64(0xd176dd31963dabe0), CONST64(0xc778d1219e37a9e6),
+ CONST64(0xb6284f1f81e667a9), CONST64(0x4e363c5028220a1e), CONST64(0xcbc88f02014647c9), CONST64(0xc8e416c3ef1df20b),
+ CONST64(0x032c99c1ee5bb5c2), CONST64(0x6beecc0d88aa2266), CONST64(0x4981647bb356e532), CONST64(0x0cb05e239f71ee2f),
+ CONST64(0x461da399c27cbedf), CONST64(0x38d1fa45ac872b7d), CONST64(0xe2a0217c3ebf819e), CONST64(0xa67e6c90485a1236),
+ CONST64(0xf4ae2d6c36b58398), CONST64(0xf5415ad86c771b2d), CONST64(0x622a247038360e12), CONST64(0x60e9ca058caf2365),
+ CONST64(0xf9f104fbf306f502), CONST64(0xddc68312094c45cf), CONST64(0x76e7c61584a52163), CONST64(0x71509e3e1fd1ce4f),
+ CONST64(0xa9e2ab72397049db), CONST64(0x09c4e87db09c2c74), CONST64(0x8dd52c9bc33af916), CONST64(0x54886e63bf59e637),
+ CONST64(0x1e2593d9e254b6c7), CONST64(0x25d8f05da0882878), CONST64(0x816572b85c4b1739), CONST64(0xffa92b6432b0829b),
+ CONST64(0xfe465cd068721a2e), CONST64(0xac961d2c169d8b80), CONST64(0xbcc03ea3df21fe1f), CONST64(0xa7911b2412988a83),
+ CONST64(0x533f3648242d091b), CONST64(0x40458c0603cac946), CONST64(0xd8b2354c26a18794), CONST64(0x98f7b94a256b4ed2),
+ CONST64(0x659d7c5ba342e13e), CONST64(0x1fcae46db8962e72), CONST64(0x42866273b753e431), CONST64(0x6e9a7a53a747e03d),
+ CONST64(0x2bab400b8b60eb20), CONST64(0x59d747f47aea90ad), CONST64(0xb85bff49aa0ea4f1), CONST64(0xd25a44f078661e22),
+ CONST64(0xcebc395c2eab8592), CONST64(0x873d5d279dfd60a0), CONST64(0x0000000000000000), CONST64(0x5afbde3594b1256f),
+ CONST64(0xf2f602f3f703f401), CONST64(0xd5ed1cdbe312f10e), CONST64(0x75cb5fd46afe94a1), CONST64(0x45313a582c270b1d),
+ CONST64(0x5f8f686bbb5ce734), CONST64(0x1056238fc9bc759f), CONST64(0x07b7582b9b74ef2c), CONST64(0xe18cb8bdd0e4345c),
+ CONST64(0xc697a695c4f53153), CONST64(0x8f16c2ee77a3d461), CONST64(0xa30adace67b7d06d), CONST64(0xd3b5334422a48697),
+ CONST64(0x556719d7e59b7e82), CONST64(0xeb64c9018e23adea), CONST64(0xa1c934bbd32efd1a), CONST64(0x2edff655a48d297b),
+ CONST64(0xcd90a09dc0f03050), CONST64(0x88a19ac5ecd73b4d), CONST64(0x30fa658c46d99fbc), CONST64(0x86d22a93c73ff815),
+ CONST64(0x2968ae7e3ff9c657), CONST64(0xad796a984c5f1335), CONST64(0x3a121430181e060a), CONST64(0x271b1e281411050f),
+ CONST64(0x3461a46633f6c552), CONST64(0xbb77668844551133), CONST64(0x06582f9fc1b67799), CONST64(0x436915c7ed917c84),
+ CONST64(0x797b01f7f58f7a8e), CONST64(0x6f750de7fd857888), CONST64(0xf782b4add8ee365a), CONST64(0xc45448e0706c1c24),
+ CONST64(0x9eaf96d5e4dd394b), CONST64(0x1992cbf2792059eb), CONST64(0xe84850c060781828), CONST64(0x70bfe98a451356fa),
+ CONST64(0x393e8df1f645b3c8), CONST64(0x243787e9fa4ab0cd), CONST64(0x51fcd83d90b4246c), CONST64(0x7de0c01d80a02060),
+ CONST64(0x32398bf9f240b2cb), CONST64(0x4fd94be472e092ab), CONST64(0x894eed71b615a3f8), CONST64(0x137aba4e27e7c05d),
+ CONST64(0xd6c1851a0d4944cc), CONST64(0x9133513795f762a6), CONST64(0xb070608040501030), CONST64(0x082b9fc9ea5eb4c1),
+ CONST64(0xc5bb3f542aae8491), CONST64(0xe7d49722115243c5), CONST64(0x44de4dec76e593a8), CONST64(0x0574b65e2fedc25b),
+ CONST64(0xb4eba16a357f4ade), CONST64(0x5b14a981ce73bdda), CONST64(0x808a050c06898f8c), CONST64(0x02c3ee75b4992d77),
+ CONST64(0x5013af89ca76bcd9), CONST64(0x2df36f944ad69cb9), CONST64(0xc90b6177b5df6abe), CONST64(0xfadd9d3a1d5d40c0),
+ CONST64(0x7a5798361bd4cf4c), CONST64(0x8249eb79b210a2fb), CONST64(0xe9a727743aba809d), CONST64(0x93f0bf42216e4fd1),
+ CONST64(0xd95d42f87c631f21), CONST64(0x5d4c861e0fc5ca43), CONST64(0xda71db399238aae3), CONST64(0xecd3912a155742c6),
+};
+
+static const ulong64 T7[256] = {
+ CONST64(0x016ab9bb68d2d3ba), CONST64(0xb1669ae5194dfc54), CONST64(0xcd1465e293bc712f), CONST64(0x511b8725b9cd9c74),
+ CONST64(0xa457a2f70251f553), CONST64(0x03bed6d0b86b68d3), CONST64(0x04b5ded6bd6f6bd2), CONST64(0xfe8552b36429d74d),
+ CONST64(0xad4abafd0d5df050), CONST64(0x63e009cf268ae9ac), CONST64(0x84961c09830e8a8d), CONST64(0x1a4d91a579c6dcbf),
+ CONST64(0x4d37a73daddd9070), CONST64(0xa35caaf10755f652), CONST64(0xe117a47bc852b39a), CONST64(0xf98e5ab5612dd44c),
+ CONST64(0xac200346658f23ea), CONST64(0x1184e6c4a67362d5), CONST64(0xc268cc55f166a497), CONST64(0x0da8c6dcb2636ed1),
+ CONST64(0x99d085aaffcc5533), CONST64(0xaa41b2fb0859f351), CONST64(0x9c0fe2c72a71ed5b), CONST64(0x55ae59f304a2f7a6),
+ CONST64(0x20c1befe815f7fde), CONST64(0xe5a27aad753dd848), CONST64(0x7fcc29d7329ae5a8), CONST64(0xe80abc71c75eb699),
+ CONST64(0x3be696e0904b70db), CONST64(0x9edb8dacfac85632), CONST64(0x2215d19551e6c4b7), CONST64(0xceaab3322bd719fc),
+ CONST64(0x93734b7048ab38e3), CONST64(0xfd3b8463dc42bf9e), CONST64(0xd052fc41ef7eae91), CONST64(0xe61cac7dcd56b09b),
+ CONST64(0x947843764daf3be2), CONST64(0x0661b1bd6dd6d0bb), CONST64(0xdaf1329b5819c341), CONST64(0x17e55779cba5b26e),
+ CONST64(0x5cb341f90baef2a5), CONST64(0x4b561680c00b40cb), CONST64(0x0cc27f67dab1bd6b), CONST64(0xcc7edc59fb6ea295),
+ CONST64(0x409f61e11fbefea1), CONST64(0xe3c3cb1018eb08f3), CONST64(0x302fe1814ffeceb1), CONST64(0x0e16100c0a080602),
+ CONST64(0x5e672e92db1749cc), CONST64(0x663f6ea2f33751c4), CONST64(0x53cfe84e6974271d), CONST64(0x6c9ca07844503c14),
+ CONST64(0x730e56b0e82b58c3), CONST64(0x349a3f57f291a563), CONST64(0x3ced9ee6954f73da), CONST64(0x8e35d2d33469e75d),
+ CONST64(0x8023c2df3e61e15f), CONST64(0x2ed7aef28b5779dc), CONST64(0x6e48cf1394e9877d), CONST64(0x596c2694de134acd),
+ CONST64(0x605edf1f9ee1817f), CONST64(0x9b04eac12f75ee5a), CONST64(0x19f34775c1adb46c), CONST64(0x893edad5316de45c),
+ CONST64(0xffefeb080cfb04f7), CONST64(0xf2472dd4be986a26), CONST64(0xc7b7ab3824db1cff), CONST64(0xb9113b547e932aed),
+ CONST64(0xa236134a6f8725e8), CONST64(0xf4269c69d34eba9d), CONST64(0x10ee5f7fcea1b16f), CONST64(0x8d8b04038c028f8e),
+ CONST64(0x4fe3c8567d642b19), CONST64(0x479469e71abafda0), CONST64(0xeaded31a17e70df0), CONST64(0x98ba3c11971e8689),
+ CONST64(0x2d697822333c110f), CONST64(0x153138121b1c0907), CONST64(0x6afd11c52986ecaf), CONST64(0xdb9b8b2030cb10fb),
+ CONST64(0x3858403028201808), CONST64(0x6b97a87e41543f15), CONST64(0x237f682e3934170d), CONST64(0x1c2c201814100c04),
+ CONST64(0x070b080605040301), CONST64(0x21ab0745e98dac64), CONST64(0x27cab6f8845b7cdf), CONST64(0x5f0d9729b3c59a76),
+ CONST64(0x7264ef0b80f98b79), CONST64(0x29dca6f48e537add), CONST64(0xb3b2f58ec9f4473d), CONST64(0x628ab0744e583a16),
+ CONST64(0xbda4e582c3fc413f), CONST64(0x85fca5b2ebdc5937), CONST64(0x1ef84f73c4a9b76d), CONST64(0xa895dd90d8e04838),
+ CONST64(0x0877a1b167ded6b9), CONST64(0x442abf37a2d19573), CONST64(0xa53d1b4c6a8326e9), CONST64(0x8beab5bee1d45f35),
+ CONST64(0xb66d92e31c49ff55), CONST64(0x4a3caf3ba8d99371), CONST64(0x7c72ff078af18d7b), CONST64(0x839d140f860a898c),
+ CONST64(0x4321b731a7d59672), CONST64(0x9fb13417921a8588), CONST64(0xf8e4e30e09ff07f6), CONST64(0xd6334dfc82a87e2a),
+ CONST64(0xbaafed84c6f8423e), CONST64(0x8728cad93b65e25e), CONST64(0xf54c25d2bb9c6927), CONST64(0xcfc00a894305ca46),
+ CONST64(0x247460283c30140c), CONST64(0x26a00f43ec89af65), CONST64(0x05df676dd5bdb868), CONST64(0x3a8c2f5bf899a361),
+ CONST64(0x091d180a0f0c0503), CONST64(0x7d1846bce2235ec1), CONST64(0xb87b82ef1641f957), CONST64(0x1899fecea97f67d6),
+ CONST64(0x35f086ec9a4376d9), CONST64(0x9512facd257de858), CONST64(0x32fb8eea9f4775d8), CONST64(0x2fbd1749e385aa66),
+ CONST64(0x1f92f6c8ac7b64d7), CONST64(0xa683cd9cd2e84e3a), CONST64(0x424b0e8acf0745c8), CONST64(0xb4b9fd88ccf0443c),
+ CONST64(0xdc90832635cf13fa), CONST64(0xc563c453f462a796), CONST64(0x52a551f501a6f4a7), CONST64(0xef01b477c25ab598),
+ CONST64(0xbe1a33527b9729ec), CONST64(0x0f7ca9b762dad5b8), CONST64(0x6f2276a8fc3b54c7), CONST64(0x6df619c32c82efae),
+ CONST64(0x02d46f6bd0b9bb69), CONST64(0xecbf62a77a31dd4b), CONST64(0x76d131dd3d96e0ab), CONST64(0x78c721d1379ee6a9),
+ CONST64(0x28b61f4fe681a967), CONST64(0x364e503c22281e0a), CONST64(0xc8cb028f4601c947), CONST64(0xe4c8c3161def0bf2),
+ CONST64(0x2c03c1995beec2b5), CONST64(0xee6b0dccaa886622), CONST64(0x81497b6456b332e5), CONST64(0xb00c235e719f2fee),
+ CONST64(0x1d4699a37cc2dfbe), CONST64(0xd13845fa87ac7d2b), CONST64(0xa0e27c21bf3e9e81), CONST64(0x7ea6906c5a483612),
+ CONST64(0xaef46c2db5369883), CONST64(0x41f5d85a776c2d1b), CONST64(0x2a6270243638120e), CONST64(0xe96005caaf8c6523),
+ CONST64(0xf1f9fb0406f302f5), CONST64(0xc6dd12834c09cf45), CONST64(0xe77615c6a5846321), CONST64(0x50713e9ed11f4fce),
+ CONST64(0xe2a972ab7039db49), CONST64(0xc4097de89cb0742c), CONST64(0xd58d9b2c3ac316f9), CONST64(0x8854636e59bf37e6),
+ CONST64(0x251ed99354e2c7b6), CONST64(0xd8255df088a07828), CONST64(0x6581b8724b5c3917), CONST64(0xa9ff642bb0329b82),
+ CONST64(0x46fed05c72682e1a), CONST64(0x96ac2c1d9d16808b), CONST64(0xc0bca33e21df1ffe), CONST64(0x91a7241b9812838a),
+ CONST64(0x3f5348362d241b09), CONST64(0x4540068cca0346c9), CONST64(0xb2d84c35a1269487), CONST64(0xf7984ab96b25d24e),
+ CONST64(0x9d655b7c42a33ee1), CONST64(0xca1f6de496b8722e), CONST64(0x8642736253b731e4), CONST64(0x9a6e537a47a73de0),
+ CONST64(0xab2b0b40608b20eb), CONST64(0xd759f447ea7aad90), CONST64(0x5bb849ff0eaaf1a4), CONST64(0x5ad2f0446678221e),
+ CONST64(0xbcce5c39ab2e9285), CONST64(0x3d87275dfd9da060), CONST64(0x0000000000000000), CONST64(0xfb5a35deb1946f25),
+ CONST64(0xf6f2f30203f701f4), CONST64(0xedd5db1c12e30ef1), CONST64(0xcb75d45ffe6aa194), CONST64(0x3145583a272c1d0b),
+ CONST64(0x8f5f6b685cbb34e7), CONST64(0x56108f23bcc99f75), CONST64(0xb7072b58749b2cef), CONST64(0x8ce1bdb8e4d05c34),
+ CONST64(0x97c695a6f5c45331), CONST64(0x168feec2a37761d4), CONST64(0x0aa3cedab7676dd0), CONST64(0xb5d34433a4229786),
+ CONST64(0x6755d7199be5827e), CONST64(0x64eb01c9238eeaad), CONST64(0xc9a1bb342ed31afd), CONST64(0xdf2e55f68da47b29),
+ CONST64(0x90cd9da0f0c05030), CONST64(0xa188c59ad7ec4d3b), CONST64(0xfa308c65d946bc9f), CONST64(0xd286932a3fc715f8),
+ CONST64(0x68297eaef93f57c6), CONST64(0x79ad986a5f4c3513), CONST64(0x123a30141e180a06), CONST64(0x1b27281e11140f05),
+ CONST64(0x613466a4f63352c5), CONST64(0x77bb886655443311), CONST64(0x58069f2fb6c19977), CONST64(0x6943c71591ed847c),
+ CONST64(0x7b79f7018ff58e7a), CONST64(0x756fe70d85fd8878), CONST64(0x82f7adb4eed85a36), CONST64(0x54c4e0486c70241c),
+ CONST64(0xaf9ed596dde44b39), CONST64(0x9219f2cb2079eb59), CONST64(0x48e8c05078602818), CONST64(0xbf708ae91345fa56),
+ CONST64(0x3e39f18d45f6c8b3), CONST64(0x3724e9874afacdb0), CONST64(0xfc513dd8b4906c24), CONST64(0xe07d1dc0a0806020),
+ CONST64(0x3932f98b40f2cbb2), CONST64(0xd94fe44be072ab92), CONST64(0x4e8971ed15b6f8a3), CONST64(0x7a134ebae7275dc0),
+ CONST64(0xc1d61a85490dcc44), CONST64(0x33913751f795a662), CONST64(0x70b0806050403010), CONST64(0x2b08c99f5eeac1b4),
+ CONST64(0xbbc5543fae2a9184), CONST64(0xd4e722975211c543), CONST64(0xde44ec4de576a893), CONST64(0x74055eb6ed2f5bc2),
+ CONST64(0xebb46aa17f35de4a), CONST64(0x145b81a973cedabd), CONST64(0x8a800c0589068c8f), CONST64(0xc30275ee99b4772d),
+ CONST64(0x135089af76cad9bc), CONST64(0xf32d946fd64ab99c), CONST64(0x0bc97761dfb5be6a), CONST64(0xddfa3a9d5d1dc040),
+ CONST64(0x577a3698d41b4ccf), CONST64(0x498279eb10b2fba2), CONST64(0xa7e97427ba3a9d80), CONST64(0xf09342bf6e21d14f),
+ CONST64(0x5dd9f842637c211f), CONST64(0x4c5d1e86c50f43ca), CONST64(0x71da39db3892e3aa), CONST64(0xd3ec2a915715c642),
+};
+
+static const ulong64 c[R + 1] = {
+ CONST64(0xba542f7453d3d24d),
+ CONST64(0x50ac8dbf70529a4c),
+ CONST64(0xead597d133515ba6),
+ CONST64(0xde48a899db32b7fc),
+ CONST64(0xe39e919be2bb416e),
+ CONST64(0xa5cb6b95a1f3b102),
+ CONST64(0xccc41d14c363da5d),
+ CONST64(0x5fdc7dcd7f5a6c5c),
+ CONST64(0xf726ffede89d6f8e),
+};
+
+ /**
+ Initialize the Khazad block cipher
+ @param key The symmetric key you wish to pass
+ @param keylen The key length in bytes
+ @param num_rounds The number of rounds desired (0 for default)
+ @param skey The key in as scheduled by this function.
+ @return CRYPT_OK if successful
+ */
+int khazad_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey)
+{
+ int r;
+ const ulong64 *S;
+ ulong64 K2, K1;
+
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(skey != NULL);
+ if (keylen != 16) {
+ return CRYPT_INVALID_KEYSIZE;
+ }
+ if (num_rounds != 8 && num_rounds != 0) {
+ return CRYPT_INVALID_ROUNDS;
+ }
+
+ /* use 7th table */
+ S = T7;
+
+ /*
+ * map unsigned char array cipher key to initial key state (mu):
+ */
+ K2 =
+ ((ulong64)key[ 0] << 56) ^
+ ((ulong64)key[ 1] << 48) ^
+ ((ulong64)key[ 2] << 40) ^
+ ((ulong64)key[ 3] << 32) ^
+ ((ulong64)key[ 4] << 24) ^
+ ((ulong64)key[ 5] << 16) ^
+ ((ulong64)key[ 6] << 8) ^
+ ((ulong64)key[ 7] );
+ K1 =
+ ((ulong64)key[ 8] << 56) ^
+ ((ulong64)key[ 9] << 48) ^
+ ((ulong64)key[10] << 40) ^
+ ((ulong64)key[11] << 32) ^
+ ((ulong64)key[12] << 24) ^
+ ((ulong64)key[13] << 16) ^
+ ((ulong64)key[14] << 8) ^
+ ((ulong64)key[15] );
+
+ /*
+ * compute the round keys:
+ */
+ for (r = 0; r <= R; r++) {
+ /*
+ * K[r] = rho(c[r], K1) ^ K2;
+ */
+ skey->khazad.roundKeyEnc[r] =
+ T0[(int)(K1 >> 56) ] ^
+ T1[(int)(K1 >> 48) & 0xff] ^
+ T2[(int)(K1 >> 40) & 0xff] ^
+ T3[(int)(K1 >> 32) & 0xff] ^
+ T4[(int)(K1 >> 24) & 0xff] ^
+ T5[(int)(K1 >> 16) & 0xff] ^
+ T6[(int)(K1 >> 8) & 0xff] ^
+ T7[(int)(K1 ) & 0xff] ^
+ c[r] ^ K2;
+ K2 = K1; K1 = skey->khazad.roundKeyEnc[r];
+ }
+ /*
+ * compute the inverse key schedule:
+ * K'^0 = K^R, K'^R = K^0, K'^r = theta(K^{R-r})
+ */
+ skey->khazad.roundKeyDec[0] = skey->khazad.roundKeyEnc[R];
+ for (r = 1; r < R; r++) {
+ K1 = skey->khazad.roundKeyEnc[R - r];
+ skey->khazad.roundKeyDec[r] =
+ T0[(int)S[(int)(K1 >> 56) ] & 0xff] ^
+ T1[(int)S[(int)(K1 >> 48) & 0xff] & 0xff] ^
+ T2[(int)S[(int)(K1 >> 40) & 0xff] & 0xff] ^
+ T3[(int)S[(int)(K1 >> 32) & 0xff] & 0xff] ^
+ T4[(int)S[(int)(K1 >> 24) & 0xff] & 0xff] ^
+ T5[(int)S[(int)(K1 >> 16) & 0xff] & 0xff] ^
+ T6[(int)S[(int)(K1 >> 8) & 0xff] & 0xff] ^
+ T7[(int)S[(int)(K1 ) & 0xff] & 0xff];
+ }
+ skey->khazad.roundKeyDec[R] = skey->khazad.roundKeyEnc[0];
+
+ return CRYPT_OK;
+}
+
+static void khazad_crypt(const unsigned char *plaintext, unsigned char *ciphertext,
+ const ulong64 *roundKey) {
+ int r;
+ ulong64 state;
+ /*
+ * map plaintext block to cipher state (mu)
+ * and add initial round key (sigma[K^0]):
+ */
+ state =
+ ((ulong64)plaintext[0] << 56) ^
+ ((ulong64)plaintext[1] << 48) ^
+ ((ulong64)plaintext[2] << 40) ^
+ ((ulong64)plaintext[3] << 32) ^
+ ((ulong64)plaintext[4] << 24) ^
+ ((ulong64)plaintext[5] << 16) ^
+ ((ulong64)plaintext[6] << 8) ^
+ ((ulong64)plaintext[7] ) ^
+ roundKey[0];
+
+ /*
+ * R - 1 full rounds:
+ */
+ for (r = 1; r < R; r++) {
+ state =
+ T0[(int)(state >> 56) ] ^
+ T1[(int)(state >> 48) & 0xff] ^
+ T2[(int)(state >> 40) & 0xff] ^
+ T3[(int)(state >> 32) & 0xff] ^
+ T4[(int)(state >> 24) & 0xff] ^
+ T5[(int)(state >> 16) & 0xff] ^
+ T6[(int)(state >> 8) & 0xff] ^
+ T7[(int)(state ) & 0xff] ^
+ roundKey[r];
+ }
+
+ /*
+ * last round:
+ */
+ state =
+ (T0[(int)(state >> 56) ] & CONST64(0xff00000000000000)) ^
+ (T1[(int)(state >> 48) & 0xff] & CONST64(0x00ff000000000000)) ^
+ (T2[(int)(state >> 40) & 0xff] & CONST64(0x0000ff0000000000)) ^
+ (T3[(int)(state >> 32) & 0xff] & CONST64(0x000000ff00000000)) ^
+ (T4[(int)(state >> 24) & 0xff] & CONST64(0x00000000ff000000)) ^
+ (T5[(int)(state >> 16) & 0xff] & CONST64(0x0000000000ff0000)) ^
+ (T6[(int)(state >> 8) & 0xff] & CONST64(0x000000000000ff00)) ^
+ (T7[(int)(state ) & 0xff] & CONST64(0x00000000000000ff)) ^
+ roundKey[R];
+
+ /*
+ * map cipher state to ciphertext block (mu^{-1}):
+ */
+ ciphertext[0] = (unsigned char)(state >> 56);
+ ciphertext[1] = (unsigned char)(state >> 48);
+ ciphertext[2] = (unsigned char)(state >> 40);
+ ciphertext[3] = (unsigned char)(state >> 32);
+ ciphertext[4] = (unsigned char)(state >> 24);
+ ciphertext[5] = (unsigned char)(state >> 16);
+ ciphertext[6] = (unsigned char)(state >> 8);
+ ciphertext[7] = (unsigned char)(state );
+}
+
+/**
+ Encrypts a block of text with Khazad
+ @param pt The input plaintext (8 bytes)
+ @param ct The output ciphertext (8 bytes)
+ @param skey The key as scheduled
+*/
+void khazad_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
+{
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
+ khazad_crypt(pt, ct, skey->khazad.roundKeyEnc);
+}
+
+/**
+ Decrypts a block of text with Khazad
+ @param ct The input ciphertext (8 bytes)
+ @param pt The output plaintext (8 bytes)
+ @param skey The key as scheduled
+*/
+void khazad_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
+{
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
+ khazad_crypt(ct, pt, skey->khazad.roundKeyDec);
+}
+
+/**
+ Performs a self-test of the Khazad block cipher
+ @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled
+*/
+int khazad_test(void)
+{
+#ifndef LTC_TEST
+ return CRYPT_NOP;
+#else
+ static const struct test {
+ unsigned char pt[8], ct[8], key[16];
+ } tests[] = {
+{
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0x49, 0xA4, 0xCE, 0x32, 0xAC, 0x19, 0x0E, 0x3F },
+ { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }
+}, {
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0x64, 0x5D, 0x77, 0x3E, 0x40, 0xAB, 0xDD, 0x53 },
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 }
+}, {
+ { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ { 0x9E, 0x39, 0x98, 0x64, 0xF7, 0x8E, 0xCA, 0x02 },
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }
+}, {
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 },
+ { 0xA9, 0xDF, 0x3D, 0x2C, 0x64, 0xD3, 0xEA, 0x28 },
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }
+}
+};
+ int x, y;
+ unsigned char buf[2][8];
+ symmetric_key skey;
+
+ for (x = 0; x < (int)(sizeof(tests)/sizeof(tests[0])); x++) {
+ khazad_setup(tests[x].key, 16, 0, &skey);
+ khazad_ecb_encrypt(tests[x].pt, buf[0], &skey);
+ khazad_ecb_decrypt(buf[0], buf[1], &skey);
+ if (memcmp(buf[0], tests[x].ct, 8) || memcmp(buf[1], tests[x].pt, 8)) {
+ return CRYPT_FAIL_TESTVECTOR;
+ }
+
+ for (y = 0; y < 1000; y++) khazad_ecb_encrypt(buf[0], buf[0], &skey);
+ for (y = 0; y < 1000; y++) khazad_ecb_decrypt(buf[0], buf[0], &skey);
+ if (memcmp(buf[0], tests[x].ct, 8)) {
+ return CRYPT_FAIL_TESTVECTOR;
+ }
+
+ }
+ return CRYPT_OK;
+#endif
+}
+
+/** Terminate the context
+ @param skey The scheduled key
+*/
+void khazad_done(symmetric_key *skey)
+{
+}
+
+/**
+ Gets suitable key size
+ @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable.
+ @return CRYPT_OK if the input key size is acceptable.
+*/
+int khazad_keysize(int *keysize)
+{
+ LTC_ARGCHK(keysize != NULL);
+ if (*keysize >= 16) {
+ *keysize = 16;
+ return CRYPT_OK;
+ } else {
+ return CRYPT_INVALID_KEYSIZE;
+ }
+}
+
+#endif
diff --git a/noekeon.c b/src/ciphers/noekeon.c
similarity index 66%
rename from noekeon.c
rename to src/ciphers/noekeon.c
index ef4796c3..194cdbe6 100644
--- a/noekeon.c
+++ b/src/ciphers/noekeon.c
@@ -6,14 +6,17 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* Implementation of the Noekeon block cipher by Tom St Denis */
-#include "mycrypt.h"
+/**
+ @file noekeon.c
+ Implementation of the Noekeon block cipher by Tom St Denis
+*/
+#include "tomcrypt.h"
#ifdef NOEKEON
-const struct _cipher_descriptor noekeon_desc =
+const struct ltc_cipher_descriptor noekeon_desc =
{
"noekeon",
16,
@@ -22,7 +25,9 @@ const struct _cipher_descriptor noekeon_desc =
&noekeon_ecb_encrypt,
&noekeon_ecb_decrypt,
&noekeon_test,
- &noekeon_keysize
+ &noekeon_done,
+ &noekeon_keysize,
+ NULL, NULL, NULL, NULL, NULL, NULL, NULL
};
static const ulong32 RC[] = {
@@ -34,15 +39,15 @@ static const ulong32 RC[] = {
};
#define kTHETA(a, b, c, d) \
- temp = a^c; temp = temp ^ ROL(temp, 8) ^ ROR(temp, 8); \
+ temp = a^c; temp = temp ^ ROLc(temp, 8) ^ RORc(temp, 8); \
b ^= temp; d ^= temp; \
- temp = b^d; temp = temp ^ ROL(temp, 8) ^ ROR(temp, 8); \
+ temp = b^d; temp = temp ^ ROLc(temp, 8) ^ RORc(temp, 8); \
a ^= temp; c ^= temp;
#define THETA(k, a, b, c, d) \
- temp = a^c; temp = temp ^ ROL(temp, 8) ^ ROR(temp, 8); \
+ temp = a^c; temp = temp ^ ROLc(temp, 8) ^ RORc(temp, 8); \
b ^= temp ^ k[1]; d ^= temp ^ k[3]; \
- temp = b^d; temp = temp ^ ROL(temp, 8) ^ ROR(temp, 8); \
+ temp = b^d; temp = temp ^ ROLc(temp, 8) ^ RORc(temp, 8); \
a ^= temp ^ k[0]; c ^= temp ^ k[2];
#define GAMMA(a, b, c, d) \
@@ -54,17 +59,25 @@ static const ulong32 RC[] = {
a ^= c&b;
#define PI1(a, b, c, d) \
- a = ROL(a, 1); c = ROL(c, 5); d = ROL(d, 2);
+ a = ROLc(a, 1); c = ROLc(c, 5); d = ROLc(d, 2);
#define PI2(a, b, c, d) \
- a = ROR(a, 1); c = ROR(c, 5); d = ROR(d, 2);
+ a = RORc(a, 1); c = RORc(c, 5); d = RORc(d, 2);
+ /**
+ Initialize the Noekeon block cipher
+ @param key The symmetric key you wish to pass
+ @param keylen The key length in bytes
+ @param num_rounds The number of rounds desired (0 for default)
+ @param skey The key in as scheduled by this function.
+ @return CRYPT_OK if successful
+ */
int noekeon_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey)
{
ulong32 temp;
- _ARGCHK(key != NULL);
- _ARGCHK(skey != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(skey != NULL);
if (keylen != 16) {
return CRYPT_INVALID_KEYSIZE;
@@ -89,25 +102,31 @@ int noekeon_setup(const unsigned char *key, int keylen, int num_rounds, symmetri
return CRYPT_OK;
}
-#ifdef CLEAN_STACK
-static void _noekeon_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key)
+/**
+ Encrypts a block of text with Noekeon
+ @param pt The input plaintext (16 bytes)
+ @param ct The output ciphertext (16 bytes)
+ @param skey The key as scheduled
+*/
+#ifdef LTC_CLEAN_STACK
+static void _noekeon_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
#else
-void noekeon_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key)
+void noekeon_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
#endif
{
ulong32 a,b,c,d,temp;
int r;
- _ARGCHK(key != NULL);
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
LOAD32H(a,&pt[0]); LOAD32H(b,&pt[4]);
LOAD32H(c,&pt[8]); LOAD32H(d,&pt[12]);
#define ROUND(i) \
a ^= RC[i]; \
- THETA(key->noekeon.K, a,b,c,d); \
+ THETA(skey->noekeon.K, a,b,c,d); \
PI1(a,b,c,d); \
GAMMA(a,b,c,d); \
PI2(a,b,c,d);
@@ -119,39 +138,45 @@ void noekeon_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_k
#undef ROUND
a ^= RC[16];
- THETA(key->noekeon.K, a, b, c, d);
+ THETA(skey->noekeon.K, a, b, c, d);
STORE32H(a,&ct[0]); STORE32H(b,&ct[4]);
STORE32H(c,&ct[8]); STORE32H(d,&ct[12]);
}
-#ifdef CLEAN_STACK
-void noekeon_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key)
+#ifdef LTC_CLEAN_STACK
+void noekeon_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
{
- _noekeon_ecb_encrypt(pt, ct, key);
+ _noekeon_ecb_encrypt(pt, ct, skey);
burn_stack(sizeof(ulong32) * 5 + sizeof(int));
}
#endif
-#ifdef CLEAN_STACK
-static void _noekeon_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key)
+/**
+ Decrypts a block of text with Noekeon
+ @param ct The input ciphertext (16 bytes)
+ @param pt The output plaintext (16 bytes)
+ @param skey The key as scheduled
+*/
+#ifdef LTC_CLEAN_STACK
+static void _noekeon_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
#else
-void noekeon_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key)
+void noekeon_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
#endif
{
ulong32 a,b,c,d, temp;
int r;
- _ARGCHK(key != NULL);
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
LOAD32H(a,&ct[0]); LOAD32H(b,&ct[4]);
LOAD32H(c,&ct[8]); LOAD32H(d,&ct[12]);
#define ROUND(i) \
- THETA(key->noekeon.dK, a,b,c,d); \
+ THETA(skey->noekeon.dK, a,b,c,d); \
a ^= RC[i]; \
PI1(a,b,c,d); \
GAMMA(a,b,c,d); \
@@ -163,20 +188,24 @@ void noekeon_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_k
#undef ROUND
- THETA(key->noekeon.dK, a,b,c,d);
+ THETA(skey->noekeon.dK, a,b,c,d);
a ^= RC[0];
STORE32H(a,&pt[0]); STORE32H(b, &pt[4]);
STORE32H(c,&pt[8]); STORE32H(d, &pt[12]);
}
-#ifdef CLEAN_STACK
-void noekeon_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key)
+#ifdef LTC_CLEAN_STACK
+void noekeon_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
{
- _noekeon_ecb_decrypt(ct, pt, key);
+ _noekeon_ecb_decrypt(ct, pt, skey);
burn_stack(sizeof(ulong32) * 5 + sizeof(int));
}
#endif
+/**
+ Performs a self-test of the Noekeon block cipher
+ @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled
+*/
int noekeon_test(void)
{
#ifndef LTC_TEST
@@ -236,13 +265,25 @@ int noekeon_test(void)
#endif
}
-int noekeon_keysize(int *desired_keysize)
+/** Terminate the context
+ @param skey The scheduled key
+*/
+void noekeon_done(symmetric_key *skey)
+{
+}
+
+/**
+ Gets suitable key size
+ @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable.
+ @return CRYPT_OK if the input key size is acceptable.
+*/
+int noekeon_keysize(int *keysize)
{
- _ARGCHK(desired_keysize != NULL);
- if (*desired_keysize < 16) {
+ LTC_ARGCHK(keysize != NULL);
+ if (*keysize < 16) {
return CRYPT_INVALID_KEYSIZE;
} else {
- *desired_keysize = 16;
+ *keysize = 16;
return CRYPT_OK;
}
}
diff --git a/rc2.c b/src/ciphers/rc2.c
similarity index 69%
rename from rc2.c
rename to src/ciphers/rc2.c
index f3f8c315..6382941b 100644
--- a/rc2.c
+++ b/src/ciphers/rc2.c
@@ -6,7 +6,7 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
/**********************************************************************\
* To commemorate the 1996 RSA Data Security Conference, the following *
@@ -18,19 +18,25 @@
* Thanks to CodeView, SoftIce, and D86 for helping bring this code to *
* the public. *
\**********************************************************************/
+#include <tomcrypt.h>
-#include <mycrypt.h>
+/**
+ @file rc2.c
+ Implementation of RC2
+*/
#ifdef RC2
-const struct _cipher_descriptor rc2_desc = {
+const struct ltc_cipher_descriptor rc2_desc = {
"rc2",
12, 8, 128, 8, 16,
&rc2_setup,
&rc2_ecb_encrypt,
&rc2_ecb_decrypt,
&rc2_test,
- &rc2_keysize
+ &rc2_done,
+ &rc2_keysize,
+ NULL, NULL, NULL, NULL, NULL, NULL, NULL
};
/* 256-entry permutation table, probably derived somehow from pi */
@@ -53,21 +59,29 @@ static const unsigned char permute[256] = {
197,243,219, 71,229,165,156,119, 10,166, 32,104,254,127,193,173
};
-int rc2_setup(const unsigned char *key, int keylen, int rounds, symmetric_key *skey)
+ /**
+ Initialize the RC2 block cipher
+ @param key The symmetric key you wish to pass
+ @param keylen The key length in bytes
+ @param num_rounds The number of rounds desired (0 for default)
+ @param skey The key in as scheduled by this function.
+ @return CRYPT_OK if successful
+ */
+int rc2_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey)
{
unsigned *xkey = skey->rc2.xkey;
unsigned char tmp[128];
unsigned T8, TM;
int i, bits;
- _ARGCHK(key != NULL);
- _ARGCHK(skey != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(skey != NULL);
if (keylen < 8 || keylen > 128) {
return CRYPT_INVALID_KEYSIZE;
}
- if (rounds != 0 && rounds != 16) {
+ if (num_rounds != 0 && num_rounds != 16) {
return CRYPT_INVALID_ROUNDS;
}
@@ -96,7 +110,7 @@ int rc2_setup(const unsigned char *key, int keylen, int rounds, symmetric_key *s
xkey[i] = (unsigned)tmp[2*i] + ((unsigned)tmp[2*i+1] << 8);
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(tmp, sizeof(tmp));
#endif
@@ -106,29 +120,35 @@ int rc2_setup(const unsigned char *key, int keylen, int rounds, symmetric_key *s
/**********************************************************************\
* Encrypt an 8-byte block of plaintext using the given key. *
\**********************************************************************/
-#ifdef CLEAN_STACK
-static void _rc2_ecb_encrypt( const unsigned char *plain,
- unsigned char *cipher,
+/**
+ Encrypts a block of text with RC2
+ @param pt The input plaintext (8 bytes)
+ @param ct The output ciphertext (8 bytes)
+ @param skey The key as scheduled
+*/
+#ifdef LTC_CLEAN_STACK
+static void _rc2_ecb_encrypt( const unsigned char *pt,
+ unsigned char *ct,
symmetric_key *skey)
#else
-void rc2_ecb_encrypt( const unsigned char *plain,
- unsigned char *cipher,
+void rc2_ecb_encrypt( const unsigned char *pt,
+ unsigned char *ct,
symmetric_key *skey)
#endif
{
unsigned *xkey;
unsigned x76, x54, x32, x10, i;
- _ARGCHK(plain != NULL);
- _ARGCHK(cipher != NULL);
- _ARGCHK(skey != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
xkey = skey->rc2.xkey;
- x76 = ((unsigned)plain[7] << 8) + (unsigned)plain[6];
- x54 = ((unsigned)plain[5] << 8) + (unsigned)plain[4];
- x32 = ((unsigned)plain[3] << 8) + (unsigned)plain[2];
- x10 = ((unsigned)plain[1] << 8) + (unsigned)plain[0];
+ x76 = ((unsigned)pt[7] << 8) + (unsigned)pt[6];
+ x54 = ((unsigned)pt[5] << 8) + (unsigned)pt[4];
+ x32 = ((unsigned)pt[3] << 8) + (unsigned)pt[2];
+ x10 = ((unsigned)pt[1] << 8) + (unsigned)pt[0];
for (i = 0; i < 16; i++) {
x10 = (x10 + (x32 & ~x76) + (x54 & x76) + xkey[4*i+0]) & 0xFFFF;
@@ -151,22 +171,22 @@ void rc2_ecb_encrypt( const unsigned char *plain,
}
}
- cipher[0] = (unsigned char)x10;
- cipher[1] = (unsigned char)(x10 >> 8);
- cipher[2] = (unsigned char)x32;
- cipher[3] = (unsigned char)(x32 >> 8);
- cipher[4] = (unsigned char)x54;
- cipher[5] = (unsigned char)(x54 >> 8);
- cipher[6] = (unsigned char)x76;
- cipher[7] = (unsigned char)(x76 >> 8);
+ ct[0] = (unsigned char)x10;
+ ct[1] = (unsigned char)(x10 >> 8);
+ ct[2] = (unsigned char)x32;
+ ct[3] = (unsigned char)(x32 >> 8);
+ ct[4] = (unsigned char)x54;
+ ct[5] = (unsigned char)(x54 >> 8);
+ ct[6] = (unsigned char)x76;
+ ct[7] = (unsigned char)(x76 >> 8);
}
-#ifdef CLEAN_STACK
-void rc2_ecb_encrypt( const unsigned char *plain,
- unsigned char *cipher,
+#ifdef LTC_CLEAN_STACK
+void rc2_ecb_encrypt( const unsigned char *pt,
+ unsigned char *ct,
symmetric_key *skey)
{
- _rc2_ecb_encrypt(plain, cipher, skey);
+ _rc2_ecb_encrypt(pt, ct, skey);
burn_stack(sizeof(unsigned *) + sizeof(unsigned) * 5);
}
#endif
@@ -174,14 +194,19 @@ void rc2_ecb_encrypt( const unsigned char *plain,
/**********************************************************************\
* Decrypt an 8-byte block of ciphertext using the given key. *
\**********************************************************************/
-
-#ifdef CLEAN_STACK
-static void _rc2_ecb_decrypt( const unsigned char *cipher,
- unsigned char *plain,
+/**
+ Decrypts a block of text with RC2
+ @param ct The input ciphertext (8 bytes)
+ @param pt The output plaintext (8 bytes)
+ @param skey The key as scheduled
+*/
+#ifdef LTC_CLEAN_STACK
+static void _rc2_ecb_decrypt( const unsigned char *ct,
+ unsigned char *pt,
symmetric_key *skey)
#else
-void rc2_ecb_decrypt( const unsigned char *cipher,
- unsigned char *plain,
+void rc2_ecb_decrypt( const unsigned char *ct,
+ unsigned char *pt,
symmetric_key *skey)
#endif
{
@@ -189,16 +214,16 @@ void rc2_ecb_decrypt( const unsigned char *cipher,
unsigned *xkey;
int i;
- _ARGCHK(plain != NULL);
- _ARGCHK(cipher != NULL);
- _ARGCHK(skey != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
xkey = skey->rc2.xkey;
- x76 = ((unsigned)cipher[7] << 8) + (unsigned)cipher[6];
- x54 = ((unsigned)cipher[5] << 8) + (unsigned)cipher[4];
- x32 = ((unsigned)cipher[3] << 8) + (unsigned)cipher[2];
- x10 = ((unsigned)cipher[1] << 8) + (unsigned)cipher[0];
+ x76 = ((unsigned)ct[7] << 8) + (unsigned)ct[6];
+ x54 = ((unsigned)ct[5] << 8) + (unsigned)ct[4];
+ x32 = ((unsigned)ct[3] << 8) + (unsigned)ct[2];
+ x10 = ((unsigned)ct[1] << 8) + (unsigned)ct[0];
for (i = 15; i >= 0; i--) {
if (i == 4 || i == 10) {
@@ -221,26 +246,30 @@ void rc2_ecb_decrypt( const unsigned char *cipher,
x10 = (x10 - ((x32 & ~x76) + (x54 & x76) + xkey[4*i+0])) & 0xFFFF;
}
- plain[0] = (unsigned char)x10;
- plain[1] = (unsigned char)(x10 >> 8);
- plain[2] = (unsigned char)x32;
- plain[3] = (unsigned char)(x32 >> 8);
- plain[4] = (unsigned char)x54;
- plain[5] = (unsigned char)(x54 >> 8);
- plain[6] = (unsigned char)x76;
- plain[7] = (unsigned char)(x76 >> 8);
+ pt[0] = (unsigned char)x10;
+ pt[1] = (unsigned char)(x10 >> 8);
+ pt[2] = (unsigned char)x32;
+ pt[3] = (unsigned char)(x32 >> 8);
+ pt[4] = (unsigned char)x54;
+ pt[5] = (unsigned char)(x54 >> 8);
+ pt[6] = (unsigned char)x76;
+ pt[7] = (unsigned char)(x76 >> 8);
}
-#ifdef CLEAN_STACK
-void rc2_ecb_decrypt( const unsigned char *cipher,
- unsigned char *plain,
+#ifdef LTC_CLEAN_STACK
+void rc2_ecb_decrypt( const unsigned char *ct,
+ unsigned char *pt,
symmetric_key *skey)
{
- _rc2_ecb_decrypt(cipher, plain, skey);
+ _rc2_ecb_decrypt(ct, pt, skey);
burn_stack(sizeof(unsigned *) + sizeof(unsigned) * 4 + sizeof(int));
}
#endif
+/**
+ Performs a self-test of the RC2 block cipher
+ @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled
+*/
int rc2_test(void)
{
#ifndef LTC_TEST
@@ -292,9 +321,21 @@ int rc2_test(void)
#endif
}
+/** Terminate the context
+ @param skey The scheduled key
+*/
+void rc2_done(symmetric_key *skey)
+{
+}
+
+/**
+ Gets suitable key size
+ @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable.
+ @return CRYPT_OK if the input key size is acceptable.
+*/
int rc2_keysize(int *keysize)
{
- _ARGCHK(keysize != NULL);
+ LTC_ARGCHK(keysize != NULL);
if (*keysize < 8) {
return CRYPT_INVALID_KEYSIZE;
} else if (*keysize > 128) {
diff --git a/rc5.c b/src/ciphers/rc5.c
similarity index 70%
rename from rc5.c
rename to src/ciphers/rc5.c
index 124deb92..32f666fe 100644
--- a/rc5.c
+++ b/src/ciphers/rc5.c
@@ -6,16 +6,19 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* RC5 code by Tom St Denis */
+/**
+ @file rc5.c
+ RC5 code by Tom St Denis
+*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
#ifdef RC5
-const struct _cipher_descriptor rc5_desc =
+const struct ltc_cipher_descriptor rc5_desc =
{
"rc5",
2,
@@ -24,7 +27,9 @@ const struct _cipher_descriptor rc5_desc =
&rc5_ecb_encrypt,
&rc5_ecb_decrypt,
&rc5_test,
- &rc5_keysize
+ &rc5_done,
+ &rc5_keysize,
+ NULL, NULL, NULL, NULL, NULL, NULL, NULL
};
static const ulong32 stab[50] = {
@@ -37,7 +42,15 @@ static const ulong32 stab[50] = {
0x62482413UL, 0x007f9dccUL
};
-#ifdef CLEAN_STACK
+ /**
+ Initialize the RC5 block cipher
+ @param key The symmetric key you wish to pass
+ @param keylen The key length in bytes
+ @param num_rounds The number of rounds desired (0 for default)
+ @param skey The key in as scheduled by this function.
+ @return CRYPT_OK if successful
+ */
+#ifdef LTC_CLEAN_STACK
static int _rc5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey)
#else
int rc5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey)
@@ -45,8 +58,8 @@ int rc5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_ke
{
ulong32 L[64], *S, A, B, i, j, v, s, t, l;
- _ARGCHK(skey != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(skey != NULL);
+ LTC_ARGCHK(key != NULL);
/* test parameters */
if (num_rounds == 0) {
@@ -87,7 +100,7 @@ int rc5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_ke
s = 3 * MAX(t, j);
l = j;
for (A = B = i = j = v = 0; v < s; v++) {
- A = S[i] = ROL(S[i] + A + B, 3);
+ A = S[i] = ROLc(S[i] + A + B, 3);
B = L[j] = ROL(L[j] + A + B, (A+B));
if (++i == t) { i = 0; }
if (++j == l) { j = 0; }
@@ -95,7 +108,7 @@ int rc5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_ke
return CRYPT_OK;
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
int rc5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey)
{
int x;
@@ -105,26 +118,32 @@ int rc5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_ke
}
#endif
-#ifdef CLEAN_STACK
-static void _rc5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key)
+/**
+ Encrypts a block of text with RC5
+ @param pt The input plaintext (8 bytes)
+ @param ct The output ciphertext (8 bytes)
+ @param skey The key as scheduled
+*/
+#ifdef LTC_CLEAN_STACK
+static void _rc5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
#else
-void rc5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key)
+void rc5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
#endif
{
ulong32 A, B, *K;
int r;
- _ARGCHK(key != NULL);
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
LOAD32L(A, &pt[0]);
LOAD32L(B, &pt[4]);
- A += key->rc5.K[0];
- B += key->rc5.K[1];
- K = key->rc5.K + 2;
+ A += skey->rc5.K[0];
+ B += skey->rc5.K[1];
+ K = skey->rc5.K + 2;
- if ((key->rc5.rounds & 1) == 0) {
- for (r = 0; r < key->rc5.rounds; r += 2) {
+ if ((skey->rc5.rounds & 1) == 0) {
+ for (r = 0; r < skey->rc5.rounds; r += 2) {
A = ROL(A ^ B, B) + K[0];
B = ROL(B ^ A, A) + K[1];
A = ROL(A ^ B, B) + K[2];
@@ -132,7 +151,7 @@ void rc5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *
K += 4;
}
} else {
- for (r = 0; r < key->rc5.rounds; r++) {
+ for (r = 0; r < skey->rc5.rounds; r++) {
A = ROL(A ^ B, B) + K[0];
B = ROL(B ^ A, A) + K[1];
K += 2;
@@ -142,33 +161,39 @@ void rc5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *
STORE32L(B, &ct[4]);
}
-#ifdef CLEAN_STACK
-void rc5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key)
+#ifdef LTC_CLEAN_STACK
+void rc5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
{
- _rc5_ecb_encrypt(pt, ct, key);
+ _rc5_ecb_encrypt(pt, ct, skey);
burn_stack(sizeof(ulong32) * 2 + sizeof(int));
}
#endif
-#ifdef CLEAN_STACK
-static void _rc5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key)
+/**
+ Decrypts a block of text with RC5
+ @param ct The input ciphertext (8 bytes)
+ @param pt The output plaintext (8 bytes)
+ @param skey The key as scheduled
+*/
+#ifdef LTC_CLEAN_STACK
+static void _rc5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
#else
-void rc5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key)
+void rc5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
#endif
{
ulong32 A, B, *K;
int r;
- _ARGCHK(key != NULL);
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
LOAD32L(A, &ct[0]);
LOAD32L(B, &ct[4]);
- K = key->rc5.K + (key->rc5.rounds << 1);
+ K = skey->rc5.K + (skey->rc5.rounds << 1);
- if ((key->rc5.rounds & 1) == 0) {
+ if ((skey->rc5.rounds & 1) == 0) {
K -= 2;
- for (r = key->rc5.rounds - 1; r >= 0; r -= 2) {
+ for (r = skey->rc5.rounds - 1; r >= 0; r -= 2) {
B = ROR(B - K[3], A) ^ A;
A = ROR(A - K[2], B) ^ B;
B = ROR(B - K[1], A) ^ A;
@@ -176,26 +201,30 @@ void rc5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *
K -= 4;
}
} else {
- for (r = key->rc5.rounds - 1; r >= 0; r--) {
+ for (r = skey->rc5.rounds - 1; r >= 0; r--) {
B = ROR(B - K[1], A) ^ A;
A = ROR(A - K[0], B) ^ B;
K -= 2;
}
}
- A -= key->rc5.K[0];
- B -= key->rc5.K[1];
+ A -= skey->rc5.K[0];
+ B -= skey->rc5.K[1];
STORE32L(A, &pt[0]);
STORE32L(B, &pt[4]);
}
-#ifdef CLEAN_STACK
-void rc5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key)
+#ifdef LTC_CLEAN_STACK
+void rc5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
{
- _rc5_ecb_decrypt(ct, pt, key);
+ _rc5_ecb_decrypt(ct, pt, skey);
burn_stack(sizeof(ulong32) * 2 + sizeof(int));
}
#endif
+/**
+ Performs a self-test of the RC5 block cipher
+ @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled
+*/
int rc5_test(void)
{
#ifndef LTC_TEST
@@ -252,13 +281,25 @@ int rc5_test(void)
#endif
}
-int rc5_keysize(int *desired_keysize)
+/** Terminate the context
+ @param skey The scheduled key
+*/
+void rc5_done(symmetric_key *skey)
+{
+}
+
+/**
+ Gets suitable key size
+ @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable.
+ @return CRYPT_OK if the input key size is acceptable.
+*/
+int rc5_keysize(int *keysize)
{
- _ARGCHK(desired_keysize != NULL);
- if (*desired_keysize < 8) {
+ LTC_ARGCHK(keysize != NULL);
+ if (*keysize < 8) {
return CRYPT_INVALID_KEYSIZE;
- } else if (*desired_keysize > 128) {
- *desired_keysize = 128;
+ } else if (*keysize > 128) {
+ *keysize = 128;
}
return CRYPT_OK;
}
diff --git a/rc6.c b/src/ciphers/rc6.c
similarity index 74%
rename from rc6.c
rename to src/ciphers/rc6.c
index 62a2cf5f..996c0153 100644
--- a/rc6.c
+++ b/src/ciphers/rc6.c
@@ -6,15 +6,18 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* RC6 code by Tom St Denis */
-#include "mycrypt.h"
+/**
+ @file rc6.c
+ RC6 code by Tom St Denis
+*/
+#include "tomcrypt.h"
#ifdef RC6
-const struct _cipher_descriptor rc6_desc =
+const struct ltc_cipher_descriptor rc6_desc =
{
"rc6",
3,
@@ -23,7 +26,9 @@ const struct _cipher_descriptor rc6_desc =
&rc6_ecb_encrypt,
&rc6_ecb_decrypt,
&rc6_test,
- &rc6_keysize
+ &rc6_done,
+ &rc6_keysize,
+ NULL, NULL, NULL, NULL, NULL, NULL, NULL
};
static const ulong32 stab[44] = {
@@ -34,7 +39,15 @@ static const ulong32 stab[44] = {
0x7ed08883UL, 0x1d08023cUL, 0xbb3f7bf5UL, 0x5976f5aeUL, 0xf7ae6f67UL, 0x95e5e920UL, 0x341d62d9UL, 0xd254dc92UL,
0x708c564bUL, 0x0ec3d004UL, 0xacfb49bdUL, 0x4b32c376UL };
-#ifdef CLEAN_STACK
+ /**
+ Initialize the RC6 block cipher
+ @param key The symmetric key you wish to pass
+ @param keylen The key length in bytes
+ @param num_rounds The number of rounds desired (0 for default)
+ @param skey The key in as scheduled by this function.
+ @return CRYPT_OK if successful
+ */
+#ifdef LTC_CLEAN_STACK
static int _rc6_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey)
#else
int rc6_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey)
@@ -42,8 +55,8 @@ int rc6_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_ke
{
ulong32 L[64], S[50], A, B, i, j, v, s, l;
- _ARGCHK(key != NULL);
- _ARGCHK(skey != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(skey != NULL);
/* test parameters */
if (num_rounds != 0 && num_rounds != 20) {
@@ -77,7 +90,7 @@ int rc6_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_ke
s = 3 * MAX(44, j);
l = j;
for (A = B = i = j = v = 0; v < s; v++) {
- A = S[i] = ROL(S[i] + A + B, 3);
+ A = S[i] = ROLc(S[i] + A + B, 3);
B = L[j] = ROL(L[j] + A + B, (A+B));
if (++i == 44) { i = 0; }
if (++j == l) { j = 0; }
@@ -90,7 +103,7 @@ int rc6_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_ke
return CRYPT_OK;
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
int rc6_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey)
{
int x;
@@ -100,30 +113,36 @@ int rc6_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_ke
}
#endif
-#ifdef CLEAN_STACK
-static void _rc6_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key)
+/**
+ Encrypts a block of text with RC6
+ @param pt The input plaintext (16 bytes)
+ @param ct The output ciphertext (16 bytes)
+ @param skey The key as scheduled
+*/
+#ifdef LTC_CLEAN_STACK
+static void _rc6_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
#else
-void rc6_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key)
+void rc6_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
#endif
{
ulong32 a,b,c,d,t,u, *K;
int r;
- _ARGCHK(key != NULL);
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
LOAD32L(a,&pt[0]);LOAD32L(b,&pt[4]);LOAD32L(c,&pt[8]);LOAD32L(d,&pt[12]);
- b += key->rc6.K[0];
- d += key->rc6.K[1];
+ b += skey->rc6.K[0];
+ d += skey->rc6.K[1];
#define RND(a,b,c,d) \
- t = (b * (b + b + 1)); t = ROL(t, 5); \
- u = (d * (d + d + 1)); u = ROL(u, 5); \
+ t = (b * (b + b + 1)); t = ROLc(t, 5); \
+ u = (d * (d + d + 1)); u = ROLc(u, 5); \
a = ROL(a^t,u) + K[0]; \
c = ROL(c^u,t) + K[1]; K += 2;
- K = key->rc6.K + 2;
+ K = skey->rc6.K + 2;
for (r = 0; r < 20; r += 4) {
RND(a,b,c,d);
RND(b,c,d,a);
@@ -133,43 +152,49 @@ void rc6_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *
#undef RND
- a += key->rc6.K[42];
- c += key->rc6.K[43];
+ a += skey->rc6.K[42];
+ c += skey->rc6.K[43];
STORE32L(a,&ct[0]);STORE32L(b,&ct[4]);STORE32L(c,&ct[8]);STORE32L(d,&ct[12]);
}
-#ifdef CLEAN_STACK
-void rc6_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key)
+#ifdef LTC_CLEAN_STACK
+void rc6_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
{
- _rc6_ecb_encrypt(pt, ct, key);
+ _rc6_ecb_encrypt(pt, ct, skey);
burn_stack(sizeof(ulong32) * 6 + sizeof(int));
}
#endif
-#ifdef CLEAN_STACK
-static void _rc6_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key)
+/**
+ Decrypts a block of text with RC6
+ @param ct The input ciphertext (16 bytes)
+ @param pt The output plaintext (16 bytes)
+ @param skey The key as scheduled
+*/
+#ifdef LTC_CLEAN_STACK
+static void _rc6_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
#else
-void rc6_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key)
+void rc6_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
#endif
{
ulong32 a,b,c,d,t,u, *K;
int r;
- _ARGCHK(key != NULL);
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
LOAD32L(a,&ct[0]);LOAD32L(b,&ct[4]);LOAD32L(c,&ct[8]);LOAD32L(d,&ct[12]);
- a -= key->rc6.K[42];
- c -= key->rc6.K[43];
+ a -= skey->rc6.K[42];
+ c -= skey->rc6.K[43];
#define RND(a,b,c,d) \
- t = (b * (b + b + 1)); t = ROL(t, 5); \
- u = (d * (d + d + 1)); u = ROL(u, 5); \
+ t = (b * (b + b + 1)); t = ROLc(t, 5); \
+ u = (d * (d + d + 1)); u = ROLc(u, 5); \
c = ROR(c - K[1], t) ^ u; \
a = ROR(a - K[0], u) ^ t; K -= 2;
- K = key->rc6.K + 40;
+ K = skey->rc6.K + 40;
for (r = 0; r < 20; r += 4) {
RND(d,a,b,c);
@@ -180,19 +205,23 @@ void rc6_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *
#undef RND
- b -= key->rc6.K[0];
- d -= key->rc6.K[1];
+ b -= skey->rc6.K[0];
+ d -= skey->rc6.K[1];
STORE32L(a,&pt[0]);STORE32L(b,&pt[4]);STORE32L(c,&pt[8]);STORE32L(d,&pt[12]);
}
-#ifdef CLEAN_STACK
-void rc6_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key)
+#ifdef LTC_CLEAN_STACK
+void rc6_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
{
- _rc6_ecb_decrypt(ct, pt, key);
+ _rc6_ecb_decrypt(ct, pt, skey);
burn_stack(sizeof(ulong32) * 6 + sizeof(int));
}
#endif
+/**
+ Performs a self-test of the RC6 block cipher
+ @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled
+*/
int rc6_test(void)
{
#ifndef LTC_TEST
@@ -282,13 +311,25 @@ int rc6_test(void)
#endif
}
-int rc6_keysize(int *desired_keysize)
+/** Terminate the context
+ @param skey The scheduled key
+*/
+void rc6_done(symmetric_key *skey)
+{
+}
+
+/**
+ Gets suitable key size
+ @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable.
+ @return CRYPT_OK if the input key size is acceptable.
+*/
+int rc6_keysize(int *keysize)
{
- _ARGCHK(desired_keysize != NULL);
- if (*desired_keysize < 8) {
+ LTC_ARGCHK(keysize != NULL);
+ if (*keysize < 8) {
return CRYPT_INVALID_KEYSIZE;
- } else if (*desired_keysize > 128) {
- *desired_keysize = 128;
+ } else if (*keysize > 128) {
+ *keysize = 128;
}
return CRYPT_OK;
}
diff --git a/safer.c b/src/ciphers/safer/safer.c
similarity index 92%
rename from safer.c
rename to src/ciphers/safer/safer.c
index 580872a3..e6e073ad 100644
--- a/safer.c
+++ b/src/ciphers/safer/safer.c
@@ -6,7 +6,7 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
/*******************************************************************************
@@ -28,11 +28,11 @@
*
*******************************************************************************/
-#include <mycrypt.h>
+#include <tomcrypt.h>
#ifdef SAFER
-const struct _cipher_descriptor
+const struct ltc_cipher_descriptor
safer_k64_desc = {
"safer-k64",
8, 8, 8, 8, SAFER_K64_DEFAULT_NOF_ROUNDS,
@@ -40,7 +40,9 @@ const struct _cipher_descriptor
&safer_ecb_encrypt,
&safer_ecb_decrypt,
&safer_k64_test,
- &safer_64_keysize
+ &safer_done,
+ &safer_64_keysize,
+ NULL, NULL, NULL, NULL, NULL, NULL, NULL
},
safer_sk64_desc = {
@@ -50,7 +52,9 @@ const struct _cipher_descriptor
&safer_ecb_encrypt,
&safer_ecb_decrypt,
&safer_sk64_test,
- &safer_64_keysize
+ &safer_done,
+ &safer_64_keysize,
+ NULL, NULL, NULL, NULL, NULL, NULL, NULL
},
safer_k128_desc = {
@@ -60,7 +64,9 @@ const struct _cipher_descriptor
&safer_ecb_encrypt,
&safer_ecb_decrypt,
&safer_sk128_test,
- &safer_128_keysize
+ &safer_done,
+ &safer_128_keysize,
+ NULL, NULL, NULL, NULL, NULL, NULL, NULL
},
safer_sk128_desc = {
@@ -70,11 +76,13 @@ const struct _cipher_descriptor
&safer_ecb_encrypt,
&safer_ecb_decrypt,
&safer_sk128_test,
- &safer_128_keysize
+ &safer_done,
+ &safer_128_keysize,
+ NULL, NULL, NULL, NULL, NULL, NULL, NULL
};
/******************* Constants ************************************************/
-// #define TAB_LEN 256
+/* #define TAB_LEN 256 */
/******************* Assertions ***********************************************/
@@ -89,7 +97,7 @@ const struct _cipher_descriptor
/******************* Types ****************************************************/
extern const unsigned char safer_ebox[], safer_lbox[];
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static void _Safer_Expand_Userkey(const unsigned char *userkey_1,
const unsigned char *userkey_2,
unsigned int nof_rounds,
@@ -151,13 +159,13 @@ static void Safer_Expand_Userkey(const unsigned char *userkey_1,
}
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(ka, sizeof(ka));
zeromem(kb, sizeof(kb));
#endif
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static void Safer_Expand_Userkey(const unsigned char *userkey_1,
const unsigned char *userkey_2,
unsigned int nof_rounds,
@@ -171,8 +179,8 @@ static void Safer_Expand_Userkey(const unsigned char *userkey_1,
int safer_k64_setup(const unsigned char *key, int keylen, int numrounds, symmetric_key *skey)
{
- _ARGCHK(key != NULL);
- _ARGCHK(skey != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(skey != NULL);
if (numrounds != 0 && (numrounds < 6 || numrounds > SAFER_MAX_NOF_ROUNDS)) {
return CRYPT_INVALID_ROUNDS;
@@ -188,8 +196,8 @@ int safer_k64_setup(const unsigned char *key, int keylen, int numrounds, symmetr
int safer_sk64_setup(const unsigned char *key, int keylen, int numrounds, symmetric_key *skey)
{
- _ARGCHK(key != NULL);
- _ARGCHK(skey != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(skey != NULL);
if (numrounds != 0 && (numrounds < 6 || numrounds > SAFER_MAX_NOF_ROUNDS)) {
return CRYPT_INVALID_ROUNDS;
@@ -205,8 +213,8 @@ int safer_sk64_setup(const unsigned char *key, int keylen, int numrounds, symmet
int safer_k128_setup(const unsigned char *key, int keylen, int numrounds, symmetric_key *skey)
{
- _ARGCHK(key != NULL);
- _ARGCHK(skey != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(skey != NULL);
if (numrounds != 0 && (numrounds < 6 || numrounds > SAFER_MAX_NOF_ROUNDS)) {
return CRYPT_INVALID_ROUNDS;
@@ -222,8 +230,8 @@ int safer_k128_setup(const unsigned char *key, int keylen, int numrounds, symmet
int safer_sk128_setup(const unsigned char *key, int keylen, int numrounds, symmetric_key *skey)
{
- _ARGCHK(key != NULL);
- _ARGCHK(skey != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(skey != NULL);
if (numrounds != 0 && (numrounds < 6 || numrounds > SAFER_MAX_NOF_ROUNDS)) {
return CRYPT_INVALID_ROUNDS;
@@ -237,7 +245,7 @@ int safer_sk128_setup(const unsigned char *key, int keylen, int numrounds, symme
return CRYPT_OK;
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static void _safer_ecb_encrypt(const unsigned char *block_in,
unsigned char *block_out,
symmetric_key *skey)
@@ -250,9 +258,9 @@ void safer_ecb_encrypt(const unsigned char *block_in,
unsigned int round;
unsigned char *key;
- _ARGCHK(block_in != NULL);
- _ARGCHK(block_out != NULL);
- _ARGCHK(skey != NULL);
+ LTC_ARGCHK(block_in != NULL);
+ LTC_ARGCHK(block_out != NULL);
+ LTC_ARGCHK(skey != NULL);
key = skey->safer.key;
a = block_in[0]; b = block_in[1]; c = block_in[2]; d = block_in[3];
@@ -279,7 +287,7 @@ void safer_ecb_encrypt(const unsigned char *block_in,
block_out[6] = g & 0xFF; block_out[7] = h & 0xFF;
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
void safer_ecb_encrypt(const unsigned char *block_in,
unsigned char *block_out,
symmetric_key *skey)
@@ -289,7 +297,7 @@ void safer_ecb_encrypt(const unsigned char *block_in,
}
#endif
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static void _safer_ecb_decrypt(const unsigned char *block_in,
unsigned char *block_out,
symmetric_key *skey)
@@ -302,9 +310,9 @@ void safer_ecb_decrypt(const unsigned char *block_in,
unsigned int round;
unsigned char *key;
- _ARGCHK(block_in != NULL);
- _ARGCHK(block_out != NULL);
- _ARGCHK(skey != NULL);
+ LTC_ARGCHK(block_in != NULL);
+ LTC_ARGCHK(block_out != NULL);
+ LTC_ARGCHK(skey != NULL);
key = skey->safer.key;
a = block_in[0]; b = block_in[1]; c = block_in[2]; d = block_in[3];
@@ -332,7 +340,7 @@ void safer_ecb_decrypt(const unsigned char *block_in,
block_out[6] = g & 0xFF; block_out[7] = h & 0xFF;
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
void safer_ecb_decrypt(const unsigned char *block_in,
unsigned char *block_out,
symmetric_key *skey)
@@ -344,7 +352,7 @@ void safer_ecb_decrypt(const unsigned char *block_in,
int safer_64_keysize(int *keysize)
{
- _ARGCHK(keysize != NULL);
+ LTC_ARGCHK(keysize != NULL);
if (*keysize < 8) {
return CRYPT_INVALID_KEYSIZE;
} else {
@@ -355,7 +363,7 @@ int safer_64_keysize(int *keysize)
int safer_128_keysize(int *keysize)
{
- _ARGCHK(keysize != NULL);
+ LTC_ARGCHK(keysize != NULL);
if (*keysize < 16) {
return CRYPT_INVALID_KEYSIZE;
} else {
@@ -428,6 +436,13 @@ int safer_sk64_test(void)
#endif
}
+/** Terminate the context
+ @param skey The scheduled key
+*/
+void safer_done(symmetric_key *skey)
+{
+}
+
int safer_sk128_test(void)
{
#ifndef LTC_TEST
diff --git a/safer_tab.c b/src/ciphers/safer/safer_tab.c
similarity index 95%
rename from safer_tab.c
rename to src/ciphers/safer/safer_tab.c
index 06859db9..f63ba6cf 100644
--- a/safer_tab.c
+++ b/src/ciphers/safer/safer_tab.c
@@ -6,10 +6,15 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+/**
+ @file safer_tab.c
+ Tables for SAFER block ciphers
+*/
+
+#include "tomcrypt.h"
#if defined(SAFERP) || defined(SAFER)
diff --git a/saferp.c b/src/ciphers/safer/saferp.c
similarity index 90%
rename from saferp.c
rename to src/ciphers/safer/saferp.c
index 8415debe..17112f43 100644
--- a/saferp.c
+++ b/src/ciphers/safer/saferp.c
@@ -6,15 +6,18 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* SAFER+ Implementation by Tom St Denis */
-#include "mycrypt.h"
+/**
+ @file saferp.c
+ SAFER+ Implementation by Tom St Denis
+*/
+#include "tomcrypt.h"
#ifdef SAFERP
-const struct _cipher_descriptor saferp_desc =
+const struct ltc_cipher_descriptor saferp_desc =
{
"safer+",
4,
@@ -23,7 +26,9 @@ const struct _cipher_descriptor saferp_desc =
&saferp_ecb_encrypt,
&saferp_ecb_decrypt,
&saferp_test,
- &saferp_keysize
+ &saferp_done,
+ &saferp_keysize,
+ NULL, NULL, NULL, NULL, NULL, NULL, NULL
};
/* ROUND(b,i)
@@ -129,7 +134,7 @@ extern const unsigned char safer_ebox[], safer_lbox[];
iSHUF(b2, b); iPHT(b); \
iSHUF(b, b2); iPHT(b2);
-#ifdef SMALL_CODE
+#ifdef LTC_SMALL_CODE
static void _round(unsigned char *b, int i, symmetric_key *skey)
{
@@ -200,14 +205,22 @@ static const unsigned char safer_bias[33][16] = {
{ 53, 72, 156, 81, 47, 59, 85, 227, 192, 159, 216, 211, 243, 141, 177, 255},
{ 62, 220, 134, 119, 215, 166, 17, 251, 244, 186, 146, 145, 100, 131, 241, 51}};
+ /**
+ Initialize the SAFER+ block cipher
+ @param key The symmetric key you wish to pass
+ @param keylen The key length in bytes
+ @param num_rounds The number of rounds desired (0 for default)
+ @param skey The key in as scheduled by this function.
+ @return CRYPT_OK if successful
+ */
int saferp_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey)
{
unsigned x, y, z;
unsigned char t[33];
static const int rounds[3] = { 8, 12, 16 };
- _ARGCHK(key != NULL);
- _ARGCHK(skey != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(skey != NULL);
/* check arguments */
if (keylen != 16 && keylen != 24 && keylen != 32) {
@@ -305,20 +318,26 @@ int saferp_setup(const unsigned char *key, int keylen, int num_rounds, symmetric
}
skey->saferp.rounds = 16;
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(t, sizeof(t));
#endif
return CRYPT_OK;
}
+/**
+ Encrypts a block of text with SAFER+
+ @param pt The input plaintext (16 bytes)
+ @param ct The output ciphertext (16 bytes)
+ @param skey The key as scheduled
+*/
void saferp_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
{
unsigned char b[16];
int x;
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(skey != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
/* do eight rounds */
for (x = 0; x < 16; x++) {
@@ -362,19 +381,25 @@ void saferp_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_ke
ct[13] = (b[13] + skey->saferp.K[skey->saferp.rounds*2][13]) & 255;
ct[14] = (b[14] + skey->saferp.K[skey->saferp.rounds*2][14]) & 255;
ct[15] = b[15] ^ skey->saferp.K[skey->saferp.rounds*2][15];
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(b, sizeof(b));
#endif
}
+/**
+ Decrypts a block of text with SAFER+
+ @param ct The input ciphertext (16 bytes)
+ @param pt The output plaintext (16 bytes)
+ @param skey The key as scheduled
+*/
void saferp_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
{
unsigned char b[16];
int x;
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(skey != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
/* do eight rounds */
b[0] = ct[0] ^ skey->saferp.K[skey->saferp.rounds*2][0];
@@ -418,11 +443,15 @@ void saferp_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_ke
for (x = 0; x < 16; x++) {
pt[x] = b[x];
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(b, sizeof(b));
#endif
}
+/**
+ Performs a self-test of the SAFER+ block cipher
+ @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled
+*/
int saferp_test(void)
{
#ifndef LTC_TEST
@@ -489,18 +518,30 @@ int saferp_test(void)
#endif
}
-int saferp_keysize(int *desired_keysize)
+/** Terminate the context
+ @param skey The scheduled key
+*/
+void saferp_done(symmetric_key *skey)
+{
+}
+
+/**
+ Gets suitable key size
+ @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable.
+ @return CRYPT_OK if the input key size is acceptable.
+*/
+int saferp_keysize(int *keysize)
{
- _ARGCHK(desired_keysize != NULL);
+ LTC_ARGCHK(keysize != NULL);
- if (*desired_keysize < 16)
+ if (*keysize < 16)
return CRYPT_INVALID_KEYSIZE;
- if (*desired_keysize < 24) {
- *desired_keysize = 16;
- } else if (*desired_keysize < 32) {
- *desired_keysize = 24;
+ if (*keysize < 24) {
+ *keysize = 16;
+ } else if (*keysize < 32) {
+ *keysize = 24;
} else {
- *desired_keysize = 32;
+ *keysize = 32;
}
return CRYPT_OK;
}
diff --git a/skipjack.c b/src/ciphers/skipjack.c
similarity index 75%
rename from skipjack.c
rename to src/ciphers/skipjack.c
index a66efa1b..e2431afb 100644
--- a/skipjack.c
+++ b/src/ciphers/skipjack.c
@@ -6,15 +6,18 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* Skipjack Implementation by Tom St Denis */
-#include "mycrypt.h"
+/**
+ @file skipjack.c
+ Skipjack Implementation by Tom St Denis
+*/
+#include "tomcrypt.h"
#ifdef SKIPJACK
-const struct _cipher_descriptor skipjack_desc =
+const struct ltc_cipher_descriptor skipjack_desc =
{
"skipjack",
17,
@@ -23,7 +26,9 @@ const struct _cipher_descriptor skipjack_desc =
&skipjack_ecb_encrypt,
&skipjack_ecb_decrypt,
&skipjack_test,
- &skipjack_keysize
+ &skipjack_done,
+ &skipjack_keysize,
+ NULL, NULL, NULL, NULL, NULL, NULL, NULL
};
static const unsigned char sbox[256] = {
@@ -51,12 +56,20 @@ static const int keystep[] = { 1, 2, 3, 4, 5, 6, 7, 8, 9, 0 };
/* simple x - 1 (mod 10) in one step */
static const int ikeystep[] = { 9, 0, 1, 2, 3, 4, 5, 6, 7, 8 };
+ /**
+ Initialize the Skipjack block cipher
+ @param key The symmetric key you wish to pass
+ @param keylen The key length in bytes
+ @param num_rounds The number of rounds desired (0 for default)
+ @param skey The key in as scheduled by this function.
+ @return CRYPT_OK if successful
+ */
int skipjack_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey)
{
int x;
- _ARGCHK(key != NULL);
- _ARGCHK(skey != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(skey != NULL);
if (keylen != 10) {
return CRYPT_INVALID_KEYSIZE;
@@ -75,24 +88,24 @@ int skipjack_setup(const unsigned char *key, int keylen, int num_rounds, symmetr
}
#define RULE_A \
- tmp = g_func(w1, &kp, key->skipjack.key); \
+ tmp = g_func(w1, &kp, skey->skipjack.key); \
w1 = tmp ^ w4 ^ x; \
w4 = w3; w3 = w2; \
w2 = tmp;
#define RULE_B \
- tmp = g_func(w1, &kp, key->skipjack.key); \
+ tmp = g_func(w1, &kp, skey->skipjack.key); \
tmp1 = w4; w4 = w3; \
w3 = w1 ^ w2 ^ x; \
w1 = tmp1; w2 = tmp;
#define RULE_A1 \
tmp = w1 ^ w2 ^ x; \
- w1 = ig_func(w2, &kp, key->skipjack.key); \
+ w1 = ig_func(w2, &kp, skey->skipjack.key); \
w2 = w3; w3 = w4; w4 = tmp;
#define RULE_B1 \
- tmp = ig_func(w2, &kp, key->skipjack.key); \
+ tmp = ig_func(w2, &kp, skey->skipjack.key); \
w2 = tmp ^ w3 ^ x; \
w3 = w4; w4 = w1; w1 = tmp;
@@ -120,18 +133,24 @@ static unsigned ig_func(unsigned w, int *kp, unsigned char *key)
return ((unsigned)g1<<8)|(unsigned)g2;
}
-#ifdef CLEAN_STACK
-static void _skipjack_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key)
+/**
+ Encrypts a block of text with Skipjack
+ @param pt The input plaintext (8 bytes)
+ @param ct The output ciphertext (8 bytes)
+ @param skey The key as scheduled
+*/
+#ifdef LTC_CLEAN_STACK
+static void _skipjack_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
#else
-void skipjack_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key)
+void skipjack_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
#endif
{
unsigned w1,w2,w3,w4,tmp,tmp1;
int x, kp;
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
/* load block */
w1 = ((unsigned)pt[0]<<8)|pt[1];
@@ -166,26 +185,32 @@ void skipjack_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_
ct[6] = (w4>>8)&255; ct[7] = w4&255;
}
-#ifdef CLEAN_STACK
-void skipjack_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key)
+#ifdef LTC_CLEAN_STACK
+void skipjack_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
{
- _skipjack_ecb_encrypt(pt, ct, key);
+ _skipjack_ecb_encrypt(pt, ct, skey);
burn_stack(sizeof(unsigned) * 8 + sizeof(int) * 2);
}
#endif
-#ifdef CLEAN_STACK
-static void _skipjack_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key)
+/**
+ Decrypts a block of text with Skipjack
+ @param ct The input ciphertext (8 bytes)
+ @param pt The output plaintext (8 bytes)
+ @param skey The key as scheduled
+*/
+#ifdef LTC_CLEAN_STACK
+static void _skipjack_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
#else
-void skipjack_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key)
+void skipjack_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
#endif
{
unsigned w1,w2,w3,w4,tmp;
int x, kp;
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
/* load block */
w1 = ((unsigned)ct[0]<<8)|ct[1];
@@ -224,14 +249,18 @@ void skipjack_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_
pt[6] = (w4>>8)&255; pt[7] = w4&255;
}
-#ifdef CLEAN_STACK
-void skipjack_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key)
+#ifdef LTC_CLEAN_STACK
+void skipjack_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
{
- _skipjack_ecb_decrypt(ct, pt, key);
+ _skipjack_ecb_decrypt(ct, pt, skey);
burn_stack(sizeof(unsigned) * 7 + sizeof(int) * 2);
}
#endif
+/**
+ Performs a self-test of the Skipjack block cipher
+ @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled
+*/
int skipjack_test(void)
{
#ifndef LTC_TEST
@@ -276,13 +305,25 @@ int skipjack_test(void)
#endif
}
-int skipjack_keysize(int *desired_keysize)
+/** Terminate the context
+ @param skey The scheduled key
+*/
+void skipjack_done(symmetric_key *skey)
+{
+}
+
+/**
+ Gets suitable key size
+ @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable.
+ @return CRYPT_OK if the input key size is acceptable.
+*/
+int skipjack_keysize(int *keysize)
{
- _ARGCHK(desired_keysize != NULL);
- if (*desired_keysize < 10) {
+ LTC_ARGCHK(keysize != NULL);
+ if (*keysize < 10) {
return CRYPT_INVALID_KEYSIZE;
- } else if (*desired_keysize > 10) {
- *desired_keysize = 10;
+ } else if (*keysize > 10) {
+ *keysize = 10;
}
return CRYPT_OK;
}
diff --git a/twofish.c b/src/ciphers/twofish/twofish.c
similarity index 80%
rename from twofish.c
rename to src/ciphers/twofish/twofish.c
index b618b985..7dbe9b75 100644
--- a/twofish.c
+++ b/src/ciphers/twofish/twofish.c
@@ -6,11 +6,14 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* Implementation of Twofish by Tom St Denis */
-#include "mycrypt.h"
+ /**
+ @file twofish.c
+ Implementation of Twofish by Tom St Denis
+ */
+#include "tomcrypt.h"
#ifdef TWOFISH
@@ -21,7 +24,7 @@
#endif
#endif
-const struct _cipher_descriptor twofish_desc =
+const struct ltc_cipher_descriptor twofish_desc =
{
"twofish",
7,
@@ -30,7 +33,9 @@ const struct _cipher_descriptor twofish_desc =
&twofish_ecb_encrypt,
&twofish_ecb_decrypt,
&twofish_test,
- &twofish_keysize
+ &twofish_done,
+ &twofish_keysize,
+ NULL, NULL, NULL, NULL, NULL, NULL, NULL
};
/* the two polynomials */
@@ -86,7 +91,7 @@ static const unsigned char qbox[2][4][16] = {
};
/* computes S_i[x] */
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static ulong32 _sbox(int i, ulong32 x)
#else
static ulong32 sbox(int i, ulong32 x)
@@ -125,7 +130,7 @@ static ulong32 sbox(int i, ulong32 x)
return (ulong32)y;
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static ulong32 sbox(int i, ulong32 x)
{
ulong32 y;
@@ -133,7 +138,7 @@ static ulong32 sbox(int i, ulong32 x)
burn_stack(sizeof(unsigned char) * 11);
return y;
}
-#endif /* CLEAN_STACK */
+#endif /* LTC_CLEAN_STACK */
#endif /* TWOFISH_TABLES */
@@ -270,10 +275,10 @@ static void h_func(const unsigned char *in, unsigned char *out, unsigned char *M
/* for GCC we don't use pointer aliases */
#if defined(__GNUC__)
- #define S1 key->twofish.S[0]
- #define S2 key->twofish.S[1]
- #define S3 key->twofish.S[2]
- #define S4 key->twofish.S[3]
+ #define S1 skey->twofish.S[0]
+ #define S2 skey->twofish.S[1]
+ #define S3 skey->twofish.S[2]
+ #define S4 skey->twofish.S[3]
#endif
/* the G function */
@@ -282,7 +287,7 @@ static void h_func(const unsigned char *in, unsigned char *out, unsigned char *M
#else
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static ulong32 _g_func(ulong32 x, symmetric_key *key)
#else
static ulong32 g_func(ulong32 x, symmetric_key *key)
@@ -313,9 +318,9 @@ static ulong32 g_func(ulong32 x, symmetric_key *key)
return res;
}
-#define g1_func(x, key) g_func(ROL(x, 8), key)
+#define g1_func(x, key) g_func(ROLc(x, 8), key)
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static ulong32 g_func(ulong32 x, symmetric_key *key)
{
ulong32 y;
@@ -323,11 +328,19 @@ static ulong32 g_func(ulong32 x, symmetric_key *key)
burn_stack(sizeof(unsigned char) * 4 + sizeof(ulong32));
return y;
}
-#endif /* CLEAN_STACK */
+#endif /* LTC_CLEAN_STACK */
#endif /* TWOFISH_SMALL */
-#ifdef CLEAN_STACK
+ /**
+ Initialize the Twofish block cipher
+ @param key The symmetric key you wish to pass
+ @param keylen The key length in bytes
+ @param num_rounds The number of rounds desired (0 for default)
+ @param skey The key in as scheduled by this function.
+ @return CRYPT_OK if successful
+ */
+#ifdef LTC_CLEAN_STACK
static int _twofish_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey)
#else
int twofish_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey)
@@ -340,8 +353,8 @@ int twofish_setup(const unsigned char *key, int keylen, int num_rounds, symmetri
unsigned char tmp[4], tmp2[4], M[8*4];
ulong32 A, B;
- _ARGCHK(key != NULL);
- _ARGCHK(skey != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(skey != NULL);
/* invalid arguments? */
if (num_rounds != 16 && num_rounds != 0) {
@@ -386,13 +399,13 @@ int twofish_setup(const unsigned char *key, int keylen, int num_rounds, symmetri
}
h_func(tmp, tmp2, M, k, 1);
LOAD32L(B, tmp2);
- B = ROL(B, 8);
+ B = ROLc(B, 8);
/* K[2i] = A + B */
skey->twofish.K[x+x] = (A + B) & 0xFFFFFFFFUL;
/* K[2i+1] = (A + 2B) <<< 9 */
- skey->twofish.K[x+x+1] = ROL(B + B + A, 9);
+ skey->twofish.K[x+x+1] = ROLc(B + B + A, 9);
}
#ifndef TWOFISH_SMALL
@@ -437,7 +450,7 @@ int twofish_setup(const unsigned char *key, int keylen, int num_rounds, symmetri
return CRYPT_OK;
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
int twofish_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey)
{
int x;
@@ -447,10 +460,16 @@ int twofish_setup(const unsigned char *key, int keylen, int num_rounds, symmetri
}
#endif
-#ifdef CLEAN_STACK
-static void _twofish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key)
+/**
+ Encrypts a block of text with Twofish
+ @param pt The input plaintext (16 bytes)
+ @param ct The output ciphertext (16 bytes)
+ @param skey The key as scheduled
+*/
+#ifdef LTC_CLEAN_STACK
+static void _twofish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
#else
-void twofish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key)
+void twofish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
#endif
{
ulong32 a,b,c,d,ta,tb,tc,td,t1,t2, *k;
@@ -459,61 +478,67 @@ void twofish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_k
ulong32 *S1, *S2, *S3, *S4;
#endif
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
#if !defined(TWOFISH_SMALL) && !defined(__GNUC__)
- S1 = key->twofish.S[0];
- S2 = key->twofish.S[1];
- S3 = key->twofish.S[2];
- S4 = key->twofish.S[3];
+ S1 = skey->twofish.S[0];
+ S2 = skey->twofish.S[1];
+ S3 = skey->twofish.S[2];
+ S4 = skey->twofish.S[3];
#endif
LOAD32L(a,&pt[0]); LOAD32L(b,&pt[4]);
LOAD32L(c,&pt[8]); LOAD32L(d,&pt[12]);
- a ^= key->twofish.K[0];
- b ^= key->twofish.K[1];
- c ^= key->twofish.K[2];
- d ^= key->twofish.K[3];
+ a ^= skey->twofish.K[0];
+ b ^= skey->twofish.K[1];
+ c ^= skey->twofish.K[2];
+ d ^= skey->twofish.K[3];
- k = key->twofish.K + 8;
+ k = skey->twofish.K + 8;
for (r = 8; r != 0; --r) {
- t2 = g1_func(b, key);
- t1 = g_func(a, key) + t2;
- c = ROR(c ^ (t1 + k[0]), 1);
- d = ROL(d, 1) ^ (t2 + t1 + k[1]);
+ t2 = g1_func(b, skey);
+ t1 = g_func(a, skey) + t2;
+ c = RORc(c ^ (t1 + k[0]), 1);
+ d = ROLc(d, 1) ^ (t2 + t1 + k[1]);
- t2 = g1_func(d, key);
- t1 = g_func(c, key) + t2;
- a = ROR(a ^ (t1 + k[2]), 1);
- b = ROL(b, 1) ^ (t2 + t1 + k[3]);
+ t2 = g1_func(d, skey);
+ t1 = g_func(c, skey) + t2;
+ a = RORc(a ^ (t1 + k[2]), 1);
+ b = ROLc(b, 1) ^ (t2 + t1 + k[3]);
k += 4;
}
/* output with "undo last swap" */
- ta = c ^ key->twofish.K[4];
- tb = d ^ key->twofish.K[5];
- tc = a ^ key->twofish.K[6];
- td = b ^ key->twofish.K[7];
+ ta = c ^ skey->twofish.K[4];
+ tb = d ^ skey->twofish.K[5];
+ tc = a ^ skey->twofish.K[6];
+ td = b ^ skey->twofish.K[7];
/* store output */
STORE32L(ta,&ct[0]); STORE32L(tb,&ct[4]);
STORE32L(tc,&ct[8]); STORE32L(td,&ct[12]);
}
-#ifdef CLEAN_STACK
-void twofish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key)
+#ifdef LTC_CLEAN_STACK
+void twofish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
{
- _twofish_ecb_encrypt(pt, ct, key);
+ _twofish_ecb_encrypt(pt, ct, skey);
burn_stack(sizeof(ulong32) * 10 + sizeof(int));
}
#endif
-#ifdef CLEAN_STACK
-static void _twofish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key)
+/**
+ Decrypts a block of text with Twofish
+ @param ct The input ciphertext (16 bytes)
+ @param pt The output plaintext (16 bytes)
+ @param skey The key as scheduled
+*/
+#ifdef LTC_CLEAN_STACK
+static void _twofish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
#else
-void twofish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key)
+void twofish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
#endif
{
ulong32 a,b,c,d,ta,tb,tc,td,t1,t2, *k;
@@ -522,15 +547,15 @@ void twofish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_k
ulong32 *S1, *S2, *S3, *S4;
#endif
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
#if !defined(TWOFISH_SMALL) && !defined(__GNUC__)
- S1 = key->twofish.S[0];
- S2 = key->twofish.S[1];
- S3 = key->twofish.S[2];
- S4 = key->twofish.S[3];
+ S1 = skey->twofish.S[0];
+ S2 = skey->twofish.S[1];
+ S3 = skey->twofish.S[2];
+ S4 = skey->twofish.S[3];
#endif
/* load input */
@@ -538,44 +563,48 @@ void twofish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_k
LOAD32L(tc,&ct[8]); LOAD32L(td,&ct[12]);
/* undo undo final swap */
- a = tc ^ key->twofish.K[6];
- b = td ^ key->twofish.K[7];
- c = ta ^ key->twofish.K[4];
- d = tb ^ key->twofish.K[5];
+ a = tc ^ skey->twofish.K[6];
+ b = td ^ skey->twofish.K[7];
+ c = ta ^ skey->twofish.K[4];
+ d = tb ^ skey->twofish.K[5];
- k = key->twofish.K + 36;
+ k = skey->twofish.K + 36;
for (r = 8; r != 0; --r) {
- t2 = g1_func(d, key);
- t1 = g_func(c, key) + t2;
- a = ROL(a, 1) ^ (t1 + k[2]);
- b = ROR(b ^ (t2 + t1 + k[3]), 1);
+ t2 = g1_func(d, skey);
+ t1 = g_func(c, skey) + t2;
+ a = ROLc(a, 1) ^ (t1 + k[2]);
+ b = RORc(b ^ (t2 + t1 + k[3]), 1);
- t2 = g1_func(b, key);
+ t2 = g1_func(b, skey);
t1 = g_func(a, key) + t2;
- c = ROL(c, 1) ^ (t1 + k[0]);
- d = ROR(d ^ (t2 + t1 + k[1]), 1);
+ c = ROLc(c, 1) ^ (t1 + k[0]);
+ d = RORc(d ^ (t2 + t1 + k[1]), 1);
k -= 4;
}
/* pre-white */
- a ^= key->twofish.K[0];
- b ^= key->twofish.K[1];
- c ^= key->twofish.K[2];
- d ^= key->twofish.K[3];
+ a ^= skey->twofish.K[0];
+ b ^= skey->twofish.K[1];
+ c ^= skey->twofish.K[2];
+ d ^= skey->twofish.K[3];
/* store */
STORE32L(a, &pt[0]); STORE32L(b, &pt[4]);
STORE32L(c, &pt[8]); STORE32L(d, &pt[12]);
}
-#ifdef CLEAN_STACK
-void twofish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key)
+#ifdef LTC_CLEAN_STACK
+void twofish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
{
- _twofish_ecb_decrypt(ct, pt, key);
+ _twofish_ecb_decrypt(ct, pt, skey);
burn_stack(sizeof(ulong32) * 10 + sizeof(int));
}
#endif
+/**
+ Performs a self-test of the Twofish block cipher
+ @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled
+*/
int twofish_test(void)
{
#ifndef LTC_TEST
@@ -638,19 +667,31 @@ int twofish_test(void)
#endif
}
-int twofish_keysize(int *desired_keysize)
+/** Terminate the context
+ @param skey The scheduled key
+*/
+void twofish_done(symmetric_key *skey)
+{
+}
+
+/**
+ Gets suitable key size
+ @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable.
+ @return CRYPT_OK if the input key size is acceptable.
+*/
+int twofish_keysize(int *keysize)
{
- _ARGCHK(desired_keysize);
- if (*desired_keysize < 16)
+ LTC_ARGCHK(keysize);
+ if (*keysize < 16)
return CRYPT_INVALID_KEYSIZE;
- if (*desired_keysize < 24) {
- *desired_keysize = 16;
+ if (*keysize < 24) {
+ *keysize = 16;
return CRYPT_OK;
- } else if (*desired_keysize < 32) {
- *desired_keysize = 24;
+ } else if (*keysize < 32) {
+ *keysize = 24;
return CRYPT_OK;
} else {
- *desired_keysize = 32;
+ *keysize = 32;
return CRYPT_OK;
}
}
diff --git a/twofish_tab.c b/src/ciphers/twofish/twofish_tab.c
similarity index 99%
rename from twofish_tab.c
rename to src/ciphers/twofish/twofish_tab.c
index 5a2bb5b7..0bffade7 100644
--- a/twofish_tab.c
+++ b/src/ciphers/twofish/twofish_tab.c
@@ -6,9 +6,13 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+ /**
+ @file twofish_tab.c
+ Twofish tables, Tom St Denis
+ */
#ifdef TWOFISH_TABLES
/* pre generated 8x8 tables from the four 4x4s */
diff --git a/xtea.c b/src/ciphers/xtea.c
similarity index 51%
rename from xtea.c
rename to src/ciphers/xtea.c
index 14341490..98546df8 100644
--- a/xtea.c
+++ b/src/ciphers/xtea.c
@@ -6,14 +6,18 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+/**
+ @file xtea.c
+ Implementation of XTEA, Tom St Denis
+*/
+#include "tomcrypt.h"
#ifdef XTEA
-const struct _cipher_descriptor xtea_desc =
+const struct ltc_cipher_descriptor xtea_desc =
{
"xtea",
1,
@@ -22,15 +26,17 @@ const struct _cipher_descriptor xtea_desc =
&xtea_ecb_encrypt,
&xtea_ecb_decrypt,
&xtea_test,
- &xtea_keysize
+ &xtea_done,
+ &xtea_keysize,
+ NULL, NULL, NULL, NULL, NULL, NULL, NULL
};
int xtea_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey)
{
unsigned long x, sum, K[4];
- _ARGCHK(key != NULL);
- _ARGCHK(skey != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(skey != NULL);
/* check arguments */
if (keylen != 16) {
@@ -53,69 +59,85 @@ int xtea_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_k
skey->xtea.B[x] = (sum + K[(sum>>11)&3]) & 0xFFFFFFFFUL;
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(&K, sizeof(K));
#endif
return CRYPT_OK;
}
-void xtea_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key)
+/**
+ Encrypts a block of text with XTEA
+ @param pt The input plaintext (8 bytes)
+ @param ct The output ciphertext (8 bytes)
+ @param skey The key as scheduled
+*/
+void xtea_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)
{
unsigned long y, z;
int r;
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
LOAD32L(y, &pt[0]);
LOAD32L(z, &pt[4]);
for (r = 0; r < 32; r += 4) {
- y = (y + ((((z<<4)^(z>>5)) + z) ^ key->xtea.A[r])) & 0xFFFFFFFFUL;
- z = (z + ((((y<<4)^(y>>5)) + y) ^ key->xtea.B[r])) & 0xFFFFFFFFUL;
+ y = (y + ((((z<<4)^(z>>5)) + z) ^ skey->xtea.A[r])) & 0xFFFFFFFFUL;
+ z = (z + ((((y<<4)^(y>>5)) + y) ^ skey->xtea.B[r])) & 0xFFFFFFFFUL;
- y = (y + ((((z<<4)^(z>>5)) + z) ^ key->xtea.A[r+1])) & 0xFFFFFFFFUL;
- z = (z + ((((y<<4)^(y>>5)) + y) ^ key->xtea.B[r+1])) & 0xFFFFFFFFUL;
+ y = (y + ((((z<<4)^(z>>5)) + z) ^ skey->xtea.A[r+1])) & 0xFFFFFFFFUL;
+ z = (z + ((((y<<4)^(y>>5)) + y) ^ skey->xtea.B[r+1])) & 0xFFFFFFFFUL;
- y = (y + ((((z<<4)^(z>>5)) + z) ^ key->xtea.A[r+2])) & 0xFFFFFFFFUL;
- z = (z + ((((y<<4)^(y>>5)) + y) ^ key->xtea.B[r+2])) & 0xFFFFFFFFUL;
+ y = (y + ((((z<<4)^(z>>5)) + z) ^ skey->xtea.A[r+2])) & 0xFFFFFFFFUL;
+ z = (z + ((((y<<4)^(y>>5)) + y) ^ skey->xtea.B[r+2])) & 0xFFFFFFFFUL;
- y = (y + ((((z<<4)^(z>>5)) + z) ^ key->xtea.A[r+3])) & 0xFFFFFFFFUL;
- z = (z + ((((y<<4)^(y>>5)) + y) ^ key->xtea.B[r+3])) & 0xFFFFFFFFUL;
+ y = (y + ((((z<<4)^(z>>5)) + z) ^ skey->xtea.A[r+3])) & 0xFFFFFFFFUL;
+ z = (z + ((((y<<4)^(y>>5)) + y) ^ skey->xtea.B[r+3])) & 0xFFFFFFFFUL;
}
STORE32L(y, &ct[0]);
STORE32L(z, &ct[4]);
}
-void xtea_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key)
+/**
+ Decrypts a block of text with XTEA
+ @param ct The input ciphertext (8 bytes)
+ @param pt The output plaintext (8 bytes)
+ @param skey The key as scheduled
+*/
+void xtea_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey)
{
unsigned long y, z;
int r;
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(skey != NULL);
LOAD32L(y, &ct[0]);
LOAD32L(z, &ct[4]);
for (r = 31; r >= 0; r -= 4) {
- z = (z - ((((y<<4)^(y>>5)) + y) ^ key->xtea.B[r])) & 0xFFFFFFFFUL;
- y = (y - ((((z<<4)^(z>>5)) + z) ^ key->xtea.A[r])) & 0xFFFFFFFFUL;
+ z = (z - ((((y<<4)^(y>>5)) + y) ^ skey->xtea.B[r])) & 0xFFFFFFFFUL;
+ y = (y - ((((z<<4)^(z>>5)) + z) ^ skey->xtea.A[r])) & 0xFFFFFFFFUL;
- z = (z - ((((y<<4)^(y>>5)) + y) ^ key->xtea.B[r-1])) & 0xFFFFFFFFUL;
- y = (y - ((((z<<4)^(z>>5)) + z) ^ key->xtea.A[r-1])) & 0xFFFFFFFFUL;
+ z = (z - ((((y<<4)^(y>>5)) + y) ^ skey->xtea.B[r-1])) & 0xFFFFFFFFUL;
+ y = (y - ((((z<<4)^(z>>5)) + z) ^ skey->xtea.A[r-1])) & 0xFFFFFFFFUL;
- z = (z - ((((y<<4)^(y>>5)) + y) ^ key->xtea.B[r-2])) & 0xFFFFFFFFUL;
- y = (y - ((((z<<4)^(z>>5)) + z) ^ key->xtea.A[r-2])) & 0xFFFFFFFFUL;
+ z = (z - ((((y<<4)^(y>>5)) + y) ^ skey->xtea.B[r-2])) & 0xFFFFFFFFUL;
+ y = (y - ((((z<<4)^(z>>5)) + z) ^ skey->xtea.A[r-2])) & 0xFFFFFFFFUL;
- z = (z - ((((y<<4)^(y>>5)) + y) ^ key->xtea.B[r-3])) & 0xFFFFFFFFUL;
- y = (y - ((((z<<4)^(z>>5)) + z) ^ key->xtea.A[r-3])) & 0xFFFFFFFFUL;
+ z = (z - ((((y<<4)^(y>>5)) + y) ^ skey->xtea.B[r-3])) & 0xFFFFFFFFUL;
+ y = (y - ((((z<<4)^(z>>5)) + z) ^ skey->xtea.A[r-3])) & 0xFFFFFFFFUL;
}
STORE32L(y, &pt[0]);
STORE32L(z, &pt[4]);
}
+/**
+ Performs a self-test of the XTEA block cipher
+ @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled
+*/
int xtea_test(void)
{
#ifndef LTC_TEST
@@ -152,13 +174,25 @@ int xtea_test(void)
#endif
}
-int xtea_keysize(int *desired_keysize)
+/** Terminate the context
+ @param skey The scheduled key
+*/
+void xtea_done(symmetric_key *skey)
{
- _ARGCHK(desired_keysize != NULL);
- if (*desired_keysize < 16) {
+}
+
+/**
+ Gets suitable key size
+ @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable.
+ @return CRYPT_OK if the input key size is acceptable.
+*/
+int xtea_keysize(int *keysize)
+{
+ LTC_ARGCHK(keysize != NULL);
+ if (*keysize < 16) {
return CRYPT_INVALID_KEYSIZE;
}
- *desired_keysize = 16;
+ *keysize = 16;
return CRYPT_OK;
}
diff --git a/src/encauth/ccm/ccm_memory.c b/src/encauth/ccm/ccm_memory.c
new file mode 100644
index 00000000..34a254d9
--- /dev/null
+++ b/src/encauth/ccm/ccm_memory.c
@@ -0,0 +1,306 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file ccm_memory.c
+ CCM support, process a block of memory, Tom St Denis
+*/
+
+#ifdef CCM_MODE
+
+/**
+ CCM encrypt/decrypt and produce an authentication tag
+ @param cipher The index of the cipher desired
+ @param key The secret key to use
+ @param keylen The length of the secret key (octets)
+ @param nonce The session nonce [use once]
+ @param noncelen The length of the nonce
+ @param header The header for the session
+ @param headerlen The length of the header (octets)
+ @param pt [out] The plaintext
+ @param ptlen The length of the plaintext (octets)
+ @param ct [out] The ciphertext
+ @param tag [out] The destination tag
+ @param taglen [in/out] The max size and resulting size of the authentication tag
+ @param direction Encrypt or Decrypt direction (0 or 1)
+ @return CRYPT_OK if successful
+*/
+int ccm_memory(int cipher,
+ const unsigned char *key, unsigned long keylen,
+ const unsigned char *nonce, unsigned long noncelen,
+ const unsigned char *header, unsigned long headerlen,
+ unsigned char *pt, unsigned long ptlen,
+ unsigned char *ct,
+ unsigned char *tag, unsigned long *taglen,
+ int direction)
+{
+ unsigned char PAD[16], ctr[16], CTRPAD[16], b;
+ symmetric_key *skey;
+ int err;
+ unsigned long len, L, x, y, z, CTRlen;
+
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(nonce != NULL);
+ if (headerlen > 0) {
+ LTC_ARGCHK(header != NULL);
+ }
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(tag != NULL);
+ LTC_ARGCHK(taglen != NULL);
+
+#ifdef LTC_FAST
+ if (16 % sizeof(LTC_FAST_TYPE)) {
+ return CRYPT_INVALID_ARG;
+ }
+#endif
+
+ /* check cipher input */
+ if ((err = cipher_is_valid(cipher)) != CRYPT_OK) {
+ return err;
+ }
+ if (cipher_descriptor[cipher].block_length != 16) {
+ return CRYPT_INVALID_CIPHER;
+ }
+
+ /* make sure the taglen is even and <= 16 */
+ *taglen &= ~1;
+ if (*taglen > 16) {
+ *taglen = 16;
+ }
+
+ /* can't use < 4 */
+ if (*taglen < 4) {
+ return CRYPT_INVALID_ARG;
+ }
+
+ /* is there an accelerator? */
+ if (cipher_descriptor[cipher].accel_ccm_memory != NULL) {
+ cipher_descriptor[cipher].accel_ccm_memory(
+ key, keylen,
+ nonce, noncelen,
+ header, headerlen,
+ pt, ptlen,
+ ct,
+ tag, taglen,
+ direction);
+ return CRYPT_OK;
+ }
+
+ /* let's get the L value */
+ len = ptlen;
+ L = 0;
+ while (len) {
+ ++L;
+ len >>= 8;
+ }
+ if (L <= 1) {
+ L = 2;
+ }
+
+ /* increase L to match the nonce len */
+ noncelen = (noncelen > 13) ? 13 : noncelen;
+ if ((15 - noncelen) > L) {
+ L = 15 - noncelen;
+ }
+
+ /* allocate mem for the symmetric key */
+ skey = XMALLOC(sizeof(*skey));
+ if (skey == NULL) {
+ return CRYPT_MEM;
+ }
+
+ /* initialize the cipher */
+ if ((err = cipher_descriptor[cipher].setup(key, keylen, 0, skey)) != CRYPT_OK) {
+ XFREE(skey);
+ return err;
+ }
+
+ /* form B_0 == flags | Nonce N | l(m) */
+ x = 0;
+ PAD[x++] = ((headerlen > 0) ? (1<<6) : 0) |
+ (((*taglen - 2)>>1)<<3) |
+ (L-1);
+
+ /* nonce */
+ for (y = 0; y < (16 - (L + 1)); y++) {
+ PAD[x++] = nonce[y];
+ }
+
+ /* store len */
+ len = ptlen;
+
+ /* shift len so the upper bytes of len are the contents of the length */
+ for (y = L; y < 4; y++) {
+ len <<= 8;
+ }
+
+ /* store l(m) (only store 32-bits) */
+ for (y = 0; L > 4 && (L-y)>4; y++) {
+ PAD[x++] = 0;
+ }
+ for (; y < L; y++) {
+ PAD[x++] = (len >> 24) & 255;
+ len <<= 8;
+ }
+
+ /* encrypt PAD */
+ cipher_descriptor[cipher].ecb_encrypt(PAD, PAD, skey);
+
+ /* handle header */
+ if (headerlen > 0) {
+ x = 0;
+
+ /* store length */
+ if (headerlen < ((1UL<<16) - (1UL<<8))) {
+ PAD[x++] ^= (headerlen>>8) & 255;
+ PAD[x++] ^= headerlen & 255;
+ } else {
+ PAD[x++] ^= 0xFF;
+ PAD[x++] ^= 0xFE;
+ PAD[x++] ^= (headerlen>>24) & 255;
+ PAD[x++] ^= (headerlen>>16) & 255;
+ PAD[x++] ^= (headerlen>>8) & 255;
+ PAD[x++] ^= headerlen & 255;
+ }
+
+ /* now add the data */
+ for (y = 0; y < headerlen; y++) {
+ if (x == 16) {
+ /* full block so let's encrypt it */
+ cipher_descriptor[cipher].ecb_encrypt(PAD, PAD, skey);
+ x = 0;
+ }
+ PAD[x++] ^= header[y];
+ }
+
+ /* remainder? */
+ if (x != 0) {
+ cipher_descriptor[cipher].ecb_encrypt(PAD, PAD, skey);
+ }
+ }
+
+ /* setup the ctr counter */
+ x = 0;
+
+ /* flags */
+ ctr[x++] = L-1;
+
+ /* nonce */
+ for (y = 0; y < (16 - (L+1)); ++y) {
+ ctr[x++] = nonce[y];
+ }
+ /* offset */
+ while (x < 16) {
+ ctr[x++] = 0;
+ }
+
+ x = 0;
+ CTRlen = 16;
+
+ /* now handle the PT */
+ if (ptlen > 0) {
+ y = 0;
+#ifdef LTC_FAST
+ if (ptlen & ~15) {
+ if (direction == CCM_ENCRYPT) {
+ for (; y < (ptlen & ~15); y += 16) {
+ /* increment the ctr? */
+ for (z = 15; z > 15-L; z--) {
+ ctr[z] = (ctr[z] + 1) & 255;
+ if (ctr[z]) break;
+ }
+ cipher_descriptor[cipher].ecb_encrypt(ctr, CTRPAD, skey);
+
+ /* xor the PT against the pad first */
+ for (z = 0; z < 16; z += sizeof(LTC_FAST_TYPE)) {
+ *((LTC_FAST_TYPE*)(&PAD[z])) ^= *((LTC_FAST_TYPE*)(&pt[y+z]));
+ *((LTC_FAST_TYPE*)(&ct[y+z])) = *((LTC_FAST_TYPE*)(&pt[y+z])) ^ *((LTC_FAST_TYPE*)(&CTRPAD[z]));
+ }
+ cipher_descriptor[cipher].ecb_encrypt(PAD, PAD, skey);
+ }
+ } else {
+ for (; y < (ptlen & ~15); y += 16) {
+ /* increment the ctr? */
+ for (z = 15; z > 15-L; z--) {
+ ctr[z] = (ctr[z] + 1) & 255;
+ if (ctr[z]) break;
+ }
+ cipher_descriptor[cipher].ecb_encrypt(ctr, CTRPAD, skey);
+
+ /* xor the PT against the pad last */
+ for (z = 0; z < 16; z += sizeof(LTC_FAST_TYPE)) {
+ *((LTC_FAST_TYPE*)(&pt[y+z])) = *((LTC_FAST_TYPE*)(&ct[y+z])) ^ *((LTC_FAST_TYPE*)(&CTRPAD[z]));
+ *((LTC_FAST_TYPE*)(&PAD[z])) ^= *((LTC_FAST_TYPE*)(&pt[y+z]));
+ }
+ cipher_descriptor[cipher].ecb_encrypt(PAD, PAD, skey);
+ }
+ }
+ }
+#endif
+
+ for (; y < ptlen; y++) {
+ /* increment the ctr? */
+ if (CTRlen == 16) {
+ for (z = 15; z > 15-L; z--) {
+ ctr[z] = (ctr[z] + 1) & 255;
+ if (ctr[z]) break;
+ }
+ cipher_descriptor[cipher].ecb_encrypt(ctr, CTRPAD, skey);
+ CTRlen = 0;
+ }
+
+ /* if we encrypt we add the bytes to the MAC first */
+ if (direction == CCM_ENCRYPT) {
+ b = pt[y];
+ ct[y] = b ^ CTRPAD[CTRlen++];
+ } else {
+ b = ct[y] ^ CTRPAD[CTRlen++];
+ pt[y] = b;
+ }
+
+ if (x == 16) {
+ cipher_descriptor[cipher].ecb_encrypt(PAD, PAD, skey);
+ x = 0;
+ }
+ PAD[x++] ^= b;
+ }
+
+ if (x != 0) {
+ cipher_descriptor[cipher].ecb_encrypt(PAD, PAD, skey);
+ }
+ }
+
+ /* setup CTR for the TAG */
+ ctr[14] = ctr[15] = 0x00;
+ cipher_descriptor[cipher].ecb_encrypt(ctr, CTRPAD, skey);
+ cipher_descriptor[cipher].done(skey);
+
+ /* store the TAG */
+ for (x = 0; x < 16 && x < *taglen; x++) {
+ tag[x] = PAD[x] ^ CTRPAD[x];
+ }
+ *taglen = x;
+
+#ifdef LTC_CLEAN_STACK
+ zeromem(skey, sizeof(*skey));
+ zeromem(B, sizeof(B));
+ zeromem(PAD, sizeof(PAD));
+ zeromem(CTRPAD, sizeof(CTRPAD));
+#endif
+
+ XFREE(skey);
+
+ return CRYPT_OK;
+}
+
+#endif
diff --git a/src/encauth/ccm/ccm_test.c b/src/encauth/ccm/ccm_test.c
new file mode 100644
index 00000000..ee78523c
--- /dev/null
+++ b/src/encauth/ccm/ccm_test.c
@@ -0,0 +1,170 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file ccm_test.c
+ CCM support, process a block of memory, Tom St Denis
+*/
+
+#ifdef CCM_MODE
+
+int ccm_test(void)
+{
+#ifndef LTC_TEST
+ return CRYPT_NOP;
+#else
+ static const struct {
+ unsigned char key[16];
+ unsigned char nonce[16];
+ int noncelen;
+ unsigned char header[64];
+ int headerlen;
+ unsigned char pt[64];
+ int ptlen;
+ unsigned char ct[64];
+ unsigned char tag[16];
+ int taglen;
+ } tests[] = {
+
+/* 13 byte nonce, 8 byte auth, 23 byte pt */
+{
+ { 0xC0, 0xC1, 0xC2, 0xC3, 0xC4, 0xC5, 0xC6, 0xC7,
+ 0xC8, 0xC9, 0xCA, 0xCB, 0xCC, 0xCD, 0xCE, 0xCF },
+ { 0x00, 0x00, 0x00, 0x03, 0x02, 0x01, 0x00, 0xA0,
+ 0xA1, 0xA2, 0xA3, 0xA4, 0xA5 },
+ 13,
+ { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07 },
+ 8,
+ { 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E, 0x0F,
+ 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
+ 0x18, 0x19, 0x1A, 0x1B, 0x1C, 0x1D, 0x1E },
+ 23,
+ { 0x58, 0x8C, 0x97, 0x9A, 0x61, 0xC6, 0x63, 0xD2,
+ 0xF0, 0x66, 0xD0, 0xC2, 0xC0, 0xF9, 0x89, 0x80,
+ 0x6D, 0x5F, 0x6B, 0x61, 0xDA, 0xC3, 0x84 },
+ { 0x17, 0xe8, 0xd1, 0x2c, 0xfd, 0xf9, 0x26, 0xe0 },
+ 8
+},
+
+/* 13 byte nonce, 12 byte header, 19 byte pt */
+{
+ { 0xC0, 0xC1, 0xC2, 0xC3, 0xC4, 0xC5, 0xC6, 0xC7,
+ 0xC8, 0xC9, 0xCA, 0xCB, 0xCC, 0xCD, 0xCE, 0xCF },
+ { 0x00, 0x00, 0x00, 0x06, 0x05, 0x04, 0x03, 0xA0,
+ 0xA1, 0xA2, 0xA3, 0xA4, 0xA5 },
+ 13,
+ { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
+ 0x08, 0x09, 0x0A, 0x0B },
+ 12,
+ { 0x0C, 0x0D, 0x0E, 0x0F, 0x10, 0x11, 0x12, 0x13,
+ 0x14, 0x15, 0x16, 0x17, 0x18, 0x19, 0x1A, 0x1B,
+ 0x1C, 0x1D, 0x1E },
+ 19,
+ { 0xA2, 0x8C, 0x68, 0x65, 0x93, 0x9A, 0x9A, 0x79,
+ 0xFA, 0xAA, 0x5C, 0x4C, 0x2A, 0x9D, 0x4A, 0x91,
+ 0xCD, 0xAC, 0x8C },
+ { 0x96, 0xC8, 0x61, 0xB9, 0xC9, 0xE6, 0x1E, 0xF1 },
+ 8
+},
+
+/* supplied by Brian Gladman */
+{
+ { 0x40, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47,
+ 0x48, 0x49, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f },
+ { 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16 },
+ 7,
+ { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07 },
+ 8,
+ { 0x20, 0x21, 0x22, 0x23 },
+ 4,
+ { 0x71, 0x62, 0x01, 0x5b },
+ { 0x4d, 0xac, 0x25, 0x5d },
+ 4
+},
+
+{
+ { 0xc9, 0x7c, 0x1f, 0x67, 0xce, 0x37, 0x11, 0x85,
+ 0x51, 0x4a, 0x8a, 0x19, 0xf2, 0xbd, 0xd5, 0x2f },
+ { 0x00, 0x50, 0x30, 0xf1, 0x84, 0x44, 0x08, 0xb5,
+ 0x03, 0x97, 0x76, 0xe7, 0x0c },
+ 13,
+ { 0x08, 0x40, 0x0f, 0xd2, 0xe1, 0x28, 0xa5, 0x7c,
+ 0x50, 0x30, 0xf1, 0x84, 0x44, 0x08, 0xab, 0xae,
+ 0xa5, 0xb8, 0xfc, 0xba, 0x00, 0x00 },
+ 22,
+ { 0xf8, 0xba, 0x1a, 0x55, 0xd0, 0x2f, 0x85, 0xae,
+ 0x96, 0x7b, 0xb6, 0x2f, 0xb6, 0xcd, 0xa8, 0xeb,
+ 0x7e, 0x78, 0xa0, 0x50 },
+ 20,
+ { 0xf3, 0xd0, 0xa2, 0xfe, 0x9a, 0x3d, 0xbf, 0x23,
+ 0x42, 0xa6, 0x43, 0xe4, 0x32, 0x46, 0xe8, 0x0c,
+ 0x3c, 0x04, 0xd0, 0x19 },
+ { 0x78, 0x45, 0xce, 0x0b, 0x16, 0xf9, 0x76, 0x23 },
+ 8
+},
+
+};
+ unsigned long taglen, x;
+ unsigned char buf[64], buf2[64], tag2[16], tag[16];
+ int err, idx;
+
+ idx = find_cipher("aes");
+ if (idx == -1) {
+ idx = find_cipher("rijndael");
+ if (idx == -1) {
+ return CRYPT_NOP;
+ }
+ }
+
+ for (x = 0; x < (sizeof(tests)/sizeof(tests[0])); x++) {
+ taglen = tests[x].taglen;
+ if ((err = ccm_memory(idx,
+ tests[x].key, 16,
+ tests[x].nonce, tests[x].noncelen,
+ tests[x].header, tests[x].headerlen,
+ (unsigned char*)tests[x].pt, tests[x].ptlen,
+ buf,
+ tag, &taglen, 0)) != CRYPT_OK) {
+ return err;
+ }
+
+ if (memcmp(buf, tests[x].ct, tests[x].ptlen)) {
+ return CRYPT_FAIL_TESTVECTOR;
+ }
+ if (memcmp(tag, tests[x].tag, tests[x].taglen)) {
+ return CRYPT_FAIL_TESTVECTOR;
+ }
+
+ if ((err = ccm_memory(idx,
+ tests[x].key, 16,
+ tests[x].nonce, tests[x].noncelen,
+ tests[x].header, tests[x].headerlen,
+ buf2, tests[x].ptlen,
+ buf,
+ tag2, &taglen, 1 )) != CRYPT_OK) {
+ return err;
+ }
+
+ if (memcmp(buf2, tests[x].pt, tests[x].ptlen)) {
+ return CRYPT_FAIL_TESTVECTOR;
+ }
+ if (memcmp(tag2, tests[x].tag, tests[x].taglen)) {
+ return CRYPT_FAIL_TESTVECTOR;
+ }
+
+
+ }
+ return CRYPT_OK;
+#endif
+}
+
+#endif
diff --git a/src/encauth/eax/eax_addheader.c b/src/encauth/eax/eax_addheader.c
new file mode 100644
index 00000000..30040252
--- /dev/null
+++ b/src/encauth/eax/eax_addheader.c
@@ -0,0 +1,34 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+/**
+ @file eax_addheader.c
+ EAX implementation, add meta-data, by Tom St Denis
+*/
+#include "tomcrypt.h"
+
+#ifdef EAX_MODE
+
+/**
+ add header (metadata) to the stream
+ @param eax The current EAX state
+ @param header The header (meta-data) data you wish to add to the state
+ @param length The length of the header data
+ @return CRYPT_OK if successful
+*/
+int eax_addheader(eax_state *eax, const unsigned char *header,
+ unsigned long length)
+{
+ LTC_ARGCHK(eax != NULL);
+ LTC_ARGCHK(header != NULL);
+ return omac_process(&eax->headeromac, header, length);
+}
+
+#endif
diff --git a/eax_decrypt.c b/src/encauth/eax/eax_decrypt.c
similarity index 51%
rename from eax_decrypt.c
rename to src/encauth/eax/eax_decrypt.c
index de7c290e..8711d2d1 100644
--- a/eax_decrypt.c
+++ b/src/encauth/eax/eax_decrypt.c
@@ -6,21 +6,33 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* EAX Implementation by Tom St Denis */
-#include "mycrypt.h"
+/**
+ @file eax_decrypt.c
+ EAX implementation, decrypt block, by Tom St Denis
+*/
+#include "tomcrypt.h"
#ifdef EAX_MODE
-int eax_decrypt(eax_state *eax, const unsigned char *ct, unsigned char *pt, unsigned long length)
+/**
+ Decrypt data with the EAX protocol
+ @param eax The EAX state
+ @param ct The ciphertext
+ @param pt [out] The plaintext
+ @param length The length (octets) of the ciphertext
+ @return CRYPT_OK if successful
+*/
+int eax_decrypt(eax_state *eax, const unsigned char *ct, unsigned char *pt,
+ unsigned long length)
{
int err;
- _ARGCHK(eax != NULL);
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
+ LTC_ARGCHK(eax != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
/* omac ciphertext */
if ((err = omac_process(&eax->ctomac, ct, length)) != CRYPT_OK) {
diff --git a/eax_decrypt_verify_memory.c b/src/encauth/eax/eax_decrypt_verify_memory.c
similarity index 50%
rename from eax_decrypt_verify_memory.c
rename to src/encauth/eax/eax_decrypt_verify_memory.c
index 782d4f64..3fcab46b 100644
--- a/eax_decrypt_verify_memory.c
+++ b/src/encauth/eax/eax_decrypt_verify_memory.c
@@ -6,14 +6,34 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* EAX Implementation by Tom St Denis */
-#include "mycrypt.h"
+/**
+ @file eax_decrypt_verify_memory.c
+ EAX implementation, decrypt block of memory, by Tom St Denis
+*/
+#include "tomcrypt.h"
#ifdef EAX_MODE
+/**
+ Decrypt a block of memory and verify the provided MAC tag with EAX
+ @param cipher The index of the cipher desired
+ @param key The secret key
+ @param keylen The length of the key (octets)
+ @param nonce The nonce data (use once) for the session
+ @param noncelen The length of the nonce data.
+ @param header The session header data
+ @param headerlen The length of the header (octets)
+ @param ct The ciphertext
+ @param ctlen The length of the ciphertext (octets)
+ @param pt [out] The plaintext
+ @param tag The authentication tag provided by the encoder
+ @param taglen [in/out] The length of the tag (octets)
+ @param stat [out] The result of the decryption (1==valid tag, 0==invalid)
+ @return CRYPT_OK if successful regardless of the resulting tag comparison
+*/
int eax_decrypt_verify_memory(int cipher,
const unsigned char *key, unsigned long keylen,
const unsigned char *nonce, unsigned long noncelen,
@@ -21,21 +41,25 @@ int eax_decrypt_verify_memory(int cipher,
const unsigned char *ct, unsigned long ctlen,
unsigned char *pt,
unsigned char *tag, unsigned long taglen,
- int *res)
+ int *stat)
{
int err;
eax_state *eax;
unsigned char *buf;
unsigned long buflen;
- _ARGCHK(res != NULL);
+ LTC_ARGCHK(stat != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(tag != NULL);
/* default to zero */
- *res = 0;
+ *stat = 0;
/* allocate ram */
buf = XMALLOC(taglen);
- eax = XMALLOC(sizeof(eax_state));
+ eax = XMALLOC(sizeof(*eax));
if (eax == NULL || buf == NULL) {
if (eax != NULL) {
XFREE(eax);
@@ -47,28 +71,28 @@ int eax_decrypt_verify_memory(int cipher,
}
if ((err = eax_init(eax, cipher, key, keylen, nonce, noncelen, header, headerlen)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((err = eax_decrypt(eax, ct, pt, ctlen)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
buflen = taglen;
if ((err = eax_done(eax, buf, &buflen)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* compare tags */
if (buflen >= taglen && memcmp(buf, tag, taglen) == 0) {
- *res = 1;
+ *stat = 1;
}
err = CRYPT_OK;
-__ERR:
-#ifdef CLEAN_STACK
+LBL_ERR:
+#ifdef LTC_CLEAN_STACK
zeromem(buf, taglen);
- zeromem(eax, sizeof(eax_state));
+ zeromem(eax, sizeof(*eax));
#endif
XFREE(eax);
diff --git a/eax_done.c b/src/encauth/eax/eax_done.c
similarity index 66%
rename from eax_done.c
rename to src/encauth/eax/eax_done.c
index 037251e7..1d436517 100644
--- a/eax_done.c
+++ b/src/encauth/eax/eax_done.c
@@ -6,23 +6,33 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* EAX Implementation by Tom St Denis */
-#include "mycrypt.h"
+/**
+ @file eax_done.c
+ EAX implementation, terminate session, by Tom St Denis
+*/
+#include "tomcrypt.h"
#ifdef EAX_MODE
+/**
+ Terminate an EAX session and get the tag.
+ @param eax The EAX state
+ @param tag [out] The destination of the authentication tag
+ @param taglen [in/out] The max length and resulting length of the authentication tag
+ @return CRYPT_OK if successful
+*/
int eax_done(eax_state *eax, unsigned char *tag, unsigned long *taglen)
{
int err;
unsigned char *headermac, *ctmac;
unsigned long x, len;
- _ARGCHK(eax != NULL);
- _ARGCHK(tag != NULL);
- _ARGCHK(taglen != NULL);
+ LTC_ARGCHK(eax != NULL);
+ LTC_ARGCHK(tag != NULL);
+ LTC_ARGCHK(taglen != NULL);
/* allocate ram */
headermac = XMALLOC(MAXBLOCKSIZE);
@@ -41,7 +51,7 @@ int eax_done(eax_state *eax, unsigned char *tag, unsigned long *taglen)
/* finish ctomac */
len = MAXBLOCKSIZE;
if ((err = omac_done(&eax->ctomac, ctmac, &len)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* finish headeromac */
@@ -49,7 +59,12 @@ int eax_done(eax_state *eax, unsigned char *tag, unsigned long *taglen)
/* note we specifically don't reset len so the two lens are minimal */
if ((err = omac_done(&eax->headeromac, headermac, &len)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
+ }
+
+ /* terminate the CTR chain */
+ if ((err = ctr_done(&eax->ctr)) != CRYPT_OK) {
+ goto LBL_ERR;
}
/* compute N xor H xor C */
@@ -59,8 +74,8 @@ int eax_done(eax_state *eax, unsigned char *tag, unsigned long *taglen)
*taglen = x;
err = CRYPT_OK;
-__ERR:
-#ifdef CLEAN_STACK
+LBL_ERR:
+#ifdef LTC_CLEAN_STACK
zeromem(ctmac, MAXBLOCKSIZE);
zeromem(headermac, MAXBLOCKSIZE);
zeromem(eax, sizeof(*eax));
diff --git a/eax_encrypt.c b/src/encauth/eax/eax_encrypt.c
similarity index 50%
rename from eax_encrypt.c
rename to src/encauth/eax/eax_encrypt.c
index 1b4930e9..da23a8ce 100644
--- a/eax_encrypt.c
+++ b/src/encauth/eax/eax_encrypt.c
@@ -6,21 +6,33 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* EAX Implementation by Tom St Denis */
-#include "mycrypt.h"
+/**
+ @file eax_encrypt.c
+ EAX implementation, encrypt block by Tom St Denis
+*/
+#include "tomcrypt.h"
#ifdef EAX_MODE
-int eax_encrypt(eax_state *eax, const unsigned char *pt, unsigned char *ct, unsigned long length)
+/**
+ Encrypt with EAX a block of data.
+ @param eax The EAX state
+ @param pt The plaintext to encrypt
+ @param ct [out] The ciphertext as encrypted
+ @param length The length of the plaintext (octets)
+ @return CRYPT_OK if successful
+*/
+int eax_encrypt(eax_state *eax, const unsigned char *pt, unsigned char *ct,
+ unsigned long length)
{
int err;
- _ARGCHK(eax != NULL);
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
+ LTC_ARGCHK(eax != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
/* encrypt */
if ((err = ctr_encrypt(pt, ct, length, &eax->ctr)) != CRYPT_OK) {
diff --git a/src/encauth/eax/eax_encrypt_authenticate_memory.c b/src/encauth/eax/eax_encrypt_authenticate_memory.c
new file mode 100644
index 00000000..8a601cf8
--- /dev/null
+++ b/src/encauth/eax/eax_encrypt_authenticate_memory.c
@@ -0,0 +1,78 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+
+/**
+ @file eax_encrypt_authenticate_memory.c
+ EAX implementation, encrypt a block of memory, by Tom St Denis
+*/
+#include "tomcrypt.h"
+
+#ifdef EAX_MODE
+
+/**
+ EAX encrypt and produce an authentication tag
+ @param cipher The index of the cipher desired
+ @param key The secret key to use
+ @param keylen The length of the secret key (octets)
+ @param nonce The session nonce [use once]
+ @param noncelen The length of the nonce
+ @param header The header for the session
+ @param headerlen The length of the header (octets)
+ @param pt The plaintext
+ @param ptlen The length of the plaintext (octets)
+ @param ct [out] The ciphertext
+ @param tag [out] The destination tag
+ @param taglen [in/out] The max size and resulting size of the authentication tag
+ @return CRYPT_OK if successful
+*/
+int eax_encrypt_authenticate_memory(int cipher,
+ const unsigned char *key, unsigned long keylen,
+ const unsigned char *nonce, unsigned long noncelen,
+ const unsigned char *header, unsigned long headerlen,
+ const unsigned char *pt, unsigned long ptlen,
+ unsigned char *ct,
+ unsigned char *tag, unsigned long *taglen)
+{
+ int err;
+ eax_state *eax;
+
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(tag != NULL);
+ LTC_ARGCHK(taglen != NULL);
+
+ eax = XMALLOC(sizeof(*eax));
+
+ if ((err = eax_init(eax, cipher, key, keylen, nonce, noncelen, header, headerlen)) != CRYPT_OK) {
+ goto LBL_ERR;
+ }
+
+ if ((err = eax_encrypt(eax, pt, ct, ptlen)) != CRYPT_OK) {
+ goto LBL_ERR;
+ }
+
+ if ((err = eax_done(eax, tag, taglen)) != CRYPT_OK) {
+ goto LBL_ERR;
+ }
+
+ err = CRYPT_OK;
+LBL_ERR:
+#ifdef LTC_CLEAN_STACK
+ zeromem(eax, sizeof(*eax));
+#endif
+
+ XFREE(eax);
+
+ return err;
+}
+
+#endif
diff --git a/eax_init.c b/src/encauth/eax/eax_init.c
similarity index 65%
rename from eax_init.c
rename to src/encauth/eax/eax_init.c
index 547c8d67..5a20db04 100644
--- a/eax_init.c
+++ b/src/encauth/eax/eax_init.c
@@ -6,16 +6,32 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* EAX Implementation by Tom St Denis */
-#include "mycrypt.h"
+/**
+ @file eax_init.c
+ EAX implementation, initialized EAX state, by Tom St Denis
+*/
+#include "tomcrypt.h"
#ifdef EAX_MODE
-int eax_init(eax_state *eax, int cipher, const unsigned char *key, unsigned long keylen,
- const unsigned char *nonce, unsigned long noncelen,
+/**
+ Initialized an EAX state
+ @param eax [out] The EAX state to initialize
+ @param cipher The index of the desired cipher
+ @param key The secret key
+ @param keylen The length of the secret key (octets)
+ @param nonce The use-once nonce for the session
+ @param noncelen The length of the nonce (octets)
+ @param header The header for the EAX state
+ @param headerlen The header length (octets)
+ @return CRYPT_OK if successful
+*/
+int eax_init(eax_state *eax, int cipher,
+ const unsigned char *key, unsigned long keylen,
+ const unsigned char *nonce, unsigned long noncelen,
const unsigned char *header, unsigned long headerlen)
{
unsigned char *buf;
@@ -24,11 +40,11 @@ int eax_init(eax_state *eax, int cipher, const unsigned char *key, unsigned long
unsigned long len;
- _ARGCHK(eax != NULL);
- _ARGCHK(key != NULL);
- _ARGCHK(nonce != NULL);
+ LTC_ARGCHK(eax != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(nonce != NULL);
if (headerlen > 0) {
- _ARGCHK(header != NULL);
+ LTC_ARGCHK(header != NULL);
}
if ((err = cipher_is_valid(cipher)) != CRYPT_OK) {
@@ -38,7 +54,7 @@ int eax_init(eax_state *eax, int cipher, const unsigned char *key, unsigned long
/* allocate ram */
buf = XMALLOC(MAXBLOCKSIZE);
- omac = XMALLOC(sizeof(omac_state));
+ omac = XMALLOC(sizeof(*omac));
if (buf == NULL || omac == NULL) {
if (buf != NULL) {
@@ -53,21 +69,21 @@ int eax_init(eax_state *eax, int cipher, const unsigned char *key, unsigned long
/* N = OMAC_0K(nonce) */
zeromem(buf, MAXBLOCKSIZE);
if ((err = omac_init(omac, cipher, key, keylen)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* omac the [0]_n */
if ((err = omac_process(omac, buf, blklen)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* omac the nonce */
if ((err = omac_process(omac, nonce, noncelen)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* store result */
len = sizeof(eax->N);
if ((err = omac_done(omac, eax->N, &len)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* H = OMAC_1K(header) */
@@ -75,17 +91,17 @@ int eax_init(eax_state *eax, int cipher, const unsigned char *key, unsigned long
buf[blklen - 1] = 1;
if ((err = omac_init(&eax->headeromac, cipher, key, keylen)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* omac the [1]_n */
if ((err = omac_process(&eax->headeromac, buf, blklen)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* omac the header */
if (headerlen != 0) {
if ((err = omac_process(&eax->headeromac, header, headerlen)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
}
@@ -93,28 +109,28 @@ int eax_init(eax_state *eax, int cipher, const unsigned char *key, unsigned long
/* setup the CTR mode */
if ((err = ctr_start(cipher, eax->N, key, keylen, 0, &eax->ctr)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* use big-endian counter */
eax->ctr.mode = 1;
/* setup the OMAC for the ciphertext */
if ((err = omac_init(&eax->ctomac, cipher, key, keylen)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* omac [2]_n */
zeromem(buf, MAXBLOCKSIZE);
buf[blklen-1] = 2;
if ((err = omac_process(&eax->ctomac, buf, blklen)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
err = CRYPT_OK;
-__ERR:
-#ifdef CLEAN_STACK
+LBL_ERR:
+#ifdef LTC_CLEAN_STACK
zeromem(buf, MAXBLOCKSIZE);
- zeromem(omac, sizeof(omac_state));
+ zeromem(omac, sizeof(*omac));
#endif
XFREE(omac);
diff --git a/eax_test.c b/src/encauth/eax/eax_test.c
similarity index 96%
rename from eax_test.c
rename to src/encauth/eax/eax_test.c
index 93774b07..777dea1a 100644
--- a/eax_test.c
+++ b/src/encauth/eax/eax_test.c
@@ -6,14 +6,21 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* EAX Implementation by Tom St Denis */
-#include "mycrypt.h"
+/**
+ @file eax_test.c
+ EAX implementation, self-test, by Tom St Denis
+*/
+#include "tomcrypt.h"
#ifdef EAX_MODE
+/**
+ Test the EAX implementation
+ @return CRYPT_OK if successful, CRYPT_NOP if self-testing has been disabled
+*/
int eax_test(void)
{
#ifndef LTC_TEST
diff --git a/src/encauth/gcm/gcm_add_aad.c b/src/encauth/gcm/gcm_add_aad.c
new file mode 100644
index 00000000..cdcc0d90
--- /dev/null
+++ b/src/encauth/gcm/gcm_add_aad.c
@@ -0,0 +1,117 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+
+/**
+ @file gcm_add_aad.c
+ GCM implementation, Add AAD data to the stream, by Tom St Denis
+*/
+#include "tomcrypt.h"
+
+#ifdef GCM_MODE
+
+/**
+ Add AAD to the GCM state
+ @param gcm The GCM state
+ @param adata The additional authentication data to add to the GCM state
+ @param adatalen The length of the AAD data.
+ @return CRYPT_OK on success
+ */
+int gcm_add_aad(gcm_state *gcm,
+ const unsigned char *adata, unsigned long adatalen)
+{
+ unsigned long x, y;
+ int err;
+
+ LTC_ARGCHK(gcm != NULL);
+ if (adatalen > 0) {
+ LTC_ARGCHK(adata != NULL);
+ }
+
+ if (gcm->buflen > 16 || gcm->buflen < 0) {
+ return CRYPT_INVALID_ARG;
+ }
+
+ if ((err = cipher_is_valid(gcm->cipher)) != CRYPT_OK) {
+ return err;
+ }
+
+ /* in IV mode? */
+ if (gcm->mode == GCM_MODE_IV) {
+ /* let's process the IV */
+ if (gcm->ivmode || gcm->buflen != 12) {
+ for (x = 0; x < (unsigned long)gcm->buflen; x++) {
+ gcm->X[x] ^= gcm->buf[x];
+ }
+ if (gcm->buflen) {
+ gcm->totlen += gcm->buflen * CONST64(8);
+ gcm_mult_h(gcm, gcm->X);
+ }
+
+ /* mix in the length */
+ zeromem(gcm->buf, 8);
+ STORE64H(gcm->totlen, gcm->buf+8);
+ for (x = 0; x < 16; x++) {
+ gcm->X[x] ^= gcm->buf[x];
+ }
+ gcm_mult_h(gcm, gcm->X);
+
+ /* copy counter out */
+ XMEMCPY(gcm->Y, gcm->X, 16);
+ zeromem(gcm->X, 16);
+ } else {
+ XMEMCPY(gcm->Y, gcm->buf, 12);
+ gcm->Y[12] = 0;
+ gcm->Y[13] = 0;
+ gcm->Y[14] = 0;
+ gcm->Y[15] = 1;
+ }
+ XMEMCPY(gcm->Y_0, gcm->Y, 16);
+ zeromem(gcm->buf, 16);
+ gcm->buflen = 0;
+ gcm->totlen = 0;
+ gcm->mode = GCM_MODE_AAD;
+ }
+
+ if (gcm->mode != GCM_MODE_AAD || gcm->buflen >= 16) {
+ return CRYPT_INVALID_ARG;
+ }
+
+ x = 0;
+#ifdef LTC_FAST
+ if (gcm->buflen == 0) {
+ for (x = 0; x < (adatalen & ~15); x += 16) {
+ for (y = 0; y < 16; y += sizeof(LTC_FAST_TYPE)) {
+ *((LTC_FAST_TYPE*)(&gcm->X[y])) ^= *((LTC_FAST_TYPE*)(&adata[x + y]));
+ }
+ gcm_mult_h(gcm, gcm->X);
+ gcm->totlen += 128;
+ }
+ adata += x;
+ }
+#endif
+
+
+ /* start adding AAD data to the state */
+ for (; x < adatalen; x++) {
+ gcm->X[gcm->buflen++] ^= *adata++;
+
+ if (gcm->buflen == 16) {
+ /* GF mult it */
+ gcm_mult_h(gcm, gcm->X);
+ gcm->buflen = 0;
+ gcm->totlen += 128;
+ }
+ }
+
+ return CRYPT_OK;
+}
+#endif
+
diff --git a/src/encauth/gcm/gcm_add_iv.c b/src/encauth/gcm/gcm_add_iv.c
new file mode 100644
index 00000000..7faf4c02
--- /dev/null
+++ b/src/encauth/gcm/gcm_add_iv.c
@@ -0,0 +1,90 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+
+/**
+ @file gcm_add_iv.c
+ GCM implementation, add IV data to the state, by Tom St Denis
+*/
+#include "tomcrypt.h"
+
+#ifdef GCM_MODE
+
+/**
+ Add IV data to the GCM state
+ @param gcm The GCM state
+ @param IV The initial value data to add
+ @param IVlen The length of the IV
+ @return CRYPT_OK on success
+ */
+int gcm_add_iv(gcm_state *gcm,
+ const unsigned char *IV, unsigned long IVlen)
+{
+ unsigned long x, y;
+ int err;
+
+ LTC_ARGCHK(gcm != NULL);
+ if (IVlen > 0) {
+ LTC_ARGCHK(IV != NULL);
+ }
+
+ /* must be in IV mode */
+ if (gcm->mode != GCM_MODE_IV) {
+ return CRYPT_INVALID_ARG;
+ }
+
+ if (gcm->buflen >= 16 || gcm->buflen < 0) {
+ return CRYPT_INVALID_ARG;
+ }
+
+ if ((err = cipher_is_valid(gcm->cipher)) != CRYPT_OK) {
+ return err;
+ }
+
+
+ /* trip the ivmode flag */
+ if (IVlen + gcm->buflen > 12) {
+ gcm->ivmode |= 1;
+ }
+
+ x = 0;
+#ifdef LTC_FAST
+ if (gcm->buflen == 0) {
+ for (x = 0; x < (IVlen & ~15); x += 16) {
+ for (y = 0; y < 16; y += sizeof(LTC_FAST_TYPE)) {
+ *((LTC_FAST_TYPE*)(&gcm->X[y])) ^= *((LTC_FAST_TYPE*)(&IV[x + y]));
+ }
+ gcm_mult_h(gcm, gcm->X);
+ gcm->totlen += 128;
+ }
+ IV += x;
+ }
+#endif
+
+ /* start adding IV data to the state */
+ for (; x < IVlen; x++) {
+ gcm->buf[gcm->buflen++] = *IV++;
+
+ if (gcm->buflen == 16) {
+ /* GF mult it */
+ for (y = 0; y < 16; y++) {
+ gcm->X[y] ^= gcm->buf[y];
+ }
+ gcm_mult_h(gcm, gcm->X);
+ gcm->buflen = 0;
+ gcm->totlen += 128;
+ }
+ }
+
+ return CRYPT_OK;
+}
+
+#endif
+
diff --git a/src/encauth/gcm/gcm_done.c b/src/encauth/gcm/gcm_done.c
new file mode 100644
index 00000000..8b3a6ddd
--- /dev/null
+++ b/src/encauth/gcm/gcm_done.c
@@ -0,0 +1,77 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+
+/**
+ @file gcm_done.c
+ GCM implementation, Terminate the stream, by Tom St Denis
+*/
+#include "tomcrypt.h"
+
+#ifdef GCM_MODE
+
+/**
+ Terminate a GCM stream
+ @param gcm The GCM state
+ @param tag [out] The destination for the MAC tag
+ @param taglen [in/out] The length of the MAC tag
+ @return CRYPT_OK on success
+ */
+int gcm_done(gcm_state *gcm,
+ unsigned char *tag, unsigned long *taglen)
+{
+ unsigned long x;
+ int err;
+
+ LTC_ARGCHK(gcm != NULL);
+ LTC_ARGCHK(tag != NULL);
+ LTC_ARGCHK(taglen != NULL);
+
+ if (gcm->buflen > 16 || gcm->buflen < 0) {
+ return CRYPT_INVALID_ARG;
+ }
+
+ if ((err = cipher_is_valid(gcm->cipher)) != CRYPT_OK) {
+ return err;
+ }
+
+
+ if (gcm->mode != GCM_MODE_TEXT) {
+ return CRYPT_INVALID_ARG;
+ }
+
+ /* handle remaining ciphertext */
+ if (gcm->buflen) {
+ gcm->pttotlen += gcm->buflen * CONST64(8);
+ gcm_mult_h(gcm, gcm->X);
+ }
+
+ /* length */
+ STORE64H(gcm->totlen, gcm->buf);
+ STORE64H(gcm->pttotlen, gcm->buf+8);
+ for (x = 0; x < 16; x++) {
+ gcm->X[x] ^= gcm->buf[x];
+ }
+ gcm_mult_h(gcm, gcm->X);
+
+ /* encrypt original counter */
+ cipher_descriptor[gcm->cipher].ecb_encrypt(gcm->Y_0, gcm->buf, &gcm->K);
+ for (x = 0; x < 16 && x < *taglen; x++) {
+ tag[x] = gcm->buf[x] ^ gcm->X[x];
+ }
+ *taglen = x;
+
+ cipher_descriptor[gcm->cipher].done(&gcm->K);
+
+ return CRYPT_OK;
+}
+
+#endif
+
diff --git a/src/encauth/gcm/gcm_gf_mult.c b/src/encauth/gcm/gcm_gf_mult.c
new file mode 100644
index 00000000..a870c910
--- /dev/null
+++ b/src/encauth/gcm/gcm_gf_mult.c
@@ -0,0 +1,89 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+
+/**
+ @file gcm_gf_mult.c
+ GCM implementation, initialize state, by Tom St Denis
+*/
+#include "tomcrypt.h"
+
+#ifdef GCM_MODE
+
+/* right shift */
+static void gcm_rightshift(unsigned char *a)
+{
+ int x;
+ for (x = 15; x > 0; x--) {
+ a[x] = (a[x]>>1) | ((a[x-1]<<7)&0x80);
+ }
+ a[0] >>= 1;
+}
+
+/* c = b*a */
+static const unsigned char mask[] = { 0x80, 0x40, 0x20, 0x10, 0x08, 0x04, 0x02, 0x01 };
+static const unsigned char poly[] = { 0x00, 0xE1 };
+
+/**
+ GCM GF multiplier (internal use only)
+ @param a First value
+ @param b Second value
+ @param c Destination for a * b
+ */
+void gcm_gf_mult(const unsigned char *a, const unsigned char *b, unsigned char *c)
+{
+ unsigned char Z[16], V[16];
+ unsigned x, y, z;
+
+ zeromem(Z, 16);
+ XMEMCPY(V, a, 16);
+ for (x = 0; x < 128; x++) {
+ if (b[x>>3] & mask[x&7]) {
+ for (y = 0; y < 16; y++) {
+ Z[y] ^= V[y];
+ }
+ }
+ z = V[15] & 0x01;
+ gcm_rightshift(V);
+ V[0] ^= poly[z];
+ }
+ XMEMCPY(c, Z, 16);
+}
+
+/**
+ GCM multiply by H
+ @param gcm The GCM state which holds the H value
+ @param I The value to multiply H by
+ */
+void gcm_mult_h(gcm_state *gcm, unsigned char *I)
+{
+ unsigned char T[16];
+#ifdef GCM_TABLES
+ int x, y;
+ XMEMCPY(T, &gcm->PC[0][I[0]][0], 16);
+ for (x = 1; x < 16; x++) {
+#ifdef LTC_FAST
+ for (y = 0; y < 16; y += sizeof(LTC_FAST_TYPE)) {
+ *((LTC_FAST_TYPE *)(T + y)) ^= *((LTC_FAST_TYPE *)(&gcm->PC[x][I[x]][y]));
+ }
+#else
+ for (y = 0; y < 16; y++) {
+ T[y] ^= gcm->PC[x][I[x]][y];
+ }
+#endif
+ }
+#else
+ gcm_gf_mult(gcm->H, I, T);
+#endif
+ XMEMCPY(I, T, 16);
+}
+
+
+#endif
diff --git a/src/encauth/gcm/gcm_init.c b/src/encauth/gcm/gcm_init.c
new file mode 100644
index 00000000..35a5ab8f
--- /dev/null
+++ b/src/encauth/gcm/gcm_init.c
@@ -0,0 +1,88 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+
+/**
+ @file gcm_init.c
+ GCM implementation, initialize state, by Tom St Denis
+*/
+#include "tomcrypt.h"
+
+#ifdef GCM_MODE
+
+/**
+ Initialize a GCM state
+ @param gcm The GCM state to initialize
+ @param cipher The index of the cipher to use
+ @param key The secret key
+ @param keylen The length of the secret key
+ @return CRYPT_OK on success
+ */
+int gcm_init(gcm_state *gcm, int cipher,
+ const unsigned char *key, int keylen)
+{
+ int err;
+ unsigned char B[16];
+#ifdef GCM_TABLES
+ int x, y;
+#endif
+
+ LTC_ARGCHK(gcm != NULL);
+ LTC_ARGCHK(key != NULL);
+
+#ifdef LTC_FAST
+ if (16 % sizeof(LTC_FAST_TYPE)) {
+ return CRYPT_INVALID_ARG;
+ }
+#endif
+
+ /* is cipher valid? */
+ if ((err = cipher_is_valid(cipher)) != CRYPT_OK) {
+ return err;
+ }
+ if (cipher_descriptor[cipher].block_length != 16) {
+ return CRYPT_INVALID_CIPHER;
+ }
+
+ /* schedule key */
+ if ((err = cipher_descriptor[cipher].setup(key, keylen, 0, &gcm->K)) != CRYPT_OK) {
+ return err;
+ }
+
+ /* H = E(0) */
+ zeromem(B, 16);
+ cipher_descriptor[cipher].ecb_encrypt(B, gcm->H, &gcm->K);
+
+ /* setup state */
+ zeromem(gcm->buf, sizeof(gcm->buf));
+ zeromem(gcm->X, sizeof(gcm->X));
+ gcm->cipher = cipher;
+ gcm->mode = GCM_MODE_IV;
+ gcm->ivmode = 0;
+ gcm->buflen = 0;
+ gcm->totlen = 0;
+ gcm->pttotlen = 0;
+
+#ifdef GCM_TABLES
+ /* setup tables */
+ zeromem(B, 16);
+ for (x = 0; x < 16; x++) {
+ for (y = 0; y < 256; y++) {
+ B[x] = y;
+ gcm_gf_mult(gcm->H, B, &gcm->PC[x][y][0]);
+ }
+ B[x] = 0;
+ }
+#endif
+
+ return CRYPT_OK;
+}
+
+#endif
diff --git a/src/encauth/gcm/gcm_memory.c b/src/encauth/gcm/gcm_memory.c
new file mode 100644
index 00000000..e062413d
--- /dev/null
+++ b/src/encauth/gcm/gcm_memory.c
@@ -0,0 +1,89 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+
+/**
+ @file gcm_memory.c
+ GCM implementation, process a packet, by Tom St Denis
+*/
+#include "tomcrypt.h"
+
+#ifdef GCM_MODE
+
+/**
+ Process an entire GCM packet in one call.
+ @param cipher Index of cipher to use
+ @param key The secret key
+ @param keylen The length of the secret key
+ @param IV The initial vector
+ @param IVlen The length of the initial vector
+ @param adata The additional authentication data (header)
+ @param adatalen The length of the adata
+ @param pt The plaintext
+ @param ptlen The length of the plaintext (ciphertext length is the same)
+ @param ct The ciphertext
+ @param tag [out] The MAC tag
+ @param taglen [in/out] The MAC tag length
+ @param direction Encrypt or Decrypt mode (GCM_ENCRYPT or GCM_DECRYPT)
+ @return CRYPT_OK on success
+ */
+int gcm_memory( int cipher,
+ const unsigned char *key, unsigned long keylen,
+ const unsigned char *IV, unsigned long IVlen,
+ const unsigned char *adata, unsigned long adatalen,
+ unsigned char *pt, unsigned long ptlen,
+ unsigned char *ct,
+ unsigned char *tag, unsigned long *taglen,
+ int direction)
+{
+ gcm_state *gcm;
+ int err;
+
+ if ((err = cipher_is_valid(cipher)) != CRYPT_OK) {
+ return err;
+ }
+
+ if (cipher_descriptor[cipher].accel_gcm_memory != NULL) {
+ cipher_descriptor[cipher].accel_gcm_memory
+ (key, keylen,
+ IV, IVlen,
+ adata, adatalen,
+ pt, ptlen,
+ ct,
+ tag, taglen,
+ direction);
+ return CRYPT_OK;
+ }
+
+
+ gcm = XMALLOC(sizeof(*gcm));
+ if (gcm == NULL) {
+ return CRYPT_MEM;
+ }
+
+ if ((err = gcm_init(gcm, cipher, key, keylen)) != CRYPT_OK) {
+ goto LTC_ERR;
+ }
+ if ((err = gcm_add_iv(gcm, IV, IVlen)) != CRYPT_OK) {
+ goto LTC_ERR;
+ }
+ if ((err = gcm_add_aad(gcm, adata, adatalen)) != CRYPT_OK) {
+ goto LTC_ERR;
+ }
+ if ((err = gcm_process(gcm, pt, ptlen, ct, direction)) != CRYPT_OK) {
+ goto LTC_ERR;
+ }
+ err = gcm_done(gcm, tag, taglen);
+LTC_ERR:
+ XFREE(gcm);
+ return err;
+}
+#endif
+
diff --git a/src/encauth/gcm/gcm_process.c b/src/encauth/gcm/gcm_process.c
new file mode 100644
index 00000000..577967bb
--- /dev/null
+++ b/src/encauth/gcm/gcm_process.c
@@ -0,0 +1,143 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+
+/**
+ @file gcm_process.c
+ GCM implementation, process message data, by Tom St Denis
+*/
+#include "tomcrypt.h"
+
+#ifdef GCM_MODE
+
+/**
+ Process plaintext/ciphertext through GCM
+ @param gcm The GCM state
+ @param pt The plaintext
+ @param ptlen The plaintext length (ciphertext length is the same)
+ @param ct The ciphertext
+ @param direction Encrypt or Decrypt mode (GCM_ENCRYPT or GCM_DECRYPT)
+ @return CRYPT_OK on success
+ */
+int gcm_process(gcm_state *gcm,
+ unsigned char *pt, unsigned long ptlen,
+ unsigned char *ct,
+ int direction)
+{
+ unsigned long x, y;
+ unsigned char b;
+ int err;
+
+ LTC_ARGCHK(gcm != NULL);
+ if (ptlen > 0) {
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ }
+
+ if (gcm->buflen > 16 || gcm->buflen < 0) {
+ return CRYPT_INVALID_ARG;
+ }
+
+ if ((err = cipher_is_valid(gcm->cipher)) != CRYPT_OK) {
+ return err;
+ }
+
+ /* in AAD mode? */
+ if (gcm->mode == GCM_MODE_AAD) {
+ /* let's process the AAD */
+ if (gcm->buflen) {
+ gcm->totlen += gcm->buflen * CONST64(8);
+ gcm_mult_h(gcm, gcm->X);
+ }
+
+ /* increment counter */
+ for (y = 15; y >= 12; y--) {
+ if (++gcm->Y[y]) { break; }
+ }
+ /* encrypt the counter */
+ cipher_descriptor[gcm->cipher].ecb_encrypt(gcm->Y, gcm->buf, &gcm->K);
+
+ gcm->buflen = 0;
+ gcm->mode = GCM_MODE_TEXT;
+ }
+
+ if (gcm->mode != GCM_MODE_TEXT) {
+ return CRYPT_INVALID_ARG;
+ }
+
+ x = 0;
+#ifdef LTC_FAST
+ if (gcm->buflen == 0) {
+ if (direction == GCM_ENCRYPT) {
+ for (x = 0; x < (ptlen & ~15); x += 16) {
+ /* ctr encrypt */
+ for (y = 0; y < 16; y += sizeof(LTC_FAST_TYPE)) {
+ *((LTC_FAST_TYPE*)(&ct[x + y])) = *((LTC_FAST_TYPE*)(&pt[x+y])) ^ *((LTC_FAST_TYPE*)(&gcm->buf[y]));
+ *((LTC_FAST_TYPE*)(&gcm->X[y])) ^= *((LTC_FAST_TYPE*)(&ct[x+y]));
+ }
+ /* GMAC it */
+ gcm->pttotlen += 128;
+ gcm_mult_h(gcm, gcm->X);
+ /* increment counter */
+ for (y = 15; y >= 12; y--) {
+ if (++gcm->Y[y]) { break; }
+ }
+ cipher_descriptor[gcm->cipher].ecb_encrypt(gcm->Y, gcm->buf, &gcm->K);
+ }
+ } else {
+ for (x = 0; x < (ptlen & ~15); x += 16) {
+ /* ctr encrypt */
+ for (y = 0; y < 16; y += sizeof(LTC_FAST_TYPE)) {
+ *((LTC_FAST_TYPE*)(&gcm->X[y])) ^= *((LTC_FAST_TYPE*)(&ct[x+y]));
+ *((LTC_FAST_TYPE*)(&pt[x + y])) = *((LTC_FAST_TYPE*)(&ct[x+y])) ^ *((LTC_FAST_TYPE*)(&gcm->buf[y]));
+ }
+ /* GMAC it */
+ gcm->pttotlen += 128;
+ gcm_mult_h(gcm, gcm->X);
+ /* increment counter */
+ for (y = 15; y >= 12; y--) {
+ if (++gcm->Y[y]) { break; }
+ }
+ cipher_descriptor[gcm->cipher].ecb_encrypt(gcm->Y, gcm->buf, &gcm->K);
+ }
+ }
+ }
+#endif
+
+ /* process text */
+ for (; x < ptlen; x++) {
+ if (gcm->buflen == 16) {
+ gcm->pttotlen += 128;
+ gcm_mult_h(gcm, gcm->X);
+
+ /* increment counter */
+ for (y = 15; y >= 12; y--) {
+ if (++gcm->Y[y]) { break; }
+ }
+ cipher_descriptor[gcm->cipher].ecb_encrypt(gcm->Y, gcm->buf, &gcm->K);
+ gcm->buflen = 0;
+ }
+
+ if (direction == GCM_ENCRYPT) {
+ b = ct[x] = pt[x] ^ gcm->buf[gcm->buflen];
+ } else {
+ b = ct[x];
+ pt[x] = ct[x] ^ gcm->buf[gcm->buflen];
+ }
+ gcm->X[gcm->buflen++] ^= b;
+ }
+
+ return CRYPT_OK;
+}
+
+
+
+#endif
+
diff --git a/src/encauth/gcm/gcm_reset.c b/src/encauth/gcm/gcm_reset.c
new file mode 100644
index 00000000..e73bf66c
--- /dev/null
+++ b/src/encauth/gcm/gcm_reset.c
@@ -0,0 +1,40 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+
+/**
+ @file gcm_reset.c
+ GCM implementation, reset a used state so it can accept IV data, by Tom St Denis
+*/
+#include "tomcrypt.h"
+
+#ifdef GCM_MODE
+
+/**
+ Reset a GCM state to as if you just called gcm_init(). This saves the initialization time.
+ @param gcm The GCM state to reset
+ @return CRYPT_OK on success
+*/
+int gcm_reset(gcm_state *gcm)
+{
+ LTC_ARGCHK(gcm != NULL);
+
+ zeromem(gcm->buf, sizeof(gcm->buf));
+ zeromem(gcm->X, sizeof(gcm->X));
+ gcm->mode = GCM_MODE_IV;
+ gcm->ivmode = 0;
+ gcm->buflen = 0;
+ gcm->totlen = 0;
+ gcm->pttotlen = 0;
+
+ return CRYPT_OK;
+}
+
+#endif
diff --git a/src/encauth/gcm/gcm_test.c b/src/encauth/gcm/gcm_test.c
new file mode 100644
index 00000000..bc6ad7e3
--- /dev/null
+++ b/src/encauth/gcm/gcm_test.c
@@ -0,0 +1,365 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+
+/**
+ @file gcm_test.c
+ GCM implementation, testing, by Tom St Denis
+*/
+#include "tomcrypt.h"
+
+#ifdef GCM_MODE
+
+/**
+ Test the GCM code
+ @return CRYPT_OK on success
+ */
+int gcm_test(void)
+{
+#ifndef LTC_TEST
+ return CRYPT_NOP;
+#else
+ static const struct {
+ unsigned char K[32];
+ int keylen;
+ unsigned char P[64];
+ unsigned long ptlen;
+ unsigned char A[64];
+ unsigned long alen;
+ unsigned char IV[64];
+ unsigned long IVlen;
+ unsigned char C[64];
+ unsigned char T[16];
+ } tests[] = {
+
+/* test case #1 */
+{
+ /* key */
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ 16,
+
+ /* plaintext */
+ { 0 },
+ 0,
+
+ /* AAD data */
+ { 0 },
+ 0,
+
+ /* IV */
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00 },
+ 12,
+
+ /* ciphertext */
+ { 0 },
+
+ /* tag */
+ { 0x58, 0xe2, 0xfc, 0xce, 0xfa, 0x7e, 0x30, 0x61,
+ 0x36, 0x7f, 0x1d, 0x57, 0xa4, 0xe7, 0x45, 0x5a }
+},
+
+/* test case #2 */
+{
+ /* key */
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ 16,
+
+ /* PT */
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
+ 16,
+
+ /* ADATA */
+ { 0 },
+ 0,
+
+ /* IV */
+ { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+ 0x00, 0x00, 0x00, 0x00 },
+ 12,
+
+ /* CT */
+ { 0x03, 0x88, 0xda, 0xce, 0x60, 0xb6, 0xa3, 0x92,
+ 0xf3, 0x28, 0xc2, 0xb9, 0x71, 0xb2, 0xfe, 0x78 },
+
+ /* TAG */
+ { 0xab, 0x6e, 0x47, 0xd4, 0x2c, 0xec, 0x13, 0xbd,
+ 0xf5, 0x3a, 0x67, 0xb2, 0x12, 0x57, 0xbd, 0xdf }
+},
+
+/* test case #3 */
+{
+ /* key */
+ { 0xfe, 0xff, 0xe9, 0x92, 0x86, 0x65, 0x73, 0x1c,
+ 0x6d, 0x6a, 0x8f, 0x94, 0x67, 0x30, 0x83, 0x08, },
+ 16,
+
+ /* PT */
+ { 0xd9, 0x31, 0x32, 0x25, 0xf8, 0x84, 0x06, 0xe5,
+ 0xa5, 0x59, 0x09, 0xc5, 0xaf, 0xf5, 0x26, 0x9a,
+ 0x86, 0xa7, 0xa9, 0x53, 0x15, 0x34, 0xf7, 0xda,
+ 0x2e, 0x4c, 0x30, 0x3d, 0x8a, 0x31, 0x8a, 0x72,
+ 0x1c, 0x3c, 0x0c, 0x95, 0x95, 0x68, 0x09, 0x53,
+ 0x2f, 0xcf, 0x0e, 0x24, 0x49, 0xa6, 0xb5, 0x25,
+ 0xb1, 0x6a, 0xed, 0xf5, 0xaa, 0x0d, 0xe6, 0x57,
+ 0xba, 0x63, 0x7b, 0x39, 0x1a, 0xaf, 0xd2, 0x55, },
+ 64,
+
+ /* ADATA */
+ { 0 },
+ 0,
+
+ /* IV */
+ { 0xca, 0xfe, 0xba, 0xbe, 0xfa, 0xce, 0xdb, 0xad,
+ 0xde, 0xca, 0xf8, 0x88, },
+ 12,
+
+ /* CT */
+ { 0x42, 0x83, 0x1e, 0xc2, 0x21, 0x77, 0x74, 0x24,
+ 0x4b, 0x72, 0x21, 0xb7, 0x84, 0xd0, 0xd4, 0x9c,
+ 0xe3, 0xaa, 0x21, 0x2f, 0x2c, 0x02, 0xa4, 0xe0,
+ 0x35, 0xc1, 0x7e, 0x23, 0x29, 0xac, 0xa1, 0x2e,
+ 0x21, 0xd5, 0x14, 0xb2, 0x54, 0x66, 0x93, 0x1c,
+ 0x7d, 0x8f, 0x6a, 0x5a, 0xac, 0x84, 0xaa, 0x05,
+ 0x1b, 0xa3, 0x0b, 0x39, 0x6a, 0x0a, 0xac, 0x97,
+ 0x3d, 0x58, 0xe0, 0x91, 0x47, 0x3f, 0x59, 0x85, },
+
+ /* TAG */
+ { 0x4d, 0x5c, 0x2a, 0xf3, 0x27, 0xcd, 0x64, 0xa6,
+ 0x2c, 0xf3, 0x5a, 0xbd, 0x2b, 0xa6, 0xfa, 0xb4, }
+},
+
+/* test case #4 */
+{
+ /* key */
+ { 0xfe, 0xff, 0xe9, 0x92, 0x86, 0x65, 0x73, 0x1c,
+ 0x6d, 0x6a, 0x8f, 0x94, 0x67, 0x30, 0x83, 0x08, },
+ 16,
+
+ /* PT */
+ { 0xd9, 0x31, 0x32, 0x25, 0xf8, 0x84, 0x06, 0xe5,
+ 0xa5, 0x59, 0x09, 0xc5, 0xaf, 0xf5, 0x26, 0x9a,
+ 0x86, 0xa7, 0xa9, 0x53, 0x15, 0x34, 0xf7, 0xda,
+ 0x2e, 0x4c, 0x30, 0x3d, 0x8a, 0x31, 0x8a, 0x72,
+ 0x1c, 0x3c, 0x0c, 0x95, 0x95, 0x68, 0x09, 0x53,
+ 0x2f, 0xcf, 0x0e, 0x24, 0x49, 0xa6, 0xb5, 0x25,
+ 0xb1, 0x6a, 0xed, 0xf5, 0xaa, 0x0d, 0xe6, 0x57,
+ 0xba, 0x63, 0x7b, 0x39, },
+ 60,
+
+ /* ADATA */
+ { 0xfe, 0xed, 0xfa, 0xce, 0xde, 0xad, 0xbe, 0xef,
+ 0xfe, 0xed, 0xfa, 0xce, 0xde, 0xad, 0xbe, 0xef,
+ 0xab, 0xad, 0xda, 0xd2, },
+ 20,
+
+ /* IV */
+ { 0xca, 0xfe, 0xba, 0xbe, 0xfa, 0xce, 0xdb, 0xad,
+ 0xde, 0xca, 0xf8, 0x88, },
+ 12,
+
+ /* CT */
+ { 0x42, 0x83, 0x1e, 0xc2, 0x21, 0x77, 0x74, 0x24,
+ 0x4b, 0x72, 0x21, 0xb7, 0x84, 0xd0, 0xd4, 0x9c,
+ 0xe3, 0xaa, 0x21, 0x2f, 0x2c, 0x02, 0xa4, 0xe0,
+ 0x35, 0xc1, 0x7e, 0x23, 0x29, 0xac, 0xa1, 0x2e,
+ 0x21, 0xd5, 0x14, 0xb2, 0x54, 0x66, 0x93, 0x1c,
+ 0x7d, 0x8f, 0x6a, 0x5a, 0xac, 0x84, 0xaa, 0x05,
+ 0x1b, 0xa3, 0x0b, 0x39, 0x6a, 0x0a, 0xac, 0x97,
+ 0x3d, 0x58, 0xe0, 0x91, },
+
+ /* TAG */
+ { 0x5b, 0xc9, 0x4f, 0xbc, 0x32, 0x21, 0xa5, 0xdb,
+ 0x94, 0xfa, 0xe9, 0x5a, 0xe7, 0x12, 0x1a, 0x47, }
+
+},
+
+/* test case #5 */
+{
+ /* key */
+ { 0xfe, 0xff, 0xe9, 0x92, 0x86, 0x65, 0x73, 0x1c,
+ 0x6d, 0x6a, 0x8f, 0x94, 0x67, 0x30, 0x83, 0x08, },
+ 16,
+
+ /* PT */
+ { 0xd9, 0x31, 0x32, 0x25, 0xf8, 0x84, 0x06, 0xe5,
+ 0xa5, 0x59, 0x09, 0xc5, 0xaf, 0xf5, 0x26, 0x9a,
+ 0x86, 0xa7, 0xa9, 0x53, 0x15, 0x34, 0xf7, 0xda,
+ 0x2e, 0x4c, 0x30, 0x3d, 0x8a, 0x31, 0x8a, 0x72,
+ 0x1c, 0x3c, 0x0c, 0x95, 0x95, 0x68, 0x09, 0x53,
+ 0x2f, 0xcf, 0x0e, 0x24, 0x49, 0xa6, 0xb5, 0x25,
+ 0xb1, 0x6a, 0xed, 0xf5, 0xaa, 0x0d, 0xe6, 0x57,
+ 0xba, 0x63, 0x7b, 0x39, },
+ 60,
+
+ /* ADATA */
+ { 0xfe, 0xed, 0xfa, 0xce, 0xde, 0xad, 0xbe, 0xef,
+ 0xfe, 0xed, 0xfa, 0xce, 0xde, 0xad, 0xbe, 0xef,
+ 0xab, 0xad, 0xda, 0xd2, },
+ 20,
+
+ /* IV */
+ { 0xca, 0xfe, 0xba, 0xbe, 0xfa, 0xce, 0xdb, 0xad, },
+ 8,
+
+ /* CT */
+ { 0x61, 0x35, 0x3b, 0x4c, 0x28, 0x06, 0x93, 0x4a,
+ 0x77, 0x7f, 0xf5, 0x1f, 0xa2, 0x2a, 0x47, 0x55,
+ 0x69, 0x9b, 0x2a, 0x71, 0x4f, 0xcd, 0xc6, 0xf8,
+ 0x37, 0x66, 0xe5, 0xf9, 0x7b, 0x6c, 0x74, 0x23,
+ 0x73, 0x80, 0x69, 0x00, 0xe4, 0x9f, 0x24, 0xb2,
+ 0x2b, 0x09, 0x75, 0x44, 0xd4, 0x89, 0x6b, 0x42,
+ 0x49, 0x89, 0xb5, 0xe1, 0xeb, 0xac, 0x0f, 0x07,
+ 0xc2, 0x3f, 0x45, 0x98, },
+
+ /* TAG */
+ { 0x36, 0x12, 0xd2, 0xe7, 0x9e, 0x3b, 0x07, 0x85,
+ 0x56, 0x1b, 0xe1, 0x4a, 0xac, 0xa2, 0xfc, 0xcb, }
+},
+
+/* test case #6 */
+{
+ /* key */
+ { 0xfe, 0xff, 0xe9, 0x92, 0x86, 0x65, 0x73, 0x1c,
+ 0x6d, 0x6a, 0x8f, 0x94, 0x67, 0x30, 0x83, 0x08, },
+ 16,
+
+ /* PT */
+ { 0xd9, 0x31, 0x32, 0x25, 0xf8, 0x84, 0x06, 0xe5,
+ 0xa5, 0x59, 0x09, 0xc5, 0xaf, 0xf5, 0x26, 0x9a,
+ 0x86, 0xa7, 0xa9, 0x53, 0x15, 0x34, 0xf7, 0xda,
+ 0x2e, 0x4c, 0x30, 0x3d, 0x8a, 0x31, 0x8a, 0x72,
+ 0x1c, 0x3c, 0x0c, 0x95, 0x95, 0x68, 0x09, 0x53,
+ 0x2f, 0xcf, 0x0e, 0x24, 0x49, 0xa6, 0xb5, 0x25,
+ 0xb1, 0x6a, 0xed, 0xf5, 0xaa, 0x0d, 0xe6, 0x57,
+ 0xba, 0x63, 0x7b, 0x39, },
+ 60,
+
+ /* ADATA */
+ { 0xfe, 0xed, 0xfa, 0xce, 0xde, 0xad, 0xbe, 0xef,
+ 0xfe, 0xed, 0xfa, 0xce, 0xde, 0xad, 0xbe, 0xef,
+ 0xab, 0xad, 0xda, 0xd2, },
+ 20,
+
+ /* IV */
+ { 0x93, 0x13, 0x22, 0x5d, 0xf8, 0x84, 0x06, 0xe5,
+ 0x55, 0x90, 0x9c, 0x5a, 0xff, 0x52, 0x69, 0xaa,
+ 0x6a, 0x7a, 0x95, 0x38, 0x53, 0x4f, 0x7d, 0xa1,
+ 0xe4, 0xc3, 0x03, 0xd2, 0xa3, 0x18, 0xa7, 0x28,
+ 0xc3, 0xc0, 0xc9, 0x51, 0x56, 0x80, 0x95, 0x39,
+ 0xfc, 0xf0, 0xe2, 0x42, 0x9a, 0x6b, 0x52, 0x54,
+ 0x16, 0xae, 0xdb, 0xf5, 0xa0, 0xde, 0x6a, 0x57,
+ 0xa6, 0x37, 0xb3, 0x9b, },
+ 60,
+
+ /* CT */
+ { 0x8c, 0xe2, 0x49, 0x98, 0x62, 0x56, 0x15, 0xb6,
+ 0x03, 0xa0, 0x33, 0xac, 0xa1, 0x3f, 0xb8, 0x94,
+ 0xbe, 0x91, 0x12, 0xa5, 0xc3, 0xa2, 0x11, 0xa8,
+ 0xba, 0x26, 0x2a, 0x3c, 0xca, 0x7e, 0x2c, 0xa7,
+ 0x01, 0xe4, 0xa9, 0xa4, 0xfb, 0xa4, 0x3c, 0x90,
+ 0xcc, 0xdc, 0xb2, 0x81, 0xd4, 0x8c, 0x7c, 0x6f,
+ 0xd6, 0x28, 0x75, 0xd2, 0xac, 0xa4, 0x17, 0x03,
+ 0x4c, 0x34, 0xae, 0xe5, },
+
+ /* TAG */
+ { 0x61, 0x9c, 0xc5, 0xae, 0xff, 0xfe, 0x0b, 0xfa,
+ 0x46, 0x2a, 0xf4, 0x3c, 0x16, 0x99, 0xd0, 0x50, }
+}
+
+/* rest of test cases are the same except AES key size changes... ignored... */
+};
+ int idx, err;
+ unsigned long x, y;
+ gcm_state gcm;
+ unsigned char out[2][64], T[2][16];
+
+ /* find aes */
+ idx = find_cipher("aes");
+ if (idx == -1) {
+ idx = find_cipher("rijndael");
+ if (idx == -1) {
+ return CRYPT_NOP;
+ }
+ }
+
+ for (x = 0; x < (int)(sizeof(tests)/sizeof(tests[0])); x++) {
+ y = sizeof(T[0]);
+ if ((err = gcm_memory(idx, tests[x].K, tests[x].keylen,
+ tests[x].IV, tests[x].IVlen,
+ tests[x].A, tests[x].alen,
+ (unsigned char*)tests[x].P, tests[x].ptlen,
+ out[0], T[0], &y, GCM_ENCRYPT)) != CRYPT_OK) {
+ return err;
+ }
+
+ if (memcmp(out[0], tests[x].C, tests[x].ptlen)) {
+#if 0
+ printf("\nCiphertext wrong %lu\n", x);
+ for (y = 0; y < tests[x].ptlen; y++) {
+ printf("%02x", out[0][y] & 255);
+ }
+ printf("\n");
+#endif
+ return CRYPT_FAIL_TESTVECTOR;
+ }
+
+ if (memcmp(T[0], tests[x].T, 16)) {
+#if 0
+ printf("\nTag on plaintext wrong %lu\n", x);
+ for (y = 0; y < 16; y++) {
+ printf("%02x", T[0][y] & 255);
+ }
+ printf("\n");
+#endif
+ return CRYPT_FAIL_TESTVECTOR;
+ }
+
+ y = sizeof(T[1]);
+ if ((err = gcm_memory(idx, tests[x].K, tests[x].keylen,
+ tests[x].IV, tests[x].IVlen,
+ tests[x].A, tests[x].alen,
+ out[1], tests[x].ptlen,
+ out[0], T[1], &y, GCM_DECRYPT)) != CRYPT_OK) {
+ return err;
+ }
+
+ if (memcmp(out[1], tests[x].P, tests[x].ptlen)) {
+#if 0
+ printf("\nplaintext wrong %lu\n", x);
+ for (y = 0; y < tests[x].ptlen; y++) {
+ printf("%02x", out[0][y] & 255);
+ }
+ printf("\n");
+#endif
+ return CRYPT_FAIL_TESTVECTOR;
+ }
+
+ if (memcmp(T[1], tests[x].T, 16)) {
+#if 0
+ printf("\nTag on ciphertext wrong %lu\n", x);
+ for (y = 0; y < 16; y++) {
+ printf("%02x", T[1][y] & 255);
+ }
+ printf("\n");
+#endif
+ return CRYPT_FAIL_TESTVECTOR;
+ }
+
+ }
+ return CRYPT_OK;
+#endif
+}
+
+#endif
+
diff --git a/ocb_decrypt.c b/src/encauth/ocb/ocb_decrypt.c
similarity index 67%
rename from ocb_decrypt.c
rename to src/encauth/ocb/ocb_decrypt.c
index b7c785b3..d3bf4802 100644
--- a/ocb_decrypt.c
+++ b/src/encauth/ocb/ocb_decrypt.c
@@ -6,28 +6,38 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* OCB Implementation by Tom St Denis */
-#include "mycrypt.h"
+/**
+ @file ocb_decrypt.c
+ OCB implementation, decrypt data, by Tom St Denis
+*/
+#include "tomcrypt.h"
#ifdef OCB_MODE
+/**
+ Decrypt a block with OCB.
+ @param ocb The OCB state
+ @param ct The ciphertext (length of the block size of the block cipher)
+ @param pt [out] The plaintext (length of ct)
+ @return CRYPT_OK if successful
+*/
int ocb_decrypt(ocb_state *ocb, const unsigned char *ct, unsigned char *pt)
{
unsigned char Z[MAXBLOCKSIZE], tmp[MAXBLOCKSIZE];
int err, x;
- _ARGCHK(ocb != NULL);
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
+ LTC_ARGCHK(ocb != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
/* check if valid cipher */
if ((err = cipher_is_valid(ocb->cipher)) != CRYPT_OK) {
return err;
}
- _ARGCHK(cipher_descriptor[ocb->cipher].ecb_decrypt != NULL);
+ LTC_ARGCHK(cipher_descriptor[ocb->cipher].ecb_decrypt != NULL);
/* check length */
if (ocb->block_len != cipher_descriptor[ocb->cipher].block_length) {
@@ -52,7 +62,7 @@ int ocb_decrypt(ocb_state *ocb, const unsigned char *ct, unsigned char *pt)
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(Z, sizeof(Z));
zeromem(tmp, sizeof(tmp));
#endif
diff --git a/src/encauth/ocb/ocb_decrypt_verify_memory.c b/src/encauth/ocb/ocb_decrypt_verify_memory.c
new file mode 100644
index 00000000..378a8af4
--- /dev/null
+++ b/src/encauth/ocb/ocb_decrypt_verify_memory.c
@@ -0,0 +1,82 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+
+/**
+ @file ocb_decrypt_verify_memory.c
+ OCB implementation, helper to decrypt block of memory, by Tom St Denis
+*/
+#include "tomcrypt.h"
+
+#ifdef OCB_MODE
+
+/**
+ Decrypt and compare the tag with OCB.
+ @param cipher The index of the cipher desired
+ @param key The secret key
+ @param keylen The length of the secret key (octets)
+ @param nonce The session nonce (length of the block size of the block cipher)
+ @param ct The ciphertext
+ @param ctlen The length of the ciphertext (octets)
+ @param pt [out] The plaintext
+ @param tag The tag to compare against
+ @param taglen The length of the tag (octets)
+ @param stat [out] The result of the tag comparison (1==valid, 0==invalid)
+ @return CRYPT_OK if successful regardless of the tag comparison
+*/
+int ocb_decrypt_verify_memory(int cipher,
+ const unsigned char *key, unsigned long keylen,
+ const unsigned char *nonce,
+ const unsigned char *ct, unsigned long ctlen,
+ unsigned char *pt,
+ const unsigned char *tag, unsigned long taglen,
+ int *stat)
+{
+ int err;
+ ocb_state *ocb;
+
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(nonce != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(tag != NULL);
+ LTC_ARGCHK(stat != NULL);
+
+ /* allocate memory */
+ ocb = XMALLOC(sizeof(ocb_state));
+ if (ocb == NULL) {
+ return CRYPT_MEM;
+ }
+
+ if ((err = ocb_init(ocb, cipher, key, keylen, nonce)) != CRYPT_OK) {
+ goto LBL_ERR;
+ }
+
+ while (ctlen > (unsigned long)ocb->block_len) {
+ if ((err = ocb_decrypt(ocb, ct, pt)) != CRYPT_OK) {
+ goto LBL_ERR;
+ }
+ ctlen -= ocb->block_len;
+ pt += ocb->block_len;
+ ct += ocb->block_len;
+ }
+
+ err = ocb_done_decrypt(ocb, ct, ctlen, pt, tag, taglen, stat);
+LBL_ERR:
+#ifdef LTC_CLEAN_STACK
+ zeromem(ocb, sizeof(ocb_state));
+#endif
+
+ XFREE(ocb);
+
+ return err;
+}
+
+#endif
diff --git a/ocb_done_decrypt.c b/src/encauth/ocb/ocb_done_decrypt.c
similarity index 50%
rename from ocb_done_decrypt.c
rename to src/encauth/ocb/ocb_done_decrypt.c
index 697beead..9f8b1b9f 100644
--- a/ocb_done_decrypt.c
+++ b/src/encauth/ocb/ocb_done_decrypt.c
@@ -6,31 +6,45 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* OCB Implementation by Tom St Denis */
-#include "mycrypt.h"
+/**
+ @file ocb_done_decrypt.c
+ OCB implementation, terminate decryption, by Tom St Denis
+*/
+#include "tomcrypt.h"
#ifdef OCB_MODE
+/**
+ Terminate a decrypting OCB state
+ @param ocb The OCB state
+ @param ct The ciphertext (if any)
+ @param ctlen The length of the ciphertext (octets)
+ @param pt [out] The plaintext
+ @param tag The authentication tag (to compare against)
+ @param taglen The length of the authentication tag provided
+ @param stat [out] The result of the tag comparison
+ @return CRYPT_OK if the process was successful regardless if the tag is valid
+*/
int ocb_done_decrypt(ocb_state *ocb,
const unsigned char *ct, unsigned long ctlen,
unsigned char *pt,
- const unsigned char *tag, unsigned long taglen, int *res)
+ const unsigned char *tag, unsigned long taglen, int *stat)
{
int err;
unsigned char *tagbuf;
unsigned long tagbuflen;
- _ARGCHK(ocb != NULL);
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(tag != NULL);
- _ARGCHK(res != NULL);
+ LTC_ARGCHK(ocb != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(tag != NULL);
+ LTC_ARGCHK(stat != NULL);
/* default to failed */
- *res = 0;
+ *stat = 0;
/* allocate memory */
tagbuf = XMALLOC(MAXBLOCKSIZE);
@@ -39,17 +53,17 @@ int ocb_done_decrypt(ocb_state *ocb,
}
tagbuflen = MAXBLOCKSIZE;
- if ((err = __ocb_done(ocb, ct, ctlen, pt, tagbuf, &tagbuflen, 1)) != CRYPT_OK) {
- goto __ERR;
+ if ((err = s_ocb_done(ocb, ct, ctlen, pt, tagbuf, &tagbuflen, 1)) != CRYPT_OK) {
+ goto LBL_ERR;
}
if (taglen <= tagbuflen && memcmp(tagbuf, tag, taglen) == 0) {
- *res = 1;
+ *stat = 1;
}
err = CRYPT_OK;
-__ERR:
-#ifdef CLEAN_STACK
+LBL_ERR:
+#ifdef LTC_CLEAN_STACK
zeromem(tagbuf, MAXBLOCKSIZE);
#endif
diff --git a/src/encauth/ocb/ocb_done_encrypt.c b/src/encauth/ocb/ocb_done_encrypt.c
new file mode 100644
index 00000000..1a075691
--- /dev/null
+++ b/src/encauth/ocb/ocb_done_encrypt.c
@@ -0,0 +1,42 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+
+/**
+ @file ocb_done_encrypt.c
+ OCB implementation, terminate encryption, by Tom St Denis
+*/
+#include "tomcrypt.h"
+
+#ifdef OCB_MODE
+
+/**
+ Terminate an encryption OCB state
+ @param ocb The OCB state
+ @param pt Remaining plaintext (if any)
+ @param ptlen The length of the plaintext (octets)
+ @param ct [out] The ciphertext (if any)
+ @param tag [out] The tag for the OCB stream
+ @param taglen [in/out] The max size and resulting size of the tag
+ @return CRYPT_OK if successful
+*/
+int ocb_done_encrypt(ocb_state *ocb, const unsigned char *pt, unsigned long ptlen,
+ unsigned char *ct, unsigned char *tag, unsigned long *taglen)
+{
+ LTC_ARGCHK(ocb != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(tag != NULL);
+ LTC_ARGCHK(taglen != NULL);
+ return s_ocb_done(ocb, pt, ptlen, ct, tag, taglen, 0);
+}
+
+#endif
+
diff --git a/ocb_encrypt.c b/src/encauth/ocb/ocb_encrypt.c
similarity index 68%
rename from ocb_encrypt.c
rename to src/encauth/ocb/ocb_encrypt.c
index d9519332..ba39c60f 100644
--- a/ocb_encrypt.c
+++ b/src/encauth/ocb/ocb_encrypt.c
@@ -6,22 +6,32 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* OCB Implementation by Tom St Denis */
-#include "mycrypt.h"
+/**
+ @file ocb_encrypt.c
+ OCB implementation, encrypt data, by Tom St Denis
+*/
+#include "tomcrypt.h"
#ifdef OCB_MODE
+/**
+ Encrypt a block of data with OCB.
+ @param ocb The OCB state
+ @param pt The plaintext (length of the block size of the block cipher)
+ @param ct [out] The ciphertext (same size as the pt)
+ @return CRYPT_OK if successful
+*/
int ocb_encrypt(ocb_state *ocb, const unsigned char *pt, unsigned char *ct)
{
unsigned char Z[MAXBLOCKSIZE], tmp[MAXBLOCKSIZE];
int err, x;
- _ARGCHK(ocb != NULL);
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
+ LTC_ARGCHK(ocb != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
if ((err = cipher_is_valid(ocb->cipher)) != CRYPT_OK) {
return err;
}
@@ -46,7 +56,7 @@ int ocb_encrypt(ocb_state *ocb, const unsigned char *pt, unsigned char *ct)
ct[x] ^= Z[x];
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(Z, sizeof(Z));
zeromem(tmp, sizeof(tmp));
#endif
diff --git a/ocb_encrypt_authenticate_memory.c b/src/encauth/ocb/ocb_encrypt_authenticate_memory.c
similarity index 52%
rename from ocb_encrypt_authenticate_memory.c
rename to src/encauth/ocb/ocb_encrypt_authenticate_memory.c
index 73afd3fc..bcc9cfbc 100644
--- a/ocb_encrypt_authenticate_memory.c
+++ b/src/encauth/ocb/ocb_encrypt_authenticate_memory.c
@@ -6,14 +6,30 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* OCB Implementation by Tom St Denis */
-#include "mycrypt.h"
+/**
+ @file ocb_encrypt_authenticate_memory.c
+ OCB implementation, encrypt block of memory, by Tom St Denis
+*/
+#include "tomcrypt.h"
#ifdef OCB_MODE
+/**
+ Encrypt and generate an authentication code for a buffer of memory
+ @param cipher The index of the cipher desired
+ @param key The secret key
+ @param keylen The length of the secret key (octets)
+ @param nonce The session nonce (length of the block ciphers block size)
+ @param pt The plaintext
+ @param ptlen The length of the plaintext (octets)
+ @param ct [out] The ciphertext
+ @param tag [out] The authentication tag
+ @param taglen [in/out] The max size and resulting size of the authentication tag
+ @return CRYPT_OK if successful
+*/
int ocb_encrypt_authenticate_memory(int cipher,
const unsigned char *key, unsigned long keylen,
const unsigned char *nonce,
@@ -24,12 +40,12 @@ int ocb_encrypt_authenticate_memory(int cipher,
int err;
ocb_state *ocb;
- _ARGCHK(key != NULL);
- _ARGCHK(nonce != NULL);
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(tag != NULL);
- _ARGCHK(taglen != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(nonce != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(tag != NULL);
+ LTC_ARGCHK(taglen != NULL);
/* allocate ram */
ocb = XMALLOC(sizeof(ocb_state));
@@ -38,12 +54,12 @@ int ocb_encrypt_authenticate_memory(int cipher,
}
if ((err = ocb_init(ocb, cipher, key, keylen, nonce)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
while (ptlen > (unsigned long)ocb->block_len) {
if ((err = ocb_encrypt(ocb, pt, ct)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
ptlen -= ocb->block_len;
pt += ocb->block_len;
@@ -51,8 +67,8 @@ int ocb_encrypt_authenticate_memory(int cipher,
}
err = ocb_done_encrypt(ocb, pt, ptlen, ct, tag, taglen);
-__ERR:
-#ifdef CLEAN_STACK
+LBL_ERR:
+#ifdef LTC_CLEAN_STACK
zeromem(ocb, sizeof(ocb_state));
#endif
diff --git a/ocb_init.c b/src/encauth/ocb/ocb_init.c
similarity index 83%
rename from ocb_init.c
rename to src/encauth/ocb/ocb_init.c
index 6087207f..57e04afc 100644
--- a/ocb_init.c
+++ b/src/encauth/ocb/ocb_init.c
@@ -6,11 +6,14 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* OCB Implementation by Tom St Denis */
-#include "mycrypt.h"
+/**
+ @file ocb_init.c
+ OCB implementation, initialize state, by Tom St Denis
+*/
+#include "tomcrypt.h"
#ifdef OCB_MODE
@@ -32,14 +35,23 @@ static const struct {
}
};
+/**
+ Initialize an OCB context.
+ @param ocb [out] The destination of the OCB state
+ @param cipher The index of the desired cipher
+ @param key The secret key
+ @param keylen The length of the secret key (octets)
+ @param nonce The session nonce (length of the block size of the cipher)
+ @return CRYPT_OK if successful
+*/
int ocb_init(ocb_state *ocb, int cipher,
const unsigned char *key, unsigned long keylen, const unsigned char *nonce)
{
int poly, x, y, m, err;
- _ARGCHK(ocb != NULL);
- _ARGCHK(key != NULL);
- _ARGCHK(nonce != NULL);
+ LTC_ARGCHK(ocb != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(nonce != NULL);
/* valid cipher? */
if ((err = cipher_is_valid(cipher)) != CRYPT_OK) {
diff --git a/ocb_ntz.c b/src/encauth/ocb/ocb_ntz.c
similarity index 57%
rename from ocb_ntz.c
rename to src/encauth/ocb/ocb_ntz.c
index fbf6bb60..4ffe7e8a 100644
--- a/ocb_ntz.c
+++ b/src/encauth/ocb/ocb_ntz.c
@@ -6,14 +6,23 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* OCB Implementation by Tom St Denis */
-#include "mycrypt.h"
+/**
+ @file ocb_ntz.c
+ OCB implementation, internal function, by Tom St Denis
+*/
+
+#include "tomcrypt.h"
#ifdef OCB_MODE
+/**
+ Returns the number of leading zero bits [from lsb up]
+ @param x The 32-bit value to observe
+ @return The number of bits [from the lsb up] that are zero
+*/
int ocb_ntz(unsigned long x)
{
int c;
diff --git a/ocb_shift_xor.c b/src/encauth/ocb/ocb_shift_xor.c
similarity index 63%
rename from ocb_shift_xor.c
rename to src/encauth/ocb/ocb_shift_xor.c
index ce931380..b63b0227 100644
--- a/ocb_shift_xor.c
+++ b/src/encauth/ocb/ocb_shift_xor.c
@@ -6,14 +6,22 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* OCB Implementation by Tom St Denis */
-#include "mycrypt.h"
+/**
+ @file ocb_shift_xor.c
+ OCB implementation, internal function, by Tom St Denis
+*/
+#include "tomcrypt.h"
#ifdef OCB_MODE
+/**
+ Compute the shift/xor for OCB (internal function)
+ @param ocb The OCB state
+ @param Z The destination of the shift
+*/
void ocb_shift_xor(ocb_state *ocb, unsigned char *Z)
{
int x, y;
diff --git a/ocb_test.c b/src/encauth/ocb/ocb_test.c
similarity index 96%
rename from ocb_test.c
rename to src/encauth/ocb/ocb_test.c
index 0b5dafd2..d6cb14b4 100644
--- a/ocb_test.c
+++ b/src/encauth/ocb/ocb_test.c
@@ -6,14 +6,21 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* OCB Implementation by Tom St Denis */
-#include "mycrypt.h"
+/**
+ @file ocb_test.c
+ OCB implementation, self-test by Tom St Denis
+*/
+#include "tomcrypt.h"
#ifdef OCB_MODE
+/**
+ Test the OCB protocol
+ @return CRYPT_OK if successful
+*/
int ocb_test(void)
{
#ifndef LTC_TEST
diff --git a/s_ocb_done.c b/src/encauth/ocb/s_ocb_done.c
similarity index 72%
rename from s_ocb_done.c
rename to src/encauth/ocb/s_ocb_done.c
index d4a7748b..6f6e63dd 100644
--- a/s_ocb_done.c
+++ b/src/encauth/ocb/s_ocb_done.c
@@ -6,11 +6,14 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* OCB Implementation by Tom St Denis */
-#include "mycrypt.h"
+/**
+ @file s_ocb_done.c
+ OCB implementation, internal helper, by Tom St Denis
+*/
+#include "tomcrypt.h"
#ifdef OCB_MODE
@@ -21,18 +24,30 @@
*
* the names pt/ptlen/ct really just mean in/inlen/out but this is the way I wrote it...
*/
-int __ocb_done(ocb_state *ocb, const unsigned char *pt, unsigned long ptlen,
- unsigned char *ct, unsigned char *tag, unsigned long *taglen, int mode)
+
+/**
+ Shared code to finish an OCB stream
+ @param ocb The OCB state
+ @param pt The remaining plaintext [or input]
+ @param ptlen The length of the input (octets)
+ @param ct [out] The output buffer
+ @param tag [out] The destination for the authentication tag
+ @param taglen [in/out] The max size and resulting size of the authentication tag
+ @param mode The mode we are terminating, 0==encrypt, 1==decrypt
+ @return CRYPT_OK if successful
+*/
+int s_ocb_done(ocb_state *ocb, const unsigned char *pt, unsigned long ptlen,
+ unsigned char *ct, unsigned char *tag, unsigned long *taglen, int mode)
{
unsigned char *Z, *Y, *X;
int err, x;
- _ARGCHK(ocb != NULL);
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(tag != NULL);
- _ARGCHK(taglen != NULL);
+ LTC_ARGCHK(ocb != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(tag != NULL);
+ LTC_ARGCHK(taglen != NULL);
if ((err = cipher_is_valid(ocb->cipher)) != CRYPT_OK) {
return err;
}
@@ -99,6 +114,7 @@ int __ocb_done(ocb_state *ocb, const unsigned char *pt, unsigned long ptlen,
/* encrypt checksum, er... tag!! */
cipher_descriptor[ocb->cipher].ecb_encrypt(ocb->checksum, X, &ocb->key);
+ cipher_descriptor[ocb->cipher].done(&ocb->key);
/* now store it */
for (x = 0; x < ocb->block_len && x < (int)*taglen; x++) {
@@ -106,7 +122,7 @@ int __ocb_done(ocb_state *ocb, const unsigned char *pt, unsigned long ptlen,
}
*taglen = x;
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(X, MAXBLOCKSIZE);
zeromem(Y, MAXBLOCKSIZE);
zeromem(Z, MAXBLOCKSIZE);
diff --git a/chc.c b/src/hashes/chc/chc.c
similarity index 79%
rename from chc.c
rename to src/hashes/chc/chc.c
index e144b687..67dd0902 100644
--- a/chc.c
+++ b/src/hashes/chc/chc.c
@@ -6,10 +6,15 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file chc.c
+ CHC support. (Tom St Denis)
+*/
#ifdef CHC_HASH
@@ -20,7 +25,7 @@ static int cipher_idx=UNDEFED_HASH, /* which cipher */
cipher_blocksize; /* blocksize of cipher */
-const struct _hash_descriptor chc_desc = {
+const struct ltc_hash_descriptor chc_desc = {
"chc_hash", 12, 0, 0, { 0 }, 0,
&chc_init,
&chc_process,
@@ -28,7 +33,11 @@ const struct _hash_descriptor chc_desc = {
&chc_test
};
-/* initialize the CHC state with a given cipher */
+/**
+ Initialize the CHC state with a given cipher
+ @param cipher The index of the cipher you wish to bind
+ @return CRYPT_OK if successful
+*/
int chc_register(int cipher)
{
int err, kl, idx;
@@ -69,14 +78,18 @@ int chc_register(int cipher)
return CRYPT_OK;
}
-/* "hash init" is simply encrypt 0 with the 0 key. Simple way to make an IV */
+/**
+ Initialize the hash state
+ @param md The hash state you wish to initialize
+ @return CRYPT_OK if successful
+*/
int chc_init(hash_state *md)
{
symmetric_key *key;
unsigned char buf[MAXBLOCKSIZE];
int err;
- _ARGCHK(md != NULL);
+ LTC_ARGCHK(md != NULL);
/* is the cipher valid? */
if ((err = cipher_is_valid(cipher_idx)) != CRYPT_OK) {
@@ -134,21 +147,30 @@ static int chc_compress(hash_state *md, unsigned char *buf)
md->chc.state[x] ^= T[0][x] ^ T[1][x];
}
XFREE(key);
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(T, sizeof(T));
zeromem(&key, sizeof(key));
#endif
return CRYPT_OK;
}
+/* function for processing blocks */
+int _chc_process(hash_state * md, const unsigned char *buf, unsigned long len);
HASH_PROCESS(_chc_process, chc_compress, chc, (unsigned long)cipher_blocksize)
-int chc_process(hash_state * md, const unsigned char *buf, unsigned long len)
+/**
+ Process a block of memory though the hash
+ @param md The hash state
+ @param in The data to hash
+ @param inlen The length of the data (octets)
+ @return CRYPT_OK if successful
+*/
+int chc_process(hash_state * md, const unsigned char *in, unsigned long inlen)
{
int err;
- _ARGCHK(md != NULL);
- _ARGCHK(buf != NULL);
+ LTC_ARGCHK(md != NULL);
+ LTC_ARGCHK(in != NULL);
/* is the cipher valid? */
if ((err = cipher_is_valid(cipher_idx)) != CRYPT_OK) {
@@ -158,15 +180,21 @@ int chc_process(hash_state * md, const unsigned char *buf, unsigned long len)
return CRYPT_INVALID_CIPHER;
}
- return _chc_process(md, buf, len);
+ return _chc_process(md, in, inlen);
}
-int chc_done(hash_state *md, unsigned char *buf)
+/**
+ Terminate the hash to get the digest
+ @param md The hash state
+ @param out [out] The destination of the hash (length of the block size of the block cipher)
+ @return CRYPT_OK if successful
+*/
+int chc_done(hash_state *md, unsigned char *out)
{
int err;
- _ARGCHK(md != NULL);
- _ARGCHK(buf != NULL);
+ LTC_ARGCHK(md != NULL);
+ LTC_ARGCHK(out != NULL);
/* is the cipher valid? */
if ((err = cipher_is_valid(cipher_idx)) != CRYPT_OK) {
@@ -208,19 +236,23 @@ int chc_done(hash_state *md, unsigned char *buf)
chc_compress(md, md->chc.buf);
/* copy output */
- XMEMCPY(buf, md->chc.state, cipher_blocksize);
+ XMEMCPY(out, md->chc.state, cipher_blocksize);
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(md, sizeof(hash_state));
#endif
return CRYPT_OK;
}
+/**
+ Self-test the hash
+ @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled
+*/
int chc_test(void)
{
static const struct {
unsigned char *msg,
- md[MAXBLOCKSIZE];
+ md[MAXBLOCKSIZE];
int len;
} tests[] = {
{
diff --git a/src/hashes/helper/hash_file.c b/src/hashes/helper/hash_file.c
new file mode 100644
index 00000000..78c290a3
--- /dev/null
+++ b/src/hashes/helper/hash_file.c
@@ -0,0 +1,53 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file hash_file.c
+ Hash a file, Tom St Denis
+*/
+
+/**
+ @param hash The index of the hash desired
+ @param fname The name of the file you wish to hash
+ @param out [out] The destination of the digest
+ @param outlen [in/out] The max size and resulting size of the message digest
+ @result CRYPT_OK if successful
+*/
+int hash_file(int hash, const char *fname, unsigned char *out, unsigned long *outlen)
+{
+#ifdef LTC_NO_FILE
+ return CRYPT_NOP;
+#else
+ FILE *in;
+ int err;
+ LTC_ARGCHK(fname != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+
+ if ((err = hash_is_valid(hash)) != CRYPT_OK) {
+ return err;
+ }
+
+ in = fopen(fname, "rb");
+ if (in == NULL) {
+ return CRYPT_FILE_NOTFOUND;
+ }
+
+ err = hash_filehandle(hash, in, out, outlen);
+ if (fclose(in) != 0) {
+ return CRYPT_ERROR;
+ }
+
+ return err;
+#endif
+}
+
diff --git a/hash_filehandle.c b/src/hashes/helper/hash_filehandle.c
similarity index 57%
rename from hash_filehandle.c
rename to src/hashes/helper/hash_filehandle.c
index cf179e0d..c02c5a78 100644
--- a/hash_filehandle.c
+++ b/src/hashes/helper/hash_filehandle.c
@@ -6,13 +6,26 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
-int hash_filehandle(int hash, FILE *in, unsigned char *dst, unsigned long *outlen)
+/**
+ @file hash_filehandle.c
+ Hash open files, Tom St Denis
+*/
+
+/**
+ Hash data from an open file handle.
+ @param hash The index of the hash you want to use
+ @param in The FILE* handle of the file you want to hash
+ @param out [out] The destination of the digest
+ @param outlen [in/out] The max size and resulting size of the digest
+ @result CRYPT_OK if successful
+*/
+int hash_filehandle(int hash, FILE *in, unsigned char *out, unsigned long *outlen)
{
-#ifdef NO_FILE
+#ifdef LTC_NO_FILE
return CRYPT_NOP;
#else
hash_state md;
@@ -20,9 +33,9 @@ int hash_filehandle(int hash, FILE *in, unsigned char *dst, unsigned long *outle
size_t x;
int err;
- _ARGCHK(dst != NULL);
- _ARGCHK(outlen != NULL);
- _ARGCHK(in != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+ LTC_ARGCHK(in != NULL);
if ((err = hash_is_valid(hash)) != CRYPT_OK) {
return err;
@@ -42,9 +55,9 @@ int hash_filehandle(int hash, FILE *in, unsigned char *dst, unsigned long *outle
return err;
}
} while (x == sizeof(buf));
- err = hash_descriptor[hash].done(&md, dst);
+ err = hash_descriptor[hash].done(&md, out);
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(buf, sizeof(buf));
#endif
return err;
diff --git a/src/hashes/helper/hash_memory.c b/src/hashes/helper/hash_memory.c
new file mode 100644
index 00000000..9786948f
--- /dev/null
+++ b/src/hashes/helper/hash_memory.c
@@ -0,0 +1,64 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file hash_memory.c
+ Hash memory helper, Tom St Denis
+*/
+
+/**
+ Hash a block of memory and store the digest.
+ @param hash The index of the hash you wish to use
+ @param in The data you wish to hash
+ @param inlen The length of the data to hash (octets)
+ @param out [out] Where to store the digest
+ @param outlen [in/out] Max size and resulting size of the digest
+ @return CRYPT_OK if successful
+*/
+int hash_memory(int hash, const unsigned char *in, unsigned long inlen, unsigned char *out, unsigned long *outlen)
+{
+ hash_state *md;
+ int err;
+
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+
+ if ((err = hash_is_valid(hash)) != CRYPT_OK) {
+ return err;
+ }
+
+ if (*outlen < hash_descriptor[hash].hashsize) {
+ return CRYPT_BUFFER_OVERFLOW;
+ }
+
+ md = XMALLOC(sizeof(hash_state));
+ if (md == NULL) {
+ return CRYPT_MEM;
+ }
+
+ if ((err = hash_descriptor[hash].init(md)) != CRYPT_OK) {
+ goto LBL_ERR;
+ }
+ if ((err = hash_descriptor[hash].process(md, in, inlen)) != CRYPT_OK) {
+ goto LBL_ERR;
+ }
+ err = hash_descriptor[hash].done(md, out);
+ *outlen = hash_descriptor[hash].hashsize;
+LBL_ERR:
+#ifdef LTC_CLEAN_STACK
+ zeromem(md, sizeof(hash_state));
+#endif
+ XFREE(md);
+
+ return err;
+}
diff --git a/src/hashes/helper/hash_memory_multi.c b/src/hashes/helper/hash_memory_multi.c
new file mode 100644
index 00000000..ce22283f
--- /dev/null
+++ b/src/hashes/helper/hash_memory_multi.c
@@ -0,0 +1,82 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+#include <stdarg.h>
+/**
+ @file hash_memory_multi.c
+ Hash (multiple buffers) memory helper, Tom St Denis
+*/
+
+/**
+ Hash multiple (non-adjacent) blocks of memory at once.
+ @param hash The index of the hash you wish to use
+ @param out [out] Where to store the digest
+ @param outlen [in/out] Max size and resulting size of the digest
+ @param in The data you wish to hash
+ @param inlen The length of the data to hash (octets)
+ @param ... tuples of (data,len) pairs to hash, terminated with a (NULL,x) (x=don't care)
+ @return CRYPT_OK if successful
+*/
+int hash_memory_multi(int hash, unsigned char *out, unsigned long *outlen,
+ const unsigned char *in, unsigned long inlen, ...)
+{
+ hash_state *md;
+ int err;
+ va_list args;
+ const unsigned char *curptr;
+ unsigned long curlen;
+
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+
+ if ((err = hash_is_valid(hash)) != CRYPT_OK) {
+ return err;
+ }
+
+ if (*outlen < hash_descriptor[hash].hashsize) {
+ return CRYPT_BUFFER_OVERFLOW;
+ }
+
+ md = XMALLOC(sizeof(hash_state));
+ if (md == NULL) {
+ return CRYPT_MEM;
+ }
+
+ if ((err = hash_descriptor[hash].init(md)) != CRYPT_OK) {
+ goto LBL_ERR;
+ }
+
+ va_start(args, inlen);
+ curptr = in;
+ curlen = inlen;
+ for (;;) {
+ /* process buf */
+ if ((err = hash_descriptor[hash].process(md, curptr, curlen)) != CRYPT_OK) {
+ goto LBL_ERR;
+ }
+ /* step to next */
+ curptr = va_arg(args, const unsigned char*);
+ if (curptr == NULL) {
+ break;
+ }
+ curlen = va_arg(args, unsigned long);
+ }
+ err = hash_descriptor[hash].done(md, out);
+ *outlen = hash_descriptor[hash].hashsize;
+LBL_ERR:
+#ifdef LTC_CLEAN_STACK
+ zeromem(md, sizeof(hash_state));
+#endif
+ XFREE(md);
+ va_end(args);
+ return err;
+}
diff --git a/md2.c b/src/hashes/md2.c
similarity index 80%
rename from md2.c
rename to src/hashes/md2.c
index 8e2a9872..5381771f 100644
--- a/md2.c
+++ b/src/hashes/md2.c
@@ -6,14 +6,18 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* MD2 (RFC 1319) hash function implementation by Tom St Denis */
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @param md2.c
+ MD2 (RFC 1319) hash function implementation by Tom St Denis
+*/
#ifdef MD2
-const struct _hash_descriptor md2_desc =
+const struct ltc_hash_descriptor md2_desc =
{
"md2",
7,
@@ -90,9 +94,14 @@ static void md2_compress(hash_state *md)
}
}
+/**
+ Initialize the hash state
+ @param md The hash state you wish to initialize
+ @return CRYPT_OK if successful
+*/
int md2_init(hash_state *md)
{
- _ARGCHK(md != NULL);
+ LTC_ARGCHK(md != NULL);
/* MD2 uses a zero'ed state... */
zeromem(md->md2.X, sizeof(md->md2.X));
@@ -102,20 +111,27 @@ int md2_init(hash_state *md)
return CRYPT_OK;
}
-int md2_process(hash_state *md, const unsigned char *buf, unsigned long len)
+/**
+ Process a block of memory though the hash
+ @param md The hash state
+ @param in The data to hash
+ @param inlen The length of the data (octets)
+ @return CRYPT_OK if successful
+*/
+int md2_process(hash_state *md, const unsigned char *in, unsigned long inlen)
{
unsigned long n;
- _ARGCHK(md != NULL);
- _ARGCHK(buf != NULL);
+ LTC_ARGCHK(md != NULL);
+ LTC_ARGCHK(in != NULL);
if (md-> md2 .curlen > sizeof(md-> md2 .buf)) {
return CRYPT_INVALID_ARG;
}
- while (len > 0) {
- n = MIN(len, (16 - md->md2.curlen));
- XMEMCPY(md->md2.buf + md->md2.curlen, buf, (size_t)n);
+ while (inlen > 0) {
+ n = MIN(inlen, (16 - md->md2.curlen));
+ XMEMCPY(md->md2.buf + md->md2.curlen, in, (size_t)n);
md->md2.curlen += n;
- buf += n;
- len -= n;
+ in += n;
+ inlen -= n;
/* is 16 bytes full? */
if (md->md2.curlen == 16) {
@@ -127,12 +143,18 @@ int md2_process(hash_state *md, const unsigned char *buf, unsigned long len)
return CRYPT_OK;
}
-int md2_done(hash_state * md, unsigned char *hash)
+/**
+ Terminate the hash to get the digest
+ @param md The hash state
+ @param out [out] The destination of the hash (16 bytes)
+ @return CRYPT_OK if successful
+*/
+int md2_done(hash_state * md, unsigned char *out)
{
unsigned long i, k;
- _ARGCHK(md != NULL);
- _ARGCHK(hash != NULL);
+ LTC_ARGCHK(md != NULL);
+ LTC_ARGCHK(out != NULL);
if (md->md2.curlen >= sizeof(md->md2.buf)) {
return CRYPT_INVALID_ARG;
@@ -154,14 +176,18 @@ int md2_done(hash_state * md, unsigned char *hash)
md2_compress(md);
/* output is lower 16 bytes of X */
- XMEMCPY(hash, md->md2.X, 16);
+ XMEMCPY(out, md->md2.X, 16);
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(md, sizeof(hash_state));
#endif
return CRYPT_OK;
}
+/**
+ Self-test the hash
+ @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled
+*/
int md2_test(void)
{
#ifndef LTC_TEST
diff --git a/md4.c b/src/hashes/md4.c
similarity index 87%
rename from md4.c
rename to src/hashes/md4.c
index 0e0cc6b4..477f5b08 100644
--- a/md4.c
+++ b/src/hashes/md4.c
@@ -6,14 +6,18 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* Submitted by Dobes Vandermeer (dobes@smartt.com) */
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @param md4.c
+ Submitted by Dobes Vandermeer (dobes@smartt.com)
+*/
#ifdef MD4
-const struct _hash_descriptor md4_desc =
+const struct ltc_hash_descriptor md4_desc =
{
"md4",
6,
@@ -49,7 +53,7 @@ const struct _hash_descriptor md4_desc =
#define H(x, y, z) ((x) ^ (y) ^ (z))
/* ROTATE_LEFT rotates x left n bits. */
-#define ROTATE_LEFT(x, n) ROL(x, n)
+#define ROTATE_LEFT(x, n) ROLc(x, n)
/* FF, GG and HH are transformations for rounds 1, 2 and 3 */
/* Rotation is separate from addition to prevent recomputation */
@@ -67,7 +71,7 @@ const struct _hash_descriptor md4_desc =
(a) = ROTATE_LEFT ((a), (s)); \
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static int _md4_compress(hash_state *md, unsigned char *buf)
#else
static int md4_compress(hash_state *md, unsigned char *buf)
@@ -151,7 +155,7 @@ static int md4_compress(hash_state *md, unsigned char *buf)
return CRYPT_OK;
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static int md4_compress(hash_state *md, unsigned char *buf)
{
int err;
@@ -161,9 +165,14 @@ static int md4_compress(hash_state *md, unsigned char *buf)
}
#endif
+/**
+ Initialize the hash state
+ @param md The hash state you wish to initialize
+ @return CRYPT_OK if successful
+*/
int md4_init(hash_state * md)
{
- _ARGCHK(md != NULL);
+ LTC_ARGCHK(md != NULL);
md->md4.state[0] = 0x67452301UL;
md->md4.state[1] = 0xefcdab89UL;
md->md4.state[2] = 0x98badcfeUL;
@@ -173,14 +182,27 @@ int md4_init(hash_state * md)
return CRYPT_OK;
}
+/**
+ Process a block of memory though the hash
+ @param md The hash state
+ @param in The data to hash
+ @param inlen The length of the data (octets)
+ @return CRYPT_OK if successful
+*/
HASH_PROCESS(md4_process, md4_compress, md4, 64)
-int md4_done(hash_state * md, unsigned char *hash)
+/**
+ Terminate the hash to get the digest
+ @param md The hash state
+ @param out [out] The destination of the hash (16 bytes)
+ @return CRYPT_OK if successful
+*/
+int md4_done(hash_state * md, unsigned char *out)
{
int i;
- _ARGCHK(md != NULL);
- _ARGCHK(hash != NULL);
+ LTC_ARGCHK(md != NULL);
+ LTC_ARGCHK(out != NULL);
if (md->md4.curlen >= sizeof(md->md4.buf)) {
return CRYPT_INVALID_ARG;
@@ -215,14 +237,18 @@ int md4_done(hash_state * md, unsigned char *hash)
/* copy output */
for (i = 0; i < 4; i++) {
- STORE32L(md->md4.state[i], hash+(4*i));
+ STORE32L(md->md4.state[i], out+(4*i));
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(md, sizeof(hash_state));
#endif
return CRYPT_OK;
}
+/**
+ Self-test the hash
+ @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled
+*/
int md4_test(void)
{
#ifndef LTC_TEST
diff --git a/md5.c b/src/hashes/md5.c
similarity index 86%
rename from md5.c
rename to src/hashes/md5.c
index 53391695..e2e5c741 100644
--- a/md5.c
+++ b/src/hashes/md5.c
@@ -6,16 +6,19 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
-/* MD5 hash function by Tom St Denis */
-#include "mycrypt.h"
+/**
+ @file md5.c
+ MD5 hash function by Tom St Denis
+*/
#ifdef MD5
-const struct _hash_descriptor md5_desc =
+const struct ltc_hash_descriptor md5_desc =
{
"md5",
3,
@@ -39,6 +42,8 @@ const struct _hash_descriptor md5_desc =
#define H(x,y,z) (x^y^z)
#define I(x,y,z) (y^(x|(~z)))
+#ifdef LTC_SMALL_CODE
+
#define FF(a,b,c,d,M,s,t) \
a = (a + F(b,c,d) + M + t); a = ROL(a, s) + b;
@@ -51,8 +56,6 @@ const struct _hash_descriptor md5_desc =
#define II(a,b,c,d,M,s,t) \
a = (a + I(b,c,d) + M + t); a = ROL(a, s) + b;
-#ifdef SMALL_CODE
-
static const unsigned char Worder[64] = {
0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,
1,6,11,0,5,10,15,4,9,14,3,8,13,2,7,12,
@@ -78,16 +81,31 @@ static const ulong32 Korder[64] = {
0x6fa87e4fUL, 0xfe2ce6e0UL, 0xa3014314UL, 0x4e0811a1UL, 0xf7537e82UL, 0xbd3af235UL, 0x2ad7d2bbUL, 0xeb86d391UL
};
+#else
+
+#define FF(a,b,c,d,M,s,t) \
+ a = (a + F(b,c,d) + M + t); a = ROLc(a, s) + b;
+
+#define GG(a,b,c,d,M,s,t) \
+ a = (a + G(b,c,d) + M + t); a = ROLc(a, s) + b;
+
+#define HH(a,b,c,d,M,s,t) \
+ a = (a + H(b,c,d) + M + t); a = ROLc(a, s) + b;
+
+#define II(a,b,c,d,M,s,t) \
+ a = (a + I(b,c,d) + M + t); a = ROLc(a, s) + b;
+
+
#endif
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static int _md5_compress(hash_state *md, unsigned char *buf)
#else
static int md5_compress(hash_state *md, unsigned char *buf)
#endif
{
ulong32 i, W[16], a, b, c, d;
-#ifdef SMALL_CODE
+#ifdef LTC_SMALL_CODE
ulong32 t;
#endif
@@ -102,7 +120,7 @@ static int md5_compress(hash_state *md, unsigned char *buf)
c = md->md5.state[2];
d = md->md5.state[3];
-#ifdef SMALL_CODE
+#ifdef LTC_SMALL_CODE
for (i = 0; i < 16; ++i) {
FF(a,b,c,d,W[Worder[i]],Rorder[i],Korder[i]);
t = d; d = c; c = b; b = a; a = t;
@@ -198,7 +216,7 @@ static int md5_compress(hash_state *md, unsigned char *buf)
return CRYPT_OK;
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static int md5_compress(hash_state *md, unsigned char *buf)
{
int err;
@@ -208,9 +226,14 @@ static int md5_compress(hash_state *md, unsigned char *buf)
}
#endif
+/**
+ Initialize the hash state
+ @param md The hash state you wish to initialize
+ @return CRYPT_OK if successful
+*/
int md5_init(hash_state * md)
{
- _ARGCHK(md != NULL);
+ LTC_ARGCHK(md != NULL);
md->md5.state[0] = 0x67452301UL;
md->md5.state[1] = 0xefcdab89UL;
md->md5.state[2] = 0x98badcfeUL;
@@ -220,14 +243,27 @@ int md5_init(hash_state * md)
return CRYPT_OK;
}
+/**
+ Process a block of memory though the hash
+ @param md The hash state
+ @param in The data to hash
+ @param inlen The length of the data (octets)
+ @return CRYPT_OK if successful
+*/
HASH_PROCESS(md5_process, md5_compress, md5, 64)
-int md5_done(hash_state * md, unsigned char *hash)
+/**
+ Terminate the hash to get the digest
+ @param md The hash state
+ @param out [out] The destination of the hash (16 bytes)
+ @return CRYPT_OK if successful
+*/
+int md5_done(hash_state * md, unsigned char *out)
{
int i;
- _ARGCHK(md != NULL);
- _ARGCHK(hash != NULL);
+ LTC_ARGCHK(md != NULL);
+ LTC_ARGCHK(out != NULL);
if (md->md5.curlen >= sizeof(md->md5.buf)) {
return CRYPT_INVALID_ARG;
@@ -263,14 +299,18 @@ int md5_done(hash_state * md, unsigned char *hash)
/* copy output */
for (i = 0; i < 4; i++) {
- STORE32L(md->md5.state[i], hash+(4*i));
+ STORE32L(md->md5.state[i], out+(4*i));
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(md, sizeof(hash_state));
#endif
return CRYPT_OK;
}
+/**
+ Self-test the hash
+ @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled
+*/
int md5_test(void)
{
#ifndef LTC_TEST
diff --git a/rmd128.c b/src/hashes/rmd128.c
similarity index 89%
rename from rmd128.c
rename to src/hashes/rmd128.c
index f9351dec..1c304a1c 100644
--- a/rmd128.c
+++ b/src/hashes/rmd128.c
@@ -6,19 +6,24 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
+
+/**
+ @param rmd128.c
+ RMD128 Hash function
+*/
/* Implementation of RIPEMD-128 based on the source by Antoon Bosselaers, ESAT-COSIC
*
* This source has been radically overhauled to be portable and work within
* the LibTomCrypt API by Tom St Denis
*/
-#include "mycrypt.h"
#ifdef RIPEMD128
-const struct _hash_descriptor rmd128_desc =
+const struct ltc_hash_descriptor rmd128_desc =
{
"rmd128",
8,
@@ -44,37 +49,37 @@ const struct _hash_descriptor rmd128_desc =
/* the eight basic operations FF() through III() */
#define FF(a, b, c, d, x, s) \
(a) += F((b), (c), (d)) + (x);\
- (a) = ROL((a), (s));
+ (a) = ROLc((a), (s));
#define GG(a, b, c, d, x, s) \
(a) += G((b), (c), (d)) + (x) + 0x5a827999UL;\
- (a) = ROL((a), (s));
+ (a) = ROLc((a), (s));
#define HH(a, b, c, d, x, s) \
(a) += H((b), (c), (d)) + (x) + 0x6ed9eba1UL;\
- (a) = ROL((a), (s));
+ (a) = ROLc((a), (s));
#define II(a, b, c, d, x, s) \
(a) += I((b), (c), (d)) + (x) + 0x8f1bbcdcUL;\
- (a) = ROL((a), (s));
+ (a) = ROLc((a), (s));
#define FFF(a, b, c, d, x, s) \
(a) += F((b), (c), (d)) + (x);\
- (a) = ROL((a), (s));
+ (a) = ROLc((a), (s));
#define GGG(a, b, c, d, x, s) \
(a) += G((b), (c), (d)) + (x) + 0x6d703ef3UL;\
- (a) = ROL((a), (s));
+ (a) = ROLc((a), (s));
#define HHH(a, b, c, d, x, s) \
(a) += H((b), (c), (d)) + (x) + 0x5c4dd124UL;\
- (a) = ROL((a), (s));
+ (a) = ROLc((a), (s));
#define III(a, b, c, d, x, s) \
(a) += I((b), (c), (d)) + (x) + 0x50a28be6UL;\
- (a) = ROL((a), (s));
+ (a) = ROLc((a), (s));
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static int _rmd128_compress(hash_state *md, unsigned char *buf)
#else
static int rmd128_compress(hash_state *md, unsigned char *buf)
@@ -248,7 +253,7 @@ static int rmd128_compress(hash_state *md, unsigned char *buf)
return CRYPT_OK;
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static int rmd128_compress(hash_state *md, unsigned char *buf)
{
int err;
@@ -258,9 +263,14 @@ static int rmd128_compress(hash_state *md, unsigned char *buf)
}
#endif
+/**
+ Initialize the hash state
+ @param md The hash state you wish to initialize
+ @return CRYPT_OK if successful
+*/
int rmd128_init(hash_state * md)
{
- _ARGCHK(md != NULL);
+ LTC_ARGCHK(md != NULL);
md->rmd128.state[0] = 0x67452301UL;
md->rmd128.state[1] = 0xefcdab89UL;
md->rmd128.state[2] = 0x98badcfeUL;
@@ -270,14 +280,27 @@ int rmd128_init(hash_state * md)
return CRYPT_OK;
}
+/**
+ Process a block of memory though the hash
+ @param md The hash state
+ @param in The data to hash
+ @param inlen The length of the data (octets)
+ @return CRYPT_OK if successful
+*/
HASH_PROCESS(rmd128_process, rmd128_compress, rmd128, 64)
-int rmd128_done(hash_state * md, unsigned char *hash)
+/**
+ Terminate the hash to get the digest
+ @param md The hash state
+ @param out [out] The destination of the hash (16 bytes)
+ @return CRYPT_OK if successful
+*/
+int rmd128_done(hash_state * md, unsigned char *out)
{
int i;
- _ARGCHK(md != NULL);
- _ARGCHK(hash != NULL);
+ LTC_ARGCHK(md != NULL);
+ LTC_ARGCHK(out != NULL);
if (md->rmd128.curlen >= sizeof(md->rmd128.buf)) {
return CRYPT_INVALID_ARG;
@@ -313,14 +336,18 @@ int rmd128_done(hash_state * md, unsigned char *hash)
/* copy output */
for (i = 0; i < 4; i++) {
- STORE32L(md->rmd128.state[i], hash+(4*i));
+ STORE32L(md->rmd128.state[i], out+(4*i));
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(md, sizeof(hash_state));
#endif
return CRYPT_OK;
}
+/**
+ Self-test the hash
+ @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled
+*/
int rmd128_test(void)
{
#ifndef LTC_TEST
diff --git a/rmd160.c b/src/hashes/rmd160.c
similarity index 88%
rename from rmd160.c
rename to src/hashes/rmd160.c
index 2079448b..a6171529 100644
--- a/rmd160.c
+++ b/src/hashes/rmd160.c
@@ -6,19 +6,24 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
+
+/**
+ @file rmd160.c
+ RMD160 hash function
+*/
/* Implementation of RIPEMD-160 based on the source by Antoon Bosselaers, ESAT-COSIC
*
* This source has been radically overhauled to be portable and work within
* the LibTomCrypt API by Tom St Denis
*/
-#include "mycrypt.h"
#ifdef RIPEMD160
-const struct _hash_descriptor rmd160_desc =
+const struct ltc_hash_descriptor rmd160_desc =
{
"rmd160",
9,
@@ -46,56 +51,56 @@ const struct _hash_descriptor rmd160_desc =
/* the ten basic operations FF() through III() */
#define FF(a, b, c, d, e, x, s) \
(a) += F((b), (c), (d)) + (x);\
- (a) = ROL((a), (s)) + (e);\
- (c) = ROL((c), 10);
+ (a) = ROLc((a), (s)) + (e);\
+ (c) = ROLc((c), 10);
#define GG(a, b, c, d, e, x, s) \
(a) += G((b), (c), (d)) + (x) + 0x5a827999UL;\
- (a) = ROL((a), (s)) + (e);\
- (c) = ROL((c), 10);
+ (a) = ROLc((a), (s)) + (e);\
+ (c) = ROLc((c), 10);
#define HH(a, b, c, d, e, x, s) \
(a) += H((b), (c), (d)) + (x) + 0x6ed9eba1UL;\
- (a) = ROL((a), (s)) + (e);\
- (c) = ROL((c), 10);
+ (a) = ROLc((a), (s)) + (e);\
+ (c) = ROLc((c), 10);
#define II(a, b, c, d, e, x, s) \
(a) += I((b), (c), (d)) + (x) + 0x8f1bbcdcUL;\
- (a) = ROL((a), (s)) + (e);\
- (c) = ROL((c), 10);
+ (a) = ROLc((a), (s)) + (e);\
+ (c) = ROLc((c), 10);
#define JJ(a, b, c, d, e, x, s) \
(a) += J((b), (c), (d)) + (x) + 0xa953fd4eUL;\
- (a) = ROL((a), (s)) + (e);\
- (c) = ROL((c), 10);
+ (a) = ROLc((a), (s)) + (e);\
+ (c) = ROLc((c), 10);
#define FFF(a, b, c, d, e, x, s) \
(a) += F((b), (c), (d)) + (x);\
- (a) = ROL((a), (s)) + (e);\
- (c) = ROL((c), 10);
+ (a) = ROLc((a), (s)) + (e);\
+ (c) = ROLc((c), 10);
#define GGG(a, b, c, d, e, x, s) \
(a) += G((b), (c), (d)) + (x) + 0x7a6d76e9UL;\
- (a) = ROL((a), (s)) + (e);\
- (c) = ROL((c), 10);
+ (a) = ROLc((a), (s)) + (e);\
+ (c) = ROLc((c), 10);
#define HHH(a, b, c, d, e, x, s) \
(a) += H((b), (c), (d)) + (x) + 0x6d703ef3UL;\
- (a) = ROL((a), (s)) + (e);\
- (c) = ROL((c), 10);
+ (a) = ROLc((a), (s)) + (e);\
+ (c) = ROLc((c), 10);
#define III(a, b, c, d, e, x, s) \
(a) += I((b), (c), (d)) + (x) + 0x5c4dd124UL;\
- (a) = ROL((a), (s)) + (e);\
- (c) = ROL((c), 10);
+ (a) = ROLc((a), (s)) + (e);\
+ (c) = ROLc((c), 10);
#define JJJ(a, b, c, d, e, x, s) \
(a) += J((b), (c), (d)) + (x) + 0x50a28be6UL;\
- (a) = ROL((a), (s)) + (e);\
- (c) = ROL((c), 10);
+ (a) = ROLc((a), (s)) + (e);\
+ (c) = ROLc((c), 10);
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static int _rmd160_compress(hash_state *md, unsigned char *buf)
#else
static int rmd160_compress(hash_state *md, unsigned char *buf)
@@ -307,7 +312,7 @@ static int rmd160_compress(hash_state *md, unsigned char *buf)
return CRYPT_OK;
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static int rmd160_compress(hash_state *md, unsigned char *buf)
{
int err;
@@ -317,9 +322,14 @@ static int rmd160_compress(hash_state *md, unsigned char *buf)
}
#endif
+/**
+ Initialize the hash state
+ @param md The hash state you wish to initialize
+ @return CRYPT_OK if successful
+*/
int rmd160_init(hash_state * md)
{
- _ARGCHK(md != NULL);
+ LTC_ARGCHK(md != NULL);
md->rmd160.state[0] = 0x67452301UL;
md->rmd160.state[1] = 0xefcdab89UL;
md->rmd160.state[2] = 0x98badcfeUL;
@@ -330,14 +340,27 @@ int rmd160_init(hash_state * md)
return CRYPT_OK;
}
+/**
+ Process a block of memory though the hash
+ @param md The hash state
+ @param in The data to hash
+ @param inlen The length of the data (octets)
+ @return CRYPT_OK if successful
+*/
HASH_PROCESS(rmd160_process, rmd160_compress, rmd160, 64)
-int rmd160_done(hash_state * md, unsigned char *hash)
+/**
+ Terminate the hash to get the digest
+ @param md The hash state
+ @param out [out] The destination of the hash (20 bytes)
+ @return CRYPT_OK if successful
+*/
+int rmd160_done(hash_state * md, unsigned char *out)
{
int i;
- _ARGCHK(md != NULL);
- _ARGCHK(hash != NULL);
+ LTC_ARGCHK(md != NULL);
+ LTC_ARGCHK(out != NULL);
if (md->rmd160.curlen >= sizeof(md->rmd160.buf)) {
return CRYPT_INVALID_ARG;
@@ -373,14 +396,18 @@ int rmd160_done(hash_state * md, unsigned char *hash)
/* copy output */
for (i = 0; i < 5; i++) {
- STORE32L(md->rmd160.state[i], hash+(4*i));
+ STORE32L(md->rmd160.state[i], out+(4*i));
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(md, sizeof(hash_state));
#endif
return CRYPT_OK;
}
+/**
+ Self-test the hash
+ @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled
+*/
int rmd160_test(void)
{
#ifndef LTC_TEST
diff --git a/sha1.c b/src/hashes/sha1.c
similarity index 78%
rename from sha1.c
rename to src/hashes/sha1.c
index d6e57c3b..267729bc 100644
--- a/sha1.c
+++ b/src/hashes/sha1.c
@@ -6,15 +6,19 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
+
+/**
+ @file sha1.c
+ SHA1 code by Tom St Denis
+*/
-/* SHA1 code by Tom St Denis */
-#include "mycrypt.h"
#ifdef SHA1
-const struct _hash_descriptor sha1_desc =
+const struct ltc_hash_descriptor sha1_desc =
{
"sha1",
2,
@@ -37,14 +41,14 @@ const struct _hash_descriptor sha1_desc =
#define F2(x,y,z) ((x & y) | (z & (x | y)))
#define F3(x,y,z) (x ^ y ^ z)
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static int _sha1_compress(hash_state *md, unsigned char *buf)
#else
static int sha1_compress(hash_state *md, unsigned char *buf)
#endif
{
ulong32 a,b,c,d,e,W[80],i;
-#ifdef SMALL_CODE
+#ifdef LTC_SMALL_CODE
ulong32 t;
#endif
@@ -67,12 +71,12 @@ static int sha1_compress(hash_state *md, unsigned char *buf)
/* compress */
/* round one */
- #define FF0(a,b,c,d,e,i) e = (ROL(a, 5) + F0(b,c,d) + e + W[i] + 0x5a827999UL); b = ROL(b, 30);
- #define FF1(a,b,c,d,e,i) e = (ROL(a, 5) + F1(b,c,d) + e + W[i] + 0x6ed9eba1UL); b = ROL(b, 30);
- #define FF2(a,b,c,d,e,i) e = (ROL(a, 5) + F2(b,c,d) + e + W[i] + 0x8f1bbcdcUL); b = ROL(b, 30);
- #define FF3(a,b,c,d,e,i) e = (ROL(a, 5) + F3(b,c,d) + e + W[i] + 0xca62c1d6UL); b = ROL(b, 30);
+ #define FF0(a,b,c,d,e,i) e = (ROLc(a, 5) + F0(b,c,d) + e + W[i] + 0x5a827999UL); b = ROLc(b, 30);
+ #define FF1(a,b,c,d,e,i) e = (ROLc(a, 5) + F1(b,c,d) + e + W[i] + 0x6ed9eba1UL); b = ROLc(b, 30);
+ #define FF2(a,b,c,d,e,i) e = (ROLc(a, 5) + F2(b,c,d) + e + W[i] + 0x8f1bbcdcUL); b = ROLc(b, 30);
+ #define FF3(a,b,c,d,e,i) e = (ROLc(a, 5) + F3(b,c,d) + e + W[i] + 0xca62c1d6UL); b = ROLc(b, 30);
-#ifdef SMALL_CODE
+#ifdef LTC_SMALL_CODE
for (i = 0; i < 20; ) {
FF0(a,b,c,d,e,i++); t = e; e = d; d = c; c = b; b = a; a = t;
@@ -143,7 +147,7 @@ static int sha1_compress(hash_state *md, unsigned char *buf)
return CRYPT_OK;
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static int sha1_compress(hash_state *md, unsigned char *buf)
{
int err;
@@ -153,9 +157,14 @@ static int sha1_compress(hash_state *md, unsigned char *buf)
}
#endif
+/**
+ Initialize the hash state
+ @param md The hash state you wish to initialize
+ @return CRYPT_OK if successful
+*/
int sha1_init(hash_state * md)
{
- _ARGCHK(md != NULL);
+ LTC_ARGCHK(md != NULL);
md->sha1.state[0] = 0x67452301UL;
md->sha1.state[1] = 0xefcdab89UL;
md->sha1.state[2] = 0x98badcfeUL;
@@ -166,14 +175,27 @@ int sha1_init(hash_state * md)
return CRYPT_OK;
}
+/**
+ Process a block of memory though the hash
+ @param md The hash state
+ @param in The data to hash
+ @param inlen The length of the data (octets)
+ @return CRYPT_OK if successful
+*/
HASH_PROCESS(sha1_process, sha1_compress, sha1, 64)
-int sha1_done(hash_state * md, unsigned char *hash)
+/**
+ Terminate the hash to get the digest
+ @param md The hash state
+ @param out [out] The destination of the hash (20 bytes)
+ @return CRYPT_OK if successful
+*/
+int sha1_done(hash_state * md, unsigned char *out)
{
int i;
- _ARGCHK(md != NULL);
- _ARGCHK(hash != NULL);
+ LTC_ARGCHK(md != NULL);
+ LTC_ARGCHK(out != NULL);
if (md->sha1.curlen >= sizeof(md->sha1.buf)) {
return CRYPT_INVALID_ARG;
@@ -208,14 +230,18 @@ int sha1_done(hash_state * md, unsigned char *hash)
/* copy output */
for (i = 0; i < 5; i++) {
- STORE32H(md->sha1.state[i], hash+(4*i));
+ STORE32H(md->sha1.state[i], out+(4*i));
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(md, sizeof(hash_state));
#endif
return CRYPT_OK;
}
+/**
+ Self-test the hash
+ @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled
+*/
int sha1_test(void)
{
#ifndef LTC_TEST
diff --git a/sha224.c b/src/hashes/sha2/sha224.c
similarity index 72%
rename from sha224.c
rename to src/hashes/sha2/sha224.c
index 2b25ff0a..8c0dcde4 100644
--- a/sha224.c
+++ b/src/hashes/sha2/sha224.c
@@ -6,11 +6,14 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+/**
+ @param sha224.c
+ SHA-224 new NIST standard based off of SHA-256 truncated to 224 bits (Tom St Denis)
+*/
-/* SHA-224 new NIST standard based off of SHA-256 truncated to 224 bits */
-const struct _hash_descriptor sha224_desc =
+const struct ltc_hash_descriptor sha224_desc =
{
"sha224",
10,
@@ -28,9 +31,14 @@ const struct _hash_descriptor sha224_desc =
};
/* init the sha256 er... sha224 state ;-) */
+/**
+ Initialize the hash state
+ @param md The hash state you wish to initialize
+ @return CRYPT_OK if successful
+*/
int sha224_init(hash_state * md)
{
- _ARGCHK(md != NULL);
+ LTC_ARGCHK(md != NULL);
md->sha256.curlen = 0;
md->sha256.length = 0;
@@ -45,19 +53,32 @@ int sha224_init(hash_state * md)
return CRYPT_OK;
}
-int sha224_done(hash_state * md, unsigned char *hash)
+/**
+ Terminate the hash to get the digest
+ @param md The hash state
+ @param out [out] The destination of the hash (28 bytes)
+ @return CRYPT_OK if successful
+*/
+int sha224_done(hash_state * md, unsigned char *out)
{
unsigned char buf[32];
int err;
+ LTC_ARGCHK(md != NULL);
+ LTC_ARGCHK(out != NULL);
+
err = sha256_done(md, buf);
- XMEMCPY(hash, buf, 28);
-#ifdef CLEAN_STACK
+ XMEMCPY(out, buf, 28);
+#ifdef LTC_CLEAN_STACK
zeromem(buf, sizeof(buf));
#endif
return err;
}
+/**
+ Self-test the hash
+ @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled
+*/
int sha224_test(void)
{
#ifndef LTC_TEST
diff --git a/sha256.c b/src/hashes/sha2/sha256.c
similarity index 90%
rename from sha256.c
rename to src/hashes/sha2/sha256.c
index b918e3f1..85eba2a3 100644
--- a/sha256.c
+++ b/src/hashes/sha2/sha256.c
@@ -6,17 +6,18 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
-
-/* SHA256 by Tom St Denis */
-
-#include "mycrypt.h"
+/**
+ @file sha256.c
+ SHA256 by Tom St Denis
+*/
#ifdef SHA256
-const struct _hash_descriptor sha256_desc =
+const struct ltc_hash_descriptor sha256_desc =
{
"sha256",
0,
@@ -35,7 +36,7 @@ const struct _hash_descriptor sha256_desc =
&sha256_test
};
-#ifdef SMALL_CODE
+#ifdef LTC_SMALL_CODE
/* the K array */
static const unsigned long K[64] = {
0x428a2f98UL, 0x71374491UL, 0xb5c0fbcfUL, 0xe9b5dba5UL, 0x3956c25bUL,
@@ -57,7 +58,7 @@ static const unsigned long K[64] = {
/* Various logical functions */
#define Ch(x,y,z) (z ^ (x & (y ^ z)))
#define Maj(x,y,z) (((x | y) & z) | (x & y))
-#define S(x, n) ROR((x),(n))
+#define S(x, n) RORc((x),(n))
#define R(x, n) (((x)&0xFFFFFFFFUL)>>(n))
#define Sigma0(x) (S(x, 2) ^ S(x, 13) ^ S(x, 22))
#define Sigma1(x) (S(x, 6) ^ S(x, 11) ^ S(x, 25))
@@ -65,14 +66,14 @@ static const unsigned long K[64] = {
#define Gamma1(x) (S(x, 17) ^ S(x, 19) ^ R(x, 10))
/* compress 512-bits */
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static int _sha256_compress(hash_state * md, unsigned char *buf)
#else
static int sha256_compress(hash_state * md, unsigned char *buf)
#endif
{
ulong32 S[8], W[64], t0, t1;
-#ifdef SMALL_CODE
+#ifdef LTC_SMALL_CODE
ulong32 t;
#endif
int i;
@@ -93,7 +94,7 @@ static int sha256_compress(hash_state * md, unsigned char *buf)
}
/* Compress */
-#ifdef SMALL_CODE
+#ifdef LTC_SMALL_CODE
#define RND(a,b,c,d,e,f,g,h,i) \
t0 = h + Sigma1(e) + Ch(e, f, g) + K[i] + W[i]; \
t1 = Sigma0(a) + Maj(a, b, c); \
@@ -188,7 +189,7 @@ static int sha256_compress(hash_state * md, unsigned char *buf)
return CRYPT_OK;
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static int sha256_compress(hash_state * md, unsigned char *buf)
{
int err;
@@ -198,10 +199,14 @@ static int sha256_compress(hash_state * md, unsigned char *buf)
}
#endif
-/* init the sha256 state */
+/**
+ Initialize the hash state
+ @param md The hash state you wish to initialize
+ @return CRYPT_OK if successful
+*/
int sha256_init(hash_state * md)
{
- _ARGCHK(md != NULL);
+ LTC_ARGCHK(md != NULL);
md->sha256.curlen = 0;
md->sha256.length = 0;
@@ -216,14 +221,27 @@ int sha256_init(hash_state * md)
return CRYPT_OK;
}
+/**
+ Process a block of memory though the hash
+ @param md The hash state
+ @param in The data to hash
+ @param inlen The length of the data (octets)
+ @return CRYPT_OK if successful
+*/
HASH_PROCESS(sha256_process, sha256_compress, sha256, 64)
-int sha256_done(hash_state * md, unsigned char *hash)
+/**
+ Terminate the hash to get the digest
+ @param md The hash state
+ @param out [out] The destination of the hash (32 bytes)
+ @return CRYPT_OK if successful
+*/
+int sha256_done(hash_state * md, unsigned char *out)
{
int i;
- _ARGCHK(md != NULL);
- _ARGCHK(hash != NULL);
+ LTC_ARGCHK(md != NULL);
+ LTC_ARGCHK(out != NULL);
if (md->sha256.curlen >= sizeof(md->sha256.buf)) {
return CRYPT_INVALID_ARG;
@@ -259,14 +277,18 @@ int sha256_done(hash_state * md, unsigned char *hash)
/* copy output */
for (i = 0; i < 8; i++) {
- STORE32H(md->sha256.state[i], hash+(4*i));
+ STORE32H(md->sha256.state[i], out+(4*i));
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(md, sizeof(hash_state));
#endif
return CRYPT_OK;
}
+/**
+ Self-test the hash
+ @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled
+*/
int sha256_test(void)
{
#ifndef LTC_TEST
diff --git a/sha384.c b/src/hashes/sha2/sha384.c
similarity index 77%
rename from sha384.c
rename to src/hashes/sha2/sha384.c
index 190e8cae..912145c3 100644
--- a/sha384.c
+++ b/src/hashes/sha2/sha384.c
@@ -6,12 +6,14 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+/**
+ @param sha384.c
+ SHA384 hash included in sha512.c, Tom St Denis
+*/
-/* included in sha512.c */
-
-const struct _hash_descriptor sha384_desc =
+const struct ltc_hash_descriptor sha384_desc =
{
"sha384",
4,
@@ -30,9 +32,14 @@ const struct _hash_descriptor sha384_desc =
&sha384_test
};
+/**
+ Initialize the hash state
+ @param md The hash state you wish to initialize
+ @return CRYPT_OK if successful
+*/
int sha384_init(hash_state * md)
{
- _ARGCHK(md != NULL);
+ LTC_ARGCHK(md != NULL);
md->sha512.curlen = 0;
md->sha512.length = 0;
@@ -47,25 +54,35 @@ int sha384_init(hash_state * md)
return CRYPT_OK;
}
-int sha384_done(hash_state * md, unsigned char *hash)
+/**
+ Terminate the hash to get the digest
+ @param md The hash state
+ @param out [out] The destination of the hash (48 bytes)
+ @return CRYPT_OK if successful
+*/
+int sha384_done(hash_state * md, unsigned char *out)
{
unsigned char buf[64];
- _ARGCHK(md != NULL);
- _ARGCHK(hash != NULL);
+ LTC_ARGCHK(md != NULL);
+ LTC_ARGCHK(out != NULL);
if (md->sha512.curlen >= sizeof(md->sha512.buf)) {
return CRYPT_INVALID_ARG;
}
sha512_done(md, buf);
- XMEMCPY(hash, buf, 48);
-#ifdef CLEAN_STACK
+ XMEMCPY(out, buf, 48);
+#ifdef LTC_CLEAN_STACK
zeromem(buf, sizeof(buf));
#endif
return CRYPT_OK;
}
+/**
+ Self-test the hash
+ @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled
+*/
int sha384_test(void)
{
#ifndef LTC_TEST
diff --git a/sha512.c b/src/hashes/sha2/sha512.c
similarity index 89%
rename from sha512.c
rename to src/hashes/sha2/sha512.c
index baf27cfe..3238f2b0 100644
--- a/sha512.c
+++ b/src/hashes/sha2/sha512.c
@@ -6,16 +6,18 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
-/* SHA512 by Tom St Denis */
-
-#include "mycrypt.h"
+/**
+ @param sha512.c
+ SHA512 by Tom St Denis
+*/
#ifdef SHA512
-const struct _hash_descriptor sha512_desc =
+const struct ltc_hash_descriptor sha512_desc =
{
"sha512",
5,
@@ -81,7 +83,7 @@ CONST64(0x5fcb6fab3ad6faec), CONST64(0x6c44198c4a475817)
/* Various logical functions */
#define Ch(x,y,z) (z ^ (x & (y ^ z)))
#define Maj(x,y,z) (((x | y) & z) | (x & y))
-#define S(x, n) ROR64((x),(n))
+#define S(x, n) ROR64c(x, n)
#define R(x, n) (((x)&CONST64(0xFFFFFFFFFFFFFFFF))>>((ulong64)n))
#define Sigma0(x) (S(x, 28) ^ S(x, 34) ^ S(x, 39))
#define Sigma1(x) (S(x, 14) ^ S(x, 18) ^ S(x, 41))
@@ -89,7 +91,7 @@ CONST64(0x5fcb6fab3ad6faec), CONST64(0x6c44198c4a475817)
#define Gamma1(x) (S(x, 19) ^ S(x, 61) ^ R(x, 6))
/* compress 1024-bits */
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static int _sha512_compress(hash_state * md, unsigned char *buf)
#else
static int sha512_compress(hash_state * md, unsigned char *buf)
@@ -114,7 +116,7 @@ static int sha512_compress(hash_state * md, unsigned char *buf)
}
/* Compress */
-#ifdef SMALL_CODE
+#ifdef LTC_SMALL_CODE
for (i = 0; i < 80; i++) {
t0 = S[7] + Sigma1(S[4]) + Ch(S[4], S[5], S[6]) + K[i] + W[i];
t1 = Sigma0(S[0]) + Maj(S[0], S[1], S[2]);
@@ -156,7 +158,7 @@ static int sha512_compress(hash_state * md, unsigned char *buf)
}
/* compress 1024-bits */
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static int sha512_compress(hash_state * md, unsigned char *buf)
{
int err;
@@ -166,10 +168,14 @@ static int sha512_compress(hash_state * md, unsigned char *buf)
}
#endif
-/* init the sha512 state */
+/**
+ Initialize the hash state
+ @param md The hash state you wish to initialize
+ @return CRYPT_OK if successful
+*/
int sha512_init(hash_state * md)
{
- _ARGCHK(md != NULL);
+ LTC_ARGCHK(md != NULL);
md->sha512.curlen = 0;
md->sha512.length = 0;
md->sha512.state[0] = CONST64(0x6a09e667f3bcc908);
@@ -183,14 +189,27 @@ int sha512_init(hash_state * md)
return CRYPT_OK;
}
+/**
+ Process a block of memory though the hash
+ @param md The hash state
+ @param in The data to hash
+ @param inlen The length of the data (octets)
+ @return CRYPT_OK if successful
+*/
HASH_PROCESS(sha512_process, sha512_compress, sha512, 128)
-int sha512_done(hash_state * md, unsigned char *hash)
+/**
+ Terminate the hash to get the digest
+ @param md The hash state
+ @param out [out] The destination of the hash (64 bytes)
+ @return CRYPT_OK if successful
+*/
+int sha512_done(hash_state * md, unsigned char *out)
{
int i;
- _ARGCHK(md != NULL);
- _ARGCHK(hash != NULL);
+ LTC_ARGCHK(md != NULL);
+ LTC_ARGCHK(out != NULL);
if (md->sha512.curlen >= sizeof(md->sha512.buf)) {
return CRYPT_INVALID_ARG;
@@ -228,14 +247,18 @@ int sha512_done(hash_state * md, unsigned char *hash)
/* copy output */
for (i = 0; i < 8; i++) {
- STORE64H(md->sha512.state[i], hash+(8*i));
+ STORE64H(md->sha512.state[i], out+(8*i));
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(md, sizeof(hash_state));
#endif
return CRYPT_OK;
}
+/**
+ Self-test the hash
+ @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled
+*/
int sha512_test(void)
{
#ifndef LTC_TEST
diff --git a/tiger.c b/src/hashes/tiger.c
similarity index 97%
rename from tiger.c
rename to src/hashes/tiger.c
index 32359539..a1cd8883 100644
--- a/tiger.c
+++ b/src/hashes/tiger.c
@@ -6,14 +6,19 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file tiger.c
+ Tiger hash function, Tom St Denis
+*/
#ifdef TIGER
-const struct _hash_descriptor tiger_desc =
+const struct ltc_hash_descriptor tiger_desc =
{
"tiger",
1,
@@ -605,7 +610,7 @@ static void key_schedule(ulong64 *x)
x[7] -= x[6] ^ CONST64(0x0123456789ABCDEF);
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static int _tiger_compress(hash_state *md, unsigned char *buf)
#else
static int tiger_compress(hash_state *md, unsigned char *buf)
@@ -636,7 +641,7 @@ static int tiger_compress(hash_state *md, unsigned char *buf)
return CRYPT_OK;
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static int tiger_compress(hash_state *md, unsigned char *buf)
{
int err;
@@ -646,9 +651,14 @@ static int tiger_compress(hash_state *md, unsigned char *buf)
}
#endif
+/**
+ Initialize the hash state
+ @param md The hash state you wish to initialize
+ @return CRYPT_OK if successful
+*/
int tiger_init(hash_state *md)
{
- _ARGCHK(md != NULL);
+ LTC_ARGCHK(md != NULL);
md->tiger.state[0] = CONST64(0x0123456789ABCDEF);
md->tiger.state[1] = CONST64(0xFEDCBA9876543210);
md->tiger.state[2] = CONST64(0xF096A5B4C3B2E187);
@@ -657,12 +667,25 @@ int tiger_init(hash_state *md)
return CRYPT_OK;
}
+/**
+ Process a block of memory though the hash
+ @param md The hash state
+ @param in The data to hash
+ @param inlen The length of the data (octets)
+ @return CRYPT_OK if successful
+*/
HASH_PROCESS(tiger_process, tiger_compress, tiger, 64)
-int tiger_done(hash_state * md, unsigned char *hash)
+/**
+ Terminate the hash to get the digest
+ @param md The hash state
+ @param out [out] The destination of the hash (24 bytes)
+ @return CRYPT_OK if successful
+*/
+int tiger_done(hash_state * md, unsigned char *out)
{
- _ARGCHK(md != NULL);
- _ARGCHK(hash != NULL);
+ LTC_ARGCHK(md != NULL);
+ LTC_ARGCHK(out != NULL);
if (md->tiger.curlen >= sizeof(md->tiger.buf)) {
return CRYPT_INVALID_ARG;
@@ -695,16 +718,20 @@ int tiger_done(hash_state * md, unsigned char *hash)
tiger_compress(md, md->tiger.buf);
/* copy output */
- STORE64L(md->tiger.state[0], &hash[0]);
- STORE64L(md->tiger.state[1], &hash[8]);
- STORE64L(md->tiger.state[2], &hash[16]);
-#ifdef CLEAN_STACK
+ STORE64L(md->tiger.state[0], &out[0]);
+ STORE64L(md->tiger.state[1], &out[8]);
+ STORE64L(md->tiger.state[2], &out[16]);
+#ifdef LTC_CLEAN_STACK
zeromem(md, sizeof(hash_state));
#endif
return CRYPT_OK;
}
+/**
+ Self-test the hash
+ @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled
+*/
int tiger_test(void)
{
#ifndef LTC_TEST
diff --git a/whirl.c b/src/hashes/whirl/whirl.c
similarity index 88%
rename from whirl.c
rename to src/hashes/whirl/whirl.c
index 8135b930..ff0b4367 100644
--- a/whirl.c
+++ b/src/hashes/whirl/whirl.c
@@ -6,16 +6,19 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* WHIRLPOOL (using their new sbox) hash function by Tom St Denis */
+/**
+ @file whirl.c
+ WHIRLPOOL (using their new sbox) hash function by Tom St Denis
+*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
#ifdef WHIRLPOOL
-const struct _hash_descriptor whirlpool_desc =
+const struct ltc_hash_descriptor whirlpool_desc =
{
"whirlpool",
11,
@@ -49,7 +52,7 @@ const struct _hash_descriptor whirlpool_desc =
SB6(GB(a, i-6, 1)) ^ \
SB7(GB(a, i-7, 0))
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static int _whirlpool_compress(hash_state *md, unsigned char *buf)
#else
static int whirlpool_compress(hash_state *md, unsigned char *buf)
@@ -105,7 +108,7 @@ static int whirlpool_compress(hash_state *md, unsigned char *buf)
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
static int whirlpool_compress(hash_state *md, unsigned char *buf)
{
int err;
@@ -116,21 +119,39 @@ static int whirlpool_compress(hash_state *md, unsigned char *buf)
#endif
+/**
+ Initialize the hash state
+ @param md The hash state you wish to initialize
+ @return CRYPT_OK if successful
+*/
int whirlpool_init(hash_state * md)
{
- _ARGCHK(md != NULL);
+ LTC_ARGCHK(md != NULL);
zeromem(&md->whirlpool, sizeof(md->whirlpool));
return CRYPT_OK;
}
+/**
+ Process a block of memory though the hash
+ @param md The hash state
+ @param in The data to hash
+ @param inlen The length of the data (octets)
+ @return CRYPT_OK if successful
+*/
HASH_PROCESS(whirlpool_process, whirlpool_compress, whirlpool, 64)
-int whirlpool_done(hash_state * md, unsigned char *hash)
+/**
+ Terminate the hash to get the digest
+ @param md The hash state
+ @param out [out] The destination of the hash (64 bytes)
+ @return CRYPT_OK if successful
+*/
+int whirlpool_done(hash_state * md, unsigned char *out)
{
int i;
- _ARGCHK(md != NULL);
- _ARGCHK(hash != NULL);
+ LTC_ARGCHK(md != NULL);
+ LTC_ARGCHK(out != NULL);
if (md->whirlpool.curlen >= sizeof(md->whirlpool.buf)) {
return CRYPT_INVALID_ARG;
@@ -165,15 +186,18 @@ int whirlpool_done(hash_state * md, unsigned char *hash)
/* copy output */
for (i = 0; i < 8; i++) {
- STORE64H(md->whirlpool.state[i], hash+(8*i));
+ STORE64H(md->whirlpool.state[i], out+(8*i));
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(md, sizeof(*md));
#endif
return CRYPT_OK;
}
-
+/**
+ Self-test the hash
+ @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled
+*/
int whirlpool_test(void)
{
#ifndef LTC_TEST
diff --git a/whirltab.c b/src/hashes/whirl/whirltab.c
similarity index 99%
rename from whirltab.c
rename to src/hashes/whirl/whirltab.c
index 031c6432..fb99bea8 100644
--- a/whirltab.c
+++ b/src/hashes/whirl/whirltab.c
@@ -1,3 +1,7 @@
+/**
+ @file whirltab.c
+ WHIRLPOOL tables, Tom St Denis
+*/
static const ulong64 sbox0[] = {
CONST64(0x18186018c07830d8), CONST64(0x23238c2305af4626), CONST64(0xc6c63fc67ef991b8), CONST64(0xe8e887e8136fcdfb),
CONST64(0x878726874ca113cb), CONST64(0xb8b8dab8a9626d11), CONST64(0x0101040108050209), CONST64(0x4f4f214f426e9e0d),
@@ -65,16 +69,16 @@ CONST64(0xcccc17cc2edb85e2), CONST64(0x424215422a578468), CONST64(0x98985a98b4c2
CONST64(0x2828a0285d885075), CONST64(0x5c5c6d5cda31b886), CONST64(0xf8f8c7f8933fed6b), CONST64(0x8686228644a411c2)
};
-#ifdef SMALL_CODE
+#ifdef LTC_SMALL_CODE
#define SB0(x) sbox0[x]
-#define SB1(x) ROR64(sbox0[x], 8)
-#define SB2(x) ROR64(sbox0[x], 16)
-#define SB3(x) ROR64(sbox0[x], 24)
-#define SB4(x) ROR64(sbox0[x], 32)
-#define SB5(x) ROR64(sbox0[x], 40)
-#define SB6(x) ROR64(sbox0[x], 48)
-#define SB7(x) ROR64(sbox0[x], 56)
+#define SB1(x) ROR64c(sbox0[x], 8)
+#define SB2(x) ROR64c(sbox0[x], 16)
+#define SB3(x) ROR64c(sbox0[x], 24)
+#define SB4(x) ROR64c(sbox0[x], 32)
+#define SB5(x) ROR64c(sbox0[x], 40)
+#define SB6(x) ROR64c(sbox0[x], 48)
+#define SB7(x) ROR64c(sbox0[x], 56)
#else
diff --git a/ltc_tommath.h b/src/headers/ltc_tommath.h
similarity index 95%
rename from ltc_tommath.h
rename to src/headers/ltc_tommath.h
index 896d389a..05212e51 100644
--- a/ltc_tommath.h
+++ b/src/headers/ltc_tommath.h
@@ -112,7 +112,7 @@ extern "C" {
#else
/* prototypes for our heap functions */
extern void *XMALLOC(size_t n);
- extern void *REALLOC(void *p, size_t n);
+ extern void *XREALLOC(void *p, size_t n);
extern void *XCALLOC(size_t n, size_t s);
extern void XFREE(void *p);
#endif
@@ -147,7 +147,6 @@ extern "C" {
/* Primality generation flags */
#define LTM_PRIME_BBS 0x0001 /* BBS style prime */
#define LTM_PRIME_SAFE 0x0002 /* Safe prime (p-1)/2 == prime */
-#define LTM_PRIME_2MSB_OFF 0x0004 /* force 2nd MSB to 0 */
#define LTM_PRIME_2MSB_ON 0x0008 /* force 2nd MSB to 1 */
typedef int mp_err;
@@ -429,6 +428,15 @@ int mp_reduce_2k_setup(mp_int *a, mp_digit *d);
/* reduces a modulo b where b is of the form 2**p - k [0 <= a] */
int mp_reduce_2k(mp_int *a, mp_int *n, mp_digit d);
+/* returns true if a can be reduced with mp_reduce_2k_l */
+int mp_reduce_is_2k_l(mp_int *a);
+
+/* determines k value for 2k reduction */
+int mp_reduce_2k_setup_l(mp_int *a, mp_int *d);
+
+/* reduces a modulo b where b is of the form 2**p - k [0 <= a] */
+int mp_reduce_2k_l(mp_int *a, mp_int *n, mp_int *d);
+
/* d = a**b (mod c) */
int mp_exptmod(mp_int *a, mp_int *b, mp_int *c, mp_int *d);
@@ -442,7 +450,7 @@ int mp_exptmod(mp_int *a, mp_int *b, mp_int *c, mp_int *d);
#endif
/* table of first PRIME_SIZE primes */
-extern const mp_digit __prime_tab[];
+extern const mp_digit ltm_prime_tab[];
/* result=1 if a is divisible by one of the first PRIME_SIZE primes */
int mp_prime_is_divisible(mp_int *a, int *result);
@@ -509,14 +517,16 @@ int mp_prime_random_ex(mp_int *a, int t, int size, int flags, ltm_prime_callback
int mp_count_bits(mp_int *a);
int mp_unsigned_bin_size(mp_int *a);
-int mp_read_unsigned_bin(mp_int *a, unsigned char *b, int c);
+int mp_read_unsigned_bin(mp_int *a, const unsigned char *b, int c);
int mp_to_unsigned_bin(mp_int *a, unsigned char *b);
+int mp_to_unsigned_bin_n (mp_int * a, unsigned char *b, unsigned long *outlen);
int mp_signed_bin_size(mp_int *a);
-int mp_read_signed_bin(mp_int *a, unsigned char *b, int c);
-int mp_to_signed_bin(mp_int *a, unsigned char *b);
+int mp_read_signed_bin(mp_int *a, const unsigned char *b, int c);
+int mp_to_signed_bin(mp_int *a, unsigned char *b);
+int mp_to_signed_bin_n (mp_int * a, unsigned char *b, unsigned long *outlen);
-int mp_read_radix(mp_int *a, char *str, int radix);
+int mp_read_radix(mp_int *a, const char *str, int radix);
int mp_toradix(mp_int *a, char *str, int radix);
int mp_toradix_n(mp_int * a, char *str, int radix, int maxlen);
int mp_radix_size(mp_int *a, int radix, int *size);
@@ -554,7 +564,7 @@ int fast_mp_invmod(mp_int *a, mp_int *b, mp_int *c);
int mp_invmod_slow (mp_int * a, mp_int * b, mp_int * c);
int fast_mp_montgomery_reduce(mp_int *a, mp_int *m, mp_digit mp);
int mp_exptmod_fast(mp_int *G, mp_int *X, mp_int *P, mp_int *Y, int mode);
-int s_mp_exptmod (mp_int * G, mp_int * X, mp_int * P, mp_int * Y);
+int s_mp_exptmod (mp_int * G, mp_int * X, mp_int * P, mp_int * Y, int mode);
void bn_reverse(unsigned char *s, int len);
extern const char *mp_s_rmap;
diff --git a/mycrypt.h b/src/headers/tomcrypt.h
similarity index 79%
rename from mycrypt.h
rename to src/headers/tomcrypt.h
index 1d6a9389..0d34c745 100644
--- a/mycrypt.h
+++ b/src/headers/tomcrypt.h
@@ -1,5 +1,5 @@
-#ifndef CRYPT_H_
-#define CRYPT_H_
+#ifndef TOMCRYPT_H_
+#define TOMCRYPT_H_
#include <assert.h>
#include <stdio.h>
#include <string.h>
@@ -8,19 +8,19 @@
#include <ctype.h>
#include <limits.h>
-/* if there is a custom definition header file use it */
-#include <mycrypt_custom.h>
+/* use configuration data */
+#include <tomcrypt_custom.h>
#ifdef __cplusplus
extern "C" {
#endif
/* version */
-#define CRYPT 0x0099
-#define SCRYPT "0.99"
+#define CRYPT 0x0102
+#define SCRYPT "1.02"
/* max size of either a cipher/hash block or symmetric key [largest of the two] */
-#define MAXBLOCKSIZE 64
+#define MAXBLOCKSIZE 128
/* descriptor table size */
#define TAB_SIZE 32
@@ -62,19 +62,20 @@ enum {
CRYPT_INVALID_PRIME_SIZE/* Invalid size of prime requested */
};
-#include <mycrypt_cfg.h>
-#include <mycrypt_macros.h>
-#include <mycrypt_cipher.h>
-#include <mycrypt_hash.h>
-#include <mycrypt_prng.h>
-#include <mycrypt_pk.h>
-#include <mycrypt_misc.h>
-#include <mycrypt_argchk.h>
-#include <mycrypt_pkcs.h>
+#include <tomcrypt_cfg.h>
+#include <tomcrypt_macros.h>
+#include <tomcrypt_cipher.h>
+#include <tomcrypt_hash.h>
+#include <tomcrypt_mac.h>
+#include <tomcrypt_prng.h>
+#include <tomcrypt_pk.h>
+#include <tomcrypt_misc.h>
+#include <tomcrypt_argchk.h>
+#include <tomcrypt_pkcs.h>
#ifdef __cplusplus
}
#endif
-#endif /* CRYPT_H_ */
+#endif /* TOMCRYPT_H_ */
diff --git a/mycrypt_argchk.h b/src/headers/tomcrypt_argchk.h
similarity index 56%
rename from mycrypt_argchk.h
rename to src/headers/tomcrypt_argchk.h
index 69f27d69..5c8759db 100644
--- a/mycrypt_argchk.h
+++ b/src/headers/tomcrypt_argchk.h
@@ -1,4 +1,4 @@
-/* Defines the _ARGCHK macro used within the library */
+/* Defines the LTC_ARGCHK macro used within the library */
/* ARGTYPE is defined in mycrypt_cfg.h */
#if ARGTYPE == 0
@@ -6,16 +6,16 @@
/* this is the default LibTomCrypt macro */
void crypt_argchk(char *v, char *s, int d);
-#define _ARGCHK(x) if (!(x)) { crypt_argchk(#x, __FILE__, __LINE__); }
+#define LTC_ARGCHK(x) if (!(x)) { crypt_argchk(#x, __FILE__, __LINE__); }
#elif ARGTYPE == 1
/* fatal type of error */
-#define _ARGCHK(x) assert((x))
+#define LTC_ARGCHK(x) assert((x))
#elif ARGTYPE == 2
-#define _ARGCHK(x)
+#define LTC_ARGCHK(x)
#endif
diff --git a/mycrypt_cfg.h b/src/headers/tomcrypt_cfg.h
similarity index 81%
rename from mycrypt_cfg.h
rename to src/headers/tomcrypt_cfg.h
index b440e0be..a0022d13 100644
--- a/mycrypt_cfg.h
+++ b/src/headers/tomcrypt_cfg.h
@@ -4,12 +4,12 @@
* out the line that #define's the word for the thing you want to remove. phew!
*/
-#ifndef MYCRYPT_CFG_H
-#define MYCRYPT_CFG_H
+#ifndef TOMCRYPT_CFG_H
+#define TOMCRYPT_CFG_H
/* you can change how memory allocation works ... */
void *XMALLOC(size_t n);
-void *REALLOC(void *p, size_t n);
+void *XREALLOC(void *p, size_t n);
void *XCALLOC(size_t n, size_t s);
void XFREE(void *p);
@@ -34,6 +34,8 @@ int XMEMCMP(const void *s1, const void *s2, size_t n);
#if defined(INTEL_CC) || (defined(_MSC_VER) && defined(WIN32)) || (defined(__GNUC__) && (defined(__DJGPP__) || defined(__CYGWIN__) || defined(__MINGW32__) || defined(__i386__)))
#define ENDIAN_LITTLE
#define ENDIAN_32BITWORD
+ #define LTC_FAST
+ #define LTC_FAST_TYPE unsigned long
#endif
/* detects MIPS R5900 processors (PS2) */
@@ -46,6 +48,26 @@ int XMEMCMP(const void *s1, const void *s2, size_t n);
#if defined(__x86_64__)
#define ENDIAN_LITTLE
#define ENDIAN_64BITWORD
+ #define LTC_FAST
+ #define LTC_FAST_TYPE unsigned long
+#endif
+
+#ifdef LTC_NO_FAST
+ #ifdef LTC_FAST
+ #undef LTC_FAST
+ #endif
+#endif
+
+/* No asm is a quick way to disable anything "not portable" */
+#ifdef LTC_NO_ASM
+ #undef ENDIAN_LITTLE
+ #undef ENDIAN_BIG
+ #undef ENDIAN_32BITWORD
+ #undef ENDIAN_64BITWORD
+ #undef LTC_FAST
+ #undef LTC_FAST_TYPE
+ #define LTC_NO_ROLC
+ #define LTC_NO_BSWAP
#endif
/* #define ENDIAN_LITTLE */
@@ -82,5 +104,5 @@ int XMEMCMP(const void *s1, const void *s2, size_t n);
#define PACKET_SUB_ENC_KEY 3
#endif
-#endif /* MYCRYPT_CFG_H */
+#endif
diff --git a/src/headers/tomcrypt_cipher.h b/src/headers/tomcrypt_cipher.h
new file mode 100644
index 00000000..af184c28
--- /dev/null
+++ b/src/headers/tomcrypt_cipher.h
@@ -0,0 +1,619 @@
+/* ---- SYMMETRIC KEY STUFF -----
+ *
+ * We put each of the ciphers scheduled keys in their own structs then we put all of
+ * the key formats in one union. This makes the function prototypes easier to use.
+ */
+#ifdef BLOWFISH
+struct blowfish_key {
+ ulong32 S[4][256];
+ ulong32 K[18];
+};
+#endif
+
+#ifdef RC5
+struct rc5_key {
+ int rounds;
+ ulong32 K[50];
+};
+#endif
+
+#ifdef RC6
+struct rc6_key {
+ ulong32 K[44];
+};
+#endif
+
+#ifdef SAFERP
+struct saferp_key {
+ unsigned char K[33][16];
+ long rounds;
+};
+#endif
+
+#ifdef RIJNDAEL
+struct rijndael_key {
+ ulong32 eK[64], dK[64];
+ int Nr;
+};
+#endif
+
+#ifdef XTEA
+struct xtea_key {
+ unsigned long A[32], B[32];
+};
+#endif
+
+#ifdef TWOFISH
+#ifndef TWOFISH_SMALL
+ struct twofish_key {
+ ulong32 S[4][256], K[40];
+ };
+#else
+ struct twofish_key {
+ ulong32 K[40];
+ unsigned char S[32], start;
+ };
+#endif
+#endif
+
+#ifdef SAFER
+#define SAFER_K64_DEFAULT_NOF_ROUNDS 6
+#define SAFER_K128_DEFAULT_NOF_ROUNDS 10
+#define SAFER_SK64_DEFAULT_NOF_ROUNDS 8
+#define SAFER_SK128_DEFAULT_NOF_ROUNDS 10
+#define SAFER_MAX_NOF_ROUNDS 13
+#define SAFER_BLOCK_LEN 8
+#define SAFER_KEY_LEN (1 + SAFER_BLOCK_LEN * (1 + 2 * SAFER_MAX_NOF_ROUNDS))
+typedef unsigned char safer_block_t[SAFER_BLOCK_LEN];
+typedef unsigned char safer_key_t[SAFER_KEY_LEN];
+struct safer_key { safer_key_t key; };
+#endif
+
+#ifdef RC2
+struct rc2_key { unsigned xkey[64]; };
+#endif
+
+#ifdef DES
+struct des_key {
+ ulong32 ek[32], dk[32];
+};
+
+struct des3_key {
+ ulong32 ek[3][32], dk[3][32];
+};
+#endif
+
+#ifdef CAST5
+struct cast5_key {
+ ulong32 K[32], keylen;
+};
+#endif
+
+#ifdef NOEKEON
+struct noekeon_key {
+ ulong32 K[4], dK[4];
+};
+#endif
+
+#ifdef SKIPJACK
+struct skipjack_key {
+ unsigned char key[10];
+};
+#endif
+
+#ifdef KHAZAD
+struct khazad_key {
+ ulong64 roundKeyEnc[8 + 1];
+ ulong64 roundKeyDec[8 + 1];
+};
+#endif
+
+#ifdef ANUBIS
+struct anubis_key {
+ int keyBits;
+ int R;
+ ulong32 roundKeyEnc[18 + 1][4];
+ ulong32 roundKeyDec[18 + 1][4];
+};
+#endif
+
+typedef union Symmetric_key {
+#ifdef DES
+ struct des_key des;
+ struct des3_key des3;
+#endif
+#ifdef RC2
+ struct rc2_key rc2;
+#endif
+#ifdef SAFER
+ struct safer_key safer;
+#endif
+#ifdef TWOFISH
+ struct twofish_key twofish;
+#endif
+#ifdef BLOWFISH
+ struct blowfish_key blowfish;
+#endif
+#ifdef RC5
+ struct rc5_key rc5;
+#endif
+#ifdef RC6
+ struct rc6_key rc6;
+#endif
+#ifdef SAFERP
+ struct saferp_key saferp;
+#endif
+#ifdef RIJNDAEL
+ struct rijndael_key rijndael;
+#endif
+#ifdef XTEA
+ struct xtea_key xtea;
+#endif
+#ifdef CAST5
+ struct cast5_key cast5;
+#endif
+#ifdef NOEKEON
+ struct noekeon_key noekeon;
+#endif
+#ifdef SKIPJACK
+ struct skipjack_key skipjack;
+#endif
+#ifdef KHAZAD
+ struct khazad_key khazad;
+#endif
+#ifdef ANUBIS
+ struct anubis_key anubis;
+#endif
+ void *data;
+} symmetric_key;
+
+/* A block cipher ECB structure */
+typedef struct {
+ /** The index of the cipher chosen */
+ int cipher,
+ /** The block size of the given cipher */
+ blocklen;
+ /** The scheduled key */
+ symmetric_key key;
+} symmetric_ECB;
+
+/* A block cipher CFB structure */
+typedef struct {
+ /** The index of the cipher chosen */
+ int cipher,
+ /** The block size of the given cipher */
+ blocklen,
+ /** The padding offset */
+ padlen;
+ /** The current IV */
+ unsigned char IV[MAXBLOCKSIZE],
+ /** The pad used to encrypt/decrypt */
+ pad[MAXBLOCKSIZE];
+ /** The scheduled key */
+ symmetric_key key;
+} symmetric_CFB;
+
+/* A block cipher OFB structure */
+typedef struct {
+ /** The index of the cipher chosen */
+ int cipher,
+ /** The block size of the given cipher */
+ blocklen,
+ /** The padding offset */
+ padlen;
+ /** The current IV */
+ unsigned char IV[MAXBLOCKSIZE];
+ /** The scheduled key */
+ symmetric_key key;
+} symmetric_OFB;
+
+/* A block cipher CBC structure */
+typedef struct {
+ /** The index of the cipher chosen */
+ int cipher,
+ /** The block size of the given cipher */
+ blocklen;
+ /** The current IV */
+ unsigned char IV[MAXBLOCKSIZE];
+ /** The scheduled key */
+ symmetric_key key;
+} symmetric_CBC;
+
+/* A block cipher CTR structure */
+typedef struct {
+ /** The index of the cipher chosen */
+ int cipher,
+ /** The block size of the given cipher */
+ blocklen,
+ /** The padding offset */
+ padlen,
+ /** The mode (endianess) of the CTR, 0==little, 1==big */
+ mode;
+ /** The counter */
+ unsigned char ctr[MAXBLOCKSIZE],
+ /** The pad used to encrypt/decrypt */
+ pad[MAXBLOCKSIZE];
+ /** The scheduled key */
+ symmetric_key key;
+} symmetric_CTR;
+
+/* cipher descriptor table, last entry has "name == NULL" to mark the end of table */
+extern struct ltc_cipher_descriptor {
+ /** name of cipher */
+ char *name;
+ /** internal ID */
+ unsigned char ID;
+ /** min keysize (octets) */
+ int min_key_length,
+ /** max keysize (octets) */
+ max_key_length,
+ /** block size (octets) */
+ block_length,
+ /** default number of rounds */
+ default_rounds;
+ /** Setup the cipher
+ @param key The input symmetric key
+ @param keylen The length of the input key (octets)
+ @param num_rounds The requested number of rounds (0==default)
+ @param skey [out] The destination of the scheduled key
+ @return CRYPT_OK if successful
+ */
+ int (*setup)(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
+ /** Encrypt a block
+ @param pt The plaintext
+ @param ct [out] The ciphertext
+ @param skey The scheduled key
+ */
+ void (*ecb_encrypt)(const unsigned char *pt, unsigned char *ct, symmetric_key *skey);
+ /** Decrypt a block
+ @param ct The ciphertext
+ @param pt [out] The plaintext
+ @param skey The scheduled key
+ */
+ void (*ecb_decrypt)(const unsigned char *ct, unsigned char *pt, symmetric_key *skey);
+ /** Test the block cipher
+ @return CRYPT_OK if successful, CRYPT_NOP if self-testing has been disabled
+ */
+ int (*test)(void);
+
+ /** Terminate the context
+ @param skey The scheduled key
+ */
+ void (*done)(symmetric_key *skey);
+
+ /** Determine a key size
+ @param keysize [in/out] The size of the key desired and the suggested size
+ @return CRYPT_OK if successful
+ */
+ int (*keysize)(int *keysize);
+
+/** Accelerators **/
+ /** Accelerated ECB encryption
+ @param pt Plaintext
+ @param ct Ciphertext
+ @param blocks The number of complete blocks to process
+ @param skey The scheduled key context
+ */
+ void (*accel_ecb_encrypt)(const unsigned char *pt, unsigned char *ct, unsigned long blocks, symmetric_key *skey);
+
+ /** Accelerated ECB decryption
+ @param pt Plaintext
+ @param ct Ciphertext
+ @param blocks The number of complete blocks to process
+ @param skey The scheduled key context
+ */
+ void (*accel_ecb_decrypt)(const unsigned char *ct, unsigned char *pt, unsigned long blocks, symmetric_key *skey);
+
+ /** Accelerated CBC encryption
+ @param pt Plaintext
+ @param ct Ciphertext
+ @param blocks The number of complete blocks to process
+ @param IV The initial value (input/output)
+ @param skey The scheduled key context
+ */
+ void (*accel_cbc_encrypt)(const unsigned char *pt, unsigned char *ct, unsigned long blocks, unsigned char *IV, symmetric_key *skey);
+
+ /** Accelerated CBC decryption
+ @param pt Plaintext
+ @param ct Ciphertext
+ @param blocks The number of complete blocks to process
+ @param IV The initial value (input/output)
+ @param skey The scheduled key context
+ */
+ void (*accel_cbc_decrypt)(const unsigned char *ct, unsigned char *pt, unsigned long blocks, unsigned char *IV, symmetric_key *skey);
+
+ /** Accelerated CTR encryption
+ @param pt Plaintext
+ @param ct Ciphertext
+ @param blocks The number of complete blocks to process
+ @param IV The initial value (input/output)
+ @param mode little or big endian counter (mode=0 or mode=1)
+ @param skey The scheduled key context
+ */
+ void (*accel_ctr_encrypt)(const unsigned char *pt, unsigned char *ct, unsigned long blocks, unsigned char *IV, int mode, symmetric_key *skey);
+
+ /** Accelerated CCM packet (one-shot)
+ @param key The secret key to use
+ @param keylen The length of the secret key (octets)
+ @param nonce The session nonce [use once]
+ @param noncelen The length of the nonce
+ @param header The header for the session
+ @param headerlen The length of the header (octets)
+ @param pt [out] The plaintext
+ @param ptlen The length of the plaintext (octets)
+ @param ct [out] The ciphertext
+ @param tag [out] The destination tag
+ @param taglen [in/out] The max size and resulting size of the authentication tag
+ @param direction Encrypt or Decrypt direction (0 or 1)
+ @return CRYPT_OK if successful
+ */
+ void (*accel_ccm_memory)(
+ const unsigned char *key, unsigned long keylen,
+ const unsigned char *nonce, unsigned long noncelen,
+ const unsigned char *header, unsigned long headerlen,
+ unsigned char *pt, unsigned long ptlen,
+ unsigned char *ct,
+ unsigned char *tag, unsigned long *taglen,
+ int direction);
+
+ /** Accelerated GCM packet (one shot)
+ @param key The secret key
+ @param keylen The length of the secret key
+ @param IV The initial vector
+ @param IVlen The length of the initial vector
+ @param adata The additional authentication data (header)
+ @param adatalen The length of the adata
+ @param pt The plaintext
+ @param ptlen The length of the plaintext (ciphertext length is the same)
+ @param ct The ciphertext
+ @param tag [out] The MAC tag
+ @param taglen [in/out] The MAC tag length
+ @param direction Encrypt or Decrypt mode (GCM_ENCRYPT or GCM_DECRYPT)
+ */
+ void (*accel_gcm_memory)(
+ const unsigned char *key, unsigned long keylen,
+ const unsigned char *IV, unsigned long IVlen,
+ const unsigned char *adata, unsigned long adatalen,
+ unsigned char *pt, unsigned long ptlen,
+ unsigned char *ct,
+ unsigned char *tag, unsigned long *taglen,
+ int direction);
+} cipher_descriptor[];
+
+#ifdef BLOWFISH
+int blowfish_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
+void blowfish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey);
+void blowfish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey);
+int blowfish_test(void);
+void blowfish_done(symmetric_key *skey);
+int blowfish_keysize(int *keysize);
+extern const struct ltc_cipher_descriptor blowfish_desc;
+#endif
+
+#ifdef RC5
+int rc5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
+void rc5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey);
+void rc5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey);
+int rc5_test(void);
+void rc5_done(symmetric_key *skey);
+int rc5_keysize(int *keysize);
+extern const struct ltc_cipher_descriptor rc5_desc;
+#endif
+
+#ifdef RC6
+int rc6_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
+void rc6_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey);
+void rc6_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey);
+int rc6_test(void);
+void rc6_done(symmetric_key *skey);
+int rc6_keysize(int *keysize);
+extern const struct ltc_cipher_descriptor rc6_desc;
+#endif
+
+#ifdef RC2
+int rc2_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
+void rc2_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey);
+void rc2_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey);
+int rc2_test(void);
+void rc2_done(symmetric_key *skey);
+int rc2_keysize(int *keysize);
+extern const struct ltc_cipher_descriptor rc2_desc;
+#endif
+
+#ifdef SAFERP
+int saferp_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
+void saferp_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey);
+void saferp_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey);
+int saferp_test(void);
+void saferp_done(symmetric_key *skey);
+int saferp_keysize(int *keysize);
+extern const struct ltc_cipher_descriptor saferp_desc;
+#endif
+
+#ifdef SAFER
+int safer_k64_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
+int safer_sk64_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
+int safer_k128_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
+int safer_sk128_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
+void safer_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key);
+void safer_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key);
+int safer_k64_test(void);
+int safer_sk64_test(void);
+int safer_sk128_test(void);
+void safer_done(symmetric_key *skey);
+int safer_64_keysize(int *keysize);
+int safer_128_keysize(int *keysize);
+extern const struct ltc_cipher_descriptor safer_k64_desc, safer_k128_desc, safer_sk64_desc, safer_sk128_desc;
+#endif
+
+#ifdef RIJNDAEL
+
+/* make aes an alias */
+#define aes_setup rijndael_setup
+#define aes_ecb_encrypt rijndael_ecb_encrypt
+#define aes_ecb_decrypt rijndael_ecb_decrypt
+#define aes_test rijndael_test
+#define aes_done rijndael_done
+#define aes_keysize rijndael_keysize
+
+#define aes_enc_setup rijndael_enc_setup
+#define aes_enc_ecb_encrypt rijndael_enc_ecb_encrypt
+#define aes_enc_keysize rijndael_enc_keysize
+
+int rijndael_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
+void rijndael_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey);
+void rijndael_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey);
+int rijndael_test(void);
+void rijndael_done(symmetric_key *skey);
+int rijndael_keysize(int *keysize);
+int rijndael_enc_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
+void rijndael_enc_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey);
+void rijndael_enc_done(symmetric_key *skey);
+int rijndael_enc_keysize(int *keysize);
+extern const struct ltc_cipher_descriptor rijndael_desc, aes_desc;
+extern const struct ltc_cipher_descriptor rijndael_enc_desc, aes_enc_desc;
+#endif
+
+#ifdef XTEA
+int xtea_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
+void xtea_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey);
+void xtea_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey);
+int xtea_test(void);
+void xtea_done(symmetric_key *skey);
+int xtea_keysize(int *keysize);
+extern const struct ltc_cipher_descriptor xtea_desc;
+#endif
+
+#ifdef TWOFISH
+int twofish_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
+void twofish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey);
+void twofish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey);
+int twofish_test(void);
+void twofish_done(symmetric_key *skey);
+int twofish_keysize(int *keysize);
+extern const struct ltc_cipher_descriptor twofish_desc;
+#endif
+
+#ifdef DES
+int des_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
+void des_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey);
+void des_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey);
+int des_test(void);
+void des_done(symmetric_key *skey);
+int des_keysize(int *keysize);
+int des3_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
+void des3_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey);
+void des3_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey);
+int des3_test(void);
+void des3_done(symmetric_key *skey);
+int des3_keysize(int *keysize);
+extern const struct ltc_cipher_descriptor des_desc, des3_desc;
+#endif
+
+#ifdef CAST5
+int cast5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
+void cast5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey);
+void cast5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey);
+int cast5_test(void);
+void cast5_done(symmetric_key *skey);
+int cast5_keysize(int *keysize);
+extern const struct ltc_cipher_descriptor cast5_desc;
+#endif
+
+#ifdef NOEKEON
+int noekeon_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
+void noekeon_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey);
+void noekeon_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey);
+int noekeon_test(void);
+void noekeon_done(symmetric_key *skey);
+int noekeon_keysize(int *keysize);
+extern const struct ltc_cipher_descriptor noekeon_desc;
+#endif
+
+#ifdef SKIPJACK
+int skipjack_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
+void skipjack_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey);
+void skipjack_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey);
+int skipjack_test(void);
+void skipjack_done(symmetric_key *skey);
+int skipjack_keysize(int *keysize);
+extern const struct ltc_cipher_descriptor skipjack_desc;
+#endif
+
+#ifdef KHAZAD
+int khazad_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
+void khazad_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey);
+void khazad_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey);
+int khazad_test(void);
+void khazad_done(symmetric_key *skey);
+int khazad_keysize(int *keysize);
+extern const struct ltc_cipher_descriptor khazad_desc;
+#endif
+
+#ifdef ANUBIS
+int anubis_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey);
+void anubis_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey);
+void anubis_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey);
+int anubis_test(void);
+void anubis_done(symmetric_key *skey);
+int anubis_keysize(int *keysize);
+extern const struct ltc_cipher_descriptor anubis_desc;
+#endif
+
+#ifdef ECB
+int ecb_start(int cipher, const unsigned char *key,
+ int keylen, int num_rounds, symmetric_ECB *ecb);
+int ecb_encrypt(const unsigned char *pt, unsigned char *ct, unsigned long len, symmetric_ECB *ecb);
+int ecb_decrypt(const unsigned char *ct, unsigned char *pt, unsigned long len, symmetric_ECB *ecb);
+int ecb_done(symmetric_ECB *ecb);
+#endif
+
+#ifdef CFB
+int cfb_start(int cipher, const unsigned char *IV, const unsigned char *key,
+ int keylen, int num_rounds, symmetric_CFB *cfb);
+int cfb_encrypt(const unsigned char *pt, unsigned char *ct, unsigned long len, symmetric_CFB *cfb);
+int cfb_decrypt(const unsigned char *ct, unsigned char *pt, unsigned long len, symmetric_CFB *cfb);
+int cfb_getiv(unsigned char *IV, unsigned long *len, symmetric_CFB *cfb);
+int cfb_setiv(const unsigned char *IV, unsigned long len, symmetric_CFB *cfb);
+int cfb_done(symmetric_CFB *cfb);
+#endif
+
+#ifdef OFB
+int ofb_start(int cipher, const unsigned char *IV, const unsigned char *key,
+ int keylen, int num_rounds, symmetric_OFB *ofb);
+int ofb_encrypt(const unsigned char *pt, unsigned char *ct, unsigned long len, symmetric_OFB *ofb);
+int ofb_decrypt(const unsigned char *ct, unsigned char *pt, unsigned long len, symmetric_OFB *ofb);
+int ofb_getiv(unsigned char *IV, unsigned long *len, symmetric_OFB *ofb);
+int ofb_setiv(const unsigned char *IV, unsigned long len, symmetric_OFB *ofb);
+int ofb_done(symmetric_OFB *ofb);
+#endif
+
+#ifdef CBC
+int cbc_start(int cipher, const unsigned char *IV, const unsigned char *key,
+ int keylen, int num_rounds, symmetric_CBC *cbc);
+int cbc_encrypt(const unsigned char *pt, unsigned char *ct, unsigned long len, symmetric_CBC *cbc);
+int cbc_decrypt(const unsigned char *ct, unsigned char *pt, unsigned long len, symmetric_CBC *cbc);
+int cbc_getiv(unsigned char *IV, unsigned long *len, symmetric_CBC *cbc);
+int cbc_setiv(const unsigned char *IV, unsigned long len, symmetric_CBC *cbc);
+int cbc_done(symmetric_CBC *cbc);
+#endif
+
+#ifdef CTR
+int ctr_start(int cipher, const unsigned char *IV, const unsigned char *key,
+ int keylen, int num_rounds, symmetric_CTR *ctr);
+int ctr_encrypt(const unsigned char *pt, unsigned char *ct, unsigned long len, symmetric_CTR *ctr);
+int ctr_decrypt(const unsigned char *ct, unsigned char *pt, unsigned long len, symmetric_CTR *ctr);
+int ctr_getiv(unsigned char *IV, unsigned long *len, symmetric_CTR *ctr);
+int ctr_setiv(const unsigned char *IV, unsigned long len, symmetric_CTR *ctr);
+int ctr_done(symmetric_CTR *ctr);
+#endif
+
+int find_cipher(const char *name);
+int find_cipher_any(const char *name, int blocklen, int keylen);
+int find_cipher_id(unsigned char ID);
+
+int register_cipher(const struct ltc_cipher_descriptor *cipher);
+int unregister_cipher(const struct ltc_cipher_descriptor *cipher);
+
+int cipher_is_valid(int idx);
+
diff --git a/mycrypt_custom.h b/src/headers/tomcrypt_custom.h
similarity index 62%
rename from mycrypt_custom.h
rename to src/headers/tomcrypt_custom.h
index 03058bb7..d786f0bf 100644
--- a/mycrypt_custom.h
+++ b/src/headers/tomcrypt_custom.h
@@ -1,9 +1,8 @@
/* This header is meant to be included before mycrypt.h in projects where
* you don't want to throw all the defines in a makefile.
*/
-
-#ifndef MYCRYPT_CUSTOM_H_
-#define MYCRYPT_CUSTOM_H_
+#ifndef TOMCRYPT_CUSTOM_H_
+#define TOMCRYPT_CUSTOM_H_
/* macros for various libc functions you can change for embedded targets */
#define XMALLOC malloc
@@ -18,18 +17,27 @@
#define XCLOCKS_PER_SEC CLOCKS_PER_SEC
/* Use small code where possible */
-// #define SMALL_CODE
+/* #define LTC_SMALL_CODE */
/* Enable self-test test vector checking */
#define LTC_TEST
/* clean the stack of functions which put private information on stack */
-// #define CLEAN_STACK
+/* #define LTC_CLEAN_STACK */
/* disable all file related functions */
-// #define NO_FILE
+/* #define LTC_NO_FILE */
+
+/* disable all forms of ASM */
+/* #define LTC_NO_ASM */
+
+/* disable FAST mode */
+/* #define LTC_NO_FAST */
+
+/* disable BSWAP on x86 */
+/* #define LTC_NO_BSWAP */
-/* various ciphers */
+/* ---> Symmetric Block Ciphers <--- */
#define BLOWFISH
#define RC2
#define RC5
@@ -41,26 +49,27 @@
* (saves 4KB of ram), _ALL_TABLES enables all tables during setup */
#define TWOFISH
#define TWOFISH_TABLES
-// #define TWOFISH_ALL_TABLES
-// #define TWOFISH_SMALL
+/* #define TWOFISH_ALL_TABLES */
+/* #define TWOFISH_SMALL */
/* DES includes EDE triple-DES */
#define DES
#define CAST5
#define NOEKEON
#define SKIPJACK
-/* SAFER code isn't public domain. It appears to be free to use
- * but has been disabled by default to avoid any such problems
- */
-//#define SAFER
+#define SAFER
+#define KHAZAD
+#define ANUBIS
+#define ANUBIS_TWEAK
+
-/* block cipher modes of operation */
+/* ---> Block Cipher Modes of Operation <--- */
#define CFB
#define OFB
#define ECB
#define CBC
#define CTR
-/* hash functions */
+/* ---> One-Way Hash Functions <--- */
#define CHC_HASH
#define WHIRLPOOL
#define SHA512
@@ -75,29 +84,47 @@
#define RIPEMD128
#define RIPEMD160
-/* MAC functions */
+/* ---> MAC functions <--- */
#define HMAC
#define OMAC
#define PMAC
+#define PELICAN
+
+#if defined(PELICAN) && !defined(RIJNDAEL)
+ #error Pelican-MAC requires RIJNDAEL
+#endif
-/* Encrypt + Authenticate Modes */
+/* ---> Encrypt + Authenticate Modes <--- */
#define EAX_MODE
+#if defined(EAX_MODE) && !(defined(CTR) && defined(OMAC))
+ #error EAX_MODE requires CTR and OMAC mode
+#endif
+
#define OCB_MODE
+#define CCM_MODE
+
+#define GCM_MODE
+/* Use 64KiB tables */
+#define GCM_TABLES
/* Various tidbits of modern neatoness */
#define BASE64
+/* --> Pseudo Random Number Generators <--- */
/* Yarrow */
#define YARROW
-// which descriptor of AES to use?
-// 0 = rijndael_enc 1 = aes_enc, 2 = rijndael [full], 3 = aes [full]
+/* which descriptor of AES to use? */
+/* 0 = rijndael_enc 1 = aes_enc, 2 = rijndael [full], 3 = aes [full] */
#define YARROW_AES 0
#if defined(YARROW) && !defined(CTR)
#error YARROW requires CTR chaining mode to be defined!
#endif
+/* a PRNG that simply reads from an available system source */
#define SPRNG
+
+/* The RC4 stream cipher */
#define RC4
/* Fortuna PRNG */
@@ -110,13 +137,13 @@
/* Greg's SOBER128 PRNG ;-0 */
#define SOBER128
+/* the *nix style /dev/random device */
#define DEVRANDOM
+/* try /dev/urandom before trying /dev/random */
#define TRY_URANDOM_FIRST
-/* Public Key Neatoness */
+/* ---> Public Key Crypto <--- */
#define MRSA
-/* enable RSA side channel timing prevention */
-#define RSA_TIMING
/* Digital Signature Algorithm */
#define MDSA
@@ -155,5 +182,15 @@
#define PKCS_1
#define PKCS_5
+/* Include ASN.1 DER (required by DSA/RSA) */
+#define LTC_DER
+#if defined(LTC_DER) && !defined(MPI)
+ #error ASN.1 DER requires MPI functionality
+#endif
+
+#if (defined(MDSA) || defined(MRSA)) && !defined(LTC_DER)
+ #error RSA/DSA requires ASN.1 DER functionality, make sure LTC_DER is enabled
+#endif
+
#endif
diff --git a/src/headers/tomcrypt_hash.h b/src/headers/tomcrypt_hash.h
new file mode 100644
index 00000000..d295a598
--- /dev/null
+++ b/src/headers/tomcrypt_hash.h
@@ -0,0 +1,324 @@
+/* ---- HASH FUNCTIONS ---- */
+#ifdef SHA512
+struct sha512_state {
+ ulong64 length, state[8];
+ unsigned long curlen;
+ unsigned char buf[128];
+};
+#endif
+
+#ifdef SHA256
+struct sha256_state {
+ ulong64 length;
+ ulong32 state[8], curlen;
+ unsigned char buf[64];
+};
+#endif
+
+#ifdef SHA1
+struct sha1_state {
+ ulong64 length;
+ ulong32 state[5], curlen;
+ unsigned char buf[64];
+};
+#endif
+
+#ifdef MD5
+struct md5_state {
+ ulong64 length;
+ ulong32 state[4], curlen;
+ unsigned char buf[64];
+};
+#endif
+
+#ifdef MD4
+struct md4_state {
+ ulong64 length;
+ ulong32 state[4], curlen;
+ unsigned char buf[64];
+};
+#endif
+
+#ifdef TIGER
+struct tiger_state {
+ ulong64 state[3], length;
+ unsigned long curlen;
+ unsigned char buf[64];
+};
+#endif
+
+#ifdef MD2
+struct md2_state {
+ unsigned char chksum[16], X[48], buf[16];
+ unsigned long curlen;
+};
+#endif
+
+#ifdef RIPEMD128
+struct rmd128_state {
+ ulong64 length;
+ unsigned char buf[64];
+ ulong32 curlen, state[4];
+};
+#endif
+
+#ifdef RIPEMD160
+struct rmd160_state {
+ ulong64 length;
+ unsigned char buf[64];
+ ulong32 curlen, state[5];
+};
+#endif
+
+#ifdef WHIRLPOOL
+struct whirlpool_state {
+ ulong64 length, state[8];
+ unsigned char buf[64];
+ ulong32 curlen;
+};
+#endif
+
+#ifdef CHC_HASH
+struct chc_state {
+ ulong64 length;
+ unsigned char state[MAXBLOCKSIZE], buf[MAXBLOCKSIZE];
+ ulong32 curlen;
+};
+#endif
+
+typedef union Hash_state {
+#ifdef CHC_HASH
+ struct chc_state chc;
+#endif
+#ifdef WHIRLPOOL
+ struct whirlpool_state whirlpool;
+#endif
+#ifdef SHA512
+ struct sha512_state sha512;
+#endif
+#ifdef SHA256
+ struct sha256_state sha256;
+#endif
+#ifdef SHA1
+ struct sha1_state sha1;
+#endif
+#ifdef MD5
+ struct md5_state md5;
+#endif
+#ifdef MD4
+ struct md4_state md4;
+#endif
+#ifdef MD2
+ struct md2_state md2;
+#endif
+#ifdef TIGER
+ struct tiger_state tiger;
+#endif
+#ifdef RIPEMD128
+ struct rmd128_state rmd128;
+#endif
+#ifdef RIPEMD160
+ struct rmd160_state rmd160;
+#endif
+ void *data;
+} hash_state;
+
+extern struct ltc_hash_descriptor {
+ /** name of hash */
+ char *name;
+ /** internal ID */
+ unsigned char ID;
+ /** Size of digest in octets */
+ unsigned long hashsize;
+ /** Input block size in octets */
+ unsigned long blocksize;
+ /** ASN.1 DER identifier */
+ unsigned char DER[64];
+ /** Length of DER encoding */
+ unsigned long DERlen;
+ /** Init a hash state
+ @param hash The hash to initialize
+ @return CRYPT_OK if successful
+ */
+ int (*init)(hash_state *hash);
+ /** Process a block of data
+ @param hash The hash state
+ @param in The data to hash
+ @param inlen The length of the data (octets)
+ @return CRYPT_OK if successful
+ */
+ int (*process)(hash_state *hash, const unsigned char *in, unsigned long inlen);
+ /** Produce the digest and store it
+ @param hash The hash state
+ @param out [out] The destination of the digest
+ @return CRYPT_OK if successful
+ */
+ int (*done)(hash_state *hash, unsigned char *out);
+ /** Self-test
+ @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled
+ */
+ int (*test)(void);
+} hash_descriptor[];
+
+#ifdef CHC_HASH
+int chc_register(int cipher);
+int chc_init(hash_state * md);
+int chc_process(hash_state * md, const unsigned char *in, unsigned long inlen);
+int chc_done(hash_state * md, unsigned char *hash);
+int chc_test(void);
+extern const struct ltc_hash_descriptor chc_desc;
+#endif
+
+#ifdef WHIRLPOOL
+int whirlpool_init(hash_state * md);
+int whirlpool_process(hash_state * md, const unsigned char *in, unsigned long inlen);
+int whirlpool_done(hash_state * md, unsigned char *hash);
+int whirlpool_test(void);
+extern const struct ltc_hash_descriptor whirlpool_desc;
+#endif
+
+#ifdef SHA512
+int sha512_init(hash_state * md);
+int sha512_process(hash_state * md, const unsigned char *in, unsigned long inlen);
+int sha512_done(hash_state * md, unsigned char *hash);
+int sha512_test(void);
+extern const struct ltc_hash_descriptor sha512_desc;
+#endif
+
+#ifdef SHA384
+#ifndef SHA512
+ #error SHA512 is required for SHA384
+#endif
+int sha384_init(hash_state * md);
+#define sha384_process sha512_process
+int sha384_done(hash_state * md, unsigned char *hash);
+int sha384_test(void);
+extern const struct ltc_hash_descriptor sha384_desc;
+#endif
+
+#ifdef SHA256
+int sha256_init(hash_state * md);
+int sha256_process(hash_state * md, const unsigned char *in, unsigned long inlen);
+int sha256_done(hash_state * md, unsigned char *hash);
+int sha256_test(void);
+extern const struct ltc_hash_descriptor sha256_desc;
+
+#ifdef SHA224
+#ifndef SHA256
+ #error SHA256 is required for SHA224
+#endif
+int sha224_init(hash_state * md);
+#define sha224_process sha256_process
+int sha224_done(hash_state * md, unsigned char *hash);
+int sha224_test(void);
+extern const struct ltc_hash_descriptor sha224_desc;
+#endif
+#endif
+
+#ifdef SHA1
+int sha1_init(hash_state * md);
+int sha1_process(hash_state * md, const unsigned char *in, unsigned long inlen);
+int sha1_done(hash_state * md, unsigned char *hash);
+int sha1_test(void);
+extern const struct ltc_hash_descriptor sha1_desc;
+#endif
+
+#ifdef MD5
+int md5_init(hash_state * md);
+int md5_process(hash_state * md, const unsigned char *in, unsigned long inlen);
+int md5_done(hash_state * md, unsigned char *hash);
+int md5_test(void);
+extern const struct ltc_hash_descriptor md5_desc;
+#endif
+
+#ifdef MD4
+int md4_init(hash_state * md);
+int md4_process(hash_state * md, const unsigned char *in, unsigned long inlen);
+int md4_done(hash_state * md, unsigned char *hash);
+int md4_test(void);
+extern const struct ltc_hash_descriptor md4_desc;
+#endif
+
+#ifdef MD2
+int md2_init(hash_state * md);
+int md2_process(hash_state * md, const unsigned char *in, unsigned long inlen);
+int md2_done(hash_state * md, unsigned char *hash);
+int md2_test(void);
+extern const struct ltc_hash_descriptor md2_desc;
+#endif
+
+#ifdef TIGER
+int tiger_init(hash_state * md);
+int tiger_process(hash_state * md, const unsigned char *in, unsigned long inlen);
+int tiger_done(hash_state * md, unsigned char *hash);
+int tiger_test(void);
+extern const struct ltc_hash_descriptor tiger_desc;
+#endif
+
+#ifdef RIPEMD128
+int rmd128_init(hash_state * md);
+int rmd128_process(hash_state * md, const unsigned char *in, unsigned long inlen);
+int rmd128_done(hash_state * md, unsigned char *hash);
+int rmd128_test(void);
+extern const struct ltc_hash_descriptor rmd128_desc;
+#endif
+
+#ifdef RIPEMD160
+int rmd160_init(hash_state * md);
+int rmd160_process(hash_state * md, const unsigned char *in, unsigned long inlen);
+int rmd160_done(hash_state * md, unsigned char *hash);
+int rmd160_test(void);
+extern const struct ltc_hash_descriptor rmd160_desc;
+#endif
+
+int find_hash(const char *name);
+int find_hash_id(unsigned char ID);
+int find_hash_any(const char *name, int digestlen);
+int register_hash(const struct ltc_hash_descriptor *hash);
+int unregister_hash(const struct ltc_hash_descriptor *hash);
+int hash_is_valid(int idx);
+
+int hash_memory(int hash,
+ const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen);
+int hash_memory_multi(int hash, unsigned char *out, unsigned long *outlen,
+ const unsigned char *in, unsigned long inlen, ...);
+int hash_filehandle(int hash, FILE *in, unsigned char *out, unsigned long *outlen);
+int hash_file(int hash, const char *fname, unsigned char *out, unsigned long *outlen);
+
+/* a simple macro for making hash "process" functions */
+#define HASH_PROCESS(func_name, compress_name, state_var, block_size) \
+int func_name (hash_state * md, const unsigned char *in, unsigned long inlen) \
+{ \
+ unsigned long n; \
+ int err; \
+ LTC_ARGCHK(md != NULL); \
+ LTC_ARGCHK(in != NULL); \
+ if (md-> state_var .curlen > sizeof(md-> state_var .buf)) { \
+ return CRYPT_INVALID_ARG; \
+ } \
+ while (inlen > 0) { \
+ if (md-> state_var .curlen == 0 && inlen >= block_size) { \
+ if ((err = compress_name (md, (unsigned char *)in)) != CRYPT_OK) { \
+ return err; \
+ } \
+ md-> state_var .length += block_size * 8; \
+ in += block_size; \
+ inlen -= block_size; \
+ } else { \
+ n = MIN(inlen, (block_size - md-> state_var .curlen)); \
+ memcpy(md-> state_var .buf + md-> state_var.curlen, in, (size_t)n); \
+ md-> state_var .curlen += n; \
+ in += n; \
+ inlen -= n; \
+ if (md-> state_var .curlen == block_size) { \
+ if ((err = compress_name (md, md-> state_var .buf)) != CRYPT_OK) {\
+ return err; \
+ } \
+ md-> state_var .length += 8*block_size; \
+ md-> state_var .curlen = 0; \
+ } \
+ } \
+ } \
+ return CRYPT_OK; \
+}
diff --git a/src/headers/tomcrypt_mac.h b/src/headers/tomcrypt_mac.h
new file mode 100644
index 00000000..6b5e1ce5
--- /dev/null
+++ b/src/headers/tomcrypt_mac.h
@@ -0,0 +1,297 @@
+#ifdef HMAC
+typedef struct Hmac_state {
+ hash_state md;
+ int hash;
+ hash_state hashstate;
+ unsigned char *key;
+} hmac_state;
+
+int hmac_init(hmac_state *hmac, int hash, const unsigned char *key, unsigned long keylen);
+int hmac_process(hmac_state *hmac, const unsigned char *in, unsigned long inlen);
+int hmac_done(hmac_state *hmac, unsigned char *out, unsigned long *outlen);
+int hmac_test(void);
+int hmac_memory(int hash,
+ const unsigned char *key, unsigned long keylen,
+ const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen);
+int hmac_memory_multi(int hash,
+ const unsigned char *key, unsigned long keylen,
+ unsigned char *out, unsigned long *outlen,
+ const unsigned char *in, unsigned long inlen, ...);
+int hmac_file(int hash, const char *fname, const unsigned char *key,
+ unsigned long keylen,
+ unsigned char *dst, unsigned long *dstlen);
+#endif
+
+#ifdef OMAC
+
+typedef struct {
+ int cipher_idx,
+ buflen,
+ blklen;
+ unsigned char block[MAXBLOCKSIZE],
+ prev[MAXBLOCKSIZE],
+ Lu[2][MAXBLOCKSIZE];
+ symmetric_key key;
+} omac_state;
+
+int omac_init(omac_state *omac, int cipher, const unsigned char *key, unsigned long keylen);
+int omac_process(omac_state *omac, const unsigned char *in, unsigned long inlen);
+int omac_done(omac_state *omac, unsigned char *out, unsigned long *outlen);
+int omac_memory(int cipher,
+ const unsigned char *key, unsigned long keylen,
+ const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen);
+int omac_memory_multi(int cipher,
+ const unsigned char *key, unsigned long keylen,
+ unsigned char *out, unsigned long *outlen,
+ const unsigned char *in, unsigned long inlen, ...);
+int omac_file(int cipher,
+ const unsigned char *key, unsigned long keylen,
+ const char *filename,
+ unsigned char *out, unsigned long *outlen);
+int omac_test(void);
+#endif /* OMAC */
+
+#ifdef PMAC
+
+typedef struct {
+ unsigned char Ls[32][MAXBLOCKSIZE], /* L shifted by i bits to the left */
+ Li[MAXBLOCKSIZE], /* value of Li [current value, we calc from previous recall] */
+ Lr[MAXBLOCKSIZE], /* L * x^-1 */
+ block[MAXBLOCKSIZE], /* currently accumulated block */
+ checksum[MAXBLOCKSIZE]; /* current checksum */
+
+ symmetric_key key; /* scheduled key for cipher */
+ unsigned long block_index; /* index # for current block */
+ int cipher_idx, /* cipher idx */
+ block_len, /* length of block */
+ buflen; /* number of bytes in the buffer */
+} pmac_state;
+
+int pmac_init(pmac_state *pmac, int cipher, const unsigned char *key, unsigned long keylen);
+int pmac_process(pmac_state *pmac, const unsigned char *in, unsigned long inlen);
+int pmac_done(pmac_state *pmac, unsigned char *out, unsigned long *outlen);
+
+int pmac_memory(int cipher,
+ const unsigned char *key, unsigned long keylen,
+ const unsigned char *msg, unsigned long msglen,
+ unsigned char *out, unsigned long *outlen);
+
+int pmac_memory_multi(int cipher,
+ const unsigned char *key, unsigned long keylen,
+ unsigned char *out, unsigned long *outlen,
+ const unsigned char *in, unsigned long inlen, ...);
+
+int pmac_file(int cipher,
+ const unsigned char *key, unsigned long keylen,
+ const char *filename,
+ unsigned char *out, unsigned long *outlen);
+
+int pmac_test(void);
+
+/* internal functions */
+int pmac_ntz(unsigned long x);
+void pmac_shift_xor(pmac_state *pmac);
+
+#endif /* PMAC */
+
+#ifdef EAX_MODE
+
+#if !(defined(OMAC) && defined(CTR))
+ #error EAX_MODE requires OMAC and CTR
+#endif
+
+typedef struct {
+ unsigned char N[MAXBLOCKSIZE];
+ symmetric_CTR ctr;
+ omac_state headeromac, ctomac;
+} eax_state;
+
+int eax_init(eax_state *eax, int cipher, const unsigned char *key, unsigned long keylen,
+ const unsigned char *nonce, unsigned long noncelen,
+ const unsigned char *header, unsigned long headerlen);
+
+int eax_encrypt(eax_state *eax, const unsigned char *pt, unsigned char *ct, unsigned long length);
+int eax_decrypt(eax_state *eax, const unsigned char *ct, unsigned char *pt, unsigned long length);
+int eax_addheader(eax_state *eax, const unsigned char *header, unsigned long length);
+int eax_done(eax_state *eax, unsigned char *tag, unsigned long *taglen);
+
+int eax_encrypt_authenticate_memory(int cipher,
+ const unsigned char *key, unsigned long keylen,
+ const unsigned char *nonce, unsigned long noncelen,
+ const unsigned char *header, unsigned long headerlen,
+ const unsigned char *pt, unsigned long ptlen,
+ unsigned char *ct,
+ unsigned char *tag, unsigned long *taglen);
+
+int eax_decrypt_verify_memory(int cipher,
+ const unsigned char *key, unsigned long keylen,
+ const unsigned char *nonce, unsigned long noncelen,
+ const unsigned char *header, unsigned long headerlen,
+ const unsigned char *ct, unsigned long ctlen,
+ unsigned char *pt,
+ unsigned char *tag, unsigned long taglen,
+ int *stat);
+
+ int eax_test(void);
+#endif /* EAX MODE */
+
+#ifdef OCB_MODE
+typedef struct {
+ unsigned char L[MAXBLOCKSIZE], /* L value */
+ Ls[32][MAXBLOCKSIZE], /* L shifted by i bits to the left */
+ Li[MAXBLOCKSIZE], /* value of Li [current value, we calc from previous recall] */
+ Lr[MAXBLOCKSIZE], /* L * x^-1 */
+ R[MAXBLOCKSIZE], /* R value */
+ checksum[MAXBLOCKSIZE]; /* current checksum */
+
+ symmetric_key key; /* scheduled key for cipher */
+ unsigned long block_index; /* index # for current block */
+ int cipher, /* cipher idx */
+ block_len; /* length of block */
+} ocb_state;
+
+int ocb_init(ocb_state *ocb, int cipher,
+ const unsigned char *key, unsigned long keylen, const unsigned char *nonce);
+
+int ocb_encrypt(ocb_state *ocb, const unsigned char *pt, unsigned char *ct);
+int ocb_decrypt(ocb_state *ocb, const unsigned char *ct, unsigned char *pt);
+
+int ocb_done_encrypt(ocb_state *ocb,
+ const unsigned char *pt, unsigned long ptlen,
+ unsigned char *ct,
+ unsigned char *tag, unsigned long *taglen);
+
+int ocb_done_decrypt(ocb_state *ocb,
+ const unsigned char *ct, unsigned long ctlen,
+ unsigned char *pt,
+ const unsigned char *tag, unsigned long taglen, int *stat);
+
+int ocb_encrypt_authenticate_memory(int cipher,
+ const unsigned char *key, unsigned long keylen,
+ const unsigned char *nonce,
+ const unsigned char *pt, unsigned long ptlen,
+ unsigned char *ct,
+ unsigned char *tag, unsigned long *taglen);
+
+int ocb_decrypt_verify_memory(int cipher,
+ const unsigned char *key, unsigned long keylen,
+ const unsigned char *nonce,
+ const unsigned char *ct, unsigned long ctlen,
+ unsigned char *pt,
+ const unsigned char *tag, unsigned long taglen,
+ int *stat);
+
+int ocb_test(void);
+
+/* internal functions */
+void ocb_shift_xor(ocb_state *ocb, unsigned char *Z);
+int ocb_ntz(unsigned long x);
+int s_ocb_done(ocb_state *ocb, const unsigned char *pt, unsigned long ptlen,
+ unsigned char *ct, unsigned char *tag, unsigned long *taglen, int mode);
+
+#endif /* OCB_MODE */
+
+#ifdef CCM_MODE
+
+#define CCM_ENCRYPT 0
+#define CCM_DECRYPT 1
+
+int ccm_memory(int cipher,
+ const unsigned char *key, unsigned long keylen,
+ const unsigned char *nonce, unsigned long noncelen,
+ const unsigned char *header, unsigned long headerlen,
+ unsigned char *pt, unsigned long ptlen,
+ unsigned char *ct,
+ unsigned char *tag, unsigned long *taglen,
+ int direction);
+
+int ccm_test(void);
+
+#endif /* CCM_MODE */
+
+#ifdef GCM_MODE
+
+#define GCM_ENCRYPT 0
+#define GCM_DECRYPT 1
+
+#define GCM_MODE_IV 0
+#define GCM_MODE_AAD 1
+#define GCM_MODE_TEXT 2
+
+typedef struct {
+ symmetric_key K;
+ unsigned char H[16], /* multiplier */
+ X[16], /* accumulator */
+ Y[16], /* counter */
+ Y_0[16], /* initial counter */
+ buf[16]; /* buffer for stuff */
+
+ int cipher, /* which cipher */
+ ivmode, /* Which mode is the IV in? */
+ mode, /* mode the GCM code is in */
+ buflen; /* length of data in buf */
+
+ ulong64 totlen, /* 64-bit counter used for IV and AAD */
+ pttotlen; /* 64-bit counter for the PT */
+
+#ifdef GCM_TABLES
+ unsigned char PC[16][256][16]; /* 16 tables of 8x128 */
+#endif
+
+} gcm_state;
+
+void gcm_gf_mult(const unsigned char *a, const unsigned char *b, unsigned char *c);
+void gcm_mult_h(gcm_state *gcm, unsigned char *I);
+
+int gcm_init(gcm_state *gcm, int cipher,
+ const unsigned char *key, int keylen);
+
+int gcm_reset(gcm_state *gcm);
+
+int gcm_add_iv(gcm_state *gcm,
+ const unsigned char *IV, unsigned long IVlen);
+
+int gcm_add_aad(gcm_state *gcm,
+ const unsigned char *adata, unsigned long adatalen);
+
+int gcm_process(gcm_state *gcm,
+ unsigned char *pt, unsigned long ptlen,
+ unsigned char *ct,
+ int direction);
+
+int gcm_done(gcm_state *gcm,
+ unsigned char *tag, unsigned long *taglen);
+
+int gcm_memory( int cipher,
+ const unsigned char *key, unsigned long keylen,
+ const unsigned char *IV, unsigned long IVlen,
+ const unsigned char *adata, unsigned long adatalen,
+ unsigned char *pt, unsigned long ptlen,
+ unsigned char *ct,
+ unsigned char *tag, unsigned long *taglen,
+ int direction);
+int gcm_test(void);
+
+#endif /* GCM_MODE */
+
+#ifdef PELICAN
+
+typedef struct pelican_state
+{
+ symmetric_key K;
+ unsigned char state[16];
+ int buflen;
+} pelican_state;
+
+int pelican_init(pelican_state *pelmac, const unsigned char *key, unsigned long keylen);
+int pelican_process(pelican_state *pelmac, const unsigned char *in, unsigned long inlen);
+int pelican_done(pelican_state *pelmac, unsigned char *out);
+int pelican_test(void);
+
+int pelican_memory(const unsigned char *key, unsigned long keylen,
+ const unsigned char *in, unsigned long inlen,
+ unsigned char *out);
+
+#endif
diff --git a/mycrypt_macros.h b/src/headers/tomcrypt_macros.h
similarity index 78%
rename from mycrypt_macros.h
rename to src/headers/tomcrypt_macros.h
index 6e2eaa2f..f083984a 100644
--- a/mycrypt_macros.h
+++ b/src/headers/tomcrypt_macros.h
@@ -67,6 +67,23 @@
#ifdef ENDIAN_LITTLE
+#if !defined(LTC_NO_BSWAP) && (defined(INTEL_CC) || (defined(__GNUC__) && (defined(__DJGPP__) || defined(__CYGWIN__) || defined(__MINGW32__) || defined(__i386__) || defined(__x86_64__))))
+
+#define STORE32H(x, y) \
+asm __volatile__ ( \
+ "bswapl %0 \n\t" \
+ "movl %0,(%2)\n\t" \
+ "bswapl %0 \n\t" \
+ :"=r"(x):"0"(x), "r"(y));
+
+#define LOAD32H(x, y) \
+asm __volatile__ ( \
+ "movl (%2),%0\n\t" \
+ "bswapl %0\n\t" \
+ :"=r"(x): "0"(x), "r"(y));
+
+#else
+
#define STORE32H(x, y) \
{ (y)[0] = (unsigned char)(((x)>>24)&255); (y)[1] = (unsigned char)(((x)>>16)&255); \
(y)[2] = (unsigned char)(((x)>>8)&255); (y)[3] = (unsigned char)((x)&255); }
@@ -77,6 +94,27 @@
((unsigned long)((y)[2] & 255)<<8) | \
((unsigned long)((y)[3] & 255)); }
+#endif
+
+
+/* x86_64 processor */
+#if !defined(LTC_NO_BSWAP) && (defined(__GNUC__) && defined(__x86_64__))
+
+#define STORE64H(x, y) \
+asm __volatile__ ( \
+ "bswapq %0 \n\t" \
+ "movq %0,(%2)\n\t" \
+ "bswapq %0 \n\t" \
+ :"=r"(x):"0"(x), "r"(y):"0");
+
+#define LOAD64H(x, y) \
+asm __volatile__ ( \
+ "movq (%2),%0\n\t" \
+ "bswapq %0\n\t" \
+ :"=r"(x): "0"(x), "r"(y));
+
+#else
+
#define STORE64H(x, y) \
{ (y)[0] = (unsigned char)(((x)>>56)&255); (y)[1] = (unsigned char)(((x)>>48)&255); \
(y)[2] = (unsigned char)(((x)>>40)&255); (y)[3] = (unsigned char)(((x)>>32)&255); \
@@ -89,6 +127,8 @@
(((ulong64)((y)[4] & 255))<<24)|(((ulong64)((y)[5] & 255))<<16) | \
(((ulong64)((y)[6] & 255))<<8)|(((ulong64)((y)[7] & 255))); }
+#endif
+
#ifdef ENDIAN_32BITWORD
#define STORE32L(x, y) \
@@ -190,19 +230,23 @@
#define BSWAP(x) ( ((x>>24)&0x000000FFUL) | ((x<<24)&0xFF000000UL) | \
((x>>8)&0x0000FF00UL) | ((x<<8)&0x00FF0000UL) )
-#ifdef _MSC_VER
+
+/* 32-bit Rotates */
+#if defined(_MSC_VER)
/* instrinsic rotate */
#include <stdlib.h>
#pragma intrinsic(_lrotr,_lrotl)
#define ROR(x,n) _lrotr(x,n)
#define ROL(x,n) _lrotl(x,n)
+#define RORc(x,n) _lrotr(x,n)
+#define ROLc(x,n) _lrotl(x,n)
-#elif defined(__GNUC__) && (defined(__i386__) || defined(__x86_64__)) && !defined(INTEL_CC)
+#elif defined(__GNUC__) && (defined(__i386__) || defined(__x86_64__)) && !defined(INTEL_CC) && !defined(LTC_NO_ASM)
static inline unsigned ROL(unsigned word, int i)
{
- __asm__("roll %%cl,%0"
+ asm ("roll %%cl,%0"
:"=r" (word)
:"0" (word),"c" (i));
return word;
@@ -210,25 +254,54 @@ static inline unsigned ROL(unsigned word, int i)
static inline unsigned ROR(unsigned word, int i)
{
- __asm__("rorl %%cl,%0"
+ asm ("rorl %%cl,%0"
:"=r" (word)
:"0" (word),"c" (i));
return word;
}
+#ifndef LTC_NO_ROLC
+
+static inline unsigned ROLc(unsigned word, const int i)
+{
+ asm ("roll %2,%0"
+ :"=r" (word)
+ :"0" (word),"I" (i));
+ return word;
+}
+
+static inline unsigned RORc(unsigned word, const int i)
+{
+ asm ("rorl %2,%0"
+ :"=r" (word)
+ :"0" (word),"I" (i));
+ return word;
+}
+
+#else
+
+#define ROLc ROL
+#define RORc ROR
+
+#endif
+
#else
/* rotates the hard way */
#define ROL(x, y) ( (((unsigned long)(x)<<(unsigned long)((y)&31)) | (((unsigned long)(x)&0xFFFFFFFFUL)>>(unsigned long)(32-((y)&31)))) & 0xFFFFFFFFUL)
#define ROR(x, y) ( ((((unsigned long)(x)&0xFFFFFFFFUL)>>(unsigned long)((y)&31)) | ((unsigned long)(x)<<(unsigned long)(32-((y)&31)))) & 0xFFFFFFFFUL)
+#define ROLc(x, y) ( (((unsigned long)(x)<<(unsigned long)((y)&31)) | (((unsigned long)(x)&0xFFFFFFFFUL)>>(unsigned long)(32-((y)&31)))) & 0xFFFFFFFFUL)
+#define RORc(x, y) ( ((((unsigned long)(x)&0xFFFFFFFFUL)>>(unsigned long)((y)&31)) | ((unsigned long)(x)<<(unsigned long)(32-((y)&31)))) & 0xFFFFFFFFUL)
#endif
-#if defined(__GNUCC__) && defined(__x86_64__)
+
+/* 64-bit Rotates */
+#if defined(__GNUC__) && defined(__x86_64__) && !defined(LTC_NO_ASM)
static inline unsigned long ROL64(unsigned long word, int i)
{
- __asm__("rolq %%cl,%0"
+ asm("rolq %%cl,%0"
:"=r" (word)
:"0" (word),"c" (i));
return word;
@@ -236,13 +309,38 @@ static inline unsigned long ROL64(unsigned long word, int i)
static inline unsigned long ROR64(unsigned long word, int i)
{
- __asm__("rorq %%cl,%0"
+ asm("rorq %%cl,%0"
:"=r" (word)
:"0" (word),"c" (i));
return word;
}
-#else
+#ifndef LTC_NO_ROLC
+
+static inline unsigned long ROL64c(unsigned long word, const int i)
+{
+ asm("rolq %2,%0"
+ :"=r" (word)
+ :"0" (word),"J" (i));
+ return word;
+}
+
+static inline unsigned long ROR64c(unsigned long word, const int i)
+{
+ asm("rorq %2,%0"
+ :"=r" (word)
+ :"0" (word),"J" (i));
+ return word;
+}
+
+#else /* LTC_NO_ROLC */
+
+#define ROL64c ROL64
+#define ROR64c ROR64
+
+#endif
+
+#else /* Not x86_64 */
#define ROL64(x, y) \
( (((x)<<((ulong64)(y)&63)) | \
@@ -252,6 +350,14 @@ static inline unsigned long ROR64(unsigned long word, int i)
( ((((x)&CONST64(0xFFFFFFFFFFFFFFFF))>>((ulong64)(y)&CONST64(63))) | \
((x)<<((ulong64)(64-((y)&CONST64(63)))))) & CONST64(0xFFFFFFFFFFFFFFFF))
+#define ROL64c(x, y) \
+ ( (((x)<<((ulong64)(y)&63)) | \
+ (((x)&CONST64(0xFFFFFFFFFFFFFFFF))>>((ulong64)64-((y)&63)))) & CONST64(0xFFFFFFFFFFFFFFFF))
+
+#define ROR64c(x, y) \
+ ( ((((x)&CONST64(0xFFFFFFFFFFFFFFFF))>>((ulong64)(y)&CONST64(63))) | \
+ ((x)<<((ulong64)(64-((y)&CONST64(63)))))) & CONST64(0xFFFFFFFFFFFFFFFF))
+
#endif
#undef MAX
diff --git a/src/headers/tomcrypt_misc.h b/src/headers/tomcrypt_misc.h
new file mode 100644
index 00000000..bed5015f
--- /dev/null
+++ b/src/headers/tomcrypt_misc.h
@@ -0,0 +1,17 @@
+/* ---- BASE64 Routines ---- */
+#ifdef BASE64
+int base64_encode(const unsigned char *in, unsigned long len,
+ unsigned char *out, unsigned long *outlen);
+
+int base64_decode(const unsigned char *in, unsigned long len,
+ unsigned char *out, unsigned long *outlen);
+#endif
+
+/* ---- MEM routines ---- */
+void zeromem(void *dst, size_t len);
+void burn_stack(unsigned long len);
+
+const char *error_to_string(int err);
+int mpi_to_ltc_error(int err);
+
+extern const char *crypt_build_settings;
diff --git a/mycrypt_pk.h b/src/headers/tomcrypt_pk.h
similarity index 53%
rename from mycrypt_pk.h
rename to src/headers/tomcrypt_pk.h
index 63451169..065ca996 100644
--- a/mycrypt_pk.h
+++ b/src/headers/tomcrypt_pk.h
@@ -71,8 +71,8 @@
/* ---- PACKET ---- */
#ifdef PACKET
- void packet_store_header(unsigned char *dst, int section, int subsection);
- int packet_valid_header(unsigned char *src, int section, int subsection);
+void packet_store_header(unsigned char *dst, int section, int subsection);
+int packet_valid_header(unsigned char *src, int section, int subsection);
#endif
@@ -92,70 +92,53 @@ typedef struct Rsa_key {
mp_int e, d, N, p, q, qP, dP, dQ;
} rsa_key;
- int rsa_make_key(prng_state *prng, int wprng, int size, long e, rsa_key *key);
+int rsa_make_key(prng_state *prng, int wprng, int size, long e, rsa_key *key);
- int rsa_exptmod(const unsigned char *in, unsigned long inlen,
+int rsa_exptmod(const unsigned char *in, unsigned long inlen,
unsigned char *out, unsigned long *outlen, int which,
- prng_state *prng, int prng_idx,
rsa_key *key);
-#ifdef RSA_TIMING
-
- int tim_exptmod(prng_state *prng, int prng_idx,
- mp_int *c, mp_int *e, mp_int *d, mp_int *n, mp_int *m);
-
-#else
-
-#define tim_exptmod(prng, prng_idx, c, e, d, n, m) mpi_to_ltc_error(mp_exptmod(c, d, n, m))
-
-#endif
-
- void rsa_free(rsa_key *key);
+void rsa_free(rsa_key *key);
/* These use PKCS #1 v2.0 padding */
-int rsa_encrypt_key(const unsigned char *inkey, unsigned long inlen,
- unsigned char *outkey, unsigned long *outlen,
+int rsa_encrypt_key(const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen,
const unsigned char *lparam, unsigned long lparamlen,
prng_state *prng, int prng_idx, int hash_idx, rsa_key *key);
-int rsa_decrypt_key(const unsigned char *in, unsigned long inlen,
- unsigned char *outkey, unsigned long *keylen,
- const unsigned char *lparam, unsigned long lparamlen,
- prng_state *prng, int prng_idx,
- int hash_idx, int *res,
+int rsa_decrypt_key(const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen,
+ const unsigned char *lparam, unsigned long lparamlen,
+ int hash_idx, int *stat,
rsa_key *key);
-int rsa_sign_hash(const unsigned char *msghash, unsigned long msghashlen,
- unsigned char *sig, unsigned long *siglen,
+int rsa_sign_hash(const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen,
prng_state *prng, int prng_idx,
int hash_idx, unsigned long saltlen,
rsa_key *key);
int rsa_verify_hash(const unsigned char *sig, unsigned long siglen,
- const unsigned char *msghash, unsigned long msghashlen,
- prng_state *prng, int prng_idx,
+ const unsigned char *hash, unsigned long hashlen,
int hash_idx, unsigned long saltlen,
int *stat, rsa_key *key);
/* these use PKCS #1 v1.5 padding */
-int rsa_v15_encrypt_key(const unsigned char *inkey, unsigned long inlen,
- unsigned char *outkey, unsigned long *outlen,
+int rsa_v15_encrypt_key(const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen,
prng_state *prng, int prng_idx,
rsa_key *key);
-
+
int rsa_v15_decrypt_key(const unsigned char *in, unsigned long inlen,
- unsigned char *outkey, unsigned long keylen,
- prng_state *prng, int prng_idx,
- int *res, rsa_key *key);
+ unsigned char *out, unsigned long outlen,
+ int *stat, rsa_key *key);
-int rsa_v15_sign_hash(const unsigned char *msghash, unsigned long msghashlen,
- unsigned char *sig, unsigned long *siglen,
- prng_state *prng, int prng_idx,
+int rsa_v15_sign_hash(const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *siglen,
int hash_idx, rsa_key *key);
int rsa_v15_verify_hash(const unsigned char *sig, unsigned long siglen,
- const unsigned char *msghash, unsigned long msghashlen,
- prng_state *prng, int prng_idx,
+ const unsigned char *hash, unsigned long hashlen,
int hash_idx, int *stat,
rsa_key *key);
@@ -174,35 +157,35 @@ typedef struct Dh_key {
mp_int x, y;
} dh_key;
- int dh_test(void);
- void dh_sizes(int *low, int *high);
- int dh_get_size(dh_key *key);
+int dh_test(void);
+void dh_sizes(int *low, int *high);
+int dh_get_size(dh_key *key);
- int dh_make_key(prng_state *prng, int wprng, int keysize, dh_key *key);
- void dh_free(dh_key *key);
+int dh_make_key(prng_state *prng, int wprng, int keysize, dh_key *key);
+void dh_free(dh_key *key);
- int dh_export(unsigned char *out, unsigned long *outlen, int type, dh_key *key);
- int dh_import(const unsigned char *in, unsigned long inlen, dh_key *key);
+int dh_export(unsigned char *out, unsigned long *outlen, int type, dh_key *key);
+int dh_import(const unsigned char *in, unsigned long inlen, dh_key *key);
- int dh_shared_secret(dh_key *private_key, dh_key *public_key,
- unsigned char *out, unsigned long *outlen);
+int dh_shared_secret(dh_key *private_key, dh_key *public_key,
+ unsigned char *out, unsigned long *outlen);
- int dh_encrypt_key(const unsigned char *inkey, unsigned long keylen,
- unsigned char *out, unsigned long *len,
- prng_state *prng, int wprng, int hash,
- dh_key *key);
+int dh_encrypt_key(const unsigned char *in, unsigned long keylen,
+ unsigned char *out, unsigned long *outlen,
+ prng_state *prng, int wprng, int hash,
+ dh_key *key);
- int dh_decrypt_key(const unsigned char *in, unsigned long inlen,
- unsigned char *outkey, unsigned long *keylen,
- dh_key *key);
+int dh_decrypt_key(const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen,
+ dh_key *key);
- int dh_sign_hash(const unsigned char *in, unsigned long inlen,
- unsigned char *out, unsigned long *outlen,
- prng_state *prng, int wprng, dh_key *key);
+int dh_sign_hash(const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen,
+ prng_state *prng, int wprng, dh_key *key);
- int dh_verify_hash(const unsigned char *sig, unsigned long siglen,
- const unsigned char *hash, unsigned long hashlen,
- int *stat, dh_key *key);
+int dh_verify_hash(const unsigned char *sig, unsigned long siglen,
+ const unsigned char *hash, unsigned long hashlen,
+ int *stat, dh_key *key);
#endif
@@ -210,7 +193,7 @@ typedef struct Dh_key {
/* ---- ECC Routines ---- */
#ifdef MECC
typedef struct {
- mp_int x, y;
+ mp_int x, y, z;
} ecc_point;
typedef struct {
@@ -219,35 +202,36 @@ typedef struct {
mp_int k;
} ecc_key;
- int ecc_test(void);
- void ecc_sizes(int *low, int *high);
- int ecc_get_size(ecc_key *key);
+int ecc_test(void);
+void ecc_sizes(int *low, int *high);
+int ecc_get_size(ecc_key *key);
- int ecc_make_key(prng_state *prng, int wprng, int keysize, ecc_key *key);
- void ecc_free(ecc_key *key);
+int ecc_make_key(prng_state *prng, int wprng, int keysize, ecc_key *key);
+void ecc_free(ecc_key *key);
- int ecc_export(unsigned char *out, unsigned long *outlen, int type, ecc_key *key);
- int ecc_import(const unsigned char *in, unsigned long inlen, ecc_key *key);
+int ecc_export(unsigned char *out, unsigned long *outlen, int type, ecc_key *key);
+int ecc_import(const unsigned char *in, unsigned long inlen, ecc_key *key);
- int ecc_shared_secret(ecc_key *private_key, ecc_key *public_key,
- unsigned char *out, unsigned long *outlen);
+int ecc_shared_secret(ecc_key *private_key, ecc_key *public_key,
+ unsigned char *out, unsigned long *outlen);
- int ecc_encrypt_key(const unsigned char *inkey, unsigned long keylen,
- unsigned char *out, unsigned long *len,
- prng_state *prng, int wprng, int hash,
- ecc_key *key);
+int ecc_encrypt_key(const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen,
+ prng_state *prng, int wprng, int hash,
+ ecc_key *key);
- int ecc_decrypt_key(const unsigned char *in, unsigned long inlen,
- unsigned char *outkey, unsigned long *keylen,
- ecc_key *key);
+int ecc_decrypt_key(const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen,
+ ecc_key *key);
- int ecc_sign_hash(const unsigned char *in, unsigned long inlen,
- unsigned char *out, unsigned long *outlen,
- prng_state *prng, int wprng, ecc_key *key);
+int ecc_sign_hash(const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen,
+ prng_state *prng, int wprng, ecc_key *key);
+
+int ecc_verify_hash(const unsigned char *sig, unsigned long siglen,
+ const unsigned char *hash, unsigned long hashlen,
+ int *stat, ecc_key *key);
- int ecc_verify_hash(const unsigned char *sig, unsigned long siglen,
- const unsigned char *hash, unsigned long hashlen,
- int *stat, ecc_key *key);
#endif
#ifdef MDSA
@@ -257,29 +241,30 @@ typedef struct {
mp_int g, q, p, x, y;
} dsa_key;
- int dsa_make_key(prng_state *prng, int wprng, int group_size, int modulus_size, dsa_key *key);
- void dsa_free(dsa_key *key);
+int dsa_make_key(prng_state *prng, int wprng, int group_size, int modulus_size, dsa_key *key);
+void dsa_free(dsa_key *key);
- int dsa_sign_hash(const unsigned char *in, unsigned long inlen,
+int dsa_sign_hash(const unsigned char *in, unsigned long inlen,
unsigned char *out, unsigned long *outlen,
prng_state *prng, int wprng, dsa_key *key);
- int dsa_verify_hash(const unsigned char *sig, unsigned long siglen,
- const unsigned char *hash, unsigned long inlen,
- int *stat, dsa_key *key);
+int dsa_verify_hash(const unsigned char *sig, unsigned long siglen,
+ const unsigned char *hash, unsigned long hashlen,
+ int *stat, dsa_key *key);
- int dsa_import(const unsigned char *in, unsigned long inlen, dsa_key *key);
+int dsa_import(const unsigned char *in, unsigned long inlen, dsa_key *key);
- int dsa_export(unsigned char *out, unsigned long *outlen, int type, dsa_key *key);
+int dsa_export(unsigned char *out, unsigned long *outlen, int type, dsa_key *key);
- int dsa_verify_key(dsa_key *key, int *stat);
+int dsa_verify_key(dsa_key *key, int *stat);
#endif
+#ifdef LTC_DER
/* DER handling */
int der_encode_integer(mp_int *num, unsigned char *out, unsigned long *outlen);
int der_decode_integer(const unsigned char *in, unsigned long *inlen, mp_int *num);
int der_length_integer(mp_int *num, unsigned long *len);
int der_put_multi_integer(unsigned char *dst, unsigned long *outlen, mp_int *num, ...);
int der_get_multi_integer(const unsigned char *src, unsigned long *inlen, mp_int *num, ...);
-
+#endif
diff --git a/mycrypt_pkcs.h b/src/headers/tomcrypt_pkcs.h
similarity index 100%
rename from mycrypt_pkcs.h
rename to src/headers/tomcrypt_pkcs.h
diff --git a/src/headers/tomcrypt_prng.h b/src/headers/tomcrypt_prng.h
new file mode 100644
index 00000000..2ae5749e
--- /dev/null
+++ b/src/headers/tomcrypt_prng.h
@@ -0,0 +1,190 @@
+/* ---- PRNG Stuff ---- */
+#ifdef YARROW
+struct yarrow_prng {
+ int cipher, hash;
+ unsigned char pool[MAXBLOCKSIZE];
+ symmetric_CTR ctr;
+};
+#endif
+
+#ifdef RC4
+struct rc4_prng {
+ int x, y;
+ unsigned char buf[256];
+};
+#endif
+
+#ifdef FORTUNA
+struct fortuna_prng {
+ hash_state pool[FORTUNA_POOLS]; /* the pools */
+
+ symmetric_key skey;
+
+ unsigned char K[32], /* the current key */
+ IV[16]; /* IV for CTR mode */
+
+ unsigned long pool_idx, /* current pool we will add to */
+ pool0_len, /* length of 0'th pool */
+ wd;
+
+ ulong64 reset_cnt; /* number of times we have reset */
+};
+#endif
+
+#ifdef SOBER128
+struct sober128_prng {
+ ulong32 R[17], /* Working storage for the shift register */
+ initR[17], /* saved register contents */
+ konst, /* key dependent constant */
+ sbuf; /* partial word encryption buffer */
+
+ int nbuf, /* number of part-word stream bits buffered */
+ flag, /* first add_entropy call or not? */
+ set; /* did we call add_entropy to set key? */
+
+};
+#endif
+
+typedef union Prng_state {
+#ifdef YARROW
+ struct yarrow_prng yarrow;
+#endif
+#ifdef RC4
+ struct rc4_prng rc4;
+#endif
+#ifdef FORTUNA
+ struct fortuna_prng fortuna;
+#endif
+#ifdef SOBER128
+ struct sober128_prng sober128;
+#endif
+} prng_state;
+
+extern struct ltc_prng_descriptor {
+ /** Name of the PRNG */
+ char *name;
+ /** size in bytes of exported state */
+ int export_size;
+ /** Start a PRNG state
+ @param prng [out] The state to initialize
+ @return CRYPT_OK if successful
+ */
+ int (*start)(prng_state *prng);
+ /** Add entropy to the PRNG
+ @param in The entropy
+ @param inlen Length of the entropy (octets)\
+ @param prng The PRNG state
+ @return CRYPT_OK if successful
+ */
+ int (*add_entropy)(const unsigned char *in, unsigned long inlen, prng_state *prng);
+ /** Ready a PRNG state to read from
+ @param prng The PRNG state to ready
+ @return CRYPT_OK if successful
+ */
+ int (*ready)(prng_state *prng);
+ /** Read from the PRNG
+ @param out [out] Where to store the data
+ @param outlen Length of data desired (octets)
+ @param prng The PRNG state to read from
+ @return Number of octets read
+ */
+ unsigned long (*read)(unsigned char *out, unsigned long outlen, prng_state *prng);
+ /** Terminate a PRNG state
+ @param prng The PRNG state to terminate
+ @return CRYPT_OK if successful
+ */
+ int (*done)(prng_state *prng);
+ /** Export a PRNG state
+ @param out [out] The destination for the state
+ @param outlen [in/out] The max size and resulting size of the PRNG state
+ @param prng The PRNG to export
+ @return CRYPT_OK if successful
+ */
+ int (*pexport)(unsigned char *out, unsigned long *outlen, prng_state *prng);
+ /** Import a PRNG state
+ @param in The data to import
+ @param inlen The length of the data to import (octets)
+ @param prng The PRNG to initialize/import
+ @return CRYPT_OK if successful
+ */
+ int (*pimport)(const unsigned char *in, unsigned long inlen, prng_state *prng);
+ /** Self-test the PRNG
+ @return CRYPT_OK if successful, CRYPT_NOP if self-testing has been disabled
+ */
+ int (*test)(void);
+} prng_descriptor[];
+
+#ifdef YARROW
+int yarrow_start(prng_state *prng);
+int yarrow_add_entropy(const unsigned char *in, unsigned long inlen, prng_state *prng);
+int yarrow_ready(prng_state *prng);
+unsigned long yarrow_read(unsigned char *out, unsigned long outlen, prng_state *prng);
+int yarrow_done(prng_state *prng);
+int yarrow_export(unsigned char *out, unsigned long *outlen, prng_state *prng);
+int yarrow_import(const unsigned char *in, unsigned long inlen, prng_state *prng);
+int yarrow_test(void);
+extern const struct ltc_prng_descriptor yarrow_desc;
+#endif
+
+#ifdef FORTUNA
+int fortuna_start(prng_state *prng);
+int fortuna_add_entropy(const unsigned char *in, unsigned long inlen, prng_state *prng);
+int fortuna_ready(prng_state *prng);
+unsigned long fortuna_read(unsigned char *out, unsigned long outlen, prng_state *prng);
+int fortuna_done(prng_state *prng);
+int fortuna_export(unsigned char *out, unsigned long *outlen, prng_state *prng);
+int fortuna_import(const unsigned char *in, unsigned long inlen, prng_state *prng);
+int fortuna_test(void);
+extern const struct ltc_prng_descriptor fortuna_desc;
+#endif
+
+#ifdef RC4
+int rc4_start(prng_state *prng);
+int rc4_add_entropy(const unsigned char *in, unsigned long inlen, prng_state *prng);
+int rc4_ready(prng_state *prng);
+unsigned long rc4_read(unsigned char *out, unsigned long outlen, prng_state *prng);
+int rc4_done(prng_state *prng);
+int rc4_export(unsigned char *out, unsigned long *outlen, prng_state *prng);
+int rc4_import(const unsigned char *in, unsigned long inlen, prng_state *prng);
+int rc4_test(void);
+extern const struct ltc_prng_descriptor rc4_desc;
+#endif
+
+#ifdef SPRNG
+int sprng_start(prng_state *prng);
+int sprng_add_entropy(const unsigned char *in, unsigned long inlen, prng_state *prng);
+int sprng_ready(prng_state *prng);
+unsigned long sprng_read(unsigned char *out, unsigned long outlen, prng_state *prng);
+int sprng_done(prng_state *prng);
+int sprng_export(unsigned char *out, unsigned long *outlen, prng_state *prng);
+int sprng_import(const unsigned char *in, unsigned long inlen, prng_state *prng);
+int sprng_test(void);
+extern const struct ltc_prng_descriptor sprng_desc;
+#endif
+
+#ifdef SOBER128
+int sober128_start(prng_state *prng);
+int sober128_add_entropy(const unsigned char *in, unsigned long inlen, prng_state *prng);
+int sober128_ready(prng_state *prng);
+unsigned long sober128_read(unsigned char *out, unsigned long outlen, prng_state *prng);
+int sober128_done(prng_state *prng);
+int sober128_export(unsigned char *out, unsigned long *outlen, prng_state *prng);
+int sober128_import(const unsigned char *in, unsigned long inlen, prng_state *prng);
+int sober128_test(void);
+extern const struct ltc_prng_descriptor sober128_desc;
+#endif
+
+int find_prng(const char *name);
+int register_prng(const struct ltc_prng_descriptor *prng);
+int unregister_prng(const struct ltc_prng_descriptor *prng);
+int prng_is_valid(int idx);
+
+/* Slow RNG you **might** be able to use to seed a PRNG with. Be careful as this
+ * might not work on all platforms as planned
+ */
+unsigned long rng_get_bytes(unsigned char *out,
+ unsigned long outlen,
+ void (*callback)(void));
+
+int rng_make_prng(int bits, int wprng, prng_state *prng, void (*callback)(void));
+
diff --git a/tommath_class.h b/src/headers/tommath_class.h
similarity index 94%
rename from tommath_class.h
rename to src/headers/tommath_class.h
index c94e8e02..6d05b7b7 100644
--- a/tommath_class.h
+++ b/src/headers/tommath_class.h
@@ -90,8 +90,11 @@
#define BN_MP_READ_UNSIGNED_BIN_C
#define BN_MP_REDUCE_C
#define BN_MP_REDUCE_2K_C
+#define BN_MP_REDUCE_2K_L_C
#define BN_MP_REDUCE_2K_SETUP_C
+#define BN_MP_REDUCE_2K_SETUP_L_C
#define BN_MP_REDUCE_IS_2K_C
+#define BN_MP_REDUCE_IS_2K_L_C
#define BN_MP_REDUCE_SETUP_C
#define BN_MP_RSHD_C
#define BN_MP_SET_C
@@ -105,7 +108,9 @@
#define BN_MP_SUB_D_C
#define BN_MP_SUBMOD_C
#define BN_MP_TO_SIGNED_BIN_C
+#define BN_MP_TO_SIGNED_BIN_N_C
#define BN_MP_TO_UNSIGNED_BIN_C
+#define BN_MP_TO_UNSIGNED_BIN_N_C
#define BN_MP_TOOM_MUL_C
#define BN_MP_TOOM_SQR_C
#define BN_MP_TORADIX_C
@@ -132,7 +137,7 @@
#define BN_MP_ISEVEN_C
#define BN_MP_INIT_MULTI_C
#define BN_MP_COPY_C
- #define BN_MP_ABS_C
+ #define BN_MP_MOD_C
#define BN_MP_SET_C
#define BN_MP_DIV_2_C
#define BN_MP_ISODD_C
@@ -146,7 +151,6 @@
#endif
#if defined(BN_FAST_MP_MONTGOMERY_REDUCE_C)
- #define BN_MP_MONTGOMERY_REDUCE_C
#define BN_MP_GROW_C
#define BN_MP_RSHD_C
#define BN_MP_CLAMP_C
@@ -160,7 +164,6 @@
#endif
#if defined(BN_FAST_S_MP_MUL_HIGH_DIGS_C)
- #define BN_FAST_S_MP_MUL_DIGS_C
#define BN_MP_GROW_C
#define BN_MP_CLAMP_C
#endif
@@ -244,6 +247,7 @@
#define BN_MP_INIT_MULTI_C
#define BN_MP_SET_C
#define BN_MP_COUNT_BITS_C
+ #define BN_MP_ABS_C
#define BN_MP_MUL_2D_C
#define BN_MP_CMP_C
#define BN_MP_SUB_C
@@ -325,11 +329,12 @@
#define BN_MP_CLEAR_C
#define BN_MP_ABS_C
#define BN_MP_CLEAR_MULTI_C
+ #define BN_MP_REDUCE_IS_2K_L_C
+ #define BN_S_MP_EXPTMOD_C
#define BN_MP_DR_IS_MODULUS_C
#define BN_MP_REDUCE_IS_2K_C
#define BN_MP_ISODD_C
#define BN_MP_EXPTMOD_FAST_C
- #define BN_S_MP_EXPTMOD_C
#endif
#if defined(BN_MP_EXPTMOD_FAST_C)
@@ -361,6 +366,7 @@
#define BN_MP_DIV_C
#define BN_MP_MUL_C
#define BN_MP_SUB_C
+ #define BN_MP_NEG_C
#define BN_MP_EXCH_C
#define BN_MP_CLEAR_MULTI_C
#endif
@@ -435,6 +441,7 @@
#if defined(BN_MP_INVMOD_SLOW_C)
#define BN_MP_ISZERO_C
#define BN_MP_INIT_MULTI_C
+ #define BN_MP_MOD_C
#define BN_MP_COPY_C
#define BN_MP_ISEVEN_C
#define BN_MP_SET_C
@@ -481,7 +488,6 @@
#endif
#if defined(BN_MP_KARATSUBA_SQR_C)
- #define BN_MP_KARATSUBA_MUL_C
#define BN_MP_INIT_SIZE_C
#define BN_MP_CLAMP_C
#define BN_MP_SQR_C
@@ -534,10 +540,8 @@
#endif
#if defined(BN_MP_MONTGOMERY_REDUCE_C)
- #define BN_MP_MUL_C
#define BN_FAST_MP_MONTGOMERY_REDUCE_C
#define BN_MP_GROW_C
- #define BN_MP_MONTGOMERY_SETUP_C
#define BN_MP_CLAMP_C
#define BN_MP_RSHD_C
#define BN_MP_CMP_MAG_C
@@ -705,6 +709,7 @@
#define BN_MP_RSHD_C
#define BN_MP_MUL_C
#define BN_S_MP_MUL_HIGH_DIGS_C
+ #define BN_FAST_S_MP_MUL_HIGH_DIGS_C
#define BN_MP_MOD_2D_C
#define BN_S_MP_MUL_DIGS_C
#define BN_MP_SUB_C
@@ -728,6 +733,17 @@
#define BN_MP_CLEAR_C
#endif
+#if defined(BN_MP_REDUCE_2K_L_C)
+ #define BN_MP_INIT_C
+ #define BN_MP_COUNT_BITS_C
+ #define BN_MP_DIV_2D_C
+ #define BN_MP_MUL_C
+ #define BN_S_MP_ADD_C
+ #define BN_MP_CMP_MAG_C
+ #define BN_S_MP_SUB_C
+ #define BN_MP_CLEAR_C
+#endif
+
#if defined(BN_MP_REDUCE_2K_SETUP_C)
#define BN_MP_INIT_C
#define BN_MP_COUNT_BITS_C
@@ -736,11 +752,22 @@
#define BN_S_MP_SUB_C
#endif
+#if defined(BN_MP_REDUCE_2K_SETUP_L_C)
+ #define BN_MP_INIT_C
+ #define BN_MP_2EXPT_C
+ #define BN_MP_COUNT_BITS_C
+ #define BN_S_MP_SUB_C
+ #define BN_MP_CLEAR_C
+#endif
+
#if defined(BN_MP_REDUCE_IS_2K_C)
#define BN_MP_REDUCE_2K_C
#define BN_MP_COUNT_BITS_C
#endif
+#if defined(BN_MP_REDUCE_IS_2K_L_C)
+#endif
+
#if defined(BN_MP_REDUCE_SETUP_C)
#define BN_MP_2EXPT_C
#define BN_MP_DIV_C
@@ -818,6 +845,11 @@
#define BN_MP_TO_UNSIGNED_BIN_C
#endif
+#if defined(BN_MP_TO_SIGNED_BIN_N_C)
+ #define BN_MP_SIGNED_BIN_SIZE_C
+ #define BN_MP_TO_SIGNED_BIN_C
+#endif
+
#if defined(BN_MP_TO_UNSIGNED_BIN_C)
#define BN_MP_INIT_COPY_C
#define BN_MP_ISZERO_C
@@ -825,6 +857,11 @@
#define BN_MP_CLEAR_C
#endif
+#if defined(BN_MP_TO_UNSIGNED_BIN_N_C)
+ #define BN_MP_UNSIGNED_BIN_SIZE_C
+ #define BN_MP_TO_UNSIGNED_BIN_C
+#endif
+
#if defined(BN_MP_TOOM_MUL_C)
#define BN_MP_INIT_MULTI_C
#define BN_MP_MOD_2D_C
@@ -905,10 +942,12 @@
#define BN_MP_INIT_C
#define BN_MP_CLEAR_C
#define BN_MP_REDUCE_SETUP_C
+ #define BN_MP_REDUCE_C
+ #define BN_MP_REDUCE_2K_SETUP_L_C
+ #define BN_MP_REDUCE_2K_L_C
#define BN_MP_MOD_C
#define BN_MP_COPY_C
#define BN_MP_SQR_C
- #define BN_MP_REDUCE_C
#define BN_MP_MUL_C
#define BN_MP_SET_C
#define BN_MP_EXCH_C
diff --git a/tommath_superclass.h b/src/headers/tommath_superclass.h
similarity index 95%
rename from tommath_superclass.h
rename to src/headers/tommath_superclass.h
index 043b2243..b50ecb09 100644
--- a/tommath_superclass.h
+++ b/src/headers/tommath_superclass.h
@@ -7,7 +7,9 @@
// #define SC_RSA_1
/* For reference.... On an Athlon64 optimizing for speed...
+
LTM's mpi.o with all functions [striped] is 142KiB in size.
+
*/
/* Works for RSA only, mpi.o is 68KiB */
@@ -32,7 +34,7 @@
#define BN_PRIME_TAB_C
/* other modifiers */
-// #define BN_MP_DIV_SMALL /* Slower division, not critical (currently buggy?) */
+ #define BN_MP_DIV_SMALL /* Slower division, not critical */
/* here we are on the last pass so we turn things off. The functions classes are still there
* but we remove them specifically from the build. This also invokes tweaks in functions
diff --git a/hmac_done.c b/src/mac/hmac/hmac_done.c
similarity index 61%
rename from hmac_done.c
rename to src/mac/hmac/hmac_done.c
index b31460b4..fdf20be9 100644
--- a/hmac_done.c
+++ b/src/mac/hmac/hmac_done.c
@@ -6,41 +6,34 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* Submited by Dobes Vandermeer (dobes@smartt.com) */
-
-#include "mycrypt.h"
-
-/*
- (1) append zeros to the end of K to create a B byte string
- (e.g., if K is of length 20 bytes and B=64, then K will be
- appended with 44 zero bytes 0x00)
- (2) XOR (bitwise exclusive-OR) the B byte string computed in step
- (1) with ipad (ipad = the byte 0x36 repeated B times)
- (3) append the stream of data 'text' to the B byte string resulting
- from step (2)
- (4) apply H to the stream generated in step (3)
- (5) XOR (bitwise exclusive-OR) the B byte string computed in
- step (1) with opad (opad = the byte 0x5C repeated B times.)
- (6) append the H result from step (4) to the B byte string
- resulting from step (5)
- (7) apply H to the stream generated in step (6) and output
- the result
+#include "tomcrypt.h"
+
+/**
+ @file hmac_done.c
+ HMAC support, terminate stream, Tom St Denis/Dobes Vandermeer
*/
#ifdef HMAC
#define HMAC_BLOCKSIZE hash_descriptor[hash].blocksize
-int hmac_done(hmac_state *hmac, unsigned char *hashOut, unsigned long *outlen)
+/**
+ Terminate an HMAC session
+ @param hmac The HMAC state
+ @param out [out] The destination of the HMAC authentication tag
+ @param outlen [in/out] The max size and resulting size of the HMAC authentication tag
+ @return CRYPT_OK if successful
+*/
+int hmac_done(hmac_state *hmac, unsigned char *out, unsigned long *outlen)
{
unsigned char *buf, *isha;
unsigned long hashsize, i;
int hash, err;
- _ARGCHK(hmac != NULL);
- _ARGCHK(hashOut != NULL);
+ LTC_ARGCHK(hmac != NULL);
+ LTC_ARGCHK(out != NULL);
/* test hash */
hash = hmac->hash;
@@ -66,7 +59,7 @@ int hmac_done(hmac_state *hmac, unsigned char *hashOut, unsigned long *outlen)
/* Get the hash of the first HMAC vector plus the data */
if ((err = hash_descriptor[hash].done(&hmac->md, isha)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* Create the second HMAC vector vector for step (3) */
@@ -76,28 +69,28 @@ int hmac_done(hmac_state *hmac, unsigned char *hashOut, unsigned long *outlen)
/* Now calculate the "outer" hash for step (5), (6), and (7) */
if ((err = hash_descriptor[hash].init(&hmac->md)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((err = hash_descriptor[hash].process(&hmac->md, buf, HMAC_BLOCKSIZE)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((err = hash_descriptor[hash].process(&hmac->md, isha, hashsize)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((err = hash_descriptor[hash].done(&hmac->md, buf)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* copy to output */
for (i = 0; i < hashsize && i < *outlen; i++) {
- hashOut[i] = buf[i];
+ out[i] = buf[i];
}
*outlen = i;
err = CRYPT_OK;
-__ERR:
+LBL_ERR:
XFREE(hmac->key);
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(isha, hashsize);
zeromem(buf, hashsize);
zeromem(hmac, sizeof(*hmac));
diff --git a/hmac_file.c b/src/mac/hmac/hmac_file.c
similarity index 59%
rename from hmac_file.c
rename to src/mac/hmac/hmac_file.c
index e88b62f1..edbb6a60 100644
--- a/hmac_file.c
+++ b/src/mac/hmac/hmac_file.c
@@ -6,20 +6,32 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* Submited by Dobes Vandermeer (dobes@smartt.com) */
+#include "tomcrypt.h"
-#include "mycrypt.h"
+/**
+ @file hmac_file.c
+ HMAC support, process a file, Tom St Denis/Dobes Vandermeer
+*/
#ifdef HMAC
-/* hmac_file added by Tom St Denis */
+/**
+ HMAC a file
+ @param hash The index of the hash you wish to use
+ @param fname The name of the file you wish to HMAC
+ @param key The secret key
+ @param keylen The length of the secret key
+ @param out [out] The HMAC authentication tag
+ @param outlen [in/out] The max size and resulting size of the authentication tag
+ @return CRYPT_OK if successful, CRYPT_NOP if file support has been disabled
+*/
int hmac_file(int hash, const char *fname,
const unsigned char *key, unsigned long keylen,
- unsigned char *dst, unsigned long *dstlen)
+ unsigned char *out, unsigned long *outlen)
{
-#ifdef NO_FILE
+#ifdef LTC_NO_FILE
return CRYPT_NOP;
#else
hmac_state hmac;
@@ -28,10 +40,10 @@ int hmac_file(int hash, const char *fname,
size_t x;
int err;
- _ARGCHK(fname != NULL);
- _ARGCHK(key != NULL);
- _ARGCHK(dst != NULL);
- _ARGCHK(dstlen != NULL);
+ LTC_ARGCHK(fname != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
if((err = hash_is_valid(hash)) != CRYPT_OK) {
return err;
@@ -61,11 +73,11 @@ int hmac_file(int hash, const char *fname,
}
/* get final hmac */
- if ((err = hmac_done(&hmac, dst, dstlen)) != CRYPT_OK) {
+ if ((err = hmac_done(&hmac, out, outlen)) != CRYPT_OK) {
return err;
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
/* clear memory */
zeromem(buf, sizeof(buf));
#endif
diff --git a/hmac_init.c b/src/mac/hmac/hmac_init.c
similarity index 67%
rename from hmac_init.c
rename to src/mac/hmac/hmac_init.c
index 0d894f13..d060a5b4 100644
--- a/hmac_init.c
+++ b/src/mac/hmac/hmac_init.c
@@ -6,33 +6,27 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* Submited by Dobes Vandermeer (dobes@smartt.com) */
+#include "tomcrypt.h"
-#include "mycrypt.h"
-
-/*
- (1) append zeros to the end of K to create a B byte string
- (e.g., if K is of length 20 bytes and B=64, then K will be
- appended with 44 zero bytes 0x00)
- (2) XOR (bitwise exclusive-OR) the B byte string computed in step
- (1) with ipad (ipad = the byte 0x36 repeated B times)
- (3) append the stream of data 'text' to the B byte string resulting
- from step (2)
- (4) apply H to the stream generated in step (3)
- (5) XOR (bitwise exclusive-OR) the B byte string computed in
- step (1) with opad (opad = the byte 0x5C repeated B times.)
- (6) append the H result from step (4) to the B byte string
- resulting from step (5)
- (7) apply H to the stream generated in step (6) and output
- the result
+/**
+ @file hmac_init.c
+ HMAC support, initialize state, Tom St Denis/Dobes Vandermeer
*/
#ifdef HMAC
#define HMAC_BLOCKSIZE hash_descriptor[hash].blocksize
+/**
+ Initialize an HMAC context.
+ @param hmac The HMAC state
+ @param hash The index of the hash you want to use
+ @param key The secret key
+ @param keylen The length of the secret key (octets)
+ @return CRYPT_OK if successful
+*/
int hmac_init(hmac_state *hmac, int hash, const unsigned char *key, unsigned long keylen)
{
unsigned char *buf;
@@ -40,8 +34,8 @@ int hmac_init(hmac_state *hmac, int hash, const unsigned char *key, unsigned lon
unsigned long i, z;
int err;
- _ARGCHK(hmac != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(hmac != NULL);
+ LTC_ARGCHK(key != NULL);
/* valid hash? */
if ((err = hash_is_valid(hash)) != CRYPT_OK) {
@@ -72,7 +66,7 @@ int hmac_init(hmac_state *hmac, int hash, const unsigned char *key, unsigned lon
if(keylen > HMAC_BLOCKSIZE) {
z = HMAC_BLOCKSIZE;
if ((err = hash_memory(hash, key, keylen, hmac->key, &z)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
if(hashsize < HMAC_BLOCKSIZE) {
zeromem((hmac->key) + hashsize, (size_t)(HMAC_BLOCKSIZE - hashsize));
@@ -92,18 +86,18 @@ int hmac_init(hmac_state *hmac, int hash, const unsigned char *key, unsigned lon
/* Pre-pend that to the hash data */
if ((err = hash_descriptor[hash].init(&hmac->md)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((err = hash_descriptor[hash].process(&hmac->md, buf, HMAC_BLOCKSIZE)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
goto done;
-__ERR:
+LBL_ERR:
/* free the key since we failed */
XFREE(hmac->key);
done:
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(buf, HMAC_BLOCKSIZE);
#endif
diff --git a/src/mac/hmac/hmac_memory.c b/src/mac/hmac/hmac_memory.c
new file mode 100644
index 00000000..036ee369
--- /dev/null
+++ b/src/mac/hmac/hmac_memory.c
@@ -0,0 +1,73 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file hmac_memory.c
+ HMAC support, process a block of memory, Tom St Denis/Dobes Vandermeer
+*/
+
+#ifdef HMAC
+
+/**
+ HMAC a block of memory to produce the authentication tag
+ @param hash The index of the hash to use
+ @param key The secret key
+ @param keylen The length of the secret key (octets)
+ @param in The data to HMAC
+ @param inlen The length of the data to HMAC (octets)
+ @param out [out] Destination of the authentication tag
+ @param outlen [in/out] Max size and resulting size of authentication tag
+ @return CRYPT_OK if successful
+*/
+int hmac_memory(int hash,
+ const unsigned char *key, unsigned long keylen,
+ const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen)
+{
+ hmac_state *hmac;
+ int err;
+
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+
+ /* allocate ram for hmac state */
+ hmac = XMALLOC(sizeof(hmac_state));
+ if (hmac == NULL) {
+ return CRYPT_MEM;
+ }
+
+ if ((err = hmac_init(hmac, hash, key, keylen)) != CRYPT_OK) {
+ goto LBL_ERR;
+ }
+
+ if ((err = hmac_process(hmac, in, inlen)) != CRYPT_OK) {
+ goto LBL_ERR;
+ }
+
+ if ((err = hmac_done(hmac, out, outlen)) != CRYPT_OK) {
+ goto LBL_ERR;
+ }
+
+ err = CRYPT_OK;
+LBL_ERR:
+#ifdef LTC_CLEAN_STACK
+ zeromem(hmac, sizeof(hmac_state));
+#endif
+
+ XFREE(hmac);
+ return err;
+}
+
+#endif
+
diff --git a/src/mac/hmac/hmac_memory_multi.c b/src/mac/hmac/hmac_memory_multi.c
new file mode 100644
index 00000000..4a5b9be6
--- /dev/null
+++ b/src/mac/hmac/hmac_memory_multi.c
@@ -0,0 +1,88 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+#include <stdarg.h>
+
+/**
+ @file hmac_memory_multi.c
+ HMAC support, process multiple blocks of memory, Tom St Denis/Dobes Vandermeer
+*/
+
+#ifdef HMAC
+
+/**
+ HMAC multiple blocks of memory to produce the authentication tag
+ @param hash The index of the hash to use
+ @param key The secret key
+ @param keylen The length of the secret key (octets)
+ @param out [out] Destination of the authentication tag
+ @param outlen [in/out] Max size and resulting size of authentication tag
+ @param in The data to HMAC
+ @param inlen The length of the data to HMAC (octets)
+ @param ... tuples of (data,len) pairs to HMAC, terminated with a (NULL,x) (x=don't care)
+ @return CRYPT_OK if successful
+*/
+int hmac_memory_multi(int hash,
+ const unsigned char *key, unsigned long keylen,
+ unsigned char *out, unsigned long *outlen,
+ const unsigned char *in, unsigned long inlen, ...)
+
+{
+ hmac_state *hmac;
+ int err;
+ va_list args;
+ const unsigned char *curptr;
+ unsigned long curlen;
+
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+
+ /* allocate ram for hmac state */
+ hmac = XMALLOC(sizeof(hmac_state));
+ if (hmac == NULL) {
+ return CRYPT_MEM;
+ }
+
+ if ((err = hmac_init(hmac, hash, key, keylen)) != CRYPT_OK) {
+ goto LBL_ERR;
+ }
+
+ va_start(args, inlen);
+ curptr = in;
+ curlen = inlen;
+ for (;;) {
+ /* process buf */
+ if ((err = hmac_process(hmac, curptr, curlen)) != CRYPT_OK) {
+ goto LBL_ERR;
+ }
+ /* step to next */
+ curptr = va_arg(args, const unsigned char*);
+ if (curptr == NULL) {
+ break;
+ }
+ curlen = va_arg(args, unsigned long);
+ }
+ if ((err = hmac_done(hmac, out, outlen)) != CRYPT_OK) {
+ goto LBL_ERR;
+ }
+LBL_ERR:
+#ifdef LTC_CLEAN_STACK
+ zeromem(hmac, sizeof(hmac_state));
+#endif
+ XFREE(hmac);
+ va_end(args);
+ return err;
+}
+
+#endif
+
diff --git a/src/mac/hmac/hmac_process.c b/src/mac/hmac/hmac_process.c
new file mode 100644
index 00000000..30e64c37
--- /dev/null
+++ b/src/mac/hmac/hmac_process.c
@@ -0,0 +1,39 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file hmac_process.c
+ HMAC support, process data, Tom St Denis/Dobes Vandermeer
+*/
+
+#ifdef HMAC
+
+/**
+ Process data through HMAC
+ @param hmac The hmac state
+ @param in The data to send through HMAC
+ @param inlen The length of the data to HMAC (octets)
+ @return CRYPT_OK if successful
+*/
+int hmac_process(hmac_state *hmac, const unsigned char *in, unsigned long inlen)
+{
+ int err;
+ LTC_ARGCHK(hmac != NULL);
+ LTC_ARGCHK(in != NULL);
+ if ((err = hash_is_valid(hmac->hash)) != CRYPT_OK) {
+ return err;
+ }
+ return hash_descriptor[hmac->hash].process(&hmac->md, in, inlen);
+}
+
+#endif
+
diff --git a/hmac_test.c b/src/mac/hmac/hmac_test.c
similarity index 92%
rename from hmac_test.c
rename to src/mac/hmac/hmac_test.c
index 2b97777a..0d542d43 100644
--- a/hmac_test.c
+++ b/src/mac/hmac/hmac_test.c
@@ -6,27 +6,13 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* Submited by Dobes Vandermeer (dobes@smartt.com) */
+#include "tomcrypt.h"
-#include "mycrypt.h"
-
-/*
- (1) append zeros to the end of K to create a B byte string
- (e.g., if K is of length 20 bytes and B=64, then K will be
- appended with 44 zero bytes 0x00)
- (2) XOR (bitwise exclusive-OR) the B byte string computed in step
- (1) with ipad (ipad = the byte 0x36 repeated B times)
- (3) append the stream of data 'text' to the B byte string resulting
- from step (2)
- (4) apply H to the stream generated in step (3)
- (5) XOR (bitwise exclusive-OR) the B byte string computed in
- step (1) with opad (opad = the byte 0x5C repeated B times.)
- (6) append the H result from step (4) to the B byte string
- resulting from step (5)
- (7) apply H to the stream generated in step (6) and output
- the result
+/**
+ @file hmac_test.c
+ HMAC support, self-test, Tom St Denis/Dobes Vandermeer
*/
#ifdef HMAC
@@ -34,7 +20,6 @@
#define HMAC_BLOCKSIZE hash_descriptor[hash].blocksize
/*
-
TEST CASES SOURCE:
Network Working Group P. Cheng
@@ -42,11 +27,13 @@ Request for Comments: 2202 IBM
Category: Informational R. Glenn
NIST
September 1997
-
Test Cases for HMAC-MD5 and HMAC-SHA-1
*/
-
+/**
+ HMAC self-test
+ @return CRYPT_OK if successful, CRYPT_NOP if tests have been disabled.
+*/
int hmac_test(void)
{
#ifndef LTC_TEST
diff --git a/src/mac/omac/omac_done.c b/src/mac/omac/omac_done.c
new file mode 100644
index 00000000..0a91a141
--- /dev/null
+++ b/src/mac/omac/omac_done.c
@@ -0,0 +1,80 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file omac_done.c
+ OMAC1 support, terminate a stream, Tom St Denis
+*/
+
+#ifdef OMAC
+
+/**
+ Terminate an OMAC stream
+ @param omac The OMAC state
+ @param out [out] Destination for the authentication tag
+ @param outlen [in/out] The max size and resulting size of the authentication tag
+ @return CRYPT_OK if successful
+*/
+int omac_done(omac_state *omac, unsigned char *out, unsigned long *outlen)
+{
+ int err, mode;
+ unsigned x;
+
+ LTC_ARGCHK(omac != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+ if ((err = cipher_is_valid(omac->cipher_idx)) != CRYPT_OK) {
+ return err;
+ }
+
+ if ((omac->buflen > (int)sizeof(omac->block)) || (omac->buflen < 0) ||
+ (omac->blklen > (int)sizeof(omac->block)) || (omac->buflen > omac->blklen)) {
+ return CRYPT_INVALID_ARG;
+ }
+
+ /* figure out mode */
+ if (omac->buflen != omac->blklen) {
+ /* add the 0x80 byte */
+ omac->block[omac->buflen++] = 0x80;
+
+ /* pad with 0x00 */
+ while (omac->buflen < omac->blklen) {
+ omac->block[omac->buflen++] = 0x00;
+ }
+ mode = 1;
+ } else {
+ mode = 0;
+ }
+
+ /* now xor prev + Lu[mode] */
+ for (x = 0; x < (unsigned)omac->blklen; x++) {
+ omac->block[x] ^= omac->prev[x] ^ omac->Lu[mode][x];
+ }
+
+ /* encrypt it */
+ cipher_descriptor[omac->cipher_idx].ecb_encrypt(omac->block, omac->block, &omac->key);
+ cipher_descriptor[omac->cipher_idx].done(&omac->key);
+
+ /* output it */
+ for (x = 0; x < (unsigned)omac->blklen && x < *outlen; x++) {
+ out[x] = omac->block[x];
+ }
+ *outlen = x;
+
+#ifdef LTC_CLEAN_STACK
+ zeromem(omac, sizeof(*omac));
+#endif
+ return CRYPT_OK;
+}
+
+#endif
+
diff --git a/omac_file.c b/src/mac/omac/omac_file.c
similarity index 59%
rename from omac_file.c
rename to src/mac/omac/omac_file.c
index 09d2d4b0..1e3d2f6b 100644
--- a/omac_file.c
+++ b/src/mac/omac/omac_file.c
@@ -6,19 +6,33 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* OMAC1 Support by Tom St Denis (for 64 and 128 bit block ciphers only) */
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file omac_file.c
+ OMAC1 support, process a file, Tom St Denis
+*/
#ifdef OMAC
+/**
+ OMAC a file
+ @param cipher The index of the cipher desired
+ @param key The secret key
+ @param keylen The length of the secret key (octets)
+ @param filename The name of the file you wish to OMAC
+ @param out [out] Where the authentication tag is to be stored
+ @param outlen [in/out] The max size and resulting size of the authentication tag
+ @return CRYPT_OK if successful, CRYPT_NOP if file support has been disabled
+*/
int omac_file(int cipher,
const unsigned char *key, unsigned long keylen,
const char *filename,
unsigned char *out, unsigned long *outlen)
{
-#ifdef NO_FILE
+#ifdef LTC_NO_FILE
return CRYPT_NOP;
#else
int err, x;
@@ -26,10 +40,10 @@ int omac_file(int cipher,
FILE *in;
unsigned char buf[512];
- _ARGCHK(key != NULL);
- _ARGCHK(filename != NULL);
- _ARGCHK(out != NULL);
- _ARGCHK(outlen != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(filename != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
in = fopen(filename, "rb");
if (in == NULL) {
@@ -54,7 +68,7 @@ int omac_file(int cipher,
return err;
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(buf, sizeof(buf));
#endif
diff --git a/omac_init.c b/src/mac/omac/omac_init.c
similarity index 77%
rename from omac_init.c
rename to src/mac/omac/omac_init.c
index cc933d04..d39219d8 100644
--- a/omac_init.c
+++ b/src/mac/omac/omac_init.c
@@ -6,25 +6,44 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* OMAC1 Support by Tom St Denis (for 64 and 128 bit block ciphers only) */
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file omac_init.c
+ OMAC1 support, initialize state, by Tom St Denis
+*/
+
#ifdef OMAC
+/**
+ Initialize an OMAC state
+ @param omac The OMAC state to initialize
+ @param cipher The index of the desired cipher
+ @param key The secret key
+ @param keylen The length of the secret key (octets)
+ @return CRYPT_OK if successful
+*/
int omac_init(omac_state *omac, int cipher, const unsigned char *key, unsigned long keylen)
{
int err, x, y, mask, msb, len;
- _ARGCHK(omac != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(omac != NULL);
+ LTC_ARGCHK(key != NULL);
/* schedule the key */
if ((err = cipher_is_valid(cipher)) != CRYPT_OK) {
return err;
}
+#ifdef LTC_FAST
+ if (16 % sizeof(LTC_FAST_TYPE)) {
+ return CRYPT_INVALID_ARG;
+ }
+#endif
+
/* now setup the system */
switch (cipher_descriptor[cipher].block_length) {
case 8: mask = 0x1B;
diff --git a/src/mac/omac/omac_memory.c b/src/mac/omac/omac_memory.c
new file mode 100644
index 00000000..51d0ce24
--- /dev/null
+++ b/src/mac/omac/omac_memory.c
@@ -0,0 +1,71 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file omac_memory.c
+ OMAC1 support, process a block of memory, Tom St Denis
+*/
+
+#ifdef OMAC
+
+/**
+ OMAC a block of memory
+ @param cipher The index of the desired cipher
+ @param key The secret key
+ @param keylen The length of the secret key (octets)
+ @param in The data to send through OMAC
+ @param inlen The length of the data to send through OMAC (octets)
+ @param out [out] The destination of the authentication tag
+ @param outlen [in/out] The max size and resulting size of the authentication tag (octets)
+ @return CRYPT_OK if successful
+*/
+int omac_memory(int cipher,
+ const unsigned char *key, unsigned long keylen,
+ const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen)
+{
+ int err;
+ omac_state *omac;
+
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+
+ /* allocate ram for omac state */
+ omac = XMALLOC(sizeof(omac_state));
+ if (omac == NULL) {
+ return CRYPT_MEM;
+ }
+
+ /* omac process the message */
+ if ((err = omac_init(omac, cipher, key, keylen)) != CRYPT_OK) {
+ goto LBL_ERR;
+ }
+ if ((err = omac_process(omac, in, inlen)) != CRYPT_OK) {
+ goto LBL_ERR;
+ }
+ if ((err = omac_done(omac, out, outlen)) != CRYPT_OK) {
+ goto LBL_ERR;
+ }
+
+ err = CRYPT_OK;
+LBL_ERR:
+#ifdef LTC_CLEAN_STACK
+ zeromem(omac, sizeof(omac_state));
+#endif
+
+ XFREE(omac);
+ return err;
+}
+
+#endif
diff --git a/src/mac/omac/omac_memory_multi.c b/src/mac/omac/omac_memory_multi.c
new file mode 100644
index 00000000..76e4eb08
--- /dev/null
+++ b/src/mac/omac/omac_memory_multi.c
@@ -0,0 +1,86 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+#include <stdarg.h>
+
+/**
+ @file omac_memory_multi.c
+ OMAC1 support, process multiple blocks of memory, Tom St Denis
+*/
+
+#ifdef OMAC
+
+/**
+ OMAC multiple blocks of memory
+ @param cipher The index of the desired cipher
+ @param key The secret key
+ @param keylen The length of the secret key (octets)
+ @param out [out] The destination of the authentication tag
+ @param outlen [in/out] The max size and resulting size of the authentication tag (octets)
+ @param in The data to send through OMAC
+ @param inlen The length of the data to send through OMAC (octets)
+ @param ... tuples of (data,len) pairs to OMAC, terminated with a (NULL,x) (x=don't care)
+ @return CRYPT_OK if successful
+*/
+int omac_memory_multi(int cipher,
+ const unsigned char *key, unsigned long keylen,
+ unsigned char *out, unsigned long *outlen,
+ const unsigned char *in, unsigned long inlen, ...)
+{
+ int err;
+ omac_state *omac;
+ va_list args;
+ const unsigned char *curptr;
+ unsigned long curlen;
+
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+
+ /* allocate ram for omac state */
+ omac = XMALLOC(sizeof(omac_state));
+ if (omac == NULL) {
+ return CRYPT_MEM;
+ }
+
+ /* omac process the message */
+ if ((err = omac_init(omac, cipher, key, keylen)) != CRYPT_OK) {
+ goto LBL_ERR;
+ }
+ va_start(args, inlen);
+ curptr = in;
+ curlen = inlen;
+ for (;;) {
+ /* process buf */
+ if ((err = omac_process(omac, curptr, curlen)) != CRYPT_OK) {
+ goto LBL_ERR;
+ }
+ /* step to next */
+ curptr = va_arg(args, const unsigned char*);
+ if (curptr == NULL) {
+ break;
+ }
+ curlen = va_arg(args, unsigned long);
+ }
+ if ((err = omac_done(omac, out, outlen)) != CRYPT_OK) {
+ goto LBL_ERR;
+ }
+LBL_ERR:
+#ifdef LTC_CLEAN_STACK
+ zeromem(omac, sizeof(omac_state));
+#endif
+ XFREE(omac);
+ va_end(args);
+ return err;
+}
+
+#endif
diff --git a/src/mac/omac/omac_process.c b/src/mac/omac/omac_process.c
new file mode 100644
index 00000000..6b603f79
--- /dev/null
+++ b/src/mac/omac/omac_process.c
@@ -0,0 +1,79 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file omac_process.c
+ OMAC1 support, process data, Tom St Denis
+*/
+
+
+#ifdef OMAC
+
+/**
+ Process data through OMAC
+ @param omac The OMAC state
+ @param in The input data to send through OMAC
+ @param inlen The length of the input (octets)
+ @return CRYPT_OK if successful
+*/
+int omac_process(omac_state *omac, const unsigned char *in, unsigned long inlen)
+{
+ int err, n, x;
+
+ LTC_ARGCHK(omac != NULL);
+ LTC_ARGCHK(in != NULL);
+ if ((err = cipher_is_valid(omac->cipher_idx)) != CRYPT_OK) {
+ return err;
+ }
+
+ if ((omac->buflen > (int)sizeof(omac->block)) || (omac->buflen < 0) ||
+ (omac->blklen > (int)sizeof(omac->block)) || (omac->buflen > omac->blklen)) {
+ return CRYPT_INVALID_ARG;
+ }
+
+#ifdef LTC_FAST
+ if (omac->buflen == 0 && inlen > 16) {
+ int y;
+ for (x = 0; x < (inlen - 16); x += 16) {
+ for (y = 0; y < 16; y += sizeof(LTC_FAST_TYPE)) {
+ *((LTC_FAST_TYPE*)(&omac->prev[y])) ^= *((LTC_FAST_TYPE*)(&in[y]));
+ }
+ in += 16;
+ cipher_descriptor[omac->cipher_idx].ecb_encrypt(omac->prev, omac->prev, &omac->key);
+ }
+ inlen -= x;
+ }
+#endif
+
+ while (inlen != 0) {
+ /* ok if the block is full we xor in prev, encrypt and replace prev */
+ if (omac->buflen == omac->blklen) {
+ for (x = 0; x < omac->blklen; x++) {
+ omac->block[x] ^= omac->prev[x];
+ }
+ cipher_descriptor[omac->cipher_idx].ecb_encrypt(omac->block, omac->prev, &omac->key);
+ omac->buflen = 0;
+ }
+
+ /* add bytes */
+ n = MIN(inlen, (unsigned long)(omac->blklen - omac->buflen));
+ XMEMCPY(omac->block + omac->buflen, in, n);
+ omac->buflen += n;
+ inlen -= n;
+ in += n;
+ }
+
+ return CRYPT_OK;
+}
+
+#endif
+
diff --git a/omac_test.c b/src/mac/omac/omac_test.c
similarity index 92%
rename from omac_test.c
rename to src/mac/omac/omac_test.c
index e3460735..42e42bd1 100644
--- a/omac_test.c
+++ b/src/mac/omac/omac_test.c
@@ -6,13 +6,21 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* OMAC1 Support by Tom St Denis (for 64 and 128 bit block ciphers only) */
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file omac_test.c
+ OMAC1 support, self-test, by Tom St Denis
+*/
#ifdef OMAC
+/**
+ Test the OMAC setup
+ @return CRYPT_OK if successful, CRYPT_NOP if tests have been disabled
+*/
int omac_test(void)
{
#if !defined(LTC_TEST)
diff --git a/src/mac/pelican/pelican.c b/src/mac/pelican/pelican.c
new file mode 100644
index 00000000..fb7ce58c
--- /dev/null
+++ b/src/mac/pelican/pelican.c
@@ -0,0 +1,149 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file pelican.c
+ Pelican MAC, initialize state, by Tom St Denis
+*/
+
+#ifdef PELICAN
+
+#define ENCRYPT_ONLY
+#include "../../ciphers/aes/aes_tab.c"
+
+
+/**
+ Initialize a Pelican state
+ @param pelmac The Pelican state to initialize
+ @param key The secret key
+ @param keylen The length of the secret key (octets)
+ @return CRYPT_OK if successful
+*/
+int pelican_init(pelican_state *pelmac, const unsigned char *key, unsigned long keylen)
+{
+ int err;
+
+ LTC_ARGCHK(pelmac != NULL);
+ LTC_ARGCHK(key != NULL);
+
+#ifdef LTC_FAST
+ if (16 % sizeof(LTC_FAST_TYPE)) {
+ return CRYPT_INVALID_ARG;
+ }
+#endif
+
+ if ((err = aes_setup(key, keylen, 0, &pelmac->K)) != CRYPT_OK) {
+ return err;
+ }
+
+ zeromem(pelmac->state, 16);
+ aes_ecb_encrypt(pelmac->state, pelmac->state, &pelmac->K);
+ pelmac->buflen = 0;
+
+ return CRYPT_OK;
+}
+
+static void four_rounds(pelican_state *pelmac)
+{
+ ulong32 s0, s1, s2, s3, t0, t1, t2, t3;
+ int r;
+
+ LOAD32H(s0, pelmac->state );
+ LOAD32H(s1, pelmac->state + 4);
+ LOAD32H(s2, pelmac->state + 8);
+ LOAD32H(s3, pelmac->state + 12);
+ for (r = 0; r < 4; r++) {
+ t0 =
+ Te0(byte(s0, 3)) ^
+ Te1(byte(s1, 2)) ^
+ Te2(byte(s2, 1)) ^
+ Te3(byte(s3, 0));
+ t1 =
+ Te0(byte(s1, 3)) ^
+ Te1(byte(s2, 2)) ^
+ Te2(byte(s3, 1)) ^
+ Te3(byte(s0, 0));
+ t2 =
+ Te0(byte(s2, 3)) ^
+ Te1(byte(s3, 2)) ^
+ Te2(byte(s0, 1)) ^
+ Te3(byte(s1, 0));
+ t3 =
+ Te0(byte(s3, 3)) ^
+ Te1(byte(s0, 2)) ^
+ Te2(byte(s1, 1)) ^
+ Te3(byte(s2, 0));
+ s0 = t0; s1 = t1; s2 = t2; s3 = t3;
+ }
+ STORE32H(s0, pelmac->state );
+ STORE32H(s1, pelmac->state + 4);
+ STORE32H(s2, pelmac->state + 8);
+ STORE32H(s3, pelmac->state + 12);
+}
+
+/**
+ Process a block of text through Pelican
+ @param pelmac The Pelican MAC state
+ @param in The input
+ @param inlen The length input (octets)
+ @return CRYPT_OK on success
+ */
+int pelican_process(pelican_state *pelmac, const unsigned char *in, unsigned long inlen)
+{
+
+ LTC_ARGCHK(pelmac != NULL);
+ LTC_ARGCHK(in != NULL);
+#ifdef LTC_FAST
+ if (pelmac->buflen == 0) {
+ while (inlen & ~15) {
+ int x;
+ for (x = 0; x < 16; x += sizeof(LTC_FAST_TYPE)) {
+ *((LTC_FAST_TYPE*)((unsigned char *)pelmac->state + x)) ^= *((LTC_FAST_TYPE*)((unsigned char *)in + x));
+ }
+ four_rounds(pelmac);
+ in += 16;
+ inlen -= 16;
+ }
+ }
+#endif
+
+ while (inlen--) {
+ pelmac->state[pelmac->buflen++] ^= *in++;
+ if (pelmac->buflen == 16) {
+ four_rounds(pelmac);
+ pelmac->buflen = 0;
+ }
+ }
+ return CRYPT_OK;
+}
+
+/**
+ Terminate Pelican MAC
+ @param pelmac The Pelican MAC state
+ @param out [out] The TAG
+ @return CRYPT_OK on sucess
+*/
+int pelican_done(pelican_state *pelmac, unsigned char *out)
+{
+ LTC_ARGCHK(pelmac != NULL);
+ LTC_ARGCHK(out != NULL);
+ if (pelmac->buflen == 16) {
+ four_rounds(pelmac);
+ pelmac->buflen = 0;
+ }
+ pelmac->state[pelmac->buflen++] ^= 0x80;
+ aes_ecb_encrypt(pelmac->state, out, &pelmac->K);
+ aes_done(&pelmac->K);
+ return CRYPT_OK;
+}
+
+#endif
diff --git a/src/mac/pelican/pelican_memory.c b/src/mac/pelican/pelican_memory.c
new file mode 100644
index 00000000..9e0fc7b3
--- /dev/null
+++ b/src/mac/pelican/pelican_memory.c
@@ -0,0 +1,55 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file pelican_memory.c
+ Pelican MAC, MAC a block of memory, by Tom St Denis
+*/
+
+#ifdef PELICAN
+
+/**
+ Pelican block of memory
+ @param key The key for the MAC
+ @param keylen The length of the key (octets)
+ @param in The input to MAC
+ @param inlen The length of the input (octets)
+ @param out [out] The output TAG
+ @return CRYPT_OK on success
+*/
+int pelican_memory(const unsigned char *key, unsigned long keylen,
+ const unsigned char *in, unsigned long inlen,
+ unsigned char *out)
+{
+ pelican_state *pel;
+ int err;
+
+ pel = XMALLOC(sizeof(*pel));
+ if (pel == NULL) {
+ return CRYPT_MEM;
+ }
+
+ if ((err = pelican_init(pel, key, keylen)) != CRYPT_OK) {
+ XFREE(pel);
+ return err;
+ }
+ if ((err = pelican_process(pel, in ,inlen)) != CRYPT_OK) {
+ XFREE(pel);
+ return err;
+ }
+ err = pelican_done(pel, out);
+ XFREE(pel);
+ return err;
+}
+
+
+#endif
diff --git a/src/mac/pelican/pelican_test.c b/src/mac/pelican/pelican_test.c
new file mode 100644
index 00000000..e694f61a
--- /dev/null
+++ b/src/mac/pelican/pelican_test.c
@@ -0,0 +1,116 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file pelican_test.c
+ Pelican MAC, test, by Tom St Denis
+*/
+
+#ifdef PELICAN
+
+int pelican_test(void)
+{
+#ifndef LTC_TEST
+ return CRYPT_NOP;
+#else
+ static const struct {
+ unsigned char K[32], MSG[64], T[16];
+ int keylen, ptlen;
+ } tests[] = {
+/* K=16, M=0 */
+{
+ { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
+ 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E, 0x0F },
+ { 0 },
+ { 0xeb, 0x58, 0x37, 0x15, 0xf8, 0x34, 0xde, 0xe5,
+ 0xa4, 0xd1, 0x6e, 0xe4, 0xb9, 0xd7, 0x76, 0x0e, },
+ 16, 0
+},
+
+/* K=16, M=3 */
+{
+ { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
+ 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E, 0x0F },
+ { 0x00, 0x01, 0x02 },
+ { 0x1c, 0x97, 0x40, 0x60, 0x6c, 0x58, 0x17, 0x2d,
+ 0x03, 0x94, 0x19, 0x70, 0x81, 0xc4, 0x38, 0x54, },
+ 16, 3
+},
+
+/* K=16, M=16 */
+{
+ { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
+ 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E, 0x0F },
+ { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
+ 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E, 0x0F },
+ { 0x03, 0xcc, 0x46, 0xb8, 0xac, 0xa7, 0x9c, 0x36,
+ 0x1e, 0x8c, 0x6e, 0xa6, 0x7b, 0x89, 0x32, 0x49, },
+ 16, 16
+},
+
+/* K=16, M=32 */
+{
+ { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
+ 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E, 0x0F },
+ { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
+ 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E, 0x0F,
+ 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
+ 0x18, 0x19, 0x1A, 0x1B, 0x1C, 0x1D, 0x1E, 0x1F },
+ { 0x89, 0xcc, 0x36, 0x58, 0x1b, 0xdd, 0x4d, 0xb5,
+ 0x78, 0xbb, 0xac, 0xf0, 0xff, 0x8b, 0x08, 0x15, },
+ 16, 32
+},
+
+/* K=16, M=35 */
+{
+ { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
+ 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E, 0x0F },
+ { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
+ 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E, 0x0F,
+ 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
+ 0x18, 0x19, 0x1A, 0x1B, 0x1C, 0x1D, 0x1E, 0x1F,
+ 0x20, 0x21, 0x23 },
+ { 0x4a, 0x7d, 0x45, 0x4d, 0xcd, 0xb5, 0xda, 0x8d,
+ 0x48, 0x78, 0x16, 0x48, 0x5d, 0x45, 0x95, 0x99, },
+ 16, 35
+},
+};
+ int x, err;
+ unsigned char out[16];
+ pelican_state pel;
+
+ for (x = 0; x < (int)(sizeof(tests)/sizeof(tests[0])); x++) {
+ if ((err = pelican_init(&pel, tests[x].K, tests[x].keylen)) != CRYPT_OK) {
+ return err;
+ }
+ if ((err = pelican_process(&pel, tests[x].MSG, tests[x].ptlen)) != CRYPT_OK) {
+ return err;
+ }
+ if ((err = pelican_done(&pel, out)) != CRYPT_OK) {
+ return err;
+ }
+
+ if (memcmp(out, tests[x].T, 16)) {
+#if 0
+ int y;
+ printf("\nFailed test %d\n", x);
+ printf("{ "); for (y = 0; y < 16; ) { printf("0x%02x, ", out[y]); if (!(++y & 7)) printf("\n"); } printf(" }\n");
+#endif
+ return CRYPT_FAIL_TESTVECTOR;
+ }
+ }
+ return CRYPT_OK;
+#endif
+}
+
+
+#endif
diff --git a/pmac_done.c b/src/mac/pmac/pmac_done.c
similarity index 82%
rename from pmac_done.c
rename to src/mac/pmac/pmac_done.c
index 8051da78..610e433a 100644
--- a/pmac_done.c
+++ b/src/mac/pmac/pmac_done.c
@@ -6,11 +6,14 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
-/* PMAC implementation by Tom St Denis */
-#include "mycrypt.h"
+/**
+ @file pmac_done.c
+ PMAC implementation, terminate a session, by Tom St Denis
+*/
#ifdef PMAC
@@ -18,8 +21,8 @@ int pmac_done(pmac_state *state, unsigned char *out, unsigned long *outlen)
{
int err, x;
- _ARGCHK(state != NULL);
- _ARGCHK(out != NULL);
+ LTC_ARGCHK(state != NULL);
+ LTC_ARGCHK(out != NULL);
if ((err = cipher_is_valid(state->cipher_idx)) != CRYPT_OK) {
return err;
}
@@ -47,6 +50,7 @@ int pmac_done(pmac_state *state, unsigned char *out, unsigned long *outlen)
/* encrypt it */
cipher_descriptor[state->cipher_idx].ecb_encrypt(state->checksum, state->checksum, &state->key);
+ cipher_descriptor[state->cipher_idx].done(&state->key);
/* store it */
for (x = 0; x < state->block_len && x <= (int)*outlen; x++) {
@@ -54,7 +58,7 @@ int pmac_done(pmac_state *state, unsigned char *out, unsigned long *outlen)
}
*outlen = x;
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(state, sizeof(*state));
#endif
return CRYPT_OK;
diff --git a/pmac_file.c b/src/mac/pmac/pmac_file.c
similarity index 58%
rename from pmac_file.c
rename to src/mac/pmac/pmac_file.c
index c664a095..5b7dd242 100644
--- a/pmac_file.c
+++ b/src/mac/pmac/pmac_file.c
@@ -6,20 +6,33 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
-/* PMAC implementation by Tom St Denis */
-#include "mycrypt.h"
+/**
+ @file pmac_file.c
+ PMAC implementation, process a file, by Tom St Denis
+*/
#ifdef PMAC
+/**
+ PMAC a file
+ @param cipher The index of the cipher desired
+ @param key The secret key
+ @param keylen The length of the secret key (octets)
+ @param filename The name of the file to send through PMAC
+ @param out [out] Destination for the authentication tag
+ @param outlen [in/out] Max size and resulting size of the authentication tag
+ @return CRYPT_OK if successful, CRYPT_NOP if file support has been disabled
+*/
int pmac_file(int cipher,
const unsigned char *key, unsigned long keylen,
const char *filename,
unsigned char *out, unsigned long *outlen)
{
-#ifdef NO_FILE
+#ifdef LTC_NO_FILE
return CRYPT_NOP;
#else
int err, x;
@@ -28,10 +41,10 @@ int pmac_file(int cipher,
unsigned char buf[512];
- _ARGCHK(key != NULL);
- _ARGCHK(filename != NULL);
- _ARGCHK(out != NULL);
- _ARGCHK(outlen != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(filename != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
in = fopen(filename, "rb");
if (in == NULL) {
@@ -56,7 +69,7 @@ int pmac_file(int cipher,
return err;
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(buf, sizeof(buf));
#endif
diff --git a/pmac_init.c b/src/mac/pmac/pmac_init.c
similarity index 82%
rename from pmac_init.c
rename to src/mac/pmac/pmac_init.c
index 2f96927b..a02b20c5 100644
--- a/pmac_init.c
+++ b/src/mac/pmac/pmac_init.c
@@ -6,11 +6,14 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
-/* PMAC implementation by Tom St Denis */
-#include "mycrypt.h"
+/**
+ @file pmac_init.c
+ PMAC implementation, initialize state, by Tom St Denis
+*/
#ifdef PMAC
@@ -32,13 +35,21 @@ static const struct {
}
};
+/**
+ Initialize a PMAC state
+ @param pmac The PMAC state to initialize
+ @param cipher The index of the desired cipher
+ @param key The secret key
+ @param keylen The length of the secret key (octets)
+ @return CRYPT_OK if successful
+*/
int pmac_init(pmac_state *pmac, int cipher, const unsigned char *key, unsigned long keylen)
{
int poly, x, y, m, err;
unsigned char *L;
- _ARGCHK(pmac != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(pmac != NULL);
+ LTC_ARGCHK(key != NULL);
/* valid cipher? */
if ((err = cipher_is_valid(cipher)) != CRYPT_OK) {
@@ -54,7 +65,14 @@ int pmac_init(pmac_state *pmac, int cipher, const unsigned char *key, unsigned l
}
if (polys[poly].len != pmac->block_len) {
return CRYPT_INVALID_ARG;
- }
+ }
+
+#ifdef LTC_FAST
+ if (pmac->block_len % sizeof(LTC_FAST_TYPE)) {
+ return CRYPT_INVALID_ARG;
+ }
+#endif
+
/* schedule the key */
if ((err = cipher_descriptor[cipher].setup(key, keylen, 0, &pmac->key)) != CRYPT_OK) {
@@ -110,7 +128,7 @@ int pmac_init(pmac_state *pmac, int cipher, const unsigned char *key, unsigned l
zeromem(pmac->Li, sizeof(pmac->Li));
zeromem(pmac->checksum, sizeof(pmac->checksum));
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(L, pmac->block_len);
#endif
diff --git a/src/mac/pmac/pmac_memory.c b/src/mac/pmac/pmac_memory.c
new file mode 100644
index 00000000..a04cd78f
--- /dev/null
+++ b/src/mac/pmac/pmac_memory.c
@@ -0,0 +1,70 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file pmac_memory.c
+ PMAC implementation, process a block of memory, by Tom St Denis
+*/
+
+#ifdef PMAC
+
+/**
+ PMAC a block of memory
+ @param cipher The index of the cipher desired
+ @param key The secret key
+ @param keylen The length of the secret key (octets)
+ @param in The data you wish to send through PMAC
+ @param inlen The length of data you wish to send through PMAC (octets)
+ @param out [out] Destination for the authentication tag
+ @param outlen [in/out] The max size and resulting size of the authentication tag
+ @return CRYPT_OK if successful
+*/
+int pmac_memory(int cipher,
+ const unsigned char *key, unsigned long keylen,
+ const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen)
+{
+ int err;
+ pmac_state *pmac;
+
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+
+ /* allocate ram for pmac state */
+ pmac = XMALLOC(sizeof(pmac_state));
+ if (pmac == NULL) {
+ return CRYPT_MEM;
+ }
+
+ if ((err = pmac_init(pmac, cipher, key, keylen)) != CRYPT_OK) {
+ goto LBL_ERR;
+ }
+ if ((err = pmac_process(pmac, in, inlen)) != CRYPT_OK) {
+ goto LBL_ERR;
+ }
+ if ((err = pmac_done(pmac, out, outlen)) != CRYPT_OK) {
+ goto LBL_ERR;
+ }
+
+ err = CRYPT_OK;
+LBL_ERR:
+#ifdef LTC_CLEAN_STACK
+ zeromem(pmac, sizeof(pmac_state));
+#endif
+
+ XFREE(pmac);
+ return err;
+}
+
+#endif
diff --git a/src/mac/pmac/pmac_memory_multi.c b/src/mac/pmac/pmac_memory_multi.c
new file mode 100644
index 00000000..289d2e0c
--- /dev/null
+++ b/src/mac/pmac/pmac_memory_multi.c
@@ -0,0 +1,85 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+#include <stdarg.h>
+
+/**
+ @file pmac_memory_multi.c
+ PMAC implementation, process multiple blocks of memory, by Tom St Denis
+*/
+
+#ifdef PMAC
+
+/**
+ PMAC multiple blocks of memory
+ @param cipher The index of the cipher desired
+ @param key The secret key
+ @param keylen The length of the secret key (octets)
+ @param out [out] Destination for the authentication tag
+ @param outlen [in/out] The max size and resulting size of the authentication tag
+ @param in The data you wish to send through PMAC
+ @param inlen The length of data you wish to send through PMAC (octets)
+ @param ... tuples of (data,len) pairs to PMAC, terminated with a (NULL,x) (x=don't care)
+ @return CRYPT_OK if successful
+*/
+int pmac_memory_multi(int cipher,
+ const unsigned char *key, unsigned long keylen,
+ unsigned char *out, unsigned long *outlen,
+ const unsigned char *in, unsigned long inlen, ...)
+{
+ int err;
+ pmac_state *pmac;
+ va_list args;
+ const unsigned char *curptr;
+ unsigned long curlen;
+
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+
+ /* allocate ram for pmac state */
+ pmac = XMALLOC(sizeof(pmac_state));
+ if (pmac == NULL) {
+ return CRYPT_MEM;
+ }
+
+ if ((err = pmac_init(pmac, cipher, key, keylen)) != CRYPT_OK) {
+ goto LBL_ERR;
+ }
+ va_start(args, inlen);
+ curptr = in;
+ curlen = inlen;
+ for (;;) {
+ /* process buf */
+ if ((err = pmac_process(pmac, curptr, curlen)) != CRYPT_OK) {
+ goto LBL_ERR;
+ }
+ /* step to next */
+ curptr = va_arg(args, const unsigned char*);
+ if (curptr == NULL) {
+ break;
+ }
+ curlen = va_arg(args, unsigned long);
+ }
+ if ((err = pmac_done(pmac, out, outlen)) != CRYPT_OK) {
+ goto LBL_ERR;
+ }
+LBL_ERR:
+#ifdef LTC_CLEAN_STACK
+ zeromem(pmac, sizeof(pmac_state));
+#endif
+ XFREE(pmac);
+ va_end(args);
+ return err;
+}
+
+#endif
diff --git a/pmac_ntz.c b/src/mac/pmac/pmac_ntz.c
similarity index 68%
rename from pmac_ntz.c
rename to src/mac/pmac/pmac_ntz.c
index 98ec4308..97f0a15a 100644
--- a/pmac_ntz.c
+++ b/src/mac/pmac/pmac_ntz.c
@@ -6,14 +6,20 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
-/* PMAC implementation by Tom St Denis */
-#include "mycrypt.h"
+/**
+ @file pmac_ntz.c
+ PMAC implementation, internal function, by Tom St Denis
+*/
#ifdef PMAC
+/**
+ Internal PMAC function
+*/
int pmac_ntz(unsigned long x)
{
int c;
diff --git a/src/mac/pmac/pmac_process.c b/src/mac/pmac/pmac_process.c
new file mode 100644
index 00000000..5cee5ecc
--- /dev/null
+++ b/src/mac/pmac/pmac_process.c
@@ -0,0 +1,92 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file pmac_process.c
+ PMAC implementation, process data, by Tom St Denis
+*/
+
+
+#ifdef PMAC
+
+/**
+ Process data in a PMAC stream
+ @param pmac The PMAC state
+ @param in The data to send through PMAC
+ @param inlen The length of the data to send through PMAC
+ @return CRYPT_OK if successful
+*/
+int pmac_process(pmac_state *pmac, const unsigned char *in, unsigned long inlen)
+{
+ int err, n;
+ unsigned long x;
+ unsigned char Z[MAXBLOCKSIZE];
+
+ LTC_ARGCHK(pmac != NULL);
+ LTC_ARGCHK(in != NULL);
+ if ((err = cipher_is_valid(pmac->cipher_idx)) != CRYPT_OK) {
+ return err;
+ }
+
+ if ((pmac->buflen > (int)sizeof(pmac->block)) || (pmac->buflen < 0) ||
+ (pmac->block_len > (int)sizeof(pmac->block)) || (pmac->buflen > pmac->block_len)) {
+ return CRYPT_INVALID_ARG;
+ }
+
+#ifdef LTC_FAST
+ if (pmac->buflen == 0 && inlen > 16) {
+ unsigned long y;
+ for (x = 0; x < (inlen - 16); x += 16) {
+ pmac_shift_xor(pmac);
+ for (y = 0; y < 16; y += sizeof(LTC_FAST_TYPE)) {
+ *((LTC_FAST_TYPE*)(&Z[y])) = *((LTC_FAST_TYPE*)(&in[y])) ^ *((LTC_FAST_TYPE*)(&pmac->Li[y]));
+ }
+ cipher_descriptor[pmac->cipher_idx].ecb_encrypt(Z, Z, &pmac->key);
+ for (y = 0; y < 16; y += sizeof(LTC_FAST_TYPE)) {
+ *((LTC_FAST_TYPE*)(&pmac->checksum[y])) ^= *((LTC_FAST_TYPE*)(&Z[y]));
+ }
+ in += 16;
+ }
+ inlen -= x;
+ }
+#endif
+
+ while (inlen != 0) {
+ /* ok if the block is full we xor in prev, encrypt and replace prev */
+ if (pmac->buflen == pmac->block_len) {
+ pmac_shift_xor(pmac);
+ for (x = 0; x < (unsigned long)pmac->block_len; x++) {
+ Z[x] = pmac->Li[x] ^ pmac->block[x];
+ }
+ cipher_descriptor[pmac->cipher_idx].ecb_encrypt(Z, Z, &pmac->key);
+ for (x = 0; x < (unsigned long)pmac->block_len; x++) {
+ pmac->checksum[x] ^= Z[x];
+ }
+ pmac->buflen = 0;
+ }
+
+ /* add bytes */
+ n = MIN(inlen, (unsigned long)(pmac->block_len - pmac->buflen));
+ XMEMCPY(pmac->block + pmac->buflen, in, n);
+ pmac->buflen += n;
+ inlen -= n;
+ in += n;
+ }
+
+#ifdef LTC_CLEAN_STACK
+ zeromem(Z, sizeof(Z));
+#endif
+
+ return CRYPT_OK;
+}
+
+#endif
diff --git a/src/mac/pmac/pmac_shift_xor.c b/src/mac/pmac/pmac_shift_xor.c
new file mode 100644
index 00000000..18c6141e
--- /dev/null
+++ b/src/mac/pmac/pmac_shift_xor.c
@@ -0,0 +1,40 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file pmac_shift_xor.c
+ PMAC implementation, internal function, by Tom St Denis
+*/
+
+#ifdef PMAC
+
+/**
+ Internal function. Performs the state update (adding correct multiple)
+ @param pmac The PMAC state.
+*/
+void pmac_shift_xor(pmac_state *pmac)
+{
+ int x, y;
+ y = pmac_ntz(pmac->block_index++);
+#ifdef LTC_FAST
+ for (x = 0; x < pmac->block_len; x += sizeof(LTC_FAST_TYPE)) {
+ *((LTC_FAST_TYPE*)((unsigned char *)pmac->Li + x)) ^=
+ *((LTC_FAST_TYPE*)((unsigned char *)pmac->Ls[y] + x));
+ }
+#else
+ for (x = 0; x < pmac->block_len; x++) {
+ pmac->Li[x] ^= pmac->Ls[y][x];
+ }
+#endif
+}
+
+#endif
diff --git a/pmac_test.c b/src/mac/pmac/pmac_test.c
similarity index 93%
rename from pmac_test.c
rename to src/mac/pmac/pmac_test.c
index e813eb59..6c610f9f 100644
--- a/pmac_test.c
+++ b/src/mac/pmac/pmac_test.c
@@ -6,14 +6,22 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
+
+/**
+ @file pmac_test.c
+ PMAC implementation, self-test, by Tom St Denis
+*/
-/* PMAC implementation by Tom St Denis */
-#include "mycrypt.h"
#ifdef PMAC
+/**
+ Test the OMAC implementation
+ @return CRYPT_OK if successful, CRYPT_NOP if testing has been disabled
+*/
int pmac_test(void)
{
#if !defined(LTC_TEST)
diff --git a/base64_decode.c b/src/misc/base64/base64_decode.c
similarity index 67%
rename from base64_decode.c
rename to src/misc/base64/base64_decode.c
index 6729480e..ac6db57e 100644
--- a/base64_decode.c
+++ b/src/misc/base64/base64_decode.c
@@ -6,11 +6,15 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
+
+/**
+ @file base64_decode.c
+ Compliant base64 code donated by Wayne Scott (wscott@bitmover.com)
+*/
-/* compliant base64 code donated by Wayne Scott (wscott@bitmover.com) */
-#include "mycrypt.h"
#ifdef BASE64
@@ -38,23 +42,43 @@ static const unsigned char map[256] = {
255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255,
255, 255, 255, 255 };
-int base64_decode(const unsigned char *in, unsigned long len,
+/**
+ base64 decode a block of memory
+ @param in The base64 data to decode
+ @param inlen The length of the base64 data
+ @param out [out] The destination of the binary decoded data
+ @param outlen [in/out] The max size and resulting size of the decoded data
+ @return CRYPT_OK if successful
+*/
+int base64_decode(const unsigned char *in, unsigned long inlen,
unsigned char *out, unsigned long *outlen)
{
unsigned long t, x, y, z;
unsigned char c;
int g;
- _ARGCHK(in != NULL);
- _ARGCHK(out != NULL);
- _ARGCHK(outlen != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
g = 3;
- for (x = y = z = t = 0; x < len; x++) {
+ for (x = y = z = t = 0; x < inlen; x++) {
c = map[in[x]&0xFF];
if (c == 255) continue;
- if (c == 254) { c = 0; g--; }
+ /* the final = symbols are read and used to trim the remaining bytes */
+ if (c == 254) {
+ c = 0;
+ /* prevent g < 0 which would potentially allow an overflow later */
+ if (--g < 0) {
+ return CRYPT_INVALID_PACKET;
+ }
+ } else if (g != 3) {
+ /* we only allow = to be at the end */
+ return CRYPT_INVALID_PACKET;
+ }
+
t = (t<<6)|c;
+
if (++y == 4) {
if (z + g > *outlen) {
return CRYPT_BUFFER_OVERFLOW;
diff --git a/base64_encode.c b/src/misc/base64/base64_encode.c
similarity index 58%
rename from base64_encode.c
rename to src/misc/base64/base64_encode.c
index c322bccb..047980c9 100644
--- a/base64_encode.c
+++ b/src/misc/base64/base64_encode.c
@@ -6,33 +6,46 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* compliant base64 code donated by Wayne Scott (wscott@bitmover.com) */
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file base64_encode.c
+ Compliant base64 encoder donated by Wayne Scott (wscott@bitmover.com)
+*/
+
#ifdef BASE64
static const char *codes =
"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
-int base64_encode(const unsigned char *in, unsigned long len,
+/**
+ base64 Encode a buffer (NUL terminated)
+ @param in The input buffer to encode
+ @param inlen The length of the input buffer
+ @param out [out] The destination of the base64 encoded data
+ @param outlen [in/out] The max size and resulting size
+ @return CRYPT_OK if successful
+*/
+int base64_encode(const unsigned char *in, unsigned long inlen,
unsigned char *out, unsigned long *outlen)
{
unsigned long i, len2, leven;
unsigned char *p;
- _ARGCHK(in != NULL);
- _ARGCHK(out != NULL);
- _ARGCHK(outlen != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
/* valid output size ? */
- len2 = 4 * ((len + 2) / 3);
+ len2 = 4 * ((inlen + 2) / 3);
if (*outlen < len2 + 1) {
return CRYPT_BUFFER_OVERFLOW;
}
p = out;
- leven = 3*(len / 3);
+ leven = 3*(inlen / 3);
for (i = 0; i < leven; i += 3) {
*p++ = codes[(in[0] >> 2) & 0x3F];
*p++ = codes[(((in[0] & 3) << 4) + (in[1] >> 4)) & 0x3F];
@@ -41,13 +54,13 @@ int base64_encode(const unsigned char *in, unsigned long len,
in += 3;
}
/* Pad it if necessary... */
- if (i < len) {
+ if (i < inlen) {
unsigned a = in[0];
- unsigned b = (i+1 < len) ? in[1] : 0;
+ unsigned b = (i+1 < inlen) ? in[1] : 0;
*p++ = codes[(a >> 2) & 0x3F];
*p++ = codes[(((a & 3) << 4) + (b >> 4)) & 0x3F];
- *p++ = (i+1 < len) ? codes[(((b & 0xf) << 2)) & 0x3F] : '=';
+ *p++ = (i+1 < inlen) ? codes[(((b & 0xf) << 2)) & 0x3F] : '=';
*p++ = '=';
}
diff --git a/burn_stack.c b/src/misc/burn_stack.c
similarity index 67%
rename from burn_stack.c
rename to src/misc/burn_stack.c
index 17b13911..3bc69ab1 100644
--- a/burn_stack.c
+++ b/src/misc/burn_stack.c
@@ -6,10 +6,19 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+/**
+ @file burn_stack.c
+ Burn stack, Tom St Denis
+*/
+
+/**
+ Burn some stack memory
+ @param len amount of stack to burn in bytes
+*/
void burn_stack(unsigned long len)
{
unsigned char buf[32];
diff --git a/crypt.c b/src/misc/crypt/crypt.c
similarity index 69%
rename from crypt.c
rename to src/misc/crypt/crypt.c
index 3a4bdc30..83f1414a 100644
--- a/crypt.c
+++ b/src/misc/crypt/crypt.c
@@ -6,12 +6,19 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file crypt.c
+ Build strings, Tom St Denis
+*/
const char *crypt_build_settings =
- "LibTomCrypt " SCRYPT "\n\n"
+ "LibTomCrypt " SCRYPT " (Tom St Denis, tomstdenis@gmail.com)\n"
+ "LibTomCrypt is public domain software.\n"
+ "Built on " __DATE__ " at " __TIME__ "\n\n\n"
"Endianess: "
#if defined(ENDIAN_NEUTRAL)
"neutral\n"
@@ -31,7 +38,7 @@ const char *crypt_build_settings =
#endif
#endif
"Clean stack: "
-#if defined(CLEAN_STACK)
+#if defined(LTC_CLEAN_STACK)
"enabled\n"
#else
"disabled\n"
@@ -63,12 +70,20 @@ const char *crypt_build_settings =
#endif
#if defined(TWOFISH)
" Twofish "
- #if defined(TWOFISH_SMALL) && defined(TWOFISH_TABLES)
+ #if defined(TWOFISH_SMALL) && defined(TWOFISH_TABLES) && defined(TWOFISH_ALL_TABLES)
+ "(small, tables, all_tables)\n"
+ #elif defined(TWOFISH_SMALL) && defined(TWOFISH_TABLES)
"(small, tables)\n"
+ #elif defined(TWOFISH_SMALL) && defined(TWOFISH_ALL_TABLES)
+ "(small, all_tables)\n"
+ #elif defined(TWOFISH_TABLES) && defined(TWOFISH_ALL_TABLES)
+ "(tables, all_tables)\n"
#elif defined(TWOFISH_SMALL)
"(small)\n"
#elif defined(TWOFISH_TABLES)
"(tables)\n"
+ #elif defined(TWOFISH_ALL_TABLES)
+ "(all_tables)\n"
#else
"\n"
#endif
@@ -85,6 +100,16 @@ const char *crypt_build_settings =
#if defined(SKIPJACK)
" Skipjack\n"
#endif
+#if defined(KHAZAD)
+ " Khazad\n"
+#endif
+#if defined(ANUBIS)
+ " Anubis "
+#endif
+#if defined(ANUBIS_TWEAK)
+ " (tweaked)"
+#endif
+ "\n"
"\nHashes built-in:\n"
#if defined(SHA512)
@@ -154,6 +179,9 @@ const char *crypt_build_settings =
#if defined(PMAC)
" PMAC\n"
#endif
+#if defined(PELICAN)
+ " PELICAN\n"
+#endif
"\nENC + AUTH modes:\n"
#if defined(EAX_MODE)
@@ -162,6 +190,16 @@ const char *crypt_build_settings =
#if defined(OCB_MODE)
" OCB_MODE\n"
#endif
+#if defined(CCM_MODE)
+ " CCM_MODE\n"
+#endif
+#if defined(GCM_MODE)
+ " GCM_MODE "
+#endif
+#if defined(GCM_TABLES)
+ " (GCM_TABLES) "
+#endif
+ "\n"
"\nPRNG:\n"
@@ -183,11 +221,7 @@ const char *crypt_build_settings =
"\nPK Algs:\n"
#if defined(MRSA)
- " RSA"
-#if defined(RSA_TIMING)
- " + RSA_TIMING "
-#endif
- "\n"
+ " RSA \n"
#endif
#if defined(MDH)
" DH\n"
@@ -203,10 +237,10 @@ const char *crypt_build_settings =
#if defined(WIN32)
" WIN32 platform detected.\n"
#endif
-#if defined(__CYGWIN__)
+#if defined(LBL_CYGWIN__)
" CYGWIN Detected.\n"
#endif
-#if defined(__DJGPP__)
+#if defined(LBL_DJGPP__)
" DJGPP Detected.\n"
#endif
#if defined(_MSC_VER)
@@ -218,6 +252,9 @@ const char *crypt_build_settings =
#if defined(INTEL_CC)
" Intel C Compiler detected.\n"
#endif
+#if defined(LBL_x86_64__)
+ " x86-64 detected.\n"
+#endif
"\nVarious others: "
#if defined(BASE64)
@@ -238,14 +275,26 @@ const char *crypt_build_settings =
#if defined(PKCS_5)
" PKCS#5 "
#endif
-#if defined(SMALL_CODE)
- " SMALL_CODE "
+#if defined(LTC_SMALL_CODE)
+ " LTC_SMALL_CODE "
+#endif
+#if defined(LTC_NO_FILE)
+ " LTC_NO_FILE "
+#endif
+#if defined(LTC_DER)
+ " LTC_DER "
+#endif
+#if defined(LTC_FAST)
+ " LTC_FAST "
+#endif
+#if defined(LTC_NO_FAST)
+ " LTC_NO_FAST "
#endif
-#if defined(NO_FILE)
- " NO_FILE "
+#if defined(LTC_NO_BSWAP)
+ " LTC_NO_BSWAP "
#endif
-#if defined(LTMSSE)
- " LTMSSE "
+#if defined(LTC_NO_ASM)
+ " LTC_NO_ASM "
#endif
"\n"
"\n\n\n"
diff --git a/crypt_argchk.c b/src/misc/crypt/crypt_argchk.c
similarity index 64%
rename from crypt_argchk.c
rename to src/misc/crypt/crypt_argchk.c
index 3bb73a08..d345c8d0 100644
--- a/crypt_argchk.c
+++ b/src/misc/crypt/crypt_argchk.c
@@ -6,15 +6,20 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
#include <signal.h>
+/**
+ @file crypt_argchk.c
+ Perform argument checking, Tom St Denis
+*/
+
#if (ARGTYPE == 0)
void crypt_argchk(char *v, char *s, int d)
{
- fprintf(stderr, "_ARGCHK '%s' failure on line %d of file %s\n",
+ fprintf(stderr, "LTC_ARGCHK '%s' failure on line %d of file %s\n",
v, d, s);
(void)raise(SIGABRT);
}
diff --git a/src/misc/crypt/crypt_cipher_descriptor.c b/src/misc/crypt/crypt_cipher_descriptor.c
new file mode 100644
index 00000000..e2744496
--- /dev/null
+++ b/src/misc/crypt/crypt_cipher_descriptor.c
@@ -0,0 +1,21 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file crypt_cipher_descriptor.c
+ Stores the cipher descriptor table, Tom St Denis
+*/
+
+struct ltc_cipher_descriptor cipher_descriptor[TAB_SIZE] = {
+{ NULL, 0, 0, 0, 0, 0, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL }
+ };
+
diff --git a/crypt_cipher_is_valid.c b/src/misc/crypt/crypt_cipher_is_valid.c
similarity index 60%
rename from crypt_cipher_is_valid.c
rename to src/misc/crypt/crypt_cipher_is_valid.c
index 8b0c448f..b1794025 100644
--- a/crypt_cipher_is_valid.c
+++ b/src/misc/crypt/crypt_cipher_is_valid.c
@@ -6,10 +6,20 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+/**
+ @file crypt_cipher_is_valid.c
+ Determine if cipher is valid, Tom St Denis
+*/
+
+/*
+ Test if a cipher index is valid
+ @param idx The index of the cipher to search for
+ @return CRYPT_OK if valid
+*/
int cipher_is_valid(int idx)
{
if (idx < 0 || idx >= TAB_SIZE || cipher_descriptor[idx].name == NULL) {
diff --git a/crypt_find_cipher.c b/src/misc/crypt/crypt_find_cipher.c
similarity index 59%
rename from crypt_find_cipher.c
rename to src/misc/crypt/crypt_find_cipher.c
index 0aa88c77..b83109c1 100644
--- a/crypt_find_cipher.c
+++ b/src/misc/crypt/crypt_find_cipher.c
@@ -6,14 +6,24 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+/**
+ @file crypt_find_cipher.c
+ Find a cipher in the descriptor tables, Tom St Denis
+*/
+
+/**
+ Find a registered cipher by name
+ @param name The name of the cipher to look for
+ @return >= 0 if found, -1 if not present
+*/
int find_cipher(const char *name)
{
int x;
- _ARGCHK(name != NULL);
+ LTC_ARGCHK(name != NULL);
for (x = 0; x < TAB_SIZE; x++) {
if (cipher_descriptor[x].name != NULL && !strcmp(cipher_descriptor[x].name, name)) {
return x;
diff --git a/crypt_find_cipher_any.c b/src/misc/crypt/crypt_find_cipher_any.c
similarity index 55%
rename from crypt_find_cipher_any.c
rename to src/misc/crypt/crypt_find_cipher_any.c
index 81c33be9..42e59c05 100644
--- a/crypt_find_cipher_any.c
+++ b/src/misc/crypt/crypt_find_cipher_any.c
@@ -6,16 +6,27 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
-/* idea from Wayne Scott */
+/**
+ @file crypt_find_cipher_any.c
+ Find a cipher in the descriptor tables, Tom St Denis
+*/
+
+/**
+ Find a cipher flexibly. First by name then if not present by block and key size
+ @param name The name of the cipher desired
+ @param blocklen The minimum length of the block cipher desired (octets)
+ @param keylen The minimum length of the key size desired (octets)
+ @return >= 0 if found, -1 if not present
+*/
int find_cipher_any(const char *name, int blocklen, int keylen)
{
int x;
- _ARGCHK(name != NULL);
+ LTC_ARGCHK(name != NULL);
x = find_cipher(name);
if (x != -1) return x;
diff --git a/crypt_find_cipher_id.c b/src/misc/crypt/crypt_find_cipher_id.c
similarity index 62%
rename from crypt_find_cipher_id.c
rename to src/misc/crypt/crypt_find_cipher_id.c
index 91b19d56..986baf58 100644
--- a/crypt_find_cipher_id.c
+++ b/src/misc/crypt/crypt_find_cipher_id.c
@@ -6,10 +6,20 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+/**
+ @file crypt_find_cipher_id.c
+ Find cipher by ID, Tom St Denis
+*/
+
+/**
+ Find a cipher by ID number
+ @param ID The ID (not same as index) of the cipher to find
+ @return >= 0 if found, -1 if not present
+*/
int find_cipher_id(unsigned char ID)
{
int x;
diff --git a/crypt_find_hash.c b/src/misc/crypt/crypt_find_hash.c
similarity index 61%
rename from crypt_find_hash.c
rename to src/misc/crypt/crypt_find_hash.c
index 14222336..d66201c1 100644
--- a/crypt_find_hash.c
+++ b/src/misc/crypt/crypt_find_hash.c
@@ -6,14 +6,24 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+/**
+ @file crypt_find_hash.c
+ Find a hash, Tom St Denis
+*/
+
+/**
+ Find a registered hash by name
+ @param name The name of the hash to look for
+ @return >= 0 if found, -1 if not present
+*/
int find_hash(const char *name)
{
int x;
- _ARGCHK(name != NULL);
+ LTC_ARGCHK(name != NULL);
for (x = 0; x < TAB_SIZE; x++) {
if (hash_descriptor[x].name != NULL && strcmp(hash_descriptor[x].name, name) == 0) {
return x;
diff --git a/crypt_find_hash_any.c b/src/misc/crypt/crypt_find_hash_any.c
similarity index 58%
rename from crypt_find_hash_any.c
rename to src/misc/crypt/crypt_find_hash_any.c
index 5b352523..0d6d430f 100644
--- a/crypt_find_hash_any.c
+++ b/src/misc/crypt/crypt_find_hash_any.c
@@ -6,15 +6,24 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
-/* return first hash with at least [amount over] digestlen bytes of output */
-int find_hash_any(const char *name, int digestlen)
+/**
+ @file crypt_find_hash_any.c
+ Find a hash, Tom St Denis
+*/
+
+/**
+ Find a hash flexibly. First by name then if not present by digest size
+ @param name The name of the hash desired
+ @param digestlen The minimum length of the digest size (octets)
+ @return >= 0 if found, -1 if not present
+*/int find_hash_any(const char *name, int digestlen)
{
int x, y, z;
- _ARGCHK(name != NULL);
+ LTC_ARGCHK(name != NULL);
x = find_hash(name);
if (x != -1) return x;
diff --git a/crypt_find_hash_id.c b/src/misc/crypt/crypt_find_hash_id.c
similarity index 62%
rename from crypt_find_hash_id.c
rename to src/misc/crypt/crypt_find_hash_id.c
index ff04aeac..8628d537 100644
--- a/crypt_find_hash_id.c
+++ b/src/misc/crypt/crypt_find_hash_id.c
@@ -6,10 +6,20 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+/**
+ @file crypt_find_hash_id.c
+ Find hash by ID, Tom St Denis
+*/
+
+/**
+ Find a hash by ID number
+ @param ID The ID (not same as index) of the hash to find
+ @return >= 0 if found, -1 if not present
+*/
int find_hash_id(unsigned char ID)
{
int x;
diff --git a/crypt_find_prng.c b/src/misc/crypt/crypt_find_prng.c
similarity index 61%
rename from crypt_find_prng.c
rename to src/misc/crypt/crypt_find_prng.c
index 7fc4e458..c01a023a 100644
--- a/crypt_find_prng.c
+++ b/src/misc/crypt/crypt_find_prng.c
@@ -6,14 +6,24 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+/**
+ @file crypt_find_prng.c
+ Find a PRNG, Tom St Denis
+*/
+
+/**
+ Find a registered PRNG by name
+ @param name The name of the PRNG to look for
+ @return >= 0 if found, -1 if not present
+*/
int find_prng(const char *name)
{
int x;
- _ARGCHK(name != NULL);
+ LTC_ARGCHK(name != NULL);
for (x = 0; x < TAB_SIZE; x++) {
if ((prng_descriptor[x].name != NULL) && strcmp(prng_descriptor[x].name, name) == 0) {
return x;
diff --git a/src/misc/crypt/crypt_hash_descriptor.c b/src/misc/crypt/crypt_hash_descriptor.c
new file mode 100644
index 00000000..cbd6d03e
--- /dev/null
+++ b/src/misc/crypt/crypt_hash_descriptor.c
@@ -0,0 +1,20 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file crypt_hash_descriptor.c
+ Stores the hash descriptor table, Tom St Denis
+*/
+
+struct ltc_hash_descriptor hash_descriptor[TAB_SIZE] = {
+{ NULL, 0, 0, 0, { 0 }, 0, NULL, NULL, NULL, NULL }
+};
diff --git a/crypt_hash_is_valid.c b/src/misc/crypt/crypt_hash_is_valid.c
similarity index 60%
rename from crypt_hash_is_valid.c
rename to src/misc/crypt/crypt_hash_is_valid.c
index b924e594..c9784b84 100644
--- a/crypt_hash_is_valid.c
+++ b/src/misc/crypt/crypt_hash_is_valid.c
@@ -6,10 +6,20 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+/**
+ @file crypt_hash_is_valid.c
+ Determine if hash is valid, Tom St Denis
+*/
+
+/*
+ Test if a hash index is valid
+ @param idx The index of the hash to search for
+ @return CRYPT_OK if valid
+*/
int hash_is_valid(int idx)
{
if (idx < 0 || idx >= TAB_SIZE || hash_descriptor[idx].name == NULL) {
diff --git a/src/misc/crypt/crypt_prng_descriptor.c b/src/misc/crypt/crypt_prng_descriptor.c
new file mode 100644
index 00000000..8a995104
--- /dev/null
+++ b/src/misc/crypt/crypt_prng_descriptor.c
@@ -0,0 +1,19 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file crypt_prng_descriptor.c
+ Stores the PRNG descriptors, Tom St Denis
+*/
+struct ltc_prng_descriptor prng_descriptor[TAB_SIZE] = {
+{ NULL, 0, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL }
+};
diff --git a/crypt_prng_is_valid.c b/src/misc/crypt/crypt_prng_is_valid.c
similarity index 60%
rename from crypt_prng_is_valid.c
rename to src/misc/crypt/crypt_prng_is_valid.c
index cc66bc26..7795bbb9 100644
--- a/crypt_prng_is_valid.c
+++ b/src/misc/crypt/crypt_prng_is_valid.c
@@ -6,10 +6,20 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+/**
+ @file crypt_prng_is_valid.c
+ Determine if PRNG is valid, Tom St Denis
+*/
+
+/*
+ Test if a PRNG index is valid
+ @param idx The index of the PRNG to search for
+ @return CRYPT_OK if valid
+*/
int prng_is_valid(int idx)
{
if (idx < 0 || idx >= TAB_SIZE || prng_descriptor[idx].name == NULL) {
diff --git a/crypt_register_cipher.c b/src/misc/crypt/crypt_register_cipher.c
similarity index 55%
rename from crypt_register_cipher.c
rename to src/misc/crypt/crypt_register_cipher.c
index e8e021e1..74349e66 100644
--- a/crypt_register_cipher.c
+++ b/src/misc/crypt/crypt_register_cipher.c
@@ -6,15 +6,25 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
-int register_cipher(const struct _cipher_descriptor *cipher)
+/**
+ @file crypt_register_cipher.c
+ Register a cipher, Tom St Denis
+*/
+
+/**
+ Register a cipher with the descriptor table
+ @param cipher The cipher you wish to register
+ @return value >= 0 if successfully added (or already present), -1 if unsuccessful
+*/
+int register_cipher(const struct ltc_cipher_descriptor *cipher)
{
int x;
- _ARGCHK(cipher != NULL);
+ LTC_ARGCHK(cipher != NULL);
/* is it already registered? */
for (x = 0; x < TAB_SIZE; x++) {
@@ -26,7 +36,7 @@ int register_cipher(const struct _cipher_descriptor *cipher)
/* find a blank spot */
for (x = 0; x < TAB_SIZE; x++) {
if (cipher_descriptor[x].name == NULL) {
- XMEMCPY(&cipher_descriptor[x], cipher, sizeof(struct _cipher_descriptor));
+ XMEMCPY(&cipher_descriptor[x], cipher, sizeof(struct ltc_cipher_descriptor));
return x;
}
}
diff --git a/src/misc/crypt/crypt_register_hash.c b/src/misc/crypt/crypt_register_hash.c
new file mode 100644
index 00000000..d5cf5b83
--- /dev/null
+++ b/src/misc/crypt/crypt_register_hash.c
@@ -0,0 +1,46 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file crypt_register_hash.c
+ Register a HASH, Tom St Denis
+*/
+
+/**
+ Register a hash with the descriptor table
+ @param hash The hash you wish to register
+ @return value >= 0 if successfully added (or already present), -1 if unsuccessful
+*/
+int register_hash(const struct ltc_hash_descriptor *hash)
+{
+ int x;
+
+ LTC_ARGCHK(hash != NULL);
+
+ /* is it already registered? */
+ for (x = 0; x < TAB_SIZE; x++) {
+ if (memcmp(&hash_descriptor[x], hash, sizeof(struct ltc_hash_descriptor)) == 0) {
+ return x;
+ }
+ }
+
+ /* find a blank spot */
+ for (x = 0; x < TAB_SIZE; x++) {
+ if (hash_descriptor[x].name == NULL) {
+ XMEMCPY(&hash_descriptor[x], hash, sizeof(struct ltc_hash_descriptor));
+ return x;
+ }
+ }
+
+ /* no spot */
+ return -1;
+}
diff --git a/src/misc/crypt/crypt_register_prng.c b/src/misc/crypt/crypt_register_prng.c
new file mode 100644
index 00000000..6a1be779
--- /dev/null
+++ b/src/misc/crypt/crypt_register_prng.c
@@ -0,0 +1,46 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file crypt_register_prng.c
+ Register a PRNG, Tom St Denis
+*/
+
+/**
+ Register a PRNG with the descriptor table
+ @param prng The PRNG you wish to register
+ @return value >= 0 if successfully added (or already present), -1 if unsuccessful
+*/
+int register_prng(const struct ltc_prng_descriptor *prng)
+{
+ int x;
+
+ LTC_ARGCHK(prng != NULL);
+
+ /* is it already registered? */
+ for (x = 0; x < TAB_SIZE; x++) {
+ if (memcmp(&prng_descriptor[x], prng, sizeof(struct ltc_prng_descriptor)) == 0) {
+ return x;
+ }
+ }
+
+ /* find a blank spot */
+ for (x = 0; x < TAB_SIZE; x++) {
+ if (prng_descriptor[x].name == NULL) {
+ XMEMCPY(&prng_descriptor[x], prng, sizeof(struct ltc_prng_descriptor));
+ return x;
+ }
+ }
+
+ /* no spot */
+ return -1;
+}
diff --git a/crypt_unregister_cipher.c b/src/misc/crypt/crypt_unregister_cipher.c
similarity index 51%
rename from crypt_unregister_cipher.c
rename to src/misc/crypt/crypt_unregister_cipher.c
index 6321daf4..0511de54 100644
--- a/crypt_unregister_cipher.c
+++ b/src/misc/crypt/crypt_unregister_cipher.c
@@ -6,19 +6,29 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
-int unregister_cipher(const struct _cipher_descriptor *cipher)
+/**
+ @file crypt_unregister_cipher.c
+ Unregister a cipher, Tom St Denis
+*/
+
+/**
+ Unregister a cipher from the descriptor table
+ @param cipher The cipher descriptor to remove
+ @return CRYPT_OK on success
+*/
+int unregister_cipher(const struct ltc_cipher_descriptor *cipher)
{
int x;
- _ARGCHK(cipher != NULL);
+ LTC_ARGCHK(cipher != NULL);
/* is it already registered? */
for (x = 0; x < TAB_SIZE; x++) {
- if (memcmp(&cipher_descriptor[x], cipher, sizeof(struct _cipher_descriptor)) == 0) {
+ if (memcmp(&cipher_descriptor[x], cipher, sizeof(struct ltc_cipher_descriptor)) == 0) {
cipher_descriptor[x].name = NULL;
cipher_descriptor[x].ID = 255;
return CRYPT_OK;
diff --git a/crypt_unregister_hash.c b/src/misc/crypt/crypt_unregister_hash.c
similarity index 50%
rename from crypt_unregister_hash.c
rename to src/misc/crypt/crypt_unregister_hash.c
index fcdca5fb..25e36f20 100644
--- a/crypt_unregister_hash.c
+++ b/src/misc/crypt/crypt_unregister_hash.c
@@ -6,19 +6,29 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
-int unregister_hash(const struct _hash_descriptor *hash)
+/**
+ @file crypt_unregister_hash.c
+ Unregister a hash, Tom St Denis
+*/
+
+/**
+ Unregister a hash from the descriptor table
+ @param hash The hash descriptor to remove
+ @return CRYPT_OK on success
+*/
+int unregister_hash(const struct ltc_hash_descriptor *hash)
{
int x;
- _ARGCHK(hash != NULL);
+ LTC_ARGCHK(hash != NULL);
/* is it already registered? */
for (x = 0; x < TAB_SIZE; x++) {
- if (memcmp(&hash_descriptor[x], hash, sizeof(struct _hash_descriptor)) == 0) {
+ if (memcmp(&hash_descriptor[x], hash, sizeof(struct ltc_hash_descriptor)) == 0) {
hash_descriptor[x].name = NULL;
return CRYPT_OK;
}
diff --git a/crypt_unregister_prng.c b/src/misc/crypt/crypt_unregister_prng.c
similarity index 50%
rename from crypt_unregister_prng.c
rename to src/misc/crypt/crypt_unregister_prng.c
index c3153380..55cc5543 100644
--- a/crypt_unregister_prng.c
+++ b/src/misc/crypt/crypt_unregister_prng.c
@@ -6,19 +6,29 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
-int unregister_prng(const struct _prng_descriptor *prng)
+/**
+ @file crypt_unregister_prng.c
+ Unregister a PRNG, Tom St Denis
+*/
+
+/**
+ Unregister a PRNG from the descriptor table
+ @param prng The PRNG descriptor to remove
+ @return CRYPT_OK on success
+*/
+int unregister_prng(const struct ltc_prng_descriptor *prng)
{
int x;
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(prng != NULL);
/* is it already registered? */
for (x = 0; x < TAB_SIZE; x++) {
- if (memcmp(&prng_descriptor[x], prng, sizeof(struct _prng_descriptor)) != 0) {
+ if (memcmp(&prng_descriptor[x], prng, sizeof(struct ltc_prng_descriptor)) != 0) {
prng_descriptor[x].name = NULL;
return CRYPT_OK;
}
diff --git a/error_to_string.c b/src/misc/error_to_string.c
similarity index 77%
rename from error_to_string.c
rename to src/misc/error_to_string.c
index 9c388fac..3a325a29 100644
--- a/error_to_string.c
+++ b/src/misc/error_to_string.c
@@ -6,10 +6,15 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file error_to_string.c
+ Convert error codes to ASCII strings, Tom St Denis
+*/
static const char *err_2_str[] =
{
@@ -49,6 +54,11 @@ static const char *err_2_str[] =
};
+/**
+ Convert an LTC error code to ASCII
+ @param err The error code
+ @return A pointer to the ASCII NUL terminated string for the error or "Invalid error code." if the err code was not valid.
+*/
const char *error_to_string(int err)
{
if (err < 0 || err >= (int)(sizeof(err_2_str)/sizeof(err_2_str[0]))) {
diff --git a/is_prime.c b/src/misc/mpi/is_prime.c
similarity index 71%
rename from is_prime.c
rename to src/misc/mpi/is_prime.c
index d6fc84ea..f58391fc 100644
--- a/is_prime.c
+++ b/src/misc/mpi/is_prime.c
@@ -6,9 +6,14 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file is_prime.c
+ Determines if integer is prime for LTC, Tom St Denis
+*/
#ifdef MPI
@@ -16,8 +21,8 @@
int is_prime(mp_int *N, int *result)
{
int err;
- _ARGCHK(N != NULL);
- _ARGCHK(result != NULL);
+ LTC_ARGCHK(N != NULL);
+ LTC_ARGCHK(result != NULL);
if ((err = mp_prime_is_prime(N, mp_prime_rabin_miller_trials(mp_count_bits(N)), result)) != MP_OKAY) {
return mpi_to_ltc_error(err);
}
diff --git a/mpi.c b/src/misc/mpi/mpi.c
similarity index 90%
rename from mpi.c
rename to src/misc/mpi/mpi.c
index 2ddd0de0..ba3a7ed5 100644
--- a/mpi.c
+++ b/src/misc/mpi/mpi.c
@@ -13,7 +13,7 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
static const struct {
@@ -60,7 +60,7 @@ char *mp_error_to_string(int code)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* computes the modular inverse via binary extended euclidean algorithm,
@@ -69,8 +69,7 @@ char *mp_error_to_string(int code)
* Based on slow invmod except this is optimized for the case where b is
* odd as per HAC Note 14.64 on pp. 610
*/
-int
-fast_mp_invmod (mp_int * a, mp_int * b, mp_int * c)
+int fast_mp_invmod (mp_int * a, mp_int * b, mp_int * c)
{
mp_int x, y, u, v, B, D;
int res, neg;
@@ -87,20 +86,20 @@ fast_mp_invmod (mp_int * a, mp_int * b, mp_int * c)
/* x == modulus, y == value to invert */
if ((res = mp_copy (b, &x)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
/* we need y = |a| */
- if ((res = mp_abs (a, &y)) != MP_OKAY) {
- goto __ERR;
+ if ((res = mp_mod (a, b, &y)) != MP_OKAY) {
+ goto LBL_ERR;
}
/* 3. u=x, v=y, A=1, B=0, C=0,D=1 */
if ((res = mp_copy (&x, &u)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((res = mp_copy (&y, &v)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
mp_set (&D, 1);
@@ -109,17 +108,17 @@ top:
while (mp_iseven (&u) == 1) {
/* 4.1 u = u/2 */
if ((res = mp_div_2 (&u, &u)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
/* 4.2 if B is odd then */
if (mp_isodd (&B) == 1) {
if ((res = mp_sub (&B, &x, &B)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
}
/* B = B/2 */
if ((res = mp_div_2 (&B, &B)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
}
@@ -127,18 +126,18 @@ top:
while (mp_iseven (&v) == 1) {
/* 5.1 v = v/2 */
if ((res = mp_div_2 (&v, &v)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
/* 5.2 if D is odd then */
if (mp_isodd (&D) == 1) {
/* D = (D-x)/2 */
if ((res = mp_sub (&D, &x, &D)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
}
/* D = D/2 */
if ((res = mp_div_2 (&D, &D)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
}
@@ -146,20 +145,20 @@ top:
if (mp_cmp (&u, &v) != MP_LT) {
/* u = u - v, B = B - D */
if ((res = mp_sub (&u, &v, &u)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((res = mp_sub (&B, &D, &B)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
} else {
/* v - v - u, D = D - B */
if ((res = mp_sub (&v, &u, &v)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((res = mp_sub (&D, &B, &D)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
}
@@ -173,21 +172,21 @@ top:
/* if v != 1 then there is no inverse */
if (mp_cmp_d (&v, 1) != MP_EQ) {
res = MP_VAL;
- goto __ERR;
+ goto LBL_ERR;
}
/* b is now the inverse */
neg = a->sign;
while (D.sign == MP_NEG) {
if ((res = mp_add (&D, b, &D)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
}
mp_exch (&D, c);
c->sign = neg;
res = MP_OKAY;
-__ERR:mp_clear_multi (&x, &y, &u, &v, &B, &D, NULL);
+LBL_ERR:mp_clear_multi (&x, &y, &u, &v, &B, &D, NULL);
return res;
}
#endif
@@ -209,7 +208,7 @@ __ERR:mp_clear_multi (&x, &y, &u, &v, &B, &D, NULL);
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* computes xR**-1 == x (mod N) via Montgomery Reduction
@@ -220,8 +219,7 @@ __ERR:mp_clear_multi (&x, &y, &u, &v, &B, &D, NULL);
*
* Based on Algorithm 14.32 on pp.601 of HAC.
*/
-int
-fast_mp_montgomery_reduce (mp_int * x, mp_int * n, mp_digit rho)
+int fast_mp_montgomery_reduce (mp_int * x, mp_int * n, mp_digit rho)
{
int ix, res, olduse;
mp_word W[MP_WARRAY];
@@ -382,7 +380,7 @@ fast_mp_montgomery_reduce (mp_int * x, mp_int * n, mp_digit rho)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* Fast (comba) multiplier
@@ -401,8 +399,7 @@ fast_mp_montgomery_reduce (mp_int * x, mp_int * n, mp_digit rho)
* Based on Algorithm 14.12 on pp.595 of HAC.
*
*/
-int
-fast_s_mp_mul_digs (mp_int * a, mp_int * b, mp_int * c, int digs)
+int fast_s_mp_mul_digs (mp_int * a, mp_int * b, mp_int * c, int digs)
{
int olduse, res, pa, ix, iz;
mp_digit W[MP_WARRAY];
@@ -420,7 +417,7 @@ fast_s_mp_mul_digs (mp_int * a, mp_int * b, mp_int * c, int digs)
/* clear the carry */
_W = 0;
- for (ix = 0; ix <= pa; ix++) {
+ for (ix = 0; ix < pa; ix++) {
int tx, ty;
int iy;
mp_digit *tmpx, *tmpy;
@@ -433,7 +430,7 @@ fast_s_mp_mul_digs (mp_int * a, mp_int * b, mp_int * c, int digs)
tmpx = a->dp + tx;
tmpy = b->dp + ty;
- /* this is the number of times the loop will iterrate, essentially its
+ /* this is the number of times the loop will iterrate, essentially
while (tx++ < a->used && ty-- >= 0) { ... }
*/
iy = MIN(a->used-tx, ty+1);
@@ -450,14 +447,17 @@ fast_s_mp_mul_digs (mp_int * a, mp_int * b, mp_int * c, int digs)
_W = _W >> ((mp_word)DIGIT_BIT);
}
+ /* store final carry */
+ W[ix] = (mp_digit)(_W & MP_MASK);
+
/* setup dest */
olduse = c->used;
- c->used = digs;
+ c->used = pa;
{
register mp_digit *tmpc;
tmpc = c->dp;
- for (ix = 0; ix < digs; ix++) {
+ for (ix = 0; ix < pa+1; ix++) {
/* now extract the previous digit [below the carry] */
*tmpc++ = W[ix];
}
@@ -489,7 +489,7 @@ fast_s_mp_mul_digs (mp_int * a, mp_int * b, mp_int * c, int digs)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* this is a modified version of fast_s_mul_digs that only produces
@@ -501,8 +501,7 @@ fast_s_mp_mul_digs (mp_int * a, mp_int * b, mp_int * c, int digs)
*
* Based on Algorithm 14.12 on pp.595 of HAC.
*/
-int
-fast_s_mp_mul_high_digs (mp_int * a, mp_int * b, mp_int * c, int digs)
+int fast_s_mp_mul_high_digs (mp_int * a, mp_int * b, mp_int * c, int digs)
{
int olduse, res, pa, ix, iz;
mp_digit W[MP_WARRAY];
@@ -519,7 +518,7 @@ fast_s_mp_mul_high_digs (mp_int * a, mp_int * b, mp_int * c, int digs)
/* number of output digits to produce */
pa = a->used + b->used;
_W = 0;
- for (ix = digs; ix <= pa; ix++) {
+ for (ix = digs; ix < pa; ix++) {
int tx, ty, iy;
mp_digit *tmpx, *tmpy;
@@ -547,6 +546,9 @@ fast_s_mp_mul_high_digs (mp_int * a, mp_int * b, mp_int * c, int digs)
/* make next carry */
_W = _W >> ((mp_word)DIGIT_BIT);
}
+
+ /* store final carry */
+ W[ix] = (mp_digit)(_W & MP_MASK);
/* setup dest */
olduse = c->used;
@@ -588,36 +590,17 @@ fast_s_mp_mul_high_digs (mp_int * a, mp_int * b, mp_int * c, int digs)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
-/* fast squaring
- *
- * This is the comba method where the columns of the product
- * are computed first then the carries are computed. This
- * has the effect of making a very simple inner loop that
- * is executed the most
- *
- * W2 represents the outer products and W the inner.
- *
- * A further optimizations is made because the inner
- * products are of the form "A * B * 2". The *2 part does
- * not need to be computed until the end which is good
- * because 64-bit shifts are slow!
- *
- * Based on Algorithm 14.16 on pp.597 of HAC.
- *
- */
/* the jist of squaring...
-
-you do like mult except the offset of the tmpx [one that starts closer to zero]
-can't equal the offset of tmpy. So basically you set up iy like before then you min it with
-(ty-tx) so that it never happens. You double all those you add in the inner loop
+ * you do like mult except the offset of the tmpx [one that
+ * starts closer to zero] can't equal the offset of tmpy.
+ * So basically you set up iy like before then you min it with
+ * (ty-tx) so that it never happens. You double all those
+ * you add in the inner loop
After that loop you do the squares and add them in.
-
-Remove W2 and don't memset W
-
*/
int fast_s_mp_sqr (mp_int * a, mp_int * b)
@@ -636,7 +619,7 @@ int fast_s_mp_sqr (mp_int * a, mp_int * b)
/* number of output digits to produce */
W1 = 0;
- for (ix = 0; ix <= pa; ix++) {
+ for (ix = 0; ix < pa; ix++) {
int tx, ty, iy;
mp_word _W;
mp_digit *tmpy;
@@ -652,7 +635,7 @@ int fast_s_mp_sqr (mp_int * a, mp_int * b)
tmpx = a->dp + tx;
tmpy = a->dp + ty;
- /* this is the number of times the loop will iterrate, essentially its
+ /* this is the number of times the loop will iterrate, essentially
while (tx++ < a->used && ty-- >= 0) { ... }
*/
iy = MIN(a->used-tx, ty+1);
@@ -677,7 +660,7 @@ int fast_s_mp_sqr (mp_int * a, mp_int * b)
}
/* store it */
- W[ix] = _W;
+ W[ix] = (mp_digit)(_W & MP_MASK);
/* make next carry */
W1 = _W >> ((mp_word)DIGIT_BIT);
@@ -721,7 +704,7 @@ int fast_s_mp_sqr (mp_int * a, mp_int * b)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* computes a = 2**b
@@ -769,7 +752,7 @@ mp_2expt (mp_int * a, int b)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* b = |a|
@@ -812,7 +795,7 @@ mp_abs (mp_int * a, mp_int * b)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* high level addition (handles signs) */
@@ -865,7 +848,7 @@ int mp_add (mp_int * a, mp_int * b, mp_int * c)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* single digit addition */
@@ -974,7 +957,7 @@ mp_add_d (mp_int * a, mp_digit b, mp_int * c)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* d = a + b (mod c) */
@@ -1015,7 +998,7 @@ mp_addmod (mp_int * a, mp_int * b, mp_int * c, mp_int * d)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* AND two ints together */
@@ -1072,7 +1055,7 @@ mp_and (mp_int * a, mp_int * b, mp_int * c)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* trim unused digits
@@ -1116,7 +1099,7 @@ mp_clamp (mp_int * a)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* clear one (frees) */
@@ -1160,7 +1143,7 @@ mp_clear (mp_int * a)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
#include <stdarg.h>
@@ -1194,7 +1177,7 @@ void mp_clear_multi(mp_int *mp, ...)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* compare two ints (signed)*/
@@ -1237,7 +1220,7 @@ mp_cmp (mp_int * a, mp_int * b)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* compare a digit */
@@ -1281,7 +1264,7 @@ int mp_cmp_d(mp_int * a, mp_digit b)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* compare maginitude of two ints (unsigned) */
@@ -1336,7 +1319,7 @@ int mp_cmp_mag (mp_int * a, mp_int * b)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
static const int lnz[16] = {
@@ -1389,7 +1372,7 @@ int mp_cnt_lsb(mp_int *a)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* copy, b = a */
@@ -1457,7 +1440,7 @@ mp_copy (mp_int * a, mp_int * b)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* returns the number of bits in an int */
@@ -1502,7 +1485,7 @@ mp_count_bits (mp_int * a)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
#ifdef BN_MP_DIV_SMALL
@@ -1539,23 +1522,23 @@ int mp_div(mp_int * a, mp_int * b, mp_int * c, mp_int * d)
mp_set(&tq, 1);
n = mp_count_bits(a) - mp_count_bits(b);
- if (((res = mp_copy(a, &ta)) != MP_OKAY) ||
- ((res = mp_copy(b, &tb)) != MP_OKAY) ||
+ if (((res = mp_abs(a, &ta)) != MP_OKAY) ||
+ ((res = mp_abs(b, &tb)) != MP_OKAY) ||
((res = mp_mul_2d(&tb, n, &tb)) != MP_OKAY) ||
((res = mp_mul_2d(&tq, n, &tq)) != MP_OKAY)) {
- goto __ERR;
+ goto LBL_ERR;
}
while (n-- >= 0) {
if (mp_cmp(&tb, &ta) != MP_GT) {
if (((res = mp_sub(&ta, &tb, &ta)) != MP_OKAY) ||
((res = mp_add(&q, &tq, &q)) != MP_OKAY)) {
- goto __ERR;
+ goto LBL_ERR;
}
}
if (((res = mp_div_2d(&tb, 1, &tb, NULL)) != MP_OKAY) ||
((res = mp_div_2d(&tq, 1, &tq, NULL)) != MP_OKAY)) {
- goto __ERR;
+ goto LBL_ERR;
}
}
@@ -1564,13 +1547,13 @@ int mp_div(mp_int * a, mp_int * b, mp_int * c, mp_int * d)
n2 = (a->sign == b->sign ? MP_ZPOS : MP_NEG);
if (c != NULL) {
mp_exch(c, &q);
- c->sign = n2;
+ c->sign = (mp_iszero(c) == MP_YES) ? MP_ZPOS : n2;
}
if (d != NULL) {
mp_exch(d, &ta);
- d->sign = n;
+ d->sign = (mp_iszero(d) == MP_YES) ? MP_ZPOS : n;
}
-__ERR:
+LBL_ERR:
mp_clear_multi(&ta, &tb, &tq, &q, NULL);
return res;
}
@@ -1619,19 +1602,19 @@ int mp_div (mp_int * a, mp_int * b, mp_int * c, mp_int * d)
q.used = a->used + 2;
if ((res = mp_init (&t1)) != MP_OKAY) {
- goto __Q;
+ goto LBL_Q;
}
if ((res = mp_init (&t2)) != MP_OKAY) {
- goto __T1;
+ goto LBL_T1;
}
if ((res = mp_init_copy (&x, a)) != MP_OKAY) {
- goto __T2;
+ goto LBL_T2;
}
if ((res = mp_init_copy (&y, b)) != MP_OKAY) {
- goto __X;
+ goto LBL_X;
}
/* fix the sign */
@@ -1643,10 +1626,10 @@ int mp_div (mp_int * a, mp_int * b, mp_int * c, mp_int * d)
if (norm < (int)(DIGIT_BIT-1)) {
norm = (DIGIT_BIT-1) - norm;
if ((res = mp_mul_2d (&x, norm, &x)) != MP_OKAY) {
- goto __Y;
+ goto LBL_Y;
}
if ((res = mp_mul_2d (&y, norm, &y)) != MP_OKAY) {
- goto __Y;
+ goto LBL_Y;
}
} else {
norm = 0;
@@ -1658,13 +1641,13 @@ int mp_div (mp_int * a, mp_int * b, mp_int * c, mp_int * d)
/* while (x >= y*b**n-t) do { q[n-t] += 1; x -= y*b**{n-t} } */
if ((res = mp_lshd (&y, n - t)) != MP_OKAY) { /* y = y*b**{n-t} */
- goto __Y;
+ goto LBL_Y;
}
while (mp_cmp (&x, &y) != MP_LT) {
++(q.dp[n - t]);
if ((res = mp_sub (&x, &y, &x)) != MP_OKAY) {
- goto __Y;
+ goto LBL_Y;
}
}
@@ -1706,7 +1689,7 @@ int mp_div (mp_int * a, mp_int * b, mp_int * c, mp_int * d)
t1.dp[1] = y.dp[t];
t1.used = 2;
if ((res = mp_mul_d (&t1, q.dp[i - t - 1], &t1)) != MP_OKAY) {
- goto __Y;
+ goto LBL_Y;
}
/* find right hand */
@@ -1718,27 +1701,27 @@ int mp_div (mp_int * a, mp_int * b, mp_int * c, mp_int * d)
/* step 3.3 x = x - q{i-t-1} * y * b**{i-t-1} */
if ((res = mp_mul_d (&y, q.dp[i - t - 1], &t1)) != MP_OKAY) {
- goto __Y;
+ goto LBL_Y;
}
if ((res = mp_lshd (&t1, i - t - 1)) != MP_OKAY) {
- goto __Y;
+ goto LBL_Y;
}
if ((res = mp_sub (&x, &t1, &x)) != MP_OKAY) {
- goto __Y;
+ goto LBL_Y;
}
/* if x < 0 then { x = x + y*b**{i-t-1}; q{i-t-1} -= 1; } */
if (x.sign == MP_NEG) {
if ((res = mp_copy (&y, &t1)) != MP_OKAY) {
- goto __Y;
+ goto LBL_Y;
}
if ((res = mp_lshd (&t1, i - t - 1)) != MP_OKAY) {
- goto __Y;
+ goto LBL_Y;
}
if ((res = mp_add (&x, &t1, &x)) != MP_OKAY) {
- goto __Y;
+ goto LBL_Y;
}
q.dp[i - t - 1] = (q.dp[i - t - 1] - 1UL) & MP_MASK;
@@ -1765,11 +1748,11 @@ int mp_div (mp_int * a, mp_int * b, mp_int * c, mp_int * d)
res = MP_OKAY;
-__Y:mp_clear (&y);
-__X:mp_clear (&x);
-__T2:mp_clear (&t2);
-__T1:mp_clear (&t1);
-__Q:mp_clear (&q);
+LBL_Y:mp_clear (&y);
+LBL_X:mp_clear (&x);
+LBL_T2:mp_clear (&t2);
+LBL_T1:mp_clear (&t1);
+LBL_Q:mp_clear (&q);
return res;
}
@@ -1794,7 +1777,7 @@ __Q:mp_clear (&q);
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* b = a/2 */
@@ -1862,7 +1845,7 @@ int mp_div_2(mp_int * a, mp_int * b)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* shift right by a certain bit count (store quotient in c, optional remainder in d) */
@@ -1959,7 +1942,7 @@ int mp_div_2d (mp_int * a, int b, mp_int * c, mp_int * d)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* divide by three (based on routine from MPI and the GMP manual) */
@@ -2038,7 +2021,7 @@ mp_div_3 (mp_int * a, mp_int *c, mp_digit * d)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
static int s_is_power_of_two(mp_digit b, int *p)
@@ -2148,7 +2131,7 @@ int mp_div_d (mp_int * a, mp_digit b, mp_int * c, mp_digit * d)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* determines if a number is a valid DR modulus */
@@ -2191,7 +2174,7 @@ int mp_dr_is_modulus(mp_int *a)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* reduce "x" in place modulo "n" using the Diminished Radix algorithm.
@@ -2199,7 +2182,7 @@ int mp_dr_is_modulus(mp_int *a)
* Based on algorithm from the paper
*
* "Generating Efficient Primes for Discrete Log Cryptosystems"
- * Chae Hoon Lim, Pil Loong Lee,
+ * Chae Hoon Lim, Pil Joong Lee,
* POSTECH Information Research Laboratories
*
* The modulus must be of a special format [see manual]
@@ -2285,7 +2268,7 @@ top:
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* determines the setup value */
@@ -2317,7 +2300,7 @@ void mp_dr_setup(mp_int *a, mp_digit *d)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* swap the elements of two integers, for cases where you can't simply swap the
@@ -2351,7 +2334,7 @@ mp_exch (mp_int * a, mp_int * b)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* calculate c = a**b using a square-multiply algorithm */
@@ -2408,7 +2391,7 @@ int mp_expt_d (mp_int * a, mp_digit b, mp_int * c)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
@@ -2457,25 +2440,33 @@ int mp_exptmod (mp_int * G, mp_int * X, mp_int * P, mp_int * Y)
return err;
#else
/* no invmod */
- return MP_VAL
+ return MP_VAL;
#endif
}
+/* modified diminished radix reduction */
+#if defined(BN_MP_REDUCE_IS_2K_L_C) && defined(BN_MP_REDUCE_2K_L_C)
+ if (mp_reduce_is_2k_l(P) == MP_YES) {
+ return s_mp_exptmod(G, X, P, Y, 1);
+ }
+#endif
+
#ifdef BN_MP_DR_IS_MODULUS_C
/* is it a DR modulus? */
dr = mp_dr_is_modulus(P);
#else
+ /* default to no */
dr = 0;
#endif
#ifdef BN_MP_REDUCE_IS_2K_C
- /* if not, is it a uDR modulus? */
+ /* if not, is it a unrestricted DR modulus? */
if (dr == 0) {
dr = mp_reduce_is_2k(P) << 1;
}
#endif
- /* if the modulus is odd or dr != 0 use the fast method */
+ /* if the modulus is odd or dr != 0 use the montgomery method */
#ifdef BN_MP_EXPTMOD_FAST_C
if (mp_isodd (P) == 1 || dr != 0) {
return mp_exptmod_fast (G, X, P, Y, dr);
@@ -2483,7 +2474,7 @@ int mp_exptmod (mp_int * G, mp_int * X, mp_int * P, mp_int * Y)
#endif
#ifdef BN_S_MP_EXPTMOD_C
/* otherwise use the generic Barrett reduction technique */
- return s_mp_exptmod (G, X, P, Y);
+ return s_mp_exptmod (G, X, P, Y, 0);
#else
/* no exptmod for evens */
return MP_VAL;
@@ -2512,7 +2503,7 @@ int mp_exptmod (mp_int * G, mp_int * X, mp_int * P, mp_int * Y)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* computes Y == G**X mod P, HAC pp.616, Algorithm 14.85
@@ -2529,8 +2520,7 @@ int mp_exptmod (mp_int * G, mp_int * X, mp_int * P, mp_int * Y)
#define TAB_SIZE 256
#endif
-int
-mp_exptmod_fast (mp_int * G, mp_int * X, mp_int * P, mp_int * Y, int redmode)
+int mp_exptmod_fast (mp_int * G, mp_int * X, mp_int * P, mp_int * Y, int redmode)
{
mp_int M[TAB_SIZE], res;
mp_digit buf, mp;
@@ -2588,11 +2578,11 @@ mp_exptmod_fast (mp_int * G, mp_int * X, mp_int * P, mp_int * Y, int redmode)
#ifdef BN_MP_MONTGOMERY_SETUP_C
/* now setup montgomery */
if ((err = mp_montgomery_setup (P, &mp)) != MP_OKAY) {
- goto __M;
+ goto LBL_M;
}
#else
err = MP_VAL;
- goto __M;
+ goto LBL_M;
#endif
/* automatically pick the comba one if available (saves quite a few calls/ifs) */
@@ -2608,7 +2598,7 @@ mp_exptmod_fast (mp_int * G, mp_int * X, mp_int * P, mp_int * Y, int redmode)
redux = mp_montgomery_reduce;
#else
err = MP_VAL;
- goto __M;
+ goto LBL_M;
#endif
}
} else if (redmode == 1) {
@@ -2618,24 +2608,24 @@ mp_exptmod_fast (mp_int * G, mp_int * X, mp_int * P, mp_int * Y, int redmode)
redux = mp_dr_reduce;
#else
err = MP_VAL;
- goto __M;
+ goto LBL_M;
#endif
} else {
#if defined(BN_MP_REDUCE_2K_SETUP_C) && defined(BN_MP_REDUCE_2K_C)
/* setup DR reduction for moduli of the form 2**k - b */
if ((err = mp_reduce_2k_setup(P, &mp)) != MP_OKAY) {
- goto __M;
+ goto LBL_M;
}
redux = mp_reduce_2k;
#else
err = MP_VAL;
- goto __M;
+ goto LBL_M;
#endif
}
/* setup result */
if ((err = mp_init (&res)) != MP_OKAY) {
- goto __M;
+ goto LBL_M;
}
/* create M table
@@ -2649,45 +2639,45 @@ mp_exptmod_fast (mp_int * G, mp_int * X, mp_int * P, mp_int * Y, int redmode)
#ifdef BN_MP_MONTGOMERY_CALC_NORMALIZATION_C
/* now we need R mod m */
if ((err = mp_montgomery_calc_normalization (&res, P)) != MP_OKAY) {
- goto __RES;
+ goto LBL_RES;
}
#else
err = MP_VAL;
- goto __RES;
+ goto LBL_RES;
#endif
/* now set M[1] to G * R mod m */
if ((err = mp_mulmod (G, &res, P, &M[1])) != MP_OKAY) {
- goto __RES;
+ goto LBL_RES;
}
} else {
mp_set(&res, 1);
if ((err = mp_mod(G, P, &M[1])) != MP_OKAY) {
- goto __RES;
+ goto LBL_RES;
}
}
/* compute the value at M[1<<(winsize-1)] by squaring M[1] (winsize-1) times */
if ((err = mp_copy (&M[1], &M[1 << (winsize - 1)])) != MP_OKAY) {
- goto __RES;
+ goto LBL_RES;
}
for (x = 0; x < (winsize - 1); x++) {
if ((err = mp_sqr (&M[1 << (winsize - 1)], &M[1 << (winsize - 1)])) != MP_OKAY) {
- goto __RES;
+ goto LBL_RES;
}
if ((err = redux (&M[1 << (winsize - 1)], P, mp)) != MP_OKAY) {
- goto __RES;
+ goto LBL_RES;
}
}
/* create upper table */
for (x = (1 << (winsize - 1)) + 1; x < (1 << winsize); x++) {
if ((err = mp_mul (&M[x - 1], &M[1], &M[x])) != MP_OKAY) {
- goto __RES;
+ goto LBL_RES;
}
if ((err = redux (&M[x], P, mp)) != MP_OKAY) {
- goto __RES;
+ goto LBL_RES;
}
}
@@ -2727,10 +2717,10 @@ mp_exptmod_fast (mp_int * G, mp_int * X, mp_int * P, mp_int * Y, int redmode)
/* if the bit is zero and mode == 1 then we square */
if (mode == 1 && y == 0) {
if ((err = mp_sqr (&res, &res)) != MP_OKAY) {
- goto __RES;
+ goto LBL_RES;
}
if ((err = redux (&res, P, mp)) != MP_OKAY) {
- goto __RES;
+ goto LBL_RES;
}
continue;
}
@@ -2744,19 +2734,19 @@ mp_exptmod_fast (mp_int * G, mp_int * X, mp_int * P, mp_int * Y, int redmode)
/* square first */
for (x = 0; x < winsize; x++) {
if ((err = mp_sqr (&res, &res)) != MP_OKAY) {
- goto __RES;
+ goto LBL_RES;
}
if ((err = redux (&res, P, mp)) != MP_OKAY) {
- goto __RES;
+ goto LBL_RES;
}
}
/* then multiply */
if ((err = mp_mul (&res, &M[bitbuf], &res)) != MP_OKAY) {
- goto __RES;
+ goto LBL_RES;
}
if ((err = redux (&res, P, mp)) != MP_OKAY) {
- goto __RES;
+ goto LBL_RES;
}
/* empty window and reset */
@@ -2771,10 +2761,10 @@ mp_exptmod_fast (mp_int * G, mp_int * X, mp_int * P, mp_int * Y, int redmode)
/* square then multiply if the bit is set */
for (x = 0; x < bitcpy; x++) {
if ((err = mp_sqr (&res, &res)) != MP_OKAY) {
- goto __RES;
+ goto LBL_RES;
}
if ((err = redux (&res, P, mp)) != MP_OKAY) {
- goto __RES;
+ goto LBL_RES;
}
/* get next bit of the window */
@@ -2782,10 +2772,10 @@ mp_exptmod_fast (mp_int * G, mp_int * X, mp_int * P, mp_int * Y, int redmode)
if ((bitbuf & (1 << winsize)) != 0) {
/* then multiply */
if ((err = mp_mul (&res, &M[1], &res)) != MP_OKAY) {
- goto __RES;
+ goto LBL_RES;
}
if ((err = redux (&res, P, mp)) != MP_OKAY) {
- goto __RES;
+ goto LBL_RES;
}
}
}
@@ -2799,15 +2789,15 @@ mp_exptmod_fast (mp_int * G, mp_int * X, mp_int * P, mp_int * Y, int redmode)
* of R.
*/
if ((err = redux(&res, P, mp)) != MP_OKAY) {
- goto __RES;
+ goto LBL_RES;
}
}
/* swap res with Y */
mp_exch (&res, Y);
err = MP_OKAY;
-__RES:mp_clear (&res);
-__M:
+LBL_RES:mp_clear (&res);
+LBL_M:
mp_clear(&M[1]);
for (x = 1<<(winsize-1); x < (1 << winsize); x++) {
mp_clear (&M[x]);
@@ -2834,7 +2824,7 @@ __M:
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* Extended euclidean algorithm of (a, b) produces
@@ -2881,6 +2871,13 @@ int mp_exteuclid(mp_int *a, mp_int *b, mp_int *U1, mp_int *U2, mp_int *U3)
if ((err = mp_copy(&t3, &v3)) != MP_OKAY) { goto _ERR; }
}
+ /* make sure U3 >= 0 */
+ if (u3.sign == MP_NEG) {
+ mp_neg(&u1, &u1);
+ mp_neg(&u2, &u2);
+ mp_neg(&u3, &u3);
+ }
+
/* copy result out */
if (U1 != NULL) { mp_exch(U1, &u1); }
if (U2 != NULL) { mp_exch(U2, &u2); }
@@ -2909,7 +2906,7 @@ _ERR: mp_clear_multi(&u1, &u2, &u3, &v1, &v2, &v3, &t1, &t2, &t3, &q, &tmp, NULL
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* read a bigint from a file stream in ASCII */
@@ -2976,7 +2973,7 @@ int mp_fread(mp_int *a, int radix, FILE *stream)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
int mp_fwrite(mp_int *a, int radix, FILE *stream)
@@ -3028,7 +3025,7 @@ int mp_fwrite(mp_int *a, int radix, FILE *stream)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* Greatest Common Divisor using the binary method */
@@ -3059,7 +3056,7 @@ int mp_gcd (mp_int * a, mp_int * b, mp_int * c)
}
if ((res = mp_init_copy (&v, b)) != MP_OKAY) {
- goto __U;
+ goto LBL_U;
}
/* must be positive for the remainder of the algorithm */
@@ -3073,24 +3070,24 @@ int mp_gcd (mp_int * a, mp_int * b, mp_int * c)
if (k > 0) {
/* divide the power of two out */
if ((res = mp_div_2d(&u, k, &u, NULL)) != MP_OKAY) {
- goto __V;
+ goto LBL_V;
}
if ((res = mp_div_2d(&v, k, &v, NULL)) != MP_OKAY) {
- goto __V;
+ goto LBL_V;
}
}
/* divide any remaining factors of two out */
if (u_lsb != k) {
if ((res = mp_div_2d(&u, u_lsb - k, &u, NULL)) != MP_OKAY) {
- goto __V;
+ goto LBL_V;
}
}
if (v_lsb != k) {
if ((res = mp_div_2d(&v, v_lsb - k, &v, NULL)) != MP_OKAY) {
- goto __V;
+ goto LBL_V;
}
}
@@ -3103,23 +3100,23 @@ int mp_gcd (mp_int * a, mp_int * b, mp_int * c)
/* subtract smallest from largest */
if ((res = s_mp_sub(&v, &u, &v)) != MP_OKAY) {
- goto __V;
+ goto LBL_V;
}
/* Divide out all factors of two */
if ((res = mp_div_2d(&v, mp_cnt_lsb(&v), &v, NULL)) != MP_OKAY) {
- goto __V;
+ goto LBL_V;
}
}
/* multiply by 2**k which we divided out at the beginning */
if ((res = mp_mul_2d (&u, k, c)) != MP_OKAY) {
- goto __V;
+ goto LBL_V;
}
c->sign = MP_ZPOS;
res = MP_OKAY;
-__V:mp_clear (&u);
-__U:mp_clear (&v);
+LBL_V:mp_clear (&u);
+LBL_U:mp_clear (&v);
return res;
}
#endif
@@ -3141,7 +3138,7 @@ __U:mp_clear (&v);
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* get the lower 32-bits of an mp_int */
@@ -3186,7 +3183,7 @@ unsigned long mp_get_int(mp_int * a)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* grow as required */
@@ -3243,7 +3240,7 @@ int mp_grow (mp_int * a, int size)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* init a new mp_int */
@@ -3289,7 +3286,7 @@ int mp_init (mp_int * a)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* creates "a" then copies b into it */
@@ -3321,7 +3318,7 @@ int mp_init_copy (mp_int * a, mp_int * b)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
#include <stdarg.h>
@@ -3380,7 +3377,7 @@ int mp_init_multi(mp_int *mp, ...)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* initialize and set a digit */
@@ -3412,7 +3409,7 @@ int mp_init_set (mp_int * a, mp_digit b)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* initialize and set a digit */
@@ -3443,7 +3440,7 @@ int mp_init_set_int (mp_int * a, unsigned long b)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* init an mp_init for a given size */
@@ -3491,7 +3488,7 @@ int mp_init_size (mp_int * a, int size)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* hac 14.61, pp608 */
@@ -3534,7 +3531,7 @@ int mp_invmod (mp_int * a, mp_int * b, mp_int * c)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* hac 14.61, pp608 */
@@ -3555,25 +3552,25 @@ int mp_invmod_slow (mp_int * a, mp_int * b, mp_int * c)
}
/* x = a, y = b */
- if ((res = mp_copy (a, &x)) != MP_OKAY) {
- goto __ERR;
+ if ((res = mp_mod(a, b, &x)) != MP_OKAY) {
+ goto LBL_ERR;
}
if ((res = mp_copy (b, &y)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
/* 2. [modified] if x,y are both even then return an error! */
if (mp_iseven (&x) == 1 && mp_iseven (&y) == 1) {
res = MP_VAL;
- goto __ERR;
+ goto LBL_ERR;
}
/* 3. u=x, v=y, A=1, B=0, C=0,D=1 */
if ((res = mp_copy (&x, &u)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((res = mp_copy (&y, &v)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
mp_set (&A, 1);
mp_set (&D, 1);
@@ -3583,24 +3580,24 @@ top:
while (mp_iseven (&u) == 1) {
/* 4.1 u = u/2 */
if ((res = mp_div_2 (&u, &u)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
/* 4.2 if A or B is odd then */
if (mp_isodd (&A) == 1 || mp_isodd (&B) == 1) {
/* A = (A+y)/2, B = (B-x)/2 */
if ((res = mp_add (&A, &y, &A)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((res = mp_sub (&B, &x, &B)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
}
/* A = A/2, B = B/2 */
if ((res = mp_div_2 (&A, &A)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((res = mp_div_2 (&B, &B)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
}
@@ -3608,24 +3605,24 @@ top:
while (mp_iseven (&v) == 1) {
/* 5.1 v = v/2 */
if ((res = mp_div_2 (&v, &v)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
/* 5.2 if C or D is odd then */
if (mp_isodd (&C) == 1 || mp_isodd (&D) == 1) {
/* C = (C+y)/2, D = (D-x)/2 */
if ((res = mp_add (&C, &y, &C)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((res = mp_sub (&D, &x, &D)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
}
/* C = C/2, D = D/2 */
if ((res = mp_div_2 (&C, &C)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((res = mp_div_2 (&D, &D)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
}
@@ -3633,28 +3630,28 @@ top:
if (mp_cmp (&u, &v) != MP_LT) {
/* u = u - v, A = A - C, B = B - D */
if ((res = mp_sub (&u, &v, &u)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((res = mp_sub (&A, &C, &A)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((res = mp_sub (&B, &D, &B)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
} else {
/* v - v - u, C = C - A, D = D - B */
if ((res = mp_sub (&v, &u, &v)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((res = mp_sub (&C, &A, &C)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((res = mp_sub (&D, &B, &D)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
}
@@ -3667,27 +3664,27 @@ top:
/* if v != 1 then there is no inverse */
if (mp_cmp_d (&v, 1) != MP_EQ) {
res = MP_VAL;
- goto __ERR;
+ goto LBL_ERR;
}
/* if its too low */
while (mp_cmp_d(&C, 0) == MP_LT) {
if ((res = mp_add(&C, b, &C)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
}
/* too big */
while (mp_cmp_mag(&C, b) != MP_LT) {
if ((res = mp_sub(&C, b, &C)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
}
/* C is now the inverse */
mp_exch (&C, c);
res = MP_OKAY;
-__ERR:mp_clear_multi (&x, &y, &u, &v, &A, &B, &C, &D, NULL);
+LBL_ERR:mp_clear_multi (&x, &y, &u, &v, &A, &B, &C, &D, NULL);
return res;
}
#endif
@@ -3709,7 +3706,7 @@ __ERR:mp_clear_multi (&x, &y, &u, &v, &A, &B, &C, &D, NULL);
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* Check if remainders are possible squares - fast exclude non-squares */
@@ -3818,7 +3815,7 @@ ERR:mp_clear(&t);
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* computes the jacobi c = (a | n) (or Legendre if n is prime)
@@ -3856,13 +3853,13 @@ int mp_jacobi (mp_int * a, mp_int * p, int *c)
}
if ((res = mp_init (&p1)) != MP_OKAY) {
- goto __A1;
+ goto LBL_A1;
}
/* divide out larger power of two */
k = mp_cnt_lsb(&a1);
if ((res = mp_div_2d(&a1, k, &a1, NULL)) != MP_OKAY) {
- goto __P1;
+ goto LBL_P1;
}
/* step 4. if e is even set s=1 */
@@ -3890,18 +3887,18 @@ int mp_jacobi (mp_int * a, mp_int * p, int *c)
} else {
/* n1 = n mod a1 */
if ((res = mp_mod (p, &a1, &p1)) != MP_OKAY) {
- goto __P1;
+ goto LBL_P1;
}
if ((res = mp_jacobi (&p1, &a1, &r)) != MP_OKAY) {
- goto __P1;
+ goto LBL_P1;
}
*c = s * r;
}
/* done */
res = MP_OKAY;
-__P1:mp_clear (&p1);
-__A1:mp_clear (&a1);
+LBL_P1:mp_clear (&p1);
+LBL_A1:mp_clear (&a1);
return res;
}
#endif
@@ -3923,7 +3920,7 @@ __A1:mp_clear (&a1);
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* c = |a| * |b| using Karatsuba Multiplication using
@@ -4090,7 +4087,7 @@ ERR:
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* Karatsuba squaring, computes b = a*a using three
@@ -4211,7 +4208,7 @@ ERR:
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* computes least common multiple as |a*b|/(a, b) */
@@ -4227,20 +4224,20 @@ int mp_lcm (mp_int * a, mp_int * b, mp_int * c)
/* t1 = get the GCD of the two inputs */
if ((res = mp_gcd (a, b, &t1)) != MP_OKAY) {
- goto __T;
+ goto LBL_T;
}
/* divide the smallest by the GCD */
if (mp_cmp_mag(a, b) == MP_LT) {
/* store quotient in t2 such that t2 * b is the LCM */
if ((res = mp_div(a, &t1, &t2, NULL)) != MP_OKAY) {
- goto __T;
+ goto LBL_T;
}
res = mp_mul(b, &t2, c);
} else {
/* store quotient in t2 such that t2 * a is the LCM */
if ((res = mp_div(b, &t1, &t2, NULL)) != MP_OKAY) {
- goto __T;
+ goto LBL_T;
}
res = mp_mul(a, &t2, c);
}
@@ -4248,7 +4245,7 @@ int mp_lcm (mp_int * a, mp_int * b, mp_int * c)
/* fix the sign to positive */
c->sign = MP_ZPOS;
-__T:
+LBL_T:
mp_clear_multi (&t1, &t2, NULL);
return res;
}
@@ -4271,7 +4268,7 @@ __T:
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* shift left a certain amount of digits */
@@ -4338,7 +4335,7 @@ int mp_lshd (mp_int * a, int b)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* c = a mod b, 0 <= c < b */
@@ -4386,7 +4383,7 @@ mp_mod (mp_int * a, mp_int * b, mp_int * c)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* calc a value mod 2**b */
@@ -4402,7 +4399,7 @@ mp_mod_2d (mp_int * a, int b, mp_int * c)
}
/* if the modulus is larger than the value than return */
- if (b > (int) (a->used * DIGIT_BIT)) {
+ if (b >= (int) (a->used * DIGIT_BIT)) {
res = mp_copy (a, c);
return res;
}
@@ -4441,7 +4438,7 @@ mp_mod_2d (mp_int * a, int b, mp_int * c)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
int
@@ -4468,7 +4465,7 @@ mp_mod_d (mp_int * a, mp_digit b, mp_digit * c)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/*
@@ -4484,7 +4481,6 @@ int mp_montgomery_calc_normalization (mp_int * a, mp_int * b)
/* how many bits of last digit does b use */
bits = mp_count_bits (b) % DIGIT_BIT;
-
if (b->used > 1) {
if ((res = mp_2expt (a, (b->used - 1) * DIGIT_BIT + bits - 1)) != MP_OKAY) {
return res;
@@ -4528,7 +4524,7 @@ int mp_montgomery_calc_normalization (mp_int * a, mp_int * b)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* computes xR**-1 == x (mod N) via Montgomery Reduction */
@@ -4646,7 +4642,7 @@ mp_montgomery_reduce (mp_int * x, mp_int * n, mp_digit rho)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* setups the montgomery reduction stuff */
@@ -4705,7 +4701,7 @@ mp_montgomery_setup (mp_int * n, mp_digit * rho)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* high level multiplication (handles sign) */
@@ -4771,7 +4767,7 @@ int mp_mul (mp_int * a, mp_int * b, mp_int * c)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* b = a*2 */
@@ -4853,7 +4849,7 @@ int mp_mul_2(mp_int * a, mp_int * b)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* shift left by a certain bit count */
@@ -4938,7 +4934,7 @@ int mp_mul_2d (mp_int * a, int b, mp_int * c)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* multiply by a digit */
@@ -4983,8 +4979,9 @@ mp_mul_d (mp_int * a, mp_digit b, mp_int * c)
u = (mp_digit) (r >> ((mp_word) DIGIT_BIT));
}
- /* store final carry [if any] */
+ /* store final carry [if any] and increment ix offset */
*tmpc++ = u;
+ ++ix;
/* now zero digits above the top */
while (ix++ < olduse) {
@@ -5016,7 +5013,7 @@ mp_mul_d (mp_int * a, mp_digit b, mp_int * c)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* d = a * b (mod c) */
@@ -5057,7 +5054,7 @@ mp_mulmod (mp_int * a, mp_int * b, mp_int * c, mp_int * d)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* find the n'th root of an integer
@@ -5085,11 +5082,11 @@ int mp_n_root (mp_int * a, mp_digit b, mp_int * c)
}
if ((res = mp_init (&t2)) != MP_OKAY) {
- goto __T1;
+ goto LBL_T1;
}
if ((res = mp_init (&t3)) != MP_OKAY) {
- goto __T2;
+ goto LBL_T2;
}
/* if a is negative fudge the sign but keep track */
@@ -5102,52 +5099,52 @@ int mp_n_root (mp_int * a, mp_digit b, mp_int * c)
do {
/* t1 = t2 */
if ((res = mp_copy (&t2, &t1)) != MP_OKAY) {
- goto __T3;
+ goto LBL_T3;
}
/* t2 = t1 - ((t1**b - a) / (b * t1**(b-1))) */
/* t3 = t1**(b-1) */
if ((res = mp_expt_d (&t1, b - 1, &t3)) != MP_OKAY) {
- goto __T3;
+ goto LBL_T3;
}
/* numerator */
/* t2 = t1**b */
if ((res = mp_mul (&t3, &t1, &t2)) != MP_OKAY) {
- goto __T3;
+ goto LBL_T3;
}
/* t2 = t1**b - a */
if ((res = mp_sub (&t2, a, &t2)) != MP_OKAY) {
- goto __T3;
+ goto LBL_T3;
}
/* denominator */
/* t3 = t1**(b-1) * b */
if ((res = mp_mul_d (&t3, b, &t3)) != MP_OKAY) {
- goto __T3;
+ goto LBL_T3;
}
/* t3 = (t1**b - a)/(b * t1**(b-1)) */
if ((res = mp_div (&t2, &t3, &t3, NULL)) != MP_OKAY) {
- goto __T3;
+ goto LBL_T3;
}
if ((res = mp_sub (&t1, &t3, &t2)) != MP_OKAY) {
- goto __T3;
+ goto LBL_T3;
}
} while (mp_cmp (&t1, &t2) != MP_EQ);
/* result can be off by a few so check */
for (;;) {
if ((res = mp_expt_d (&t1, b, &t2)) != MP_OKAY) {
- goto __T3;
+ goto LBL_T3;
}
if (mp_cmp (&t2, a) == MP_GT) {
if ((res = mp_sub_d (&t1, 1, &t1)) != MP_OKAY) {
- goto __T3;
+ goto LBL_T3;
}
} else {
break;
@@ -5165,9 +5162,9 @@ int mp_n_root (mp_int * a, mp_digit b, mp_int * c)
res = MP_OKAY;
-__T3:mp_clear (&t3);
-__T2:mp_clear (&t2);
-__T1:mp_clear (&t1);
+LBL_T3:mp_clear (&t3);
+LBL_T2:mp_clear (&t2);
+LBL_T1:mp_clear (&t1);
return res;
}
#endif
@@ -5189,19 +5186,25 @@ __T1:mp_clear (&t1);
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* b = -a */
int mp_neg (mp_int * a, mp_int * b)
{
int res;
- if ((res = mp_copy (a, b)) != MP_OKAY) {
- return res;
+ if (a != b) {
+ if ((res = mp_copy (a, b)) != MP_OKAY) {
+ return res;
+ }
}
+
if (mp_iszero(b) != MP_YES) {
b->sign = (a->sign == MP_ZPOS) ? MP_NEG : MP_ZPOS;
+ } else {
+ b->sign = MP_ZPOS;
}
+
return MP_OKAY;
}
#endif
@@ -5223,7 +5226,7 @@ int mp_neg (mp_int * a, mp_int * b)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* OR two ints together */
@@ -5273,7 +5276,7 @@ int mp_or (mp_int * a, mp_int * b, mp_int * c)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* performs one Fermat test.
@@ -5304,7 +5307,7 @@ int mp_prime_fermat (mp_int * a, mp_int * b, int *result)
/* compute t = b**a mod a */
if ((err = mp_exptmod (b, a, a, &t)) != MP_OKAY) {
- goto __T;
+ goto LBL_T;
}
/* is it equal to b? */
@@ -5313,7 +5316,7 @@ int mp_prime_fermat (mp_int * a, mp_int * b, int *result)
}
err = MP_OKAY;
-__T:mp_clear (&t);
+LBL_T:mp_clear (&t);
return err;
}
#endif
@@ -5335,7 +5338,7 @@ __T:mp_clear (&t);
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* determines if an integers is divisible by one
@@ -5352,8 +5355,8 @@ int mp_prime_is_divisible (mp_int * a, int *result)
*result = MP_NO;
for (ix = 0; ix < PRIME_SIZE; ix++) {
- /* what is a mod __prime_tab[ix] */
- if ((err = mp_mod_d (a, __prime_tab[ix], &res)) != MP_OKAY) {
+ /* what is a mod LBL_prime_tab[ix] */
+ if ((err = mp_mod_d (a, ltm_prime_tab[ix], &res)) != MP_OKAY) {
return err;
}
@@ -5385,7 +5388,7 @@ int mp_prime_is_divisible (mp_int * a, int *result)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* performs a variable number of rounds of Miller-Rabin
@@ -5410,7 +5413,7 @@ int mp_prime_is_prime (mp_int * a, int t, int *result)
/* is the input equal to one of the primes in the table? */
for (ix = 0; ix < PRIME_SIZE; ix++) {
- if (mp_cmp_d(a, __prime_tab[ix]) == MP_EQ) {
+ if (mp_cmp_d(a, ltm_prime_tab[ix]) == MP_EQ) {
*result = 1;
return MP_OKAY;
}
@@ -5433,20 +5436,20 @@ int mp_prime_is_prime (mp_int * a, int t, int *result)
for (ix = 0; ix < t; ix++) {
/* set the prime */
- mp_set (&b, __prime_tab[ix]);
+ mp_set (&b, ltm_prime_tab[ix]);
if ((err = mp_prime_miller_rabin (a, &b, &res)) != MP_OKAY) {
- goto __B;
+ goto LBL_B;
}
if (res == MP_NO) {
- goto __B;
+ goto LBL_B;
}
}
/* passed the test */
*result = MP_YES;
-__B:mp_clear (&b);
+LBL_B:mp_clear (&b);
return err;
}
#endif
@@ -5468,7 +5471,7 @@ __B:mp_clear (&b);
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* Miller-Rabin test of "a" to the base of "b" as described in
@@ -5496,12 +5499,12 @@ int mp_prime_miller_rabin (mp_int * a, mp_int * b, int *result)
return err;
}
if ((err = mp_sub_d (&n1, 1, &n1)) != MP_OKAY) {
- goto __N1;
+ goto LBL_N1;
}
/* set 2**s * r = n1 */
if ((err = mp_init_copy (&r, &n1)) != MP_OKAY) {
- goto __N1;
+ goto LBL_N1;
}
/* count the number of least significant bits
@@ -5511,15 +5514,15 @@ int mp_prime_miller_rabin (mp_int * a, mp_int * b, int *result)
/* now divide n - 1 by 2**s */
if ((err = mp_div_2d (&r, s, &r, NULL)) != MP_OKAY) {
- goto __R;
+ goto LBL_R;
}
/* compute y = b**r mod a */
if ((err = mp_init (&y)) != MP_OKAY) {
- goto __R;
+ goto LBL_R;
}
if ((err = mp_exptmod (b, &r, a, &y)) != MP_OKAY) {
- goto __Y;
+ goto LBL_Y;
}
/* if y != 1 and y != n1 do */
@@ -5528,12 +5531,12 @@ int mp_prime_miller_rabin (mp_int * a, mp_int * b, int *result)
/* while j <= s-1 and y != n1 */
while ((j <= (s - 1)) && mp_cmp (&y, &n1) != MP_EQ) {
if ((err = mp_sqrmod (&y, a, &y)) != MP_OKAY) {
- goto __Y;
+ goto LBL_Y;
}
/* if y == 1 then composite */
if (mp_cmp_d (&y, 1) == MP_EQ) {
- goto __Y;
+ goto LBL_Y;
}
++j;
@@ -5541,15 +5544,15 @@ int mp_prime_miller_rabin (mp_int * a, mp_int * b, int *result)
/* if y != n1 then composite */
if (mp_cmp (&y, &n1) != MP_EQ) {
- goto __Y;
+ goto LBL_Y;
}
}
/* probably prime now */
*result = MP_YES;
-__Y:mp_clear (&y);
-__R:mp_clear (&r);
-__N1:mp_clear (&n1);
+LBL_Y:mp_clear (&y);
+LBL_R:mp_clear (&r);
+LBL_N1:mp_clear (&n1);
return err;
}
#endif
@@ -5571,7 +5574,7 @@ __N1:mp_clear (&n1);
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* finds the next prime after the number "a" using "t" trials
@@ -5594,10 +5597,10 @@ int mp_prime_next_prime(mp_int *a, int t, int bbs_style)
a->sign = MP_ZPOS;
/* simple algo if a is less than the largest prime in the table */
- if (mp_cmp_d(a, __prime_tab[PRIME_SIZE-1]) == MP_LT) {
+ if (mp_cmp_d(a, ltm_prime_tab[PRIME_SIZE-1]) == MP_LT) {
/* find which prime it is bigger than */
for (x = PRIME_SIZE - 2; x >= 0; x--) {
- if (mp_cmp_d(a, __prime_tab[x]) != MP_LT) {
+ if (mp_cmp_d(a, ltm_prime_tab[x]) != MP_LT) {
if (bbs_style == 1) {
/* ok we found a prime smaller or
* equal [so the next is larger]
@@ -5605,17 +5608,17 @@ int mp_prime_next_prime(mp_int *a, int t, int bbs_style)
* however, the prime must be
* congruent to 3 mod 4
*/
- if ((__prime_tab[x + 1] & 3) != 3) {
+ if ((ltm_prime_tab[x + 1] & 3) != 3) {
/* scan upwards for a prime congruent to 3 mod 4 */
for (y = x + 1; y < PRIME_SIZE; y++) {
- if ((__prime_tab[y] & 3) == 3) {
- mp_set(a, __prime_tab[y]);
+ if ((ltm_prime_tab[y] & 3) == 3) {
+ mp_set(a, ltm_prime_tab[y]);
return MP_OKAY;
}
}
}
} else {
- mp_set(a, __prime_tab[x + 1]);
+ mp_set(a, ltm_prime_tab[x + 1]);
return MP_OKAY;
}
}
@@ -5653,7 +5656,7 @@ int mp_prime_next_prime(mp_int *a, int t, int bbs_style)
/* generate the restable */
for (x = 1; x < PRIME_SIZE; x++) {
- if ((err = mp_mod_d(a, __prime_tab[x], res_tab + x)) != MP_OKAY) {
+ if ((err = mp_mod_d(a, ltm_prime_tab[x], res_tab + x)) != MP_OKAY) {
return err;
}
}
@@ -5679,8 +5682,8 @@ int mp_prime_next_prime(mp_int *a, int t, int bbs_style)
res_tab[x] += kstep;
/* subtract the modulus [instead of using division] */
- if (res_tab[x] >= __prime_tab[x]) {
- res_tab[x] -= __prime_tab[x];
+ if (res_tab[x] >= ltm_prime_tab[x]) {
+ res_tab[x] -= ltm_prime_tab[x];
}
/* set flag if zero */
@@ -5692,7 +5695,7 @@ int mp_prime_next_prime(mp_int *a, int t, int bbs_style)
/* add the step */
if ((err = mp_add_d(a, step, a)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
/* if didn't pass sieve and step == MAX then skip test */
@@ -5702,9 +5705,9 @@ int mp_prime_next_prime(mp_int *a, int t, int bbs_style)
/* is this prime? */
for (x = 0; x < t; x++) {
- mp_set(&b, __prime_tab[t]);
+ mp_set(&b, ltm_prime_tab[t]);
if ((err = mp_prime_miller_rabin(a, &b, &res)) != MP_OKAY) {
- goto __ERR;
+ goto LBL_ERR;
}
if (res == MP_NO) {
break;
@@ -5717,7 +5720,7 @@ int mp_prime_next_prime(mp_int *a, int t, int bbs_style)
}
err = MP_OKAY;
-__ERR:
+LBL_ERR:
mp_clear(&b);
return err;
}
@@ -5741,7 +5744,7 @@ __ERR:
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
@@ -5793,7 +5796,7 @@ int mp_prime_rabin_miller_trials(int size)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* makes a truly random prime of a given size (bits),
@@ -5828,7 +5831,7 @@ int mp_prime_random_ex(mp_int *a, int t, int size, int flags, ltm_prime_callback
}
/* calc the byte size */
- bsize = (size>>3)+(size&7?1:0);
+ bsize = (size>>3) + ((size&7)?1:0);
/* we need a buffer of bsize bytes */
tmp = OPT_CAST(unsigned char) XMALLOC(bsize);
@@ -5837,19 +5840,17 @@ int mp_prime_random_ex(mp_int *a, int t, int size, int flags, ltm_prime_callback
}
/* calc the maskAND value for the MSbyte*/
- maskAND = 0xFF >> (8 - (size & 7));
+ maskAND = ((size&7) == 0) ? 0xFF : (0xFF >> (8 - (size & 7)));
/* calc the maskOR_msb */
maskOR_msb = 0;
- maskOR_msb_offset = (size - 2) >> 3;
+ maskOR_msb_offset = ((size & 7) == 1) ? 1 : 0;
if (flags & LTM_PRIME_2MSB_ON) {
- maskOR_msb |= 1 << ((size - 2) & 7);
- } else if (flags & LTM_PRIME_2MSB_OFF) {
- maskAND &= ~(1 << ((size - 2) & 7));
- }
+ maskOR_msb |= 0x80 >> ((9 - size) & 7);
+ }
/* get the maskOR_lsb */
- maskOR_lsb = 0;
+ maskOR_lsb = 1;
if (flags & LTM_PRIME_BBS) {
maskOR_lsb |= 3;
}
@@ -5920,7 +5921,7 @@ error:
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* returns size of ASCII reprensentation */
@@ -5943,22 +5944,29 @@ int mp_radix_size (mp_int * a, int radix, int *size)
return MP_VAL;
}
- /* init a copy of the input */
- if ((res = mp_init_copy (&t, a)) != MP_OKAY) {
- return res;
+ if (mp_iszero(a) == MP_YES) {
+ *size = 2;
+ return MP_OKAY;
}
/* digs is the digit count */
digs = 0;
/* if it's negative add one for the sign */
- if (t.sign == MP_NEG) {
+ if (a->sign == MP_NEG) {
++digs;
- t.sign = MP_ZPOS;
}
+ /* init a copy of the input */
+ if ((res = mp_init_copy (&t, a)) != MP_OKAY) {
+ return res;
+ }
+
+ /* force temp to positive */
+ t.sign = MP_ZPOS;
+
/* fetch out all of the digits */
- while (mp_iszero (&t) == 0) {
+ while (mp_iszero (&t) == MP_NO) {
if ((res = mp_div_d (&t, (mp_digit) radix, &t, &d)) != MP_OKAY) {
mp_clear (&t);
return res;
@@ -5991,7 +5999,7 @@ int mp_radix_size (mp_int * a, int radix, int *size)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* chars used in radix conversions */
@@ -6015,7 +6023,7 @@ const char *mp_s_rmap = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrs
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* makes a pseudo-random int of a given size */
@@ -6032,14 +6040,14 @@ mp_rand (mp_int * a, int digits)
/* first place a random non-zero digit */
do {
- d = ((mp_digit) abs (rand ()));
+ d = ((mp_digit) abs (rand ())) & MP_MASK;
} while (d == 0);
if ((res = mp_add_d (a, d, a)) != MP_OKAY) {
return res;
}
- while (digits-- > 0) {
+ while (--digits > 0) {
if ((res = mp_lshd (a, 1)) != MP_OKAY) {
return res;
}
@@ -6070,11 +6078,11 @@ mp_rand (mp_int * a, int digits)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* read a string [ASCII] in a given radix */
-int mp_read_radix (mp_int * a, char *str, int radix)
+int mp_read_radix (mp_int * a, const char *str, int radix)
{
int y, res, neg;
char ch;
@@ -6152,12 +6160,11 @@ int mp_read_radix (mp_int * a, char *str, int radix)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* read signed bin, big endian, first byte is 0==positive or 1==negative */
-int
-mp_read_signed_bin (mp_int * a, unsigned char *b, int c)
+int mp_read_signed_bin (mp_int * a, const unsigned char *b, int c)
{
int res;
@@ -6194,12 +6201,11 @@ mp_read_signed_bin (mp_int * a, unsigned char *b, int c)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* reads a unsigned char array, assumes the msb is stored first [big endian] */
-int
-mp_read_unsigned_bin (mp_int * a, unsigned char *b, int c)
+int mp_read_unsigned_bin (mp_int * a, const unsigned char *b, int c)
{
int res;
@@ -6250,15 +6256,14 @@ mp_read_unsigned_bin (mp_int * a, unsigned char *b, int c)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* reduces x mod m, assumes 0 < x < m**2, mu is
* precomputed via mp_reduce_setup.
* From HAC pp.604 Algorithm 14.42
*/
-int
-mp_reduce (mp_int * x, mp_int * m, mp_int * mu)
+int mp_reduce (mp_int * x, mp_int * m, mp_int * mu)
{
mp_int q;
int res, um = m->used;
@@ -6278,11 +6283,11 @@ mp_reduce (mp_int * x, mp_int * m, mp_int * mu)
}
} else {
#ifdef BN_S_MP_MUL_HIGH_DIGS_C
- if ((res = s_mp_mul_high_digs (&q, mu, &q, um - 1)) != MP_OKAY) {
+ if ((res = s_mp_mul_high_digs (&q, mu, &q, um)) != MP_OKAY) {
goto CLEANUP;
}
#elif defined(BN_FAST_S_MP_MUL_HIGH_DIGS_C)
- if ((res = fast_s_mp_mul_high_digs (&q, mu, &q, um - 1)) != MP_OKAY) {
+ if ((res = fast_s_mp_mul_high_digs (&q, mu, &q, um)) != MP_OKAY) {
goto CLEANUP;
}
#else
@@ -6351,12 +6356,11 @@ CLEANUP:
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* reduces a modulo n where n is of the form 2**p - d */
-int
-mp_reduce_2k(mp_int *a, mp_int *n, mp_digit d)
+int mp_reduce_2k(mp_int *a, mp_int *n, mp_digit d)
{
mp_int q;
int p, res;
@@ -6398,6 +6402,68 @@ ERR:
/* End: bn_mp_reduce_2k.c */
+/* Start: bn_mp_reduce_2k_l.c */
+#include <ltc_tommath.h>
+#ifdef BN_MP_REDUCE_2K_L_C
+/* LibTomMath, multiple-precision integer library -- Tom St Denis
+ *
+ * LibTomMath is a library that provides multiple-precision
+ * integer arithmetic as well as number theoretic functionality.
+ *
+ * The library was designed directly after the MPI library by
+ * Michael Fromberger but has been written from scratch with
+ * additional optimizations in place.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
+ */
+
+/* reduces a modulo n where n is of the form 2**p - d
+ This differs from reduce_2k since "d" can be larger
+ than a single digit.
+*/
+int mp_reduce_2k_l(mp_int *a, mp_int *n, mp_int *d)
+{
+ mp_int q;
+ int p, res;
+
+ if ((res = mp_init(&q)) != MP_OKAY) {
+ return res;
+ }
+
+ p = mp_count_bits(n);
+top:
+ /* q = a/2**p, a = a mod 2**p */
+ if ((res = mp_div_2d(a, p, &q, a)) != MP_OKAY) {
+ goto ERR;
+ }
+
+ /* q = q * d */
+ if ((res = mp_mul(&q, d, &q)) != MP_OKAY) {
+ goto ERR;
+ }
+
+ /* a = a + q */
+ if ((res = s_mp_add(a, &q, a)) != MP_OKAY) {
+ goto ERR;
+ }
+
+ if (mp_cmp_mag(a, n) != MP_LT) {
+ s_mp_sub(a, n, a);
+ goto top;
+ }
+
+ERR:
+ mp_clear(&q);
+ return res;
+}
+
+#endif
+
+/* End: bn_mp_reduce_2k_l.c */
+
/* Start: bn_mp_reduce_2k_setup.c */
#include <ltc_tommath.h>
#ifdef BN_MP_REDUCE_2K_SETUP_C
@@ -6413,12 +6479,11 @@ ERR:
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* determines the setup value */
-int
-mp_reduce_2k_setup(mp_int *a, mp_digit *d)
+int mp_reduce_2k_setup(mp_int *a, mp_digit *d)
{
int res, p;
mp_int tmp;
@@ -6446,6 +6511,50 @@ mp_reduce_2k_setup(mp_int *a, mp_digit *d)
/* End: bn_mp_reduce_2k_setup.c */
+/* Start: bn_mp_reduce_2k_setup_l.c */
+#include <ltc_tommath.h>
+#ifdef BN_MP_REDUCE_2K_SETUP_L_C
+/* LibTomMath, multiple-precision integer library -- Tom St Denis
+ *
+ * LibTomMath is a library that provides multiple-precision
+ * integer arithmetic as well as number theoretic functionality.
+ *
+ * The library was designed directly after the MPI library by
+ * Michael Fromberger but has been written from scratch with
+ * additional optimizations in place.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
+ */
+
+/* determines the setup value */
+int mp_reduce_2k_setup_l(mp_int *a, mp_int *d)
+{
+ int res;
+ mp_int tmp;
+
+ if ((res = mp_init(&tmp)) != MP_OKAY) {
+ return res;
+ }
+
+ if ((res = mp_2expt(&tmp, mp_count_bits(a))) != MP_OKAY) {
+ goto ERR;
+ }
+
+ if ((res = s_mp_sub(&tmp, a, d)) != MP_OKAY) {
+ goto ERR;
+ }
+
+ERR:
+ mp_clear(&tmp);
+ return res;
+}
+#endif
+
+/* End: bn_mp_reduce_2k_setup_l.c */
+
/* Start: bn_mp_reduce_is_2k.c */
#include <ltc_tommath.h>
#ifdef BN_MP_REDUCE_IS_2K_C
@@ -6461,7 +6570,7 @@ mp_reduce_2k_setup(mp_int *a, mp_digit *d)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* determines if mp_reduce_2k can be used */
@@ -6471,9 +6580,9 @@ int mp_reduce_is_2k(mp_int *a)
mp_digit iz;
if (a->used == 0) {
- return 0;
+ return MP_NO;
} else if (a->used == 1) {
- return 1;
+ return MP_YES;
} else if (a->used > 1) {
iy = mp_count_bits(a);
iz = 1;
@@ -6482,7 +6591,7 @@ int mp_reduce_is_2k(mp_int *a)
/* Test every bit from the second digit up, must be 1 */
for (ix = DIGIT_BIT; ix < iy; ix++) {
if ((a->dp[iw] & iz) == 0) {
- return 0;
+ return MP_NO;
}
iz <<= 1;
if (iz > (mp_digit)MP_MASK) {
@@ -6491,13 +6600,57 @@ int mp_reduce_is_2k(mp_int *a)
}
}
}
- return 1;
+ return MP_YES;
}
#endif
/* End: bn_mp_reduce_is_2k.c */
+/* Start: bn_mp_reduce_is_2k_l.c */
+#include <ltc_tommath.h>
+#ifdef BN_MP_REDUCE_IS_2K_L_C
+/* LibTomMath, multiple-precision integer library -- Tom St Denis
+ *
+ * LibTomMath is a library that provides multiple-precision
+ * integer arithmetic as well as number theoretic functionality.
+ *
+ * The library was designed directly after the MPI library by
+ * Michael Fromberger but has been written from scratch with
+ * additional optimizations in place.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
+ */
+
+/* determines if reduce_2k_l can be used */
+int mp_reduce_is_2k_l(mp_int *a)
+{
+ int ix, iy;
+
+ if (a->used == 0) {
+ return MP_NO;
+ } else if (a->used == 1) {
+ return MP_YES;
+ } else if (a->used > 1) {
+ /* if more than half of the digits are -1 we're sold */
+ for (iy = ix = 0; ix < a->used; ix++) {
+ if (a->dp[ix] == MP_MASK) {
+ ++iy;
+ }
+ }
+ return (iy >= (a->used/2)) ? MP_YES : MP_NO;
+
+ }
+ return MP_NO;
+}
+
+#endif
+
+/* End: bn_mp_reduce_is_2k_l.c */
+
/* Start: bn_mp_reduce_setup.c */
#include <ltc_tommath.h>
#ifdef BN_MP_REDUCE_SETUP_C
@@ -6513,7 +6666,7 @@ int mp_reduce_is_2k(mp_int *a)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* pre-calculate the value required for Barrett reduction
@@ -6547,7 +6700,7 @@ int mp_reduce_setup (mp_int * a, mp_int * b)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* shift right a certain amount of digits */
@@ -6619,7 +6772,7 @@ void mp_rshd (mp_int * a, int b)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* set to a digit */
@@ -6648,7 +6801,7 @@ void mp_set (mp_int * a, mp_digit b)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* set a 32-bit const */
@@ -6696,7 +6849,7 @@ int mp_set_int (mp_int * a, unsigned long b)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* shrink a bignum */
@@ -6731,7 +6884,7 @@ int mp_shrink (mp_int * a)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* get the size for an signed equivalent */
@@ -6758,7 +6911,7 @@ int mp_signed_bin_size (mp_int * a)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* computes b = a*a */
@@ -6816,7 +6969,7 @@ if (a->used >= KARATSUBA_SQR_CUTOFF) {
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* c = a * a (mod b) */
@@ -6857,7 +7010,7 @@ mp_sqrmod (mp_int * a, mp_int * b, mp_int * c)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* this function is less generic than mp_n_root, simpler and faster */
@@ -6938,7 +7091,7 @@ E2: mp_clear(&t1);
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* high level subtraction (handles signs) */
@@ -6997,7 +7150,7 @@ mp_sub (mp_int * a, mp_int * b, mp_int * c)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* single digit subtraction */
@@ -7086,7 +7239,7 @@ mp_sub_d (mp_int * a, mp_digit b, mp_int * c)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* d = a - b (mod c) */
@@ -7128,12 +7281,11 @@ mp_submod (mp_int * a, mp_int * b, mp_int * c, mp_int * d)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* store in signed [big endian] format */
-int
-mp_to_signed_bin (mp_int * a, unsigned char *b)
+int mp_to_signed_bin (mp_int * a, unsigned char *b)
{
int res;
@@ -7147,6 +7299,37 @@ mp_to_signed_bin (mp_int * a, unsigned char *b)
/* End: bn_mp_to_signed_bin.c */
+/* Start: bn_mp_to_signed_bin_n.c */
+#include <ltc_tommath.h>
+#ifdef BN_MP_TO_SIGNED_BIN_N_C
+/* LibTomMath, multiple-precision integer library -- Tom St Denis
+ *
+ * LibTomMath is a library that provides multiple-precision
+ * integer arithmetic as well as number theoretic functionality.
+ *
+ * The library was designed directly after the MPI library by
+ * Michael Fromberger but has been written from scratch with
+ * additional optimizations in place.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
+ */
+
+/* store in signed [big endian] format */
+int mp_to_signed_bin_n (mp_int * a, unsigned char *b, unsigned long *outlen)
+{
+ if (*outlen < (unsigned long)mp_signed_bin_size(a)) {
+ return MP_VAL;
+ }
+ *outlen = mp_signed_bin_size(a);
+ return mp_to_signed_bin(a, b);
+}
+#endif
+
+/* End: bn_mp_to_signed_bin_n.c */
+
/* Start: bn_mp_to_unsigned_bin.c */
#include <ltc_tommath.h>
#ifdef BN_MP_TO_UNSIGNED_BIN_C
@@ -7162,12 +7345,11 @@ mp_to_signed_bin (mp_int * a, unsigned char *b)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* store in unsigned [big endian] format */
-int
-mp_to_unsigned_bin (mp_int * a, unsigned char *b)
+int mp_to_unsigned_bin (mp_int * a, unsigned char *b)
{
int x, res;
mp_int t;
@@ -7196,6 +7378,37 @@ mp_to_unsigned_bin (mp_int * a, unsigned char *b)
/* End: bn_mp_to_unsigned_bin.c */
+/* Start: bn_mp_to_unsigned_bin_n.c */
+#include <ltc_tommath.h>
+#ifdef BN_MP_TO_UNSIGNED_BIN_N_C
+/* LibTomMath, multiple-precision integer library -- Tom St Denis
+ *
+ * LibTomMath is a library that provides multiple-precision
+ * integer arithmetic as well as number theoretic functionality.
+ *
+ * The library was designed directly after the MPI library by
+ * Michael Fromberger but has been written from scratch with
+ * additional optimizations in place.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
+ */
+
+/* store in unsigned [big endian] format */
+int mp_to_unsigned_bin_n (mp_int * a, unsigned char *b, unsigned long *outlen)
+{
+ if (*outlen < (unsigned long)mp_unsigned_bin_size(a)) {
+ return MP_VAL;
+ }
+ *outlen = mp_unsigned_bin_size(a);
+ return mp_to_unsigned_bin(a, b);
+}
+#endif
+
+/* End: bn_mp_to_unsigned_bin_n.c */
+
/* Start: bn_mp_toom_mul.c */
#include <ltc_tommath.h>
#ifdef BN_MP_TOOM_MUL_C
@@ -7211,14 +7424,15 @@ mp_to_unsigned_bin (mp_int * a, unsigned char *b)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* multiplication using the Toom-Cook 3-way algorithm
*
- * Much more complicated than Karatsuba but has a lower asymptotic running time of
- * O(N**1.464). This algorithm is only particularly useful on VERY large
- * inputs (we're talking 1000s of digits here...).
+ * Much more complicated than Karatsuba but has a lower
+ * asymptotic running time of O(N**1.464). This algorithm is
+ * only particularly useful on VERY large inputs
+ * (we're talking 1000s of digits here...).
*/
int mp_toom_mul(mp_int *a, mp_int *b, mp_int *c)
{
@@ -7494,7 +7708,7 @@ ERR:
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* squaring using Toom-Cook 3-way algorithm */
@@ -7720,7 +7934,7 @@ ERR:
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* stores a bignum as a ASCII string in a given radix (2..64) */
@@ -7795,7 +8009,7 @@ int mp_toradix (mp_int * a, char *str, int radix)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* stores a bignum as a ASCII string in a given radix (2..64)
@@ -7884,12 +8098,11 @@ int mp_toradix_n(mp_int * a, char *str, int radix, int maxlen)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* get the size for an unsigned equivalent */
-int
-mp_unsigned_bin_size (mp_int * a)
+int mp_unsigned_bin_size (mp_int * a)
{
int size = mp_count_bits (a);
return (size / 8 + ((size & 7) != 0 ? 1 : 0));
@@ -7913,7 +8126,7 @@ mp_unsigned_bin_size (mp_int * a)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* XOR two ints together */
@@ -7938,7 +8151,7 @@ mp_xor (mp_int * a, mp_int * b, mp_int * c)
}
for (ix = 0; ix < px; ix++) {
-
+ t.dp[ix] ^= x->dp[ix];
}
mp_clamp (&t);
mp_exch (c, &t);
@@ -7964,16 +8177,22 @@ mp_xor (mp_int * a, mp_int * b, mp_int * c)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* set to zero */
-void
-mp_zero (mp_int * a)
+void mp_zero (mp_int * a)
{
+ int n;
+ mp_digit *tmp;
+
a->sign = MP_ZPOS;
a->used = 0;
- memset (a->dp, 0, sizeof (mp_digit) * a->alloc);
+
+ tmp = a->dp;
+ for (n = 0; n < a->alloc; n++) {
+ *tmp++ = 0;
+ }
}
#endif
@@ -7994,9 +8213,9 @@ mp_zero (mp_int * a)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
-const mp_digit __prime_tab[] = {
+const mp_digit ltm_prime_tab[] = {
0x0002, 0x0003, 0x0005, 0x0007, 0x000B, 0x000D, 0x0011, 0x0013,
0x0017, 0x001D, 0x001F, 0x0025, 0x0029, 0x002B, 0x002F, 0x0035,
0x003B, 0x003D, 0x0043, 0x0047, 0x0049, 0x004F, 0x0053, 0x0059,
@@ -8055,7 +8274,7 @@ const mp_digit __prime_tab[] = {
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* reverse an array, used for radix code */
@@ -8094,7 +8313,7 @@ bn_reverse (unsigned char *s, int len)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* low level addition, based on HAC pp.594, Algorithm 14.7 */
@@ -8203,7 +8422,7 @@ s_mp_add (mp_int * a, mp_int * b, mp_int * c)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
#ifdef MP_LOW_MEM
@@ -8212,11 +8431,12 @@ s_mp_add (mp_int * a, mp_int * b, mp_int * c)
#define TAB_SIZE 256
#endif
-int s_mp_exptmod (mp_int * G, mp_int * X, mp_int * P, mp_int * Y)
+int s_mp_exptmod (mp_int * G, mp_int * X, mp_int * P, mp_int * Y, int redmode)
{
mp_int M[TAB_SIZE], res, mu;
mp_digit buf;
int err, bitbuf, bitcpy, bitcnt, mode, digidx, x, y, winsize;
+ int (*redux)(mp_int*,mp_int*,mp_int*);
/* find window size */
x = mp_count_bits (X);
@@ -8261,11 +8481,20 @@ int s_mp_exptmod (mp_int * G, mp_int * X, mp_int * P, mp_int * Y)
/* create mu, used for Barrett reduction */
if ((err = mp_init (&mu)) != MP_OKAY) {
- goto __M;
- }
- if ((err = mp_reduce_setup (&mu, P)) != MP_OKAY) {
- goto __MU;
+ goto LBL_M;
}
+
+ if (redmode == 0) {
+ if ((err = mp_reduce_setup (&mu, P)) != MP_OKAY) {
+ goto LBL_MU;
+ }
+ redux = mp_reduce;
+ } else {
+ if ((err = mp_reduce_2k_setup_l (P, &mu)) != MP_OKAY) {
+ goto LBL_MU;
+ }
+ redux = mp_reduce_2k_l;
+ }
/* create M table
*
@@ -8276,23 +8505,26 @@ int s_mp_exptmod (mp_int * G, mp_int * X, mp_int * P, mp_int * Y)
* computed though accept for M[0] and M[1]
*/
if ((err = mp_mod (G, P, &M[1])) != MP_OKAY) {
- goto __MU;
+ goto LBL_MU;
}
/* compute the value at M[1<<(winsize-1)] by squaring
* M[1] (winsize-1) times
*/
if ((err = mp_copy (&M[1], &M[1 << (winsize - 1)])) != MP_OKAY) {
- goto __MU;
+ goto LBL_MU;
}
for (x = 0; x < (winsize - 1); x++) {
+ /* square it */
if ((err = mp_sqr (&M[1 << (winsize - 1)],
&M[1 << (winsize - 1)])) != MP_OKAY) {
- goto __MU;
+ goto LBL_MU;
}
- if ((err = mp_reduce (&M[1 << (winsize - 1)], P, &mu)) != MP_OKAY) {
- goto __MU;
+
+ /* reduce modulo P */
+ if ((err = redux (&M[1 << (winsize - 1)], P, &mu)) != MP_OKAY) {
+ goto LBL_MU;
}
}
@@ -8301,16 +8533,16 @@ int s_mp_exptmod (mp_int * G, mp_int * X, mp_int * P, mp_int * Y)
*/
for (x = (1 << (winsize - 1)) + 1; x < (1 << winsize); x++) {
if ((err = mp_mul (&M[x - 1], &M[1], &M[x])) != MP_OKAY) {
- goto __MU;
+ goto LBL_MU;
}
- if ((err = mp_reduce (&M[x], P, &mu)) != MP_OKAY) {
- goto __MU;
+ if ((err = redux (&M[x], P, &mu)) != MP_OKAY) {
+ goto LBL_MU;
}
}
/* setup result */
if ((err = mp_init (&res)) != MP_OKAY) {
- goto __MU;
+ goto LBL_MU;
}
mp_set (&res, 1);
@@ -8350,10 +8582,10 @@ int s_mp_exptmod (mp_int * G, mp_int * X, mp_int * P, mp_int * Y)
/* if the bit is zero and mode == 1 then we square */
if (mode == 1 && y == 0) {
if ((err = mp_sqr (&res, &res)) != MP_OKAY) {
- goto __RES;
+ goto LBL_RES;
}
- if ((err = mp_reduce (&res, P, &mu)) != MP_OKAY) {
- goto __RES;
+ if ((err = redux (&res, P, &mu)) != MP_OKAY) {
+ goto LBL_RES;
}
continue;
}
@@ -8367,19 +8599,19 @@ int s_mp_exptmod (mp_int * G, mp_int * X, mp_int * P, mp_int * Y)
/* square first */
for (x = 0; x < winsize; x++) {
if ((err = mp_sqr (&res, &res)) != MP_OKAY) {
- goto __RES;
+ goto LBL_RES;
}
- if ((err = mp_reduce (&res, P, &mu)) != MP_OKAY) {
- goto __RES;
+ if ((err = redux (&res, P, &mu)) != MP_OKAY) {
+ goto LBL_RES;
}
}
/* then multiply */
if ((err = mp_mul (&res, &M[bitbuf], &res)) != MP_OKAY) {
- goto __RES;
+ goto LBL_RES;
}
- if ((err = mp_reduce (&res, P, &mu)) != MP_OKAY) {
- goto __RES;
+ if ((err = redux (&res, P, &mu)) != MP_OKAY) {
+ goto LBL_RES;
}
/* empty window and reset */
@@ -8394,20 +8626,20 @@ int s_mp_exptmod (mp_int * G, mp_int * X, mp_int * P, mp_int * Y)
/* square then multiply if the bit is set */
for (x = 0; x < bitcpy; x++) {
if ((err = mp_sqr (&res, &res)) != MP_OKAY) {
- goto __RES;
+ goto LBL_RES;
}
- if ((err = mp_reduce (&res, P, &mu)) != MP_OKAY) {
- goto __RES;
+ if ((err = redux (&res, P, &mu)) != MP_OKAY) {
+ goto LBL_RES;
}
bitbuf <<= 1;
if ((bitbuf & (1 << winsize)) != 0) {
/* then multiply */
if ((err = mp_mul (&res, &M[1], &res)) != MP_OKAY) {
- goto __RES;
+ goto LBL_RES;
}
- if ((err = mp_reduce (&res, P, &mu)) != MP_OKAY) {
- goto __RES;
+ if ((err = redux (&res, P, &mu)) != MP_OKAY) {
+ goto LBL_RES;
}
}
}
@@ -8415,9 +8647,9 @@ int s_mp_exptmod (mp_int * G, mp_int * X, mp_int * P, mp_int * Y)
mp_exch (&res, Y);
err = MP_OKAY;
-__RES:mp_clear (&res);
-__MU:mp_clear (&mu);
-__M:
+LBL_RES:mp_clear (&res);
+LBL_MU:mp_clear (&mu);
+LBL_M:
mp_clear(&M[1]);
for (x = 1<<(winsize-1); x < (1 << winsize); x++) {
mp_clear (&M[x]);
@@ -8443,15 +8675,14 @@ __M:
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* multiplies |a| * |b| and only computes upto digs digits of result
* HAC pp. 595, Algorithm 14.12 Modified so you can control how
* many digits of output are created.
*/
-int
-s_mp_mul_digs (mp_int * a, mp_int * b, mp_int * c, int digs)
+int s_mp_mul_digs (mp_int * a, mp_int * b, mp_int * c, int digs)
{
mp_int t;
int res, pa, pb, ix, iy;
@@ -8534,7 +8765,7 @@ s_mp_mul_digs (mp_int * a, mp_int * b, mp_int * c, int digs)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* multiplies |a| * |b| and does not compute the lower digs digits
@@ -8615,12 +8846,11 @@ s_mp_mul_high_digs (mp_int * a, mp_int * b, mp_int * c, int digs)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* low level squaring, b = a*a, HAC pp.596-597, Algorithm 14.16 */
-int
-s_mp_sqr (mp_int * a, mp_int * b)
+int s_mp_sqr (mp_int * a, mp_int * b)
{
mp_int t;
int res, ix, iy, pa;
@@ -8700,7 +8930,7 @@ s_mp_sqr (mp_int * a, mp_int * b)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* low level subtraction (assumes |a| > |b|), HAC pp.595 Algorithm 14.9 */
@@ -8789,7 +9019,7 @@ s_mp_sub (mp_int * a, mp_int * b, mp_int * c)
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://math.libtomcrypt.org
*/
/* Known optimal configurations
@@ -8797,11 +9027,12 @@ s_mp_sub (mp_int * a, mp_int * b, mp_int * c)
CPU /Compiler /MUL CUTOFF/SQR CUTOFF
-------------------------------------------------------------
Intel P4 Northwood /GCC v3.4.1 / 88/ 128/LTM 0.32 ;-)
+ AMD Athlon64 /GCC v3.4.4 / 74/ 124/LTM 0.34
*/
-int KARATSUBA_MUL_CUTOFF = 88, /* Min. number of digits before Karatsuba multiplication is used. */
- KARATSUBA_SQR_CUTOFF = 128, /* Min. number of digits before Karatsuba squaring is used. */
+int KARATSUBA_MUL_CUTOFF = 74, /* Min. number of digits before Karatsuba multiplication is used. */
+ KARATSUBA_SQR_CUTOFF = 124, /* Min. number of digits before Karatsuba squaring is used. */
TOOM_MUL_CUTOFF = 350, /* no optimal values of these are known yet so set em high */
TOOM_SQR_CUTOFF = 400;
diff --git a/mpi_to_ltc_error.c b/src/misc/mpi/mpi_to_ltc_error.c
similarity index 66%
rename from mpi_to_ltc_error.c
rename to src/misc/mpi/mpi_to_ltc_error.c
index 015b1b20..3a4ea176 100644
--- a/mpi_to_ltc_error.c
+++ b/src/misc/mpi/mpi_to_ltc_error.c
@@ -6,10 +6,14 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
-#include "mycrypt.h"
+/**
+ @file mpi_to_ltc_error.c
+ Convert MPI errors to LTC, Tom St Denis
+*/
#ifdef MPI
static const struct {
@@ -20,7 +24,11 @@ static const struct {
{ MP_VAL , CRYPT_INVALID_ARG},
};
-/* convert a MPI error to a LTC error (Possibly the most powerful function ever! Oh wait... no) */
+/**
+ Convert a MPI error to a LTC error (Possibly the most powerful function ever! Oh wait... no)
+ @param err The error to convert
+ @return The equivalent LTC error code or CRYPT_ERROR if none found
+*/
int mpi_to_ltc_error(int err)
{
int x;
diff --git a/rand_prime.c b/src/misc/mpi/rand_prime.c
similarity index 87%
rename from rand_prime.c
rename to src/misc/mpi/rand_prime.c
index 4e9cdbde..97ddf731 100644
--- a/rand_prime.c
+++ b/src/misc/mpi/rand_prime.c
@@ -6,10 +6,14 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+/**
+ @file rand_prime.c
+ Generate a random prime, Tom St Denis
+*/
#ifdef MPI
struct rng_data {
@@ -27,7 +31,7 @@ int rand_prime(mp_int *N, long len, prng_state *prng, int wprng)
struct rng_data rng;
int type, err;
- _ARGCHK(N != NULL);
+ LTC_ARGCHK(N != NULL);
/* allow sizes between 2 and 256 bytes for a prime size */
if (len < 16 || len > 4096) {
@@ -50,6 +54,7 @@ int rand_prime(mp_int *N, long len, prng_state *prng, int wprng)
} else {
type = 0;
}
+ type |= LTM_PRIME_2MSB_ON;
/* New prime generation makes the code even more cryptoish-insane. Do you know what this means!!!
-- Gir: Yeah, oh wait, er, no.
diff --git a/pkcs_5_1.c b/src/misc/pkcs5/pkcs_5_1.c
similarity index 65%
rename from pkcs_5_1.c
rename to src/misc/pkcs5/pkcs_5_1.c
index a98affa6..ec473721 100644
--- a/pkcs_5_1.c
+++ b/src/misc/pkcs5/pkcs_5_1.c
@@ -6,13 +6,26 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include <mycrypt.h>
+#include <tomcrypt.h>
-/* PKCS #5, Algorithm #1 */
+/**
+ @file pkcs_5_1.c
+ PKCS #5, Algorithm #1, Tom St Denis
+*/
#ifdef PKCS_5
-
+/**
+ Execute PKCS #5 v1
+ @param password The password (or key)
+ @param password_len The length of the password (octet)
+ @param salt The salt (or nonce) which is 8 octets long
+ @param iteration_count The PKCS #5 v1 iteration count
+ @param hash_idx The index of the hash desired
+ @param out [out] The destination for this algorithm
+ @param outlen [in/out] The max size and resulting size of the algorithm output
+ @return CRYPT_OK if successful
+*/
int pkcs_5_alg1(const unsigned char *password, unsigned long password_len,
const unsigned char *salt,
int iteration_count, int hash_idx,
@@ -23,10 +36,10 @@ int pkcs_5_alg1(const unsigned char *password, unsigned long password_len,
hash_state *md;
unsigned char *buf;
- _ARGCHK(password != NULL);
- _ARGCHK(salt != NULL);
- _ARGCHK(out != NULL);
- _ARGCHK(outlen != NULL);
+ LTC_ARGCHK(password != NULL);
+ LTC_ARGCHK(salt != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
/* test hash IDX */
if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) {
@@ -48,23 +61,23 @@ int pkcs_5_alg1(const unsigned char *password, unsigned long password_len,
/* hash initial password + salt */
if ((err = hash_descriptor[hash_idx].init(md)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((err = hash_descriptor[hash_idx].process(md, password, password_len)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((err = hash_descriptor[hash_idx].process(md, salt, 8)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((err = hash_descriptor[hash_idx].done(md, buf)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
while (--iteration_count) {
- // code goes here.
+ /* code goes here. */
x = MAXBLOCKSIZE;
if ((err = hash_memory(hash_idx, buf, hash_descriptor[hash_idx].hashsize, buf, &x)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
}
@@ -74,8 +87,8 @@ int pkcs_5_alg1(const unsigned char *password, unsigned long password_len,
}
*outlen = x;
err = CRYPT_OK;
-__ERR:
-#ifdef CLEAN_STACK
+LBL_ERR:
+#ifdef LTC_CLEAN_STACK
zeromem(buf, MAXBLOCKSIZE);
zeromem(md, sizeof(hash_state));
#endif
diff --git a/pkcs_5_2.c b/src/misc/pkcs5/pkcs_5_2.c
similarity index 70%
rename from pkcs_5_2.c
rename to src/misc/pkcs5/pkcs_5_2.c
index a58994f8..aac811ba 100644
--- a/pkcs_5_2.c
+++ b/src/misc/pkcs5/pkcs_5_2.c
@@ -6,27 +6,43 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include <mycrypt.h>
+#include <tomcrypt.h>
-/* PKCS #5, Algorithm #2 */
+/**
+ @file pkcs_5_2.c
+ PKCS #5, Algorithm #2, Tom St Denis
+*/
#ifdef PKCS_5
+/**
+ Execute PKCS #5 v2
+ @param password The input password (or key)
+ @param password_len The length of the password (octets)
+ @param salt The salt (or nonce)
+ @param salt_len The length of the salt (octets)
+ @param iteration_count # of iterations desired for PKCS #5 v2 [read specs for more]
+ @param hash_idx The index of the hash desired
+ @param out [out] The destination for this algorithm
+ @param outlen [in/out] The max size and resulting size of the algorithm output
+ @return CRYPT_OK if successful
+*/
int pkcs_5_alg2(const unsigned char *password, unsigned long password_len,
const unsigned char *salt, unsigned long salt_len,
int iteration_count, int hash_idx,
unsigned char *out, unsigned long *outlen)
{
int err, itts;
- unsigned long stored, left, x, y, blkno;
+ ulong32 blkno;
+ unsigned long stored, left, x, y;
unsigned char *buf[2];
hmac_state *hmac;
- _ARGCHK(password != NULL);
- _ARGCHK(salt != NULL);
- _ARGCHK(out != NULL);
- _ARGCHK(outlen != NULL);
+ LTC_ARGCHK(password != NULL);
+ LTC_ARGCHK(salt != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
/* test hash IDX */
if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) {
@@ -60,24 +76,24 @@ int pkcs_5_alg2(const unsigned char *password, unsigned long password_len,
/* get PRF(P, S||int(blkno)) */
if ((err = hmac_init(hmac, hash_idx, password, password_len)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((err = hmac_process(hmac, salt, salt_len)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((err = hmac_process(hmac, buf[1], 4)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
x = MAXBLOCKSIZE;
if ((err = hmac_done(hmac, buf[0], &x)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* now compute repeated and XOR it in buf[1] */
XMEMCPY(buf[1], buf[0], x);
for (itts = 1; itts < iteration_count; ++itts) {
if ((err = hmac_memory(hash_idx, password, password_len, buf[0], x, buf[0], &x)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
for (y = 0; y < x; y++) {
buf[1][y] ^= buf[0][y];
@@ -93,8 +109,8 @@ int pkcs_5_alg2(const unsigned char *password, unsigned long password_len,
*outlen = stored;
err = CRYPT_OK;
-__ERR:
-#ifdef CLEAN_STACK
+LBL_ERR:
+#ifdef LTC_CLEAN_STACK
zeromem(buf[0], MAXBLOCKSIZE*2);
zeromem(hmac, sizeof(hmac_state));
#endif
diff --git a/src/misc/zeromem.c b/src/misc/zeromem.c
new file mode 100644
index 00000000..c640bb4d
--- /dev/null
+++ b/src/misc/zeromem.c
@@ -0,0 +1,30 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file zeromem.c
+ Zero a block of memory, Tom St Denis
+*/
+
+/**
+ Zero a block of memory
+ @param out The destination of the area to zero
+ @param outlen The length of the area to zero (octets)
+*/
+void zeromem(void *out, size_t outlen)
+{
+ unsigned char *mem = out;
+ LTC_ARGCHK(out != NULL);
+ while (outlen-- > 0) {
+ *mem++ = 0;
+ }
+}
diff --git a/src/modes/cbc/cbc_decrypt.c b/src/modes/cbc/cbc_decrypt.c
new file mode 100644
index 00000000..c79631c3
--- /dev/null
+++ b/src/modes/cbc/cbc_decrypt.c
@@ -0,0 +1,91 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file cbc_decrypt.c
+ CBC implementation, encrypt block, Tom St Denis
+*/
+
+
+#ifdef CBC
+
+/**
+ CBC decrypt
+ @param ct Ciphertext
+ @param pt [out] Plaintext
+ @param len The number of bytes to process (must be multiple of block length)
+ @param cbc CBC state
+ @return CRYPT_OK if successful
+*/
+int cbc_decrypt(const unsigned char *ct, unsigned char *pt, unsigned long len, symmetric_CBC *cbc)
+{
+ int x, err;
+ unsigned char tmp[16];
+#ifdef LTC_FAST
+ LTC_FAST_TYPE tmpy;
+#else
+ unsigned char tmpy;
+#endif
+
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(cbc != NULL);
+
+ if ((err = cipher_is_valid(cbc->cipher)) != CRYPT_OK) {
+ return err;
+ }
+
+ /* is blocklen valid? */
+ if (cbc->blocklen < 0 || cbc->blocklen > (int)sizeof(cbc->IV)) {
+ return CRYPT_INVALID_ARG;
+ }
+
+ if (len % cbc->blocklen) {
+ return CRYPT_INVALID_ARG;
+ }
+#ifdef LTC_FAST
+ if (len % sizeof(LTC_FAST_TYPE)) {
+ return CRYPT_INVALID_ARG;
+ }
+#endif
+
+ if (cipher_descriptor[cbc->cipher].accel_cbc_decrypt != NULL) {
+ cipher_descriptor[cbc->cipher].accel_cbc_decrypt(ct, pt, len / cbc->blocklen, cbc->IV, &cbc->key);
+ } else {
+ while (len) {
+ /* decrypt */
+ cipher_descriptor[cbc->cipher].ecb_decrypt(ct, tmp, &cbc->key);
+
+ /* xor IV against plaintext */
+ #if defined(LTC_FAST)
+ for (x = 0; x < cbc->blocklen; x += sizeof(LTC_FAST_TYPE)) {
+ tmpy = *((LTC_FAST_TYPE*)((unsigned char *)cbc->IV + x)) ^ *((LTC_FAST_TYPE*)((unsigned char *)tmp + x));
+ *((LTC_FAST_TYPE*)((unsigned char *)cbc->IV + x)) = *((LTC_FAST_TYPE*)((unsigned char *)ct + x));
+ *((LTC_FAST_TYPE*)((unsigned char *)pt + x)) = tmpy;
+ }
+ #else
+ for (x = 0; x < cbc->blocklen; x++) {
+ tmpy = tmp[x] ^ cbc->IV[x];
+ cbc->IV[x] = ct[x];
+ pt[x] = tmpy;
+ }
+ #endif
+
+ ct += cbc->blocklen;
+ pt += cbc->blocklen;
+ len -= cbc->blocklen;
+ }
+ }
+ return CRYPT_OK;
+}
+
+#endif
diff --git a/src/modes/cbc/cbc_done.c b/src/modes/cbc/cbc_done.c
new file mode 100644
index 00000000..daa91103
--- /dev/null
+++ b/src/modes/cbc/cbc_done.c
@@ -0,0 +1,38 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file cbc_done.c
+ CBC implementation, finish chain, Tom St Denis
+*/
+
+#ifdef CBC
+
+/** Terminate the chain
+ @param cbc The CBC chain to terminate
+ @return CRYPT_OK on success
+*/
+int cbc_done(symmetric_CBC *cbc)
+{
+ int err;
+ LTC_ARGCHK(cbc != NULL);
+
+ if ((err = cipher_is_valid(cbc->cipher)) != CRYPT_OK) {
+ return err;
+ }
+ cipher_descriptor[cbc->cipher].done(&cbc->key);
+ return CRYPT_OK;
+}
+
+
+
+#endif
diff --git a/src/modes/cbc/cbc_encrypt.c b/src/modes/cbc/cbc_encrypt.c
new file mode 100644
index 00000000..00ca05f1
--- /dev/null
+++ b/src/modes/cbc/cbc_encrypt.c
@@ -0,0 +1,92 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file cbc_encrypt.c
+ CBC implementation, encrypt block, Tom St Denis
+*/
+
+
+#ifdef CBC
+
+/**
+ CBC encrypt
+ @param pt Plaintext
+ @param ct [out] Ciphertext
+ @param len The number of bytes to process (must be multiple of block length)
+ @param cbc CBC state
+ @return CRYPT_OK if successful
+*/
+int cbc_encrypt(const unsigned char *pt, unsigned char *ct, unsigned long len, symmetric_CBC *cbc)
+{
+ int x, err;
+
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(cbc != NULL);
+
+ if ((err = cipher_is_valid(cbc->cipher)) != CRYPT_OK) {
+ return err;
+ }
+
+ /* is blocklen valid? */
+ if (cbc->blocklen < 0 || cbc->blocklen > (int)sizeof(cbc->IV)) {
+ return CRYPT_INVALID_ARG;
+ }
+
+ if (len % cbc->blocklen) {
+ return CRYPT_INVALID_ARG;
+ }
+#ifdef LTC_FAST
+ if (len % sizeof(LTC_FAST_TYPE)) {
+ return CRYPT_INVALID_ARG;
+ }
+#endif
+
+ if (cipher_descriptor[cbc->cipher].accel_cbc_encrypt != NULL) {
+ cipher_descriptor[cbc->cipher].accel_cbc_encrypt(pt, ct, len / cbc->blocklen, cbc->IV, &cbc->key);
+ } else {
+ while (len) {
+ /* xor IV against plaintext */
+ #if defined(LTC_FAST)
+ for (x = 0; x < cbc->blocklen; x += sizeof(LTC_FAST_TYPE)) {
+ *((LTC_FAST_TYPE*)((unsigned char *)cbc->IV + x)) ^= *((LTC_FAST_TYPE*)((unsigned char *)pt + x));
+ }
+ #else
+ for (x = 0; x < cbc->blocklen; x++) {
+ cbc->IV[x] ^= pt[x];
+ }
+ #endif
+
+ /* encrypt */
+ cipher_descriptor[cbc->cipher].ecb_encrypt(cbc->IV, ct, &cbc->key);
+
+ /* store IV [ciphertext] for a future block */
+ #if defined(LTC_FAST)
+ for (x = 0; x < cbc->blocklen; x += sizeof(LTC_FAST_TYPE)) {
+ *((LTC_FAST_TYPE*)((unsigned char *)cbc->IV + x)) = *((LTC_FAST_TYPE*)((unsigned char *)ct + x));
+ }
+ #else
+ for (x = 0; x < cbc->blocklen; x++) {
+ cbc->IV[x] = ct[x];
+ }
+ #endif
+
+ ct += cbc->blocklen;
+ pt += cbc->blocklen;
+ len -= cbc->blocklen;
+ }
+ }
+ return CRYPT_OK;
+}
+
+#endif
diff --git a/cbc_getiv.c b/src/modes/cbc/cbc_getiv.c
similarity index 53%
rename from cbc_getiv.c
rename to src/modes/cbc/cbc_getiv.c
index 89356a04..0f5c3e43 100644
--- a/cbc_getiv.c
+++ b/src/modes/cbc/cbc_getiv.c
@@ -6,18 +6,29 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
-#include "mycrypt.h"
+/**
+ @file cbc_getiv.c
+ CBC implementation, get IV, Tom St Denis
+*/
#ifdef CBC
+/**
+ Get the current initial vector
+ @param IV [out] The destination of the initial vector
+ @param len [in/out] The max size and resulting size of the initial vector
+ @param cbc The CBC state
+ @return CRYPT_OK if successful
+*/
int cbc_getiv(unsigned char *IV, unsigned long *len, symmetric_CBC *cbc)
{
- _ARGCHK(IV != NULL);
- _ARGCHK(len != NULL);
- _ARGCHK(cbc != NULL);
+ LTC_ARGCHK(IV != NULL);
+ LTC_ARGCHK(len != NULL);
+ LTC_ARGCHK(cbc != NULL);
if ((unsigned long)cbc->blocklen > *len) {
return CRYPT_BUFFER_OVERFLOW;
}
diff --git a/cbc_setiv.c b/src/modes/cbc/cbc_setiv.c
similarity index 56%
rename from cbc_setiv.c
rename to src/modes/cbc/cbc_setiv.c
index 9fa562b4..f2e8b31c 100644
--- a/cbc_setiv.c
+++ b/src/modes/cbc/cbc_setiv.c
@@ -6,17 +6,29 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
+
+/**
+ @file cbc_setiv.c
+ CBC implementation, set IV, Tom St Denis
+*/
-#include "mycrypt.h"
#ifdef CBC
+/**
+ Set an initial vector
+ @param IV The initial vector
+ @param len The length of the vector (in octets)
+ @param cbc The CBC state
+ @return CRYPT_OK if successful
+*/
int cbc_setiv(const unsigned char *IV, unsigned long len, symmetric_CBC *cbc)
{
- _ARGCHK(IV != NULL);
- _ARGCHK(cbc != NULL);
+ LTC_ARGCHK(IV != NULL);
+ LTC_ARGCHK(cbc != NULL);
if (len != (unsigned long)cbc->blocklen) {
return CRYPT_INVALID_ARG;
}
diff --git a/cbc_start.c b/src/modes/cbc/cbc_start.c
similarity index 58%
rename from cbc_start.c
rename to src/modes/cbc/cbc_start.c
index f0d5fb66..680faabe 100644
--- a/cbc_start.c
+++ b/src/modes/cbc/cbc_start.c
@@ -6,20 +6,35 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file cbc_start.c
+ CBC implementation, start chain, Tom St Denis
+*/
#ifdef CBC
+/**
+ Initialize a CBC context
+ @param cipher The index of the cipher desired
+ @param IV The initial vector
+ @param key The secret key
+ @param keylen The length of the secret key (octets)
+ @param num_rounds Number of rounds in the cipher desired (0 for default)
+ @param cbc The CBC state to initialize
+ @return CRYPT_OK if successful
+*/
int cbc_start(int cipher, const unsigned char *IV, const unsigned char *key,
int keylen, int num_rounds, symmetric_CBC *cbc)
{
int x, err;
- _ARGCHK(IV != NULL);
- _ARGCHK(key != NULL);
- _ARGCHK(cbc != NULL);
+ LTC_ARGCHK(IV != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(cbc != NULL);
/* bad param? */
if ((err = cipher_is_valid(cipher)) != CRYPT_OK) {
diff --git a/cfb_decrypt.c b/src/modes/cfb/cfb_decrypt.c
similarity index 70%
rename from cfb_decrypt.c
rename to src/modes/cfb/cfb_decrypt.c
index 1e1d3c01..8b788986 100644
--- a/cfb_decrypt.c
+++ b/src/modes/cfb/cfb_decrypt.c
@@ -6,19 +6,32 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file cfb_decrypt.c
+ CFB implementation, decrypt data, Tom St Denis
+*/
#ifdef CFB
+/**
+ CFB decrypt
+ @param ct Ciphertext
+ @param pt [out] Plaintext
+ @param len Length of ciphertext (octets)
+ @param cfb CFB state
+ @return CRYPT_OK if successful
+*/
int cfb_decrypt(const unsigned char *ct, unsigned char *pt, unsigned long len, symmetric_CFB *cfb)
{
int err;
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(cfb != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(cfb != NULL);
if ((err = cipher_is_valid(cfb->cipher)) != CRYPT_OK) {
return err;
diff --git a/src/modes/cfb/cfb_done.c b/src/modes/cfb/cfb_done.c
new file mode 100644
index 00000000..04e775c3
--- /dev/null
+++ b/src/modes/cfb/cfb_done.c
@@ -0,0 +1,38 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file cfb_done.c
+ CFB implementation, finish chain, Tom St Denis
+*/
+
+#ifdef CFB
+
+/** Terminate the chain
+ @param cfb The CFB chain to terminate
+ @return CRYPT_OK on success
+*/
+int cfb_done(symmetric_CFB *cfb)
+{
+ int err;
+ LTC_ARGCHK(cfb != NULL);
+
+ if ((err = cipher_is_valid(cfb->cipher)) != CRYPT_OK) {
+ return err;
+ }
+ cipher_descriptor[cfb->cipher].done(&cfb->key);
+ return CRYPT_OK;
+}
+
+
+
+#endif
diff --git a/cfb_encrypt.c b/src/modes/cfb/cfb_encrypt.c
similarity index 70%
rename from cfb_encrypt.c
rename to src/modes/cfb/cfb_encrypt.c
index 80169598..b9603687 100644
--- a/cfb_encrypt.c
+++ b/src/modes/cfb/cfb_encrypt.c
@@ -6,19 +6,32 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file cfb_encrypt.c
+ CFB implementation, encrypt data, Tom St Denis
+*/
#ifdef CFB
+/**
+ CFB encrypt
+ @param pt Plaintext
+ @param ct [out] Ciphertext
+ @param len Length of plaintext (octets)
+ @param cfb CFB state
+ @return CRYPT_OK if successful
+*/
int cfb_encrypt(const unsigned char *pt, unsigned char *ct, unsigned long len, symmetric_CFB *cfb)
{
int err;
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(cfb != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(cfb != NULL);
if ((err = cipher_is_valid(cfb->cipher)) != CRYPT_OK) {
return err;
diff --git a/cfb_getiv.c b/src/modes/cfb/cfb_getiv.c
similarity index 53%
rename from cfb_getiv.c
rename to src/modes/cfb/cfb_getiv.c
index c54f70f2..e59c1e4a 100644
--- a/cfb_getiv.c
+++ b/src/modes/cfb/cfb_getiv.c
@@ -6,18 +6,29 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
-#include "mycrypt.h"
+/**
+ @file cfb_getiv.c
+ CFB implementation, get IV, Tom St Denis
+*/
#ifdef CFB
+/**
+ Get the current initial vector
+ @param IV [out] The destination of the initial vector
+ @param len [in/out] The max size and resulting size of the initial vector
+ @param cfb The CFB state
+ @return CRYPT_OK if successful
+*/
int cfb_getiv(unsigned char *IV, unsigned long *len, symmetric_CFB *cfb)
{
- _ARGCHK(IV != NULL);
- _ARGCHK(len != NULL);
- _ARGCHK(cfb != NULL);
+ LTC_ARGCHK(IV != NULL);
+ LTC_ARGCHK(len != NULL);
+ LTC_ARGCHK(cfb != NULL);
if ((unsigned long)cfb->blocklen > *len) {
return CRYPT_BUFFER_OVERFLOW;
}
diff --git a/cfb_setiv.c b/src/modes/cfb/cfb_setiv.c
similarity index 64%
rename from cfb_setiv.c
rename to src/modes/cfb/cfb_setiv.c
index ddbbe598..e475ad9e 100644
--- a/cfb_setiv.c
+++ b/src/modes/cfb/cfb_setiv.c
@@ -6,19 +6,29 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
-#include "mycrypt.h"
-
+/**
+ @file cfb_setiv.c
+ CFB implementation, set IV, Tom St Denis
+*/
#ifdef CFB
+/**
+ Set an initial vector
+ @param IV The initial vector
+ @param len The length of the vector (in octets)
+ @param cfb The CFB state
+ @return CRYPT_OK if successful
+*/
int cfb_setiv(const unsigned char *IV, unsigned long len, symmetric_CFB *cfb)
{
int err;
- _ARGCHK(IV != NULL);
- _ARGCHK(cfb != NULL);
+ LTC_ARGCHK(IV != NULL);
+ LTC_ARGCHK(cfb != NULL);
if ((err = cipher_is_valid(cfb->cipher)) != CRYPT_OK) {
return err;
diff --git a/cfb_start.c b/src/modes/cfb/cfb_start.c
similarity index 61%
rename from cfb_start.c
rename to src/modes/cfb/cfb_start.c
index d471412a..7157fc38 100644
--- a/cfb_start.c
+++ b/src/modes/cfb/cfb_start.c
@@ -6,20 +6,36 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file cfb_start.c
+ CFB implementation, start chain, Tom St Denis
+*/
+
#ifdef CFB
+/**
+ Initialize a CFB context
+ @param cipher The index of the cipher desired
+ @param IV The initial vector
+ @param key The secret key
+ @param keylen The length of the secret key (octets)
+ @param num_rounds Number of rounds in the cipher desired (0 for default)
+ @param cfb The CFB state to initialize
+ @return CRYPT_OK if successful
+*/
int cfb_start(int cipher, const unsigned char *IV, const unsigned char *key,
int keylen, int num_rounds, symmetric_CFB *cfb)
{
int x, err;
- _ARGCHK(IV != NULL);
- _ARGCHK(key != NULL);
- _ARGCHK(cfb != NULL);
+ LTC_ARGCHK(IV != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(cfb != NULL);
if ((err = cipher_is_valid(cipher)) != CRYPT_OK) {
return err;
diff --git a/ctr_decrypt.c b/src/modes/ctr/ctr_decrypt.c
similarity index 50%
rename from ctr_decrypt.c
rename to src/modes/ctr/ctr_decrypt.c
index dce3a398..daa78a80 100644
--- a/ctr_decrypt.c
+++ b/src/modes/ctr/ctr_decrypt.c
@@ -6,17 +6,30 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file ctr_decrypt.c
+ CTR implementation, decrypt data, Tom St Denis
+*/
#ifdef CTR
+/**
+ CTR decrypt
+ @param ct Ciphertext
+ @param pt [out] Plaintext
+ @param len Length of ciphertext (octets)
+ @param ctr CTR state
+ @return CRYPT_OK if successful
+*/
int ctr_decrypt(const unsigned char *ct, unsigned char *pt, unsigned long len, symmetric_CTR *ctr)
{
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(ctr != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(ctr != NULL);
return ctr_encrypt(ct, pt, len, ctr);
}
diff --git a/src/modes/ctr/ctr_done.c b/src/modes/ctr/ctr_done.c
new file mode 100644
index 00000000..88508baa
--- /dev/null
+++ b/src/modes/ctr/ctr_done.c
@@ -0,0 +1,38 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file ctr_done.c
+ CTR implementation, finish chain, Tom St Denis
+*/
+
+#ifdef CTR
+
+/** Terminate the chain
+ @param ctr The CTR chain to terminate
+ @return CRYPT_OK on success
+*/
+int ctr_done(symmetric_CTR *ctr)
+{
+ int err;
+ LTC_ARGCHK(ctr != NULL);
+
+ if ((err = cipher_is_valid(ctr->cipher)) != CRYPT_OK) {
+ return err;
+ }
+ cipher_descriptor[ctr->cipher].done(&ctr->key);
+ return CRYPT_OK;
+}
+
+
+
+#endif
diff --git a/ctr_encrypt.c b/src/modes/ctr/ctr_encrypt.c
similarity index 50%
rename from ctr_encrypt.c
rename to src/modes/ctr/ctr_encrypt.c
index 476de384..a96b8068 100644
--- a/ctr_encrypt.c
+++ b/src/modes/ctr/ctr_encrypt.c
@@ -6,19 +6,33 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file ctr_encrypt.c
+ CTR implementation, encrypt data, Tom St Denis
+*/
+
#ifdef CTR
+/**
+ CTR encrypt
+ @param pt Plaintext
+ @param ct [out] Ciphertext
+ @param len Length of plaintext (octets)
+ @param ctr CTR state
+ @return CRYPT_OK if successful
+*/
int ctr_encrypt(const unsigned char *pt, unsigned char *ct, unsigned long len, symmetric_CTR *ctr)
{
int x, err;
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(ctr != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(ctr != NULL);
if ((err = cipher_is_valid(ctr->cipher)) != CRYPT_OK) {
return err;
@@ -30,7 +44,19 @@ int ctr_encrypt(const unsigned char *pt, unsigned char *ct, unsigned long len, s
return CRYPT_INVALID_ARG;
}
- while (len-- > 0) {
+#ifdef LTC_FAST
+ if (ctr->blocklen % sizeof(LTC_FAST_TYPE)) {
+ return CRYPT_INVALID_ARG;
+ }
+#endif
+
+ /* handle acceleration only if pad is empty, accelerator is present and length is >= a block size */
+ if ((ctr->padlen == ctr->blocklen) && cipher_descriptor[ctr->cipher].accel_ctr_encrypt != NULL && (len >= (unsigned long)ctr->blocklen)) {
+ cipher_descriptor[ctr->cipher].accel_ctr_encrypt(pt, ct, len/ctr->blocklen, ctr->ctr, ctr->mode, &ctr->key);
+ len %= ctr->blocklen;
+ }
+
+ while (len) {
/* is the pad empty? */
if (ctr->padlen == ctr->blocklen) {
/* increment counter */
@@ -56,7 +82,21 @@ int ctr_encrypt(const unsigned char *pt, unsigned char *ct, unsigned long len, s
cipher_descriptor[ctr->cipher].ecb_encrypt(ctr->ctr, ctr->pad, &ctr->key);
ctr->padlen = 0;
}
- *ct++ = *pt++ ^ ctr->pad[ctr->padlen++];
+#ifdef LTC_FAST
+ if (ctr->padlen == 0 && len >= (unsigned long)ctr->blocklen) {
+ for (x = 0; x < ctr->blocklen; x += sizeof(LTC_FAST_TYPE)) {
+ *((LTC_FAST_TYPE*)((unsigned char *)ct + x)) = *((LTC_FAST_TYPE*)((unsigned char *)pt + x)) ^
+ *((LTC_FAST_TYPE*)((unsigned char *)ctr->pad + x));
+ }
+ pt += ctr->blocklen;
+ ct += ctr->blocklen;
+ len -= ctr->blocklen;
+ ctr->padlen = ctr->blocklen;
+ continue;
+ }
+#endif
+ *ct++ = *pt++ ^ ctr->pad[ctr->padlen++];
+ --len;
}
return CRYPT_OK;
}
diff --git a/ctr_getiv.c b/src/modes/ctr/ctr_getiv.c
similarity index 53%
rename from ctr_getiv.c
rename to src/modes/ctr/ctr_getiv.c
index ab20491d..3997033d 100644
--- a/ctr_getiv.c
+++ b/src/modes/ctr/ctr_getiv.c
@@ -6,18 +6,29 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
-#include "mycrypt.h"
+/**
+ @file ctr_getiv.c
+ CTR implementation, get IV, Tom St Denis
+*/
#ifdef CTR
+/**
+ Get the current initial vector
+ @param IV [out] The destination of the initial vector
+ @param len [in/out] The max size and resulting size of the initial vector
+ @param ctr The CTR state
+ @return CRYPT_OK if successful
+*/
int ctr_getiv(unsigned char *IV, unsigned long *len, symmetric_CTR *ctr)
{
- _ARGCHK(IV != NULL);
- _ARGCHK(len != NULL);
- _ARGCHK(ctr != NULL);
+ LTC_ARGCHK(IV != NULL);
+ LTC_ARGCHK(len != NULL);
+ LTC_ARGCHK(ctr != NULL);
if ((unsigned long)ctr->blocklen > *len) {
return CRYPT_BUFFER_OVERFLOW;
}
diff --git a/ctr_setiv.c b/src/modes/ctr/ctr_setiv.c
similarity index 66%
rename from ctr_setiv.c
rename to src/modes/ctr/ctr_setiv.c
index f15ee223..2aab190d 100644
--- a/ctr_setiv.c
+++ b/src/modes/ctr/ctr_setiv.c
@@ -6,19 +6,30 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
-#include "mycrypt.h"
-
+/**
+ @file ctr_setiv.c
+ CTR implementation, set IV, Tom St Denis
+*/
+
#ifdef CTR
+/**
+ Set an initial vector
+ @param IV The initial vector
+ @param len The length of the vector (in octets)
+ @param ctr The CTR state
+ @return CRYPT_OK if successful
+*/
int ctr_setiv(const unsigned char *IV, unsigned long len, symmetric_CTR *ctr)
{
int err;
- _ARGCHK(IV != NULL);
- _ARGCHK(ctr != NULL);
+ LTC_ARGCHK(IV != NULL);
+ LTC_ARGCHK(ctr != NULL);
/* bad param? */
if ((err = cipher_is_valid(ctr->cipher)) != CRYPT_OK) {
diff --git a/ctr_start.c b/src/modes/ctr/ctr_start.c
similarity index 61%
rename from ctr_start.c
rename to src/modes/ctr/ctr_start.c
index f752b655..db8c464e 100644
--- a/ctr_start.c
+++ b/src/modes/ctr/ctr_start.c
@@ -6,20 +6,36 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file ctr_start.c
+ CTR implementation, start chain, Tom St Denis
+*/
+
#ifdef CTR
+/**
+ Initialize a CTR context
+ @param cipher The index of the cipher desired
+ @param count The initial vector
+ @param key The secret key
+ @param keylen The length of the secret key (octets)
+ @param num_rounds Number of rounds in the cipher desired (0 for default)
+ @param ctr The CTR state to initialize
+ @return CRYPT_OK if successful
+*/
int ctr_start(int cipher, const unsigned char *count, const unsigned char *key, int keylen,
int num_rounds, symmetric_CTR *ctr)
{
int x, err;
- _ARGCHK(count != NULL);
- _ARGCHK(key != NULL);
- _ARGCHK(ctr != NULL);
+ LTC_ARGCHK(count != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(ctr != NULL);
/* bad param? */
if ((err = cipher_is_valid(cipher)) != CRYPT_OK) {
diff --git a/src/modes/ecb/ecb_decrypt.c b/src/modes/ecb/ecb_decrypt.c
new file mode 100644
index 00000000..8db4d370
--- /dev/null
+++ b/src/modes/ecb/ecb_decrypt.c
@@ -0,0 +1,55 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file ecb_decrypt.c
+ ECB implementation, decrypt a block, Tom St Denis
+*/
+
+#ifdef ECB
+
+/**
+ ECB decrypt
+ @param ct Ciphertext
+ @param pt [out] Plaintext
+ @param len The number of octets to process (must be multiple of the cipher block size)
+ @param ecb ECB state
+ @return CRYPT_OK if successful
+*/
+int ecb_decrypt(const unsigned char *ct, unsigned char *pt, unsigned long len, symmetric_ECB *ecb)
+{
+ int err;
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(ecb != NULL);
+ if ((err = cipher_is_valid(ecb->cipher)) != CRYPT_OK) {
+ return err;
+ }
+ if (len % cipher_descriptor[ecb->cipher].block_length) {
+ return CRYPT_INVALID_ARG;
+ }
+
+ /* check for accel */
+ if (cipher_descriptor[ecb->cipher].accel_ecb_decrypt != NULL) {
+ cipher_descriptor[ecb->cipher].accel_ecb_decrypt(ct, pt, len / cipher_descriptor[ecb->cipher].block_length, &ecb->key);
+ } else {
+ while (len) {
+ cipher_descriptor[ecb->cipher].ecb_decrypt(ct, pt, &ecb->key);
+ pt += cipher_descriptor[ecb->cipher].block_length;
+ ct += cipher_descriptor[ecb->cipher].block_length;
+ len -= cipher_descriptor[ecb->cipher].block_length;
+ }
+ }
+ return CRYPT_OK;
+}
+
+#endif
diff --git a/ecb_encrypt.c b/src/modes/ecb/ecb_done.c
similarity index 50%
rename from ecb_encrypt.c
rename to src/modes/ecb/ecb_done.c
index 51b76468..31a42fae 100644
--- a/ecb_encrypt.c
+++ b/src/modes/ecb/ecb_done.c
@@ -6,24 +6,33 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file ecb_done.c
+ ECB implementation, finish chain, Tom St Denis
+*/
#ifdef ECB
-int ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_ECB *ecb)
+/** Terminate the chain
+ @param rcb The ECB chain to terminate
+ @return CRYPT_OK on success
+*/
+int ecb_done(symmetric_ECB *ecb)
{
int err;
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(ecb != NULL);
+ LTC_ARGCHK(ecb != NULL);
if ((err = cipher_is_valid(ecb->cipher)) != CRYPT_OK) {
- return err;
+ return err;
}
- cipher_descriptor[ecb->cipher].ecb_encrypt(pt, ct, &ecb->key);
+ cipher_descriptor[ecb->cipher].done(&ecb->key);
return CRYPT_OK;
}
+
+
#endif
diff --git a/src/modes/ecb/ecb_encrypt.c b/src/modes/ecb/ecb_encrypt.c
new file mode 100644
index 00000000..dc045e9d
--- /dev/null
+++ b/src/modes/ecb/ecb_encrypt.c
@@ -0,0 +1,55 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file ecb_encrypt.c
+ ECB implementation, encrypt a block, Tom St Denis
+*/
+
+#ifdef ECB
+
+/**
+ ECB encrypt
+ @param pt Plaintext
+ @param ct [out] Ciphertext
+ @param len The number of octets to process (must be multiple of the cipher block size)
+ @param ecb ECB state
+ @return CRYPT_OK if successful
+*/
+int ecb_encrypt(const unsigned char *pt, unsigned char *ct, unsigned long len, symmetric_ECB *ecb)
+{
+ int err;
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(ecb != NULL);
+ if ((err = cipher_is_valid(ecb->cipher)) != CRYPT_OK) {
+ return err;
+ }
+ if (len % cipher_descriptor[ecb->cipher].block_length) {
+ return CRYPT_INVALID_ARG;
+ }
+
+ /* check for accel */
+ if (cipher_descriptor[ecb->cipher].accel_ecb_encrypt != NULL) {
+ cipher_descriptor[ecb->cipher].accel_ecb_encrypt(pt, ct, len / cipher_descriptor[ecb->cipher].block_length, &ecb->key);
+ } else {
+ while (len) {
+ cipher_descriptor[ecb->cipher].ecb_encrypt(pt, ct, &ecb->key);
+ pt += cipher_descriptor[ecb->cipher].block_length;
+ ct += cipher_descriptor[ecb->cipher].block_length;
+ len -= cipher_descriptor[ecb->cipher].block_length;
+ }
+ }
+ return CRYPT_OK;
+}
+
+#endif
diff --git a/ecb_start.c b/src/modes/ecb/ecb_start.c
similarity index 53%
rename from ecb_start.c
rename to src/modes/ecb/ecb_start.c
index 073bbe97..a8b6d450 100644
--- a/ecb_start.c
+++ b/src/modes/ecb/ecb_start.c
@@ -6,17 +6,32 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file ecb_start.c
+ ECB implementation, start chain, Tom St Denis
+*/
+
#ifdef ECB
+/**
+ Initialize a ECB context
+ @param cipher The index of the cipher desired
+ @param key The secret key
+ @param keylen The length of the secret key (octets)
+ @param num_rounds Number of rounds in the cipher desired (0 for default)
+ @param ecb The ECB state to initialize
+ @return CRYPT_OK if successful
+*/
int ecb_start(int cipher, const unsigned char *key, int keylen, int num_rounds, symmetric_ECB *ecb)
{
int err;
- _ARGCHK(key != NULL);
- _ARGCHK(ecb != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(ecb != NULL);
if ((err = cipher_is_valid(cipher)) != CRYPT_OK) {
return err;
diff --git a/ofb_decrypt.c b/src/modes/ofb/ofb_decrypt.c
similarity index 50%
rename from ofb_decrypt.c
rename to src/modes/ofb/ofb_decrypt.c
index 95319692..f7254102 100644
--- a/ofb_decrypt.c
+++ b/src/modes/ofb/ofb_decrypt.c
@@ -6,17 +6,30 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file ofb_decrypt.c
+ OFB implementation, decrypt data, Tom St Denis
+*/
#ifdef OFB
+/**
+ OFB decrypt
+ @param ct Ciphertext
+ @param pt [out] Plaintext
+ @param len Length of ciphertext (octets)
+ @param ofb OFB state
+ @return CRYPT_OK if successful
+*/
int ofb_decrypt(const unsigned char *ct, unsigned char *pt, unsigned long len, symmetric_OFB *ofb)
{
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(ofb != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(ofb != NULL);
return ofb_encrypt(ct, pt, len, ofb);
}
diff --git a/src/modes/ofb/ofb_done.c b/src/modes/ofb/ofb_done.c
new file mode 100644
index 00000000..ff72ddc1
--- /dev/null
+++ b/src/modes/ofb/ofb_done.c
@@ -0,0 +1,38 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file ofb_done.c
+ OFB implementation, finish chain, Tom St Denis
+*/
+
+#ifdef OFB
+
+/** Terminate the chain
+ @param ofb The OFB chain to terminate
+ @return CRYPT_OK on success
+*/
+int ofb_done(symmetric_OFB *ofb)
+{
+ int err;
+ LTC_ARGCHK(ofb != NULL);
+
+ if ((err = cipher_is_valid(ofb->cipher)) != CRYPT_OK) {
+ return err;
+ }
+ cipher_descriptor[ofb->cipher].done(&ofb->key);
+ return CRYPT_OK;
+}
+
+
+
+#endif
diff --git a/ofb_encrypt.c b/src/modes/ofb/ofb_encrypt.c
similarity index 69%
rename from ofb_encrypt.c
rename to src/modes/ofb/ofb_encrypt.c
index d5d06f37..4409ac8d 100644
--- a/ofb_encrypt.c
+++ b/src/modes/ofb/ofb_encrypt.c
@@ -6,18 +6,31 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file ofb_encrypt.c
+ OFB implementation, encrypt data, Tom St Denis
+*/
#ifdef OFB
+/**
+ OFB encrypt
+ @param pt Plaintext
+ @param ct [out] Ciphertext
+ @param len Length of plaintext (octets)
+ @param ofb OFB state
+ @return CRYPT_OK if successful
+*/
int ofb_encrypt(const unsigned char *pt, unsigned char *ct, unsigned long len, symmetric_OFB *ofb)
{
int err;
- _ARGCHK(pt != NULL);
- _ARGCHK(ct != NULL);
- _ARGCHK(ofb != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(ct != NULL);
+ LTC_ARGCHK(ofb != NULL);
if ((err = cipher_is_valid(ofb->cipher)) != CRYPT_OK) {
return err;
}
diff --git a/ofb_getiv.c b/src/modes/ofb/ofb_getiv.c
similarity index 53%
rename from ofb_getiv.c
rename to src/modes/ofb/ofb_getiv.c
index fee57683..eb8ef1e4 100644
--- a/ofb_getiv.c
+++ b/src/modes/ofb/ofb_getiv.c
@@ -6,18 +6,29 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
-#include "mycrypt.h"
+/**
+ @file ofb_getiv.c
+ OFB implementation, get IV, Tom St Denis
+*/
#ifdef OFB
+/**
+ Get the current initial vector
+ @param IV [out] The destination of the initial vector
+ @param len [in/out] The max size and resulting size of the initial vector
+ @param ofb The OFB state
+ @return CRYPT_OK if successful
+*/
int ofb_getiv(unsigned char *IV, unsigned long *len, symmetric_OFB *ofb)
{
- _ARGCHK(IV != NULL);
- _ARGCHK(len != NULL);
- _ARGCHK(ofb != NULL);
+ LTC_ARGCHK(IV != NULL);
+ LTC_ARGCHK(len != NULL);
+ LTC_ARGCHK(ofb != NULL);
if ((unsigned long)ofb->blocklen > *len) {
return CRYPT_BUFFER_OVERFLOW;
}
diff --git a/ofb_setiv.c b/src/modes/ofb/ofb_setiv.c
similarity index 64%
rename from ofb_setiv.c
rename to src/modes/ofb/ofb_setiv.c
index 6683bc72..96b3f1cb 100644
--- a/ofb_setiv.c
+++ b/src/modes/ofb/ofb_setiv.c
@@ -6,19 +6,30 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
-#include "mycrypt.h"
+/**
+ @file ofb_setiv.c
+ OFB implementation, set IV, Tom St Denis
+*/
#ifdef OFB
+/**
+ Set an initial vector
+ @param IV The initial vector
+ @param len The length of the vector (in octets)
+ @param ofb The OFB state
+ @return CRYPT_OK if successful
+*/
int ofb_setiv(const unsigned char *IV, unsigned long len, symmetric_OFB *ofb)
{
int err;
- _ARGCHK(IV != NULL);
- _ARGCHK(ofb != NULL);
+ LTC_ARGCHK(IV != NULL);
+ LTC_ARGCHK(ofb != NULL);
if ((err = cipher_is_valid(ofb->cipher)) != CRYPT_OK) {
return err;
diff --git a/ofb_start.c b/src/modes/ofb/ofb_start.c
similarity index 57%
rename from ofb_start.c
rename to src/modes/ofb/ofb_start.c
index 45fcc702..977e6a3a 100644
--- a/ofb_start.c
+++ b/src/modes/ofb/ofb_start.c
@@ -6,20 +6,36 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file ofb_start.c
+ OFB implementation, start chain, Tom St Denis
+*/
+
#ifdef OFB
+/**
+ Initialize a OFB context
+ @param cipher The index of the cipher desired
+ @param IV The initial vector
+ @param key The secret key
+ @param keylen The length of the secret key (octets)
+ @param num_rounds Number of rounds in the cipher desired (0 for default)
+ @param ofb The OFB state to initialize
+ @return CRYPT_OK if successful
+*/
int ofb_start(int cipher, const unsigned char *IV, const unsigned char *key,
int keylen, int num_rounds, symmetric_OFB *ofb)
{
int x, err;
- _ARGCHK(IV != NULL);
- _ARGCHK(key != NULL);
- _ARGCHK(ofb != NULL);
+ LTC_ARGCHK(IV != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(ofb != NULL);
if ((err = cipher_is_valid(cipher)) != CRYPT_OK) {
return err;
diff --git a/der_decode_integer.c b/src/pk/asn1/der/der_decode_integer.c
similarity index 79%
rename from der_decode_integer.c
rename to src/pk/asn1/der/der_decode_integer.c
index 71ce1f61..b798bd45 100644
--- a/der_decode_integer.c
+++ b/src/pk/asn1/der/der_decode_integer.c
@@ -6,24 +6,37 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
-#include "mycrypt.h"
+/**
+ @file der_decode_integer.c
+ ASN.1 DER, decode an integer, Tom St Denis
+*/
+#ifdef LTC_DER
+
/* decodes a DER INTEGER in [in]. You have to tell this function
* how many bytes are available [inlen]. It will then attempt to
* read the INTEGER. If all goes well it stores the number of bytes
* read in [inlen] and the number in [num].
*/
+/**
+ Read a mp_int integer
+ @param in The DER encoded data
+ @param inlen [in] Size of the in data, [out] number of bytes read
+ @param num The first mp_int to decode
+ @return CRYPT_OK if successful
+*/
int der_decode_integer(const unsigned char *in, unsigned long *inlen, mp_int *num)
{
unsigned long tmplen, y, z;
- _ARGCHK(num != NULL);
- _ARGCHK(in != NULL);
- _ARGCHK(inlen != NULL);
+ LTC_ARGCHK(num != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(inlen != NULL);
/* save copy of max output size */
tmplen = *inlen;
@@ -81,3 +94,5 @@ int der_decode_integer(const unsigned char *in, unsigned long *inlen, mp_int *nu
return mpi_to_ltc_error(mp_read_unsigned_bin(num, (unsigned char *)in, y));
}
}
+
+#endif
diff --git a/der_encode_integer.c b/src/pk/asn1/der/der_encode_integer.c
similarity index 79%
rename from der_encode_integer.c
rename to src/pk/asn1/der/der_encode_integer.c
index b742dec6..c5c5267b 100644
--- a/der_encode_integer.c
+++ b/src/pk/asn1/der/der_encode_integer.c
@@ -6,20 +6,34 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
-#include "mycrypt.h"
+/**
+ @file der_encode_integer.c
+ ASN.1 DER, encode an integer, Tom St Denis
+*/
+
+
+#ifdef LTC_DER
/* Exports a positive bignum as DER format (upto 2^32 bytes in size) */
+/**
+ Store a mp_int integer
+ @param num The first mp_int to encode
+ @param out [out] The destination for the DER encoded integers
+ @param outlen [in/out] The max size and resulting size of the DER encoded integers
+ @return CRYPT_OK if successful
+*/
int der_encode_integer(mp_int *num, unsigned char *out, unsigned long *outlen)
{
unsigned long tmplen, x, y, z;
int err, leading_zero;
- _ARGCHK(num != NULL);
- _ARGCHK(out != NULL);
- _ARGCHK(outlen != NULL);
+ LTC_ARGCHK(num != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
/* find out how big this will be */
if ((err = der_length_integer(num, &tmplen)) != CRYPT_OK) {
@@ -91,3 +105,5 @@ int der_encode_integer(mp_int *num, unsigned char *out, unsigned long *outlen)
*outlen = tmplen;
return CRYPT_OK;
}
+
+#endif
diff --git a/der_get_multi_integer.c b/src/pk/asn1/der/der_get_multi_integer.c
similarity index 65%
rename from der_get_multi_integer.c
rename to src/pk/asn1/der/der_get_multi_integer.c
index d2b83c51..75ae0bc7 100644
--- a/der_get_multi_integer.c
+++ b/src/pk/asn1/der/der_get_multi_integer.c
@@ -6,15 +6,31 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
#include <stdarg.h>
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file der_get_multi_integer.c
+ ASN.1 DER, read multiple integers, Tom St Denis
+*/
+
+
+#ifdef LTC_DER
/* will read multiple DER INTEGER encoded mp_ints from src
* of upto [inlen] bytes. It will store the number of bytes
* read back into [inlen].
*/
+/**
+ Read multiple mp_int integers one after another
+ @param src The DER encoded integers
+ @param inlen [in] The length of the src buffer, [out] the amount of bytes read
+ @param num The first mp_int to decode
+ @param ... A NULL terminated list of mp_ints to decode
+ @return CRYPT_OK if successful
+*/
int der_get_multi_integer(const unsigned char *src, unsigned long *inlen,
mp_int *num, ...)
{
@@ -23,8 +39,8 @@ int der_get_multi_integer(const unsigned char *src, unsigned long *inlen,
unsigned long wrote, len;
int err;
- _ARGCHK(src != NULL);
- _ARGCHK(inlen != NULL);
+ LTC_ARGCHK(src != NULL);
+ LTC_ARGCHK(inlen != NULL);
/* setup va list */
next = num;
@@ -48,3 +64,4 @@ int der_get_multi_integer(const unsigned char *src, unsigned long *inlen,
return CRYPT_OK;
}
+#endif
diff --git a/der_length_integer.c b/src/pk/asn1/der/der_length_integer.c
similarity index 68%
rename from der_length_integer.c
rename to src/pk/asn1/der/der_length_integer.c
index 5291f827..f86738ad 100644
--- a/der_length_integer.c
+++ b/src/pk/asn1/der/der_length_integer.c
@@ -6,20 +6,30 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
-#include "mycrypt.h"
+/**
+ @file der_length_integer.c
+ ASN.1 DER, get length of encoding, Tom St Denis
+*/
-/* Gets length of DER encoding of num */
+#ifdef LTC_DER
+/**
+ Gets length of DER encoding of num
+ @param num The mp_int to get the size of
+ @param outlen [out] The length of the DER encoding for the given integer
+ @return CRYPT_OK if successful
+*/
int der_length_integer(mp_int *num, unsigned long *outlen)
{
unsigned long z, len;
int leading_zero;
- _ARGCHK(num != NULL);
- _ARGCHK(outlen != NULL);
+ LTC_ARGCHK(num != NULL);
+ LTC_ARGCHK(outlen != NULL);
/* we only need a leading zero if the msb of the first byte is one */
if ((mp_count_bits(num) & 7) == 7 || mp_iszero(num) == MP_YES) {
@@ -52,3 +62,4 @@ int der_length_integer(mp_int *num, unsigned long *outlen)
return CRYPT_OK;
}
+#endif
diff --git a/der_put_multi_integer.c b/src/pk/asn1/der/der_put_multi_integer.c
similarity index 52%
rename from der_put_multi_integer.c
rename to src/pk/asn1/der/der_put_multi_integer.c
index e166e0bc..af2ca888 100644
--- a/der_put_multi_integer.c
+++ b/src/pk/asn1/der/der_put_multi_integer.c
@@ -6,16 +6,32 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
#include <stdarg.h>
-#include "mycrypt.h"
+#include "tomcrypt.h"
-/* store multiple mp_ints in DER INTEGER format to the dst, will not
+/**
+ @file der_put_multi_integer.c
+ ASN.1 DER, store multiple integers, Tom St Denis
+*/
+
+
+#ifdef LTC_DER
+
+/* store multiple mp_ints in DER INTEGER format to the out, will not
* overflow the length you give it [outlen] and store the number of
* bytes used in [outlen]
*/
-int der_put_multi_integer(unsigned char *dst, unsigned long *outlen,
+/**
+ Store multiple mp_int integers one after another
+ @param out [out] The destination for the DER encoded integers
+ @param outlen [in/out] The max size and resulting size of the DER encoded integers
+ @param num The first mp_int to encode
+ @param ... A NULL terminated list of mp_ints to encode
+ @return CRYPT_OK if successful
+*/
+int der_put_multi_integer(unsigned char *out, unsigned long *outlen,
mp_int *num, ...)
{
va_list args;
@@ -23,8 +39,8 @@ int der_put_multi_integer(unsigned char *dst, unsigned long *outlen,
unsigned long wrote, len;
int err;
- _ARGCHK(dst != NULL);
- _ARGCHK(outlen != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
/* setup va list */
next = num;
@@ -33,12 +49,12 @@ int der_put_multi_integer(unsigned char *dst, unsigned long *outlen,
va_start(args, num);
while (next != NULL) {
- if ((err = der_encode_integer(next, dst, outlen)) != CRYPT_OK) {
+ if ((err = der_encode_integer(next, out, outlen)) != CRYPT_OK) {
va_end(args);
return err;
}
wrote += *outlen;
- dst += *outlen;
+ out += *outlen;
len -= *outlen;
*outlen = len;
next = va_arg(args, mp_int*);
@@ -47,3 +63,5 @@ int der_put_multi_integer(unsigned char *dst, unsigned long *outlen,
*outlen = wrote;
return CRYPT_OK;
}
+
+#endif
diff --git a/dh.c b/src/pk/dh/dh.c
similarity index 83%
rename from dh.c
rename to src/pk/dh/dh.c
index f2defb0c..c2085a6a 100644
--- a/dh.c
+++ b/src/pk/dh/dh.c
@@ -6,13 +6,18 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+/**
+ @file dh.c
+ DH crypto, Tom St Denis
+*/
+
#ifdef MDH
-/* max export size we'll encounter (smaller than this but lets round up a bit */
+/* max export size we'll encounter (smaller than this but lets round up a bit) */
#define DH_BUF_SIZE 1200
/* This holds the key settings. ***MUST*** be organized by size from smallest to largest. */
@@ -157,6 +162,10 @@ static int is_valid_idx(int n)
return 1;
}
+/**
+ Test the DH sub-system (can take a while)
+ @return CRYPT_OK if successful
+*/
int dh_test(void)
{
mp_int p, g, tmp;
@@ -204,11 +213,16 @@ done:
return err;
}
+/**
+ Get the min and max DH key sizes (octets)
+ @param low [out] The smallest key size supported
+ @param high [out] The largest key size supported
+*/
void dh_sizes(int *low, int *high)
{
int x;
- _ARGCHK(low != NULL);
- _ARGCHK(high != NULL);
+ LTC_ARGCHK(low != NULL);
+ LTC_ARGCHK(high != NULL);
*low = INT_MAX;
*high = 0;
for (x = 0; sets[x].size != 0; x++) {
@@ -217,9 +231,14 @@ void dh_sizes(int *low, int *high)
}
}
+/**
+ Returns the key size of a given DH key (octets)
+ @param key The DH key to get the size of
+ @return The size if valid or INT_MAX if not
+*/
int dh_get_size(dh_key *key)
{
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(key != NULL);
if (is_valid_idx(key->idx) == 1) {
return sets[key->idx].size;
} else {
@@ -227,6 +246,14 @@ int dh_get_size(dh_key *key)
}
}
+/**
+ Make a DH key [private key pair]
+ @param prng An active PRNG state
+ @param wprng The index for the PRNG you desire to use
+ @param keysize The key size (octets) desired
+ @param key [out] Where the newly created DH key will be stored
+ @return CRYPT_OK if successful, note: on error all allocated memory will be freed automatically.
+*/
int dh_make_key(prng_state *prng, int wprng, int keysize, dh_key *key)
{
unsigned char *buf;
@@ -234,7 +261,7 @@ int dh_make_key(prng_state *prng, int wprng, int keysize, dh_key *key)
mp_int p, g;
int err;
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(key != NULL);
/* good prng? */
if ((err = prng_is_valid(wprng)) != CRYPT_OK) {
@@ -289,7 +316,7 @@ error:
error2:
mp_clear_multi(&key->x, &key->y, NULL);
done:
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(buf, keysize);
#endif
mp_clear_multi(&p, &g, NULL);
@@ -297,20 +324,32 @@ done:
return err;
}
+/**
+ Free the allocated ram for a DH key
+ @param key The key which you wish to free
+*/
void dh_free(dh_key *key)
{
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(key != NULL);
mp_clear_multi(&key->x, &key->y, NULL);
}
+/**
+ Export a DH key to a binary packet
+ @param out [out] The destination for the key
+ @param outlen [in/out] The max size and resulting size of the DH key
+ @param type Which type of key (PK_PRIVATE or PK_PUBLIC)
+ @param key The key you wish to export
+ @return CRYPT_OK if successful
+*/
int dh_export(unsigned char *out, unsigned long *outlen, int type, dh_key *key)
{
unsigned long y, z;
int err;
- _ARGCHK(out != NULL);
- _ARGCHK(outlen != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+ LTC_ARGCHK(key != NULL);
/* can we store the static header? */
if (*outlen < (PACKET_SIZE + 2)) {
@@ -344,13 +383,20 @@ int dh_export(unsigned char *out, unsigned long *outlen, int type, dh_key *key)
return CRYPT_OK;
}
+/**
+ Import a DH key from a binary packet
+ @param in The packet to read
+ @param inlen The length of the input packet
+ @param key [out] Where to import the key to
+ @return CRYPT_OK if successful, on error all allocated memory is freed automatically
+*/
int dh_import(const unsigned char *in, unsigned long inlen, dh_key *key)
{
unsigned long x, y, s;
int err;
- _ARGCHK(in != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(key != NULL);
/* make sure valid length */
if ((2+PACKET_SIZE) > inlen) {
@@ -413,6 +459,14 @@ error:
return err;
}
+/**
+ Create a DH shared secret.
+ @param private_key The private DH key in the pair
+ @param public_key The public DH key in the pair
+ @param out [out] The destination of the shared data
+ @param outlen [in/out] The max size and resulting size of the shared data.
+ @return CRYPT_OK if successful
+*/
int dh_shared_secret(dh_key *private_key, dh_key *public_key,
unsigned char *out, unsigned long *outlen)
{
@@ -420,10 +474,10 @@ int dh_shared_secret(dh_key *private_key, dh_key *public_key,
unsigned long x;
int err;
- _ARGCHK(private_key != NULL);
- _ARGCHK(public_key != NULL);
- _ARGCHK(out != NULL);
- _ARGCHK(outlen != NULL);
+ LTC_ARGCHK(private_key != NULL);
+ LTC_ARGCHK(public_key != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
/* types valid? */
if (private_key->type != PK_PRIVATE) {
diff --git a/dh_sys.c b/src/pk/dh/dh_sys.c
similarity index 73%
rename from dh_sys.c
rename to src/pk/dh/dh_sys.c
index e0439c37..801f85ac 100644
--- a/dh_sys.c
+++ b/src/pk/dh/dh_sys.c
@@ -6,22 +6,40 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-int dh_encrypt_key(const unsigned char *inkey, unsigned long keylen,
- unsigned char *out, unsigned long *len,
+
+/**
+ @file dh_sys.c
+ DH Crypto, Tom St Denis
+*/
+
+/**
+ Encrypt a short symmetric key with a public DH key
+ @param in The symmetric key to encrypt
+ @param inlen The length of the key (octets)
+ @param out [out] The ciphertext
+ @param outlen [in/out] The max size and resulting size of the ciphertext
+ @param prng An active PRNG state
+ @param wprng The index of the PRNG desired
+ @param hash The index of the hash desired (must produce a digest of size >= the size of the plaintext)
+ @param key The public key you wish to encrypt with.
+ @return CRYPT_OK if successful
+*/
+int dh_encrypt_key(const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen,
prng_state *prng, int wprng, int hash,
dh_key *key)
{
unsigned char *pub_expt, *dh_shared, *skey;
- dh_key pubkey;
+ dh_key pubkey;
unsigned long x, y, z, hashsize, pubkeysize;
- int err;
+ int err;
- _ARGCHK(inkey != NULL);
- _ARGCHK(out != NULL);
- _ARGCHK(len != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+ LTC_ARGCHK(key != NULL);
/* check that wprng/hash are not invalid */
if ((err = prng_is_valid(wprng)) != CRYPT_OK) {
@@ -32,7 +50,7 @@ int dh_encrypt_key(const unsigned char *inkey, unsigned long keylen,
return err;
}
- if (keylen > hash_descriptor[hash].hashsize) {
+ if (inlen > hash_descriptor[hash].hashsize) {
return CRYPT_INVALID_HASH;
}
@@ -55,20 +73,20 @@ int dh_encrypt_key(const unsigned char *inkey, unsigned long keylen,
/* make a random key and export the public copy */
if ((err = dh_make_key(prng, wprng, dh_get_size(key), &pubkey)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
pubkeysize = DH_BUF_SIZE;
if ((err = dh_export(pub_expt, &pubkeysize, PK_PUBLIC, &pubkey)) != CRYPT_OK) {
dh_free(&pubkey);
- goto __ERR;
+ goto LBL_ERR;
}
/* now check if the out buffer is big enough */
- if (*len < (1 + 4 + 4 + PACKET_SIZE + pubkeysize + keylen)) {
+ if (*outlen < (1 + 4 + 4 + PACKET_SIZE + pubkeysize + inlen)) {
dh_free(&pubkey);
err = CRYPT_BUFFER_OVERFLOW;
- goto __ERR;
+ goto LBL_ERR;
}
/* make random key */
@@ -77,13 +95,13 @@ int dh_encrypt_key(const unsigned char *inkey, unsigned long keylen,
x = DH_BUF_SIZE;
if ((err = dh_shared_secret(&pubkey, key, dh_shared, &x)) != CRYPT_OK) {
dh_free(&pubkey);
- goto __ERR;
+ goto LBL_ERR;
}
dh_free(&pubkey);
z = MAXBLOCKSIZE;
if ((err = hash_memory(hash, dh_shared, x, skey, &z)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* store header */
@@ -103,17 +121,17 @@ int dh_encrypt_key(const unsigned char *inkey, unsigned long keylen,
}
/* Store the encrypted key */
- STORE32L(keylen, out+y);
+ STORE32L(inlen, out+y);
y += 4;
- for (x = 0; x < keylen; x++, y++) {
- out[y] = skey[x] ^ inkey[x];
+ for (x = 0; x < inlen; x++, y++) {
+ out[y] = skey[x] ^ in[x];
}
- *len = y;
+ *outlen = y;
err = CRYPT_OK;
-__ERR:
-#ifdef CLEAN_STACK
+LBL_ERR:
+#ifdef LTC_CLEAN_STACK
/* clean up */
zeromem(pub_expt, DH_BUF_SIZE);
zeromem(dh_shared, DH_BUF_SIZE);
@@ -126,19 +144,28 @@ __ERR:
return err;
}
+/**
+ Decrypt a DH encrypted symmetric key
+ @param in The DH encrypted packet
+ @param inlen The length of the DH encrypted packet
+ @param out The plaintext
+ @param outlen [in/out] The max size and resulting size of the plaintext
+ @param key The private DH key corresponding to the public key that encrypted the plaintext
+ @return CRYPT_OK if successful
+*/
int dh_decrypt_key(const unsigned char *in, unsigned long inlen,
- unsigned char *outkey, unsigned long *keylen,
+ unsigned char *out, unsigned long *outlen,
dh_key *key)
{
unsigned char *shared_secret, *skey;
- unsigned long x, y, z,hashsize, keysize;
- int hash, err;
- dh_key pubkey;
+ unsigned long x, y, z, hashsize, keysize;
+ int hash, err;
+ dh_key pubkey;
- _ARGCHK(in != NULL);
- _ARGCHK(outkey != NULL);
- _ARGCHK(keylen != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+ LTC_ARGCHK(key != NULL);
/* right key type? */
if (key->type != PK_PRIVATE) {
@@ -161,14 +188,14 @@ int dh_decrypt_key(const unsigned char *in, unsigned long inlen,
/* check if initial header should fit */
if (inlen < PACKET_SIZE+1+4+4) {
err = CRYPT_INVALID_PACKET;
- goto __ERR;
+ goto LBL_ERR;
} else {
inlen -= PACKET_SIZE+1+4+4;
}
/* is header correct? */
if ((err = packet_valid_header((unsigned char *)in, PACKET_SECT_DH, PACKET_SUB_ENC_KEY)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* now lets get the hash name */
@@ -176,7 +203,7 @@ int dh_decrypt_key(const unsigned char *in, unsigned long inlen,
hash = find_hash_id(in[y++]);
if (hash == -1) {
err = CRYPT_INVALID_HASH;
- goto __ERR;
+ goto LBL_ERR;
}
/* common values */
@@ -188,14 +215,14 @@ int dh_decrypt_key(const unsigned char *in, unsigned long inlen,
/* now check if the imported key will fit */
if (inlen < x) {
err = CRYPT_INVALID_PACKET;
- goto __ERR;
+ goto LBL_ERR;
} else {
inlen -= x;
}
y += 4;
if ((err = dh_import(in+y, x, &pubkey)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
y += x;
@@ -203,41 +230,41 @@ int dh_decrypt_key(const unsigned char *in, unsigned long inlen,
x = DH_BUF_SIZE;
if ((err = dh_shared_secret(key, &pubkey, shared_secret, &x)) != CRYPT_OK) {
dh_free(&pubkey);
- goto __ERR;
+ goto LBL_ERR;
}
dh_free(&pubkey);
z = MAXBLOCKSIZE;
if ((err = hash_memory(hash, shared_secret, x, skey, &z)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* load in the encrypted key */
LOAD32L(keysize, in+y);
- /* will the outkey fit as part of the input */
+ /* will the out fit as part of the input */
if (inlen < keysize) {
err = CRYPT_INVALID_PACKET;
- goto __ERR;
+ goto LBL_ERR;
} else {
inlen -= keysize;
}
- if (keysize > *keylen) {
+ if (keysize > *outlen) {
err = CRYPT_BUFFER_OVERFLOW;
- goto __ERR;
+ goto LBL_ERR;
}
y += 4;
- *keylen = keysize;
+ *outlen = keysize;
for (x = 0; x < keysize; x++, y++) {
- outkey[x] = skey[x] ^ in[y];
+ out[x] = skey[x] ^ in[y];
}
err = CRYPT_OK;
-__ERR:
-#ifdef CLEAN_STACK
+LBL_ERR:
+#ifdef LTC_CLEAN_STACK
zeromem(shared_secret, DH_BUF_SIZE);
zeromem(skey, MAXBLOCKSIZE);
#endif
@@ -266,19 +293,31 @@ __ERR:
2. Compare against g^M mod p [based on input hash].
3. If result of #2 == result of #1 then signature valid
*/
+
+/**
+ Sign a message digest using a DH private key
+ @param in The data to sign
+ @param inlen The length of the input (octets)
+ @param out [out] The destination of the signature
+ @param outlen [in/out] The max size and resulting size of the output
+ @param prng An active PRNG state
+ @param wprng The index of the PRNG desired
+ @param key A private DH key
+ @return CRYPT_OK if successful
+*/
int dh_sign_hash(const unsigned char *in, unsigned long inlen,
unsigned char *out, unsigned long *outlen,
prng_state *prng, int wprng, dh_key *key)
{
- mp_int a, b, k, m, g, p, p1, tmp;
+ mp_int a, b, k, m, g, p, p1, tmp;
unsigned char *buf;
- unsigned long x, y;
- int err;
+ unsigned long x, y;
+ int err;
- _ARGCHK(in != NULL);
- _ARGCHK(out != NULL);
- _ARGCHK(outlen != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+ LTC_ARGCHK(key != NULL);
/* check parameters */
if (key->type != PK_PRIVATE) {
@@ -304,22 +343,18 @@ int dh_sign_hash(const unsigned char *in, unsigned long inlen,
if (prng_descriptor[wprng].read(buf, sets[key->idx].size, prng) !=
(unsigned long)(sets[key->idx].size)) {
err = CRYPT_ERROR_READPRNG;
- goto __ERR;
+ goto LBL_ERR;
}
/* init bignums */
if ((err = mp_init_multi(&a, &b, &k, &m, &p, &g, &p1, &tmp, NULL)) != MP_OKAY) {
err = mpi_to_ltc_error(err);
- goto __ERR;
+ goto LBL_ERR;
}
/* load k and m */
if ((err = mp_read_unsigned_bin(&m, (unsigned char *)in, inlen)) != MP_OKAY) { goto error; }
-#ifdef FAST_PK
- if ((err = mp_read_unsigned_bin(&k, buf, MIN(32,sets[key->idx].size))) != MP_OKAY) { goto error; }
-#else
if ((err = mp_read_unsigned_bin(&k, buf, sets[key->idx].size)) != MP_OKAY) { goto error; }
-#endif
/* load g, p and p1 */
if ((err = mp_read_radix(&g, sets[key->idx].base, 64)) != MP_OKAY) { goto error; }
@@ -339,7 +374,7 @@ int dh_sign_hash(const unsigned char *in, unsigned long inlen,
/* check for overflow */
if ((unsigned long)(PACKET_SIZE + 4 + 4 + mp_unsigned_bin_size(&a) + mp_unsigned_bin_size(&b)) > *outlen) {
err = CRYPT_BUFFER_OVERFLOW;
- goto __ERR;
+ goto LBL_ERR;
}
/* store header */
@@ -359,7 +394,7 @@ int dh_sign_hash(const unsigned char *in, unsigned long inlen,
/* check if size too big */
if (*outlen < y) {
err = CRYPT_BUFFER_OVERFLOW;
- goto __ERR;
+ goto LBL_ERR;
}
/* store header */
@@ -367,10 +402,10 @@ int dh_sign_hash(const unsigned char *in, unsigned long inlen,
*outlen = y;
err = CRYPT_OK;
- goto __ERR;
+ goto LBL_ERR;
error:
err = mpi_to_ltc_error(err);
-__ERR:
+LBL_ERR:
mp_clear_multi(&tmp, &p1, &g, &p, &m, &k, &b, &a, NULL);
XFREE(buf);
@@ -379,19 +414,28 @@ __ERR:
}
-/* verify the signature in sig of the given hash */
+/**
+ Verify the signature given
+ @param sig The signature
+ @param siglen The length of the signature (octets)
+ @param hash The hash that was signed
+ @param hashlen The length of the hash (octets)
+ @param stat [out] Result of signature comparison, 1==valid, 0==invalid
+ @param key The public DH key that signed the hash
+ @return CRYPT_OK if succsessful (even if signature is invalid)
+*/
int dh_verify_hash(const unsigned char *sig, unsigned long siglen,
const unsigned char *hash, unsigned long hashlen,
int *stat, dh_key *key)
{
- mp_int a, b, p, g, m, tmp;
+ mp_int a, b, p, g, m, tmp;
unsigned long x, y;
- int err;
+ int err;
- _ARGCHK(sig != NULL);
- _ARGCHK(hash != NULL);
- _ARGCHK(stat != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(sig != NULL);
+ LTC_ARGCHK(hash != NULL);
+ LTC_ARGCHK(stat != NULL);
+ LTC_ARGCHK(key != NULL);
/* default to invalid */
*stat = 0;
diff --git a/dsa_export.c b/src/pk/dsa/dsa_export.c
similarity index 69%
rename from dsa_export.c
rename to src/pk/dsa/dsa_export.c
index 995b1cf4..773023ea 100644
--- a/dsa_export.c
+++ b/src/pk/dsa/dsa_export.c
@@ -6,20 +6,33 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file dsa_export.c
+ DSA implementation, export key, Tom St Denis
+*/
#ifdef MDSA
+/**
+ Export a DSA key to a binary packet
+ @param out [out] Where to store the packet
+ @param outlen [in/out] The max size and resulting size of the packet
+ @param type The type of key to export (PK_PRIVATE or PK_PUBLIC)
+ @param key The key to export
+ @return CRYPT_OK if successful
+*/
int dsa_export(unsigned char *out, unsigned long *outlen, int type, dsa_key *key)
{
unsigned long y, z;
int err;
- _ARGCHK(out != NULL);
- _ARGCHK(outlen != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+ LTC_ARGCHK(key != NULL);
/* can we store the static header? */
if (*outlen < (PACKET_SIZE + 1 + 2)) {
diff --git a/dsa_free.c b/src/pk/dsa/dsa_free.c
similarity index 60%
rename from dsa_free.c
rename to src/pk/dsa/dsa_free.c
index c4519518..862a2dd5 100644
--- a/dsa_free.c
+++ b/src/pk/dsa/dsa_free.c
@@ -6,15 +6,24 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file dsa_free.c
+ DSA implementation, free a DSA key, Tom St Denis
+*/
#ifdef MDSA
+/**
+ Free a DSA key
+ @param key The key to free from memory
+*/
void dsa_free(dsa_key *key)
{
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(key != NULL);
mp_clear_multi(&key->g, &key->q, &key->p, &key->x, &key->y, NULL);
}
diff --git a/dsa_import.c b/src/pk/dsa/dsa_import.c
similarity index 71%
rename from dsa_import.c
rename to src/pk/dsa/dsa_import.c
index 429876d1..6de56e3c 100644
--- a/dsa_import.c
+++ b/src/pk/dsa/dsa_import.c
@@ -6,19 +6,31 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file dsa_import.c
+ DSA implementation, import a DSA key, Tom St Denis
+*/
#ifdef MDSA
+/**
+ Import a DSA key
+ @param in The binary packet to import from
+ @param inlen The length of the binary packet
+ @param key [out] Where to store the imported key
+ @return CRYPT_OK if successful, upon error this function will free all allocated memory
+*/
int dsa_import(const unsigned char *in, unsigned long inlen, dsa_key *key)
{
unsigned long x, y;
- int err;
+ int err;
- _ARGCHK(in != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(key != NULL);
/* check length */
if ((1+2+PACKET_SIZE) > inlen) {
diff --git a/dsa_make_key.c b/src/pk/dsa/dsa_make_key.c
similarity index 84%
rename from dsa_make_key.c
rename to src/pk/dsa/dsa_make_key.c
index 09953a27..60683a0c 100644
--- a/dsa_make_key.c
+++ b/src/pk/dsa/dsa_make_key.c
@@ -6,19 +6,33 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file dsa_make_key.c
+ DSA implementation, generate a DSA key, Tom St Denis
+*/
#ifdef MDSA
+/**
+ Create a DSA key
+ @param prng An active PRNG state
+ @param wprng The index of the PRNG desired
+ @param group_size Size of the multiplicative group (octets)
+ @param modulus_size Size of the modulus (octets)
+ @param key [out] Where to store the created key
+ @return CRYPT_OK if successful, upon error this function will free all allocated memory
+*/
int dsa_make_key(prng_state *prng, int wprng, int group_size, int modulus_size, dsa_key *key)
{
mp_int tmp, tmp2;
int err, res;
unsigned char *buf;
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(key != NULL);
/* check prng */
if ((err = prng_is_valid(wprng)) != CRYPT_OK) {
@@ -40,11 +54,11 @@ int dsa_make_key(prng_state *prng, int wprng, int group_size, int modulus_size,
/* init mp_ints */
if ((err = mp_init_multi(&tmp, &tmp2, &key->g, &key->q, &key->p, &key->x, &key->y, NULL)) != MP_OKAY) {
err = mpi_to_ltc_error(err);
- goto __ERR;
+ goto LBL_ERR;
}
/* make our prime q */
- if ((err = rand_prime(&key->q, group_size*8, prng, wprng)) != CRYPT_OK) { goto __ERR; }
+ if ((err = rand_prime(&key->q, group_size*8, prng, wprng)) != CRYPT_OK) { goto LBL_ERR; }
/* double q */
if ((err = mp_mul_2(&key->q, &tmp)) != MP_OKAY) { goto error; }
@@ -52,7 +66,7 @@ int dsa_make_key(prng_state *prng, int wprng, int group_size, int modulus_size,
/* now make a random string and multply it against q */
if (prng_descriptor[wprng].read(buf+1, modulus_size - group_size, prng) != (unsigned long)(modulus_size - group_size)) {
err = CRYPT_ERROR_READPRNG;
- goto __ERR;
+ goto LBL_ERR;
}
/* force magnitude */
@@ -67,7 +81,7 @@ int dsa_make_key(prng_state *prng, int wprng, int group_size, int modulus_size,
/* now loop until p is prime */
for (;;) {
- if ((err = is_prime(&key->p, &res)) != CRYPT_OK) { goto __ERR; }
+ if ((err = is_prime(&key->p, &res)) != CRYPT_OK) { goto LBL_ERR; }
if (res == MP_YES) break;
/* add 2q to p and 2 to tmp2 */
@@ -92,7 +106,7 @@ int dsa_make_key(prng_state *prng, int wprng, int group_size, int modulus_size,
do {
if (prng_descriptor[wprng].read(buf, group_size, prng) != (unsigned long)group_size) {
err = CRYPT_ERROR_READPRNG;
- goto __ERR;
+ goto LBL_ERR;
}
if ((err = mp_read_unsigned_bin(&key->x, buf, group_size)) != MP_OKAY) { goto error; }
} while (mp_cmp_d(&key->x, 1) != MP_GT);
@@ -108,7 +122,7 @@ int dsa_make_key(prng_state *prng, int wprng, int group_size, int modulus_size,
if ((err = mp_shrink(&key->x)) != MP_OKAY) { goto error; }
if ((err = mp_shrink(&key->y)) != MP_OKAY) { goto error; }
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(buf, MDSA_DELTA);
#endif
@@ -116,7 +130,7 @@ int dsa_make_key(prng_state *prng, int wprng, int group_size, int modulus_size,
goto done;
error:
err = mpi_to_ltc_error(err);
-__ERR:
+LBL_ERR:
mp_clear_multi(&key->g, &key->q, &key->p, &key->x, &key->y, NULL);
done:
mp_clear_multi(&tmp, &tmp2, NULL);
diff --git a/dsa_sign_hash.c b/src/pk/dsa/dsa_sign_hash.c
similarity index 71%
rename from dsa_sign_hash.c
rename to src/pk/dsa/dsa_sign_hash.c
index c790f24d..da92a825 100644
--- a/dsa_sign_hash.c
+++ b/src/pk/dsa/dsa_sign_hash.c
@@ -6,25 +6,41 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file dsa_sign_hash.c
+ DSA implementation, sign a hash, Tom St Denis
+*/
#ifdef MDSA
+/**
+ Sign a hash with DSA
+ @param in The hash to sign
+ @param inlen The length of the hash to sign
+ @param out [out] Where to store the signature
+ @param outlen [in/out] The max size and resulting size of the signature
+ @param prng An active PRNG state
+ @param wprng The index of the PRNG desired
+ @param key A private DSA key
+ @return CRYPT_OK if successful
+*/
int dsa_sign_hash(const unsigned char *in, unsigned long inlen,
unsigned char *out, unsigned long *outlen,
prng_state *prng, int wprng, dsa_key *key)
{
mp_int k, kinv, tmp, r, s;
unsigned char *buf;
- int err, y;
- unsigned long len;
+ int err;
+ unsigned long out1, out2;
- _ARGCHK(in != NULL);
- _ARGCHK(out != NULL);
- _ARGCHK(outlen != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+ LTC_ARGCHK(key != NULL);
if ((err = prng_is_valid(wprng)) != CRYPT_OK) {
return err;
@@ -52,7 +68,7 @@ retry:
/* gen random k */
if (prng_descriptor[wprng].read(buf, key->qord, prng) != (unsigned long)key->qord) {
err = CRYPT_ERROR_READPRNG;
- goto __ERR;
+ goto LBL_ERR;
}
/* read k */
@@ -85,44 +101,22 @@ retry:
/* now store em both */
/* first check that we have enough room */
- if (*outlen < (unsigned long)(PACKET_SIZE + 4 + mp_unsigned_bin_size(&s) + mp_unsigned_bin_size(&r))) {
+ if ((err = der_length_integer(&s, &out1)) != CRYPT_OK) { goto LBL_ERR; }
+ if ((err = der_length_integer(&r, &out2)) != CRYPT_OK) { goto LBL_ERR; }
+ if (*outlen < (out1+out2)) {
err = CRYPT_BUFFER_OVERFLOW;
- goto __ERR;
+ goto LBL_ERR;
}
- /* packet header */
- packet_store_header(out, PACKET_SECT_DSA, PACKET_SUB_SIGNED);
- y = PACKET_SIZE;
-
- /* store length of r */
- len = mp_unsigned_bin_size(&r);
- out[y++] = (len>>8)&255;
- out[y++] = len&255;
-
- /* store r */
- if ((err = mp_to_unsigned_bin(&r, out+y)) != MP_OKAY) { goto error; }
- y += len;
-
- /* store length of s */
- len = mp_unsigned_bin_size(&s);
- out[y++] = (len>>8)&255;
- out[y++] = len&255;
-
- /* store s */
- if ((err = mp_to_unsigned_bin(&s, out+y)) != MP_OKAY) { goto error; }
- y += len;
-
- /* reset size */
- *outlen = y;
-
- err = CRYPT_OK;
- goto __ERR;
+ /* store ints */
+ err = der_put_multi_integer(out, outlen, &r, &s, NULL);
+ goto LBL_ERR;
error:
err = mpi_to_ltc_error(err);
-__ERR:
+LBL_ERR:
mp_clear_multi(&k, &kinv, &r, &s, &tmp, NULL);
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(buf, MDSA_MAX_GROUP);
#endif
XFREE(buf);
diff --git a/dsa_verify_hash.c b/src/pk/dsa/dsa_verify_hash.c
similarity index 60%
rename from dsa_verify_hash.c
rename to src/pk/dsa/dsa_verify_hash.c
index 745cd7cf..140f0e20 100644
--- a/dsa_verify_hash.c
+++ b/src/pk/dsa/dsa_verify_hash.c
@@ -6,69 +6,62 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file dsa_verify_hash.c
+ DSA implementation, verify a signature, Tom St Denis
+*/
+
#ifdef MDSA
+/**
+ Verify a DSA signature
+ @param sig The signature
+ @param siglen The length of the signature (octets)
+ @param hash The hash that was signed
+ @param hashlen The length of the hash that was signed
+ @param stat [out] The result of the signature verification, 1==valid, 0==invalid
+ @param key The corresponding public DH key
+ @return CRYPT_OK if successful (even if the signature is invalid)
+*/
int dsa_verify_hash(const unsigned char *sig, unsigned long siglen,
- const unsigned char *hash, unsigned long inlen,
+ const unsigned char *hash, unsigned long hashlen,
int *stat, dsa_key *key)
{
- mp_int r, s, w, v, u1, u2;
- unsigned long x, y;
- int err;
+ mp_int r, s, w, v, u1, u2;
+ int err;
- _ARGCHK(sig != NULL);
- _ARGCHK(hash != NULL);
- _ARGCHK(stat != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(sig != NULL);
+ LTC_ARGCHK(hash != NULL);
+ LTC_ARGCHK(stat != NULL);
+ LTC_ARGCHK(key != NULL);
/* default to invalid signature */
*stat = 0;
- if (siglen < PACKET_SIZE+2+2) {
- return CRYPT_INVALID_PACKET;
- }
-
- /* is the message format correct? */
- if ((err = packet_valid_header((unsigned char *)sig, PACKET_SECT_DSA, PACKET_SUB_SIGNED)) != CRYPT_OK) {
- return err;
- }
-
- /* skip over header */
- y = PACKET_SIZE;
-
/* init our variables */
if ((err = mp_init_multi(&r, &s, &w, &v, &u1, &u2, NULL)) != MP_OKAY) {
return mpi_to_ltc_error(err);
}
/* read in r followed by s */
- x = ((unsigned)sig[y]<<8)|((unsigned)sig[y+1]);
- y += 2;
- if (y + x > siglen) {
- err = CRYPT_INVALID_PACKET;
- goto done;
- }
- if ((err = mp_read_unsigned_bin(&r, (unsigned char *)sig+y, x)) != MP_OKAY) { goto error; }
- y += x;
+ if ((err = der_get_multi_integer(sig, &siglen, &r, &s, NULL)) != CRYPT_OK) { goto done; }
- /* load s */
- x = ((unsigned)sig[y]<<8)|((unsigned)sig[y+1]);
- y += 2;
- if (y + x > siglen) {
+ /* neither r or s can be null */
+ if (mp_iszero(&r) == MP_YES || mp_iszero(&s) == MP_YES) {
err = CRYPT_INVALID_PACKET;
goto done;
}
- if ((err = mp_read_unsigned_bin(&s, (unsigned char *)sig+y, x)) != MP_OKAY) { goto error; }
-
+
/* w = 1/s mod q */
if ((err = mp_invmod(&s, &key->q, &w)) != MP_OKAY) { goto error; }
/* u1 = m * w mod q */
- if ((err = mp_read_unsigned_bin(&u1, (unsigned char *)hash, inlen)) != MP_OKAY) { goto error; }
+ if ((err = mp_read_unsigned_bin(&u1, (unsigned char *)hash, hashlen)) != MP_OKAY) { goto error; }
if ((err = mp_mulmod(&u1, &w, &key->q, &u1)) != MP_OKAY) { goto error; }
/* u2 = r*w mod q */
diff --git a/dsa_verify_key.c b/src/pk/dsa/dsa_verify_key.c
similarity index 82%
rename from dsa_verify_key.c
rename to src/pk/dsa/dsa_verify_key.c
index c17bab89..3e842614 100644
--- a/dsa_verify_key.c
+++ b/src/pk/dsa/dsa_verify_key.c
@@ -6,20 +6,32 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file dsa_verify_key.c
+ DSA implementation, verify a key, Tom St Denis
+*/
#ifdef MDSA
+/**
+ Verify a DSA key for validity
+ @param key The key to verify
+ @param stat [out] Result of test, 1==valid, 0==invalid
+ @return CRYPT_OK if successful
+*/
int dsa_verify_key(dsa_key *key, int *stat)
{
mp_int tmp, tmp2;
- int res, err;
+ int res, err;
- _ARGCHK(key != NULL);
- _ARGCHK(stat != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(stat != NULL);
+ /* default to an invalid key */
*stat = 0;
/* first make sure key->q and key->p are prime */
diff --git a/ecc.c b/src/pk/ecc/ecc.c
similarity index 57%
rename from ecc.c
rename to src/pk/ecc/ecc.c
index 2c50a5fe..b5e088b0 100644
--- a/ecc.c
+++ b/src/pk/ecc/ecc.c
@@ -6,7 +6,7 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
/* Implements ECC over Z/pZ for curve y^2 = x^3 - 3x + b
@@ -14,8 +14,12 @@
* All curves taken from NIST recommendation paper of July 1999
* Available at http://csrc.nist.gov/cryptval/dss.htm
*/
+#include "tomcrypt.h"
-#include "mycrypt.h"
+/**
+ @file ecc.c
+ ECC Crypto, Tom St Denis
+*/
#ifdef MECC
@@ -243,7 +247,7 @@ static ecc_point *new_point(void)
if (p == NULL) {
return NULL;
}
- if (mp_init_multi(&p->x, &p->y, NULL) != MP_OKAY) {
+ if (mp_init_multi(&p->x, &p->y, &p->z, NULL) != MP_OKAY) {
XFREE(p);
return NULL;
}
@@ -254,113 +258,294 @@ static void del_point(ecc_point *p)
{
/* prevents free'ing null arguments */
if (p != NULL) {
- mp_clear_multi(&p->x, &p->y, NULL);
+ mp_clear_multi(&p->x, &p->y, &p->z, NULL);
XFREE(p);
}
}
+static int ecc_map(ecc_point *P, mp_int *modulus, mp_int *mu)
+{
+ mp_int t1, t2;
+ int err;
+
+ if ((err = mp_init_multi(&t1, &t2, NULL)) != CRYPT_OK) {
+ return CRYPT_MEM;
+ }
+
+ /* get 1/z */
+ if ((err = mp_invmod(&P->z, modulus, &t1)) != MP_OKAY) { goto error; }
+
+ /* get 1/z^2 and 1/z^3 */
+ if ((err = mp_sqr(&t1, &t2)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&t2, modulus, mu)) != MP_OKAY) { goto error; }
+ if ((err = mp_mul(&t1, &t2, &t1)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&t1, modulus, mu)) != MP_OKAY) { goto error; }
+
+ /* multiply against x/y */
+ if ((err = mp_mul(&P->x, &t2, &P->x)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&P->x, modulus, mu)) != MP_OKAY) { goto error; }
+ if ((err = mp_mul(&P->y, &t1, &P->y)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&P->y, modulus, mu)) != MP_OKAY) { goto error; }
+ mp_set(&P->z, 1);
+
+ err = CRYPT_OK;
+ goto done;
+error:
+ err = mpi_to_ltc_error(err);
+done:
+ mp_clear_multi(&t1, &t2, NULL);
+ return err;
+
+}
+
+
/* double a point R = 2P, R can be P*/
static int dbl_point(ecc_point *P, ecc_point *R, mp_int *modulus, mp_int *mu)
{
- mp_int s, tmp, tmpx;
+ mp_int t1, t2;
int err;
- if ((err = mp_init_multi(&s, &tmp, &tmpx, NULL)) != MP_OKAY) {
+ if ((err = mp_init_multi(&t1, &t2, NULL)) != MP_OKAY) {
return mpi_to_ltc_error(err);
}
- /* s = (3Xp^2 + a) / (2Yp) */
- if ((err = mp_mul_2(&P->y, &tmp)) != MP_OKAY) { goto error; } /* tmp = 2*y */
- if ((err = mp_invmod(&tmp, modulus, &tmp)) != MP_OKAY) { goto error; } /* tmp = 1/tmp mod modulus */
- if ((err = mp_sqr(&P->x, &s)) != MP_OKAY) { goto error; } /* s = x^2 */
- if ((err = mp_reduce(&s, modulus, mu)) != MP_OKAY) { goto error; }
- if ((err = mp_mul_d(&s,(mp_digit)3, &s)) != MP_OKAY) { goto error; } /* s = 3*(x^2) */
- if ((err = mp_sub_d(&s,(mp_digit)3, &s)) != MP_OKAY) { goto error; } /* s = 3*(x^2) - 3 */
- if (mp_cmp_d(&s, 0) == MP_LT) { /* if s < 0 add modulus */
- if ((err = mp_add(&s, modulus, &s)) != MP_OKAY) { goto error; }
+ if ((err = mp_copy(&P->x, &R->x)) != MP_OKAY) { goto error; }
+ if ((err = mp_copy(&P->y, &R->y)) != MP_OKAY) { goto error; }
+ if ((err = mp_copy(&P->z, &R->z)) != MP_OKAY) { goto error; }
+
+ /* t1 = Z * Z */
+ if ((err = mp_sqr(&R->z, &t1)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&t1, modulus, mu)) != MP_OKAY) { goto error; }
+ /* Z = Y * Z */
+ if ((err = mp_mul(&R->z, &R->y, &R->z)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&R->z, modulus, mu)) != MP_OKAY) { goto error; }
+ /* Z = 2Z */
+ if ((err = mp_mul_2(&R->z, &R->z)) != MP_OKAY) { goto error; }
+ if (mp_cmp(&R->z, modulus) != MP_LT) {
+ if ((err = mp_sub(&R->z, modulus, &R->z)) != MP_OKAY) { goto error; }
}
- if ((err = mp_mul(&s, &tmp, &s)) != MP_OKAY) { goto error; } /* s = tmp * s mod modulus */
- if ((err = mp_reduce(&s, modulus, mu)) != MP_OKAY) { goto error; }
- /* Xr = s^2 - 2Xp */
- if ((err = mp_sqr(&s, &tmpx)) != MP_OKAY) { goto error; } /* tmpx = s^2 */
- if ((err = mp_reduce(&tmpx, modulus, mu)) != MP_OKAY) { goto error; } /* tmpx = tmpx mod modulus */
- if ((err = mp_sub(&tmpx, &P->x, &tmpx)) != MP_OKAY) { goto error; } /* tmpx = tmpx - x */
- if ((err = mp_submod(&tmpx, &P->x, modulus, &tmpx)) != MP_OKAY) { goto error; } /* tmpx = tmpx - x mod modulus */
+ /* T2 = X - T1 */
+ if ((err = mp_sub(&R->x, &t1, &t2)) != MP_OKAY) { goto error; }
+ if (mp_cmp_d(&t2, 0) == MP_LT) {
+ if ((err = mp_add(&t2, modulus, &t2)) != MP_OKAY) { goto error; }
+ }
+ /* T1 = X + T1 */
+ if ((err = mp_add(&t1, &R->x, &t1)) != MP_OKAY) { goto error; }
+ if (mp_cmp(&t1, modulus) != MP_LT) {
+ if ((err = mp_sub(&t1, modulus, &t1)) != MP_OKAY) { goto error; }
+ }
+ /* T2 = T1 * T2 */
+ if ((err = mp_mul(&t1, &t2, &t2)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&t2, modulus, mu)) != MP_OKAY) { goto error; }
+ /* T1 = 2T2 */
+ if ((err = mp_mul_2(&t2, &t1)) != MP_OKAY) { goto error; }
+ if (mp_cmp(&t1, modulus) != MP_LT) {
+ if ((err = mp_sub(&t1, modulus, &t1)) != MP_OKAY) { goto error; }
+ }
+ /* T1 = T1 + T2 */
+ if ((err = mp_add(&t1, &t2, &t1)) != MP_OKAY) { goto error; }
+ if (mp_cmp(&t1, modulus) != MP_LT) {
+ if ((err = mp_sub(&t1, modulus, &t1)) != MP_OKAY) { goto error; }
+ }
- /* Yr = -Yp + s(Xp - Xr) */
- if ((err = mp_sub(&P->x, &tmpx, &tmp)) != MP_OKAY) { goto error; } /* tmp = x - tmpx */
- if ((err = mp_mul(&tmp, &s, &tmp)) != MP_OKAY) { goto error; } /* tmp = tmp * s */
- if ((err = mp_submod(&tmp, &P->y, modulus, &R->y)) != MP_OKAY) { goto error; } /* y = tmp - y mod modulus */
- if ((err = mp_copy(&tmpx, &R->x)) != MP_OKAY) { goto error; } /* x = tmpx */
+ /* Y = 2Y */
+ if ((err = mp_mul_2(&R->y, &R->y)) != MP_OKAY) { goto error; }
+ if (mp_cmp(&R->y, modulus) != MP_LT) {
+ if ((err = mp_sub(&R->y, modulus, &R->y)) != MP_OKAY) { goto error; }
+ }
+ /* Y = Y * Y */
+ if ((err = mp_sqr(&R->y, &R->y)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&R->y, modulus, mu)) != MP_OKAY) { goto error; }
+ /* T2 = Y * Y */
+ if ((err = mp_sqr(&R->y, &t2)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&t2, modulus, mu)) != MP_OKAY) { goto error; }
+ /* T2 = T2/2 */
+ if (mp_isodd(&t2)) {
+ if ((err = mp_add(&t2, modulus, &t2)) != MP_OKAY) { goto error; }
+ }
+ if ((err = mp_div_2(&t2, &t2)) != MP_OKAY) { goto error; }
+ /* Y = Y * X */
+ if ((err = mp_mul(&R->y, &R->x, &R->y)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&R->y, modulus, mu)) != MP_OKAY) { goto error; }
+
+ /* X = T1 * T1 */
+ if ((err = mp_sqr(&t1, &R->x)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&R->x, modulus, mu)) != MP_OKAY) { goto error; }
+ /* X = X - Y */
+ if ((err = mp_sub(&R->x, &R->y, &R->x)) != MP_OKAY) { goto error; }
+ if (mp_cmp_d(&R->x, 0) == MP_LT) {
+ if ((err = mp_add(&R->x, modulus, &R->x)) != MP_OKAY) { goto error; }
+ }
+ /* X = X - Y */
+ if ((err = mp_sub(&R->x, &R->y, &R->x)) != MP_OKAY) { goto error; }
+ if (mp_cmp_d(&R->x, 0) == MP_LT) {
+ if ((err = mp_add(&R->x, modulus, &R->x)) != MP_OKAY) { goto error; }
+ }
+ /* Y = Y - X */
+ if ((err = mp_sub(&R->y, &R->x, &R->y)) != MP_OKAY) { goto error; }
+ if (mp_cmp_d(&R->y, 0) == MP_LT) {
+ if ((err = mp_add(&R->y, modulus, &R->y)) != MP_OKAY) { goto error; }
+ }
+ /* Y = Y * T1 */
+ if ((err = mp_mul(&R->y, &t1, &R->y)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&R->y, modulus, mu)) != MP_OKAY) { goto error; }
+ /* Y = Y - T2 */
+ if ((err = mp_sub(&R->y, &t2, &R->y)) != MP_OKAY) { goto error; }
+ if (mp_cmp_d(&R->y, 0) == MP_LT) {
+ if ((err = mp_add(&R->y, modulus, &R->y)) != MP_OKAY) { goto error; }
+ }
+
err = CRYPT_OK;
goto done;
error:
err = mpi_to_ltc_error(err);
done:
- mp_clear_multi(&tmpx, &tmp, &s, NULL);
+ mp_clear_multi(&t1, &t2, NULL);
return err;
}
/* add two different points over Z/pZ, R = P + Q, note R can equal either P or Q */
static int add_point(ecc_point *P, ecc_point *Q, ecc_point *R, mp_int *modulus, mp_int *mu)
{
- mp_int s, tmp, tmpx;
+ mp_int t1, t2, x, y, z;
int err;
- if ((err = mp_init(&tmp)) != MP_OKAY) {
+ if ((err = mp_init_multi(&t1, &t2, &x, &y, &z, NULL)) != MP_OKAY) {
return mpi_to_ltc_error(err);
}
- /* is P==Q or P==-Q? */
- if (((err = mp_neg(&Q->y, &tmp)) != MP_OKAY) || ((err = mp_mod(&tmp, modulus, &tmp)) != MP_OKAY)) {
- mp_clear(&tmp);
- return mpi_to_ltc_error(err);
+ if ((err = mp_copy(&P->x, &x)) != MP_OKAY) { goto error; }
+ if ((err = mp_copy(&P->y, &y)) != MP_OKAY) { goto error; }
+ if ((err = mp_copy(&P->z, &z)) != MP_OKAY) { goto error; }
+
+ /* if Z' != 1 */
+ if (mp_cmp_d(&Q->z, 1) != MP_EQ) {
+ /* T1 = Z' * Z' */
+ if ((err = mp_sqr(&Q->z, &t1)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&t1, modulus, mu)) != MP_OKAY) { goto error; }
+ /* X = X * T1 */
+ if ((err = mp_mul(&t1, &x, &x)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&x, modulus, mu)) != MP_OKAY) { goto error; }
+ /* T1 = Z' * T1 */
+ if ((err = mp_mul(&Q->z, &t1, &t1)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&t1, modulus, mu)) != MP_OKAY) { goto error; }
+ /* Y = Y * T1 */
+ if ((err = mp_mul(&t1, &y, &y)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&y, modulus, mu)) != MP_OKAY) { goto error; }
}
- if (mp_cmp(&P->x, &Q->x) == MP_EQ)
- if (mp_cmp(&P->y, &Q->y) == MP_EQ || mp_cmp(&P->y, &tmp) == MP_EQ) {
- mp_clear(&tmp);
- return dbl_point(P, R, modulus, mu);
- }
-
- if ((err = mp_init_multi(&tmpx, &s, NULL)) != MP_OKAY) {
- mp_clear(&tmp);
- return mpi_to_ltc_error(err);
+ /* T1 = Z*Z */
+ if ((err = mp_sqr(&z, &t1)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&t1, modulus, mu)) != MP_OKAY) { goto error; }
+ /* T2 = X' * T1 */
+ if ((err = mp_mul(&Q->x, &t1, &t2)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&t2, modulus, mu)) != MP_OKAY) { goto error; }
+ /* T1 = Z * T1 */
+ if ((err = mp_mul(&z, &t1, &t1)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&t1, modulus, mu)) != MP_OKAY) { goto error; }
+ /* T1 = Y' * T1 */
+ if ((err = mp_mul(&Q->y, &t1, &t1)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&t1, modulus, mu)) != MP_OKAY) { goto error; }
+
+ /* Y = Y - T1 */
+ if ((err = mp_sub(&y, &t1, &y)) != MP_OKAY) { goto error; }
+ if (mp_cmp_d(&y, 0) == MP_LT) {
+ if ((err = mp_add(&y, modulus, &y)) != MP_OKAY) { goto error; }
+ }
+ /* T1 = 2T1 */
+ if ((err = mp_mul_2(&t1, &t1)) != MP_OKAY) { goto error; }
+ if (mp_cmp(&t1, modulus) != MP_LT) {
+ if ((err = mp_sub(&t1, modulus, &t1)) != MP_OKAY) { goto error; }
+ }
+ /* T1 = Y + T1 */
+ if ((err = mp_add(&t1, &y, &t1)) != MP_OKAY) { goto error; }
+ if (mp_cmp(&t1, modulus) != MP_LT) {
+ if ((err = mp_sub(&t1, modulus, &t1)) != MP_OKAY) { goto error; }
+ }
+ /* X = X - T2 */
+ if ((err = mp_sub(&x, &t2, &x)) != MP_OKAY) { goto error; }
+ if (mp_cmp_d(&x, 0) == MP_LT) {
+ if ((err = mp_add(&x, modulus, &x)) != MP_OKAY) { goto error; }
+ }
+ /* T2 = 2T2 */
+ if ((err = mp_mul_2(&t2, &t2)) != MP_OKAY) { goto error; }
+ if (mp_cmp(&t2, modulus) != MP_LT) {
+ if ((err = mp_sub(&t2, modulus, &t2)) != MP_OKAY) { goto error; }
+ }
+ /* T2 = X + T2 */
+ if ((err = mp_add(&t2, &x, &t2)) != MP_OKAY) { goto error; }
+ if (mp_cmp(&t2, modulus) != MP_LT) {
+ if ((err = mp_sub(&t2, modulus, &t2)) != MP_OKAY) { goto error; }
}
- /* get s = (Yp - Yq)/(Xp-Xq) mod p */
- if ((err = mp_sub(&P->x, &Q->x, &tmp)) != MP_OKAY) { goto error; } /* tmp = Px - Qx mod modulus */
- if (mp_cmp_d(&tmp, 0) == MP_LT) { /* if tmp<0 add modulus */
- if ((err = mp_add(&tmp, modulus, &tmp)) != MP_OKAY) { goto error; }
+ /* if Z' != 1 */
+ if (mp_cmp_d(&Q->z, 1) != MP_EQ) {
+ /* Z = Z * Z' */
+ if ((err = mp_mul(&z, &Q->z, &z)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&z, modulus, mu)) != MP_OKAY) { goto error; }
}
- if ((err = mp_invmod(&tmp, modulus, &tmp)) != MP_OKAY) { goto error; } /* tmp = 1/tmp mod modulus */
- if ((err = mp_sub(&P->y, &Q->y, &s)) != MP_OKAY) { goto error; } /* s = Py - Qy mod modulus */
- if (mp_cmp_d(&s, 0) == MP_LT) { /* if s<0 add modulus */
- if ((err = mp_add(&s, modulus, &s)) != MP_OKAY) { goto error; }
+ /* Z = Z * X */
+ if ((err = mp_mul(&z, &x, &z)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&z, modulus, mu)) != MP_OKAY) { goto error; }
+
+ /* T1 = T1 * X */
+ if ((err = mp_mul(&t1, &x, &t1)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&t1, modulus, mu)) != MP_OKAY) { goto error; }
+ /* X = X * X */
+ if ((err = mp_sqr(&x, &x)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&x, modulus, mu)) != MP_OKAY) { goto error; }
+ /* T2 = T2 * x */
+ if ((err = mp_mul(&t2, &x, &t2)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&t2, modulus, mu)) != MP_OKAY) { goto error; }
+ /* T1 = T1 * X */
+ if ((err = mp_mul(&t1, &x, &t1)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&t1, modulus, mu)) != MP_OKAY) { goto error; }
+
+ /* X = Y*Y */
+ if ((err = mp_sqr(&y, &x)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&x, modulus, mu)) != MP_OKAY) { goto error; }
+ /* X = X - T2 */
+ if ((err = mp_sub(&x, &t2, &x)) != MP_OKAY) { goto error; }
+ if (mp_cmp_d(&x, 0) == MP_LT) {
+ if ((err = mp_add(&x, modulus, &x)) != MP_OKAY) { goto error; }
}
- if ((err = mp_mul(&s, &tmp, &s)) != MP_OKAY) { goto error; } /* s = s * tmp mod modulus */
- if ((err = mp_reduce(&s, modulus, mu)) != MP_OKAY) { goto error; }
- /* Xr = s^2 - Xp - Xq */
- if ((err = mp_sqr(&s, &tmp)) != MP_OKAY) { goto error; } /* tmp = s^2 mod modulus */
- if ((err = mp_reduce(&tmp, modulus, mu)) != MP_OKAY) { goto error; }
- if ((err = mp_sub(&tmp, &P->x, &tmp)) != MP_OKAY) { goto error; } /* tmp = tmp - Px */
- if ((err = mp_sub(&tmp, &Q->x, &tmpx)) != MP_OKAY) { goto error; } /* tmpx = tmp - Qx */
+ /* T2 = T2 - X */
+ if ((err = mp_sub(&t2, &x, &t2)) != MP_OKAY) { goto error; }
+ if (mp_cmp_d(&t2, 0) == MP_LT) {
+ if ((err = mp_add(&t2, modulus, &t2)) != MP_OKAY) { goto error; }
+ }
+ /* T2 = T2 - X */
+ if ((err = mp_sub(&t2, &x, &t2)) != MP_OKAY) { goto error; }
+ if (mp_cmp_d(&t2, 0) == MP_LT) {
+ if ((err = mp_add(&t2, modulus, &t2)) != MP_OKAY) { goto error; }
+ }
+ /* T2 = T2 * Y */
+ if ((err = mp_mul(&t2, &y, &t2)) != MP_OKAY) { goto error; }
+ if ((err = mp_reduce(&t2, modulus, mu)) != MP_OKAY) { goto error; }
+ /* Y = T2 - T1 */
+ if ((err = mp_sub(&t2, &t1, &y)) != MP_OKAY) { goto error; }
+ if (mp_cmp_d(&y, 0) == MP_LT) {
+ if ((err = mp_add(&y, modulus, &y)) != MP_OKAY) { goto error; }
+ }
+ /* Y = Y/2 */
+ if (mp_isodd(&y)) {
+ if ((err = mp_add(&y, modulus, &y)) != MP_OKAY) { goto error; }
+ }
+ if ((err = mp_div_2(&y, &y)) != MP_OKAY) { goto error; }
- /* Yr = -Yp + s(Xp - Xr) */
- if ((err = mp_sub(&P->x, &tmpx, &tmp)) != MP_OKAY) { goto error; } /* tmp = Px - tmpx */
- if ((err = mp_mul(&tmp, &s, &tmp)) != MP_OKAY) { goto error; } /* tmp = tmp * s */
- if ((err = mp_submod(&tmp, &P->y, modulus, &R->y)) != MP_OKAY) { goto error; } /* Ry = tmp - Py mod modulus */
- if ((err = mp_mod(&tmpx, modulus, &R->x)) != MP_OKAY) { goto error; } /* Rx = tmpx mod modulus */
+ if ((err = mp_copy(&x, &R->x)) != MP_OKAY) { goto error; }
+ if ((err = mp_copy(&y, &R->y)) != MP_OKAY) { goto error; }
+ if ((err = mp_copy(&z, &R->z)) != MP_OKAY) { goto error; }
err = CRYPT_OK;
goto done;
error:
err = mpi_to_ltc_error(err);
done:
- mp_clear_multi(&s, &tmpx, &tmp, NULL);
+ mp_clear_multi(&t1, &t2, &x, &y, &z, NULL);
return err;
}
@@ -404,6 +589,7 @@ static int ecc_mulmod(mp_int *k, ecc_point *G, ecc_point *R, mp_int *modulus)
/* tG = G */
if ((err = mp_copy(&G->x, &tG->x)) != MP_OKAY) { goto error; }
if ((err = mp_copy(&G->y, &tG->y)) != MP_OKAY) { goto error; }
+ if ((err = mp_copy(&G->z, &tG->z)) != MP_OKAY) { goto error; }
/* calc the M tab, which holds kG for k==8..15 */
/* M[0] == 8G */
@@ -460,6 +646,7 @@ static int ecc_mulmod(mp_int *k, ecc_point *G, ecc_point *R, mp_int *modulus)
/* R = kG [k = first window] */
if ((err = mp_copy(&M[bitbuf-8]->x, &R->x)) != MP_OKAY) { goto error; }
if ((err = mp_copy(&M[bitbuf-8]->y, &R->y)) != MP_OKAY) { goto error; }
+ if ((err = mp_copy(&M[bitbuf-8]->z, &R->z)) != MP_OKAY) { goto error; }
first = 0;
} else {
/* normal window */
@@ -493,6 +680,7 @@ static int ecc_mulmod(mp_int *k, ecc_point *G, ecc_point *R, mp_int *modulus)
/* first add, so copy */
if ((err = mp_copy(&tG->x, &R->x)) != MP_OKAY) { goto error; }
if ((err = mp_copy(&tG->y, &R->y)) != MP_OKAY) { goto error; }
+ if ((err = mp_copy(&tG->z, &R->z)) != MP_OKAY) { goto error; }
first = 0;
} else {
/* then add */
@@ -501,7 +689,9 @@ static int ecc_mulmod(mp_int *k, ecc_point *G, ecc_point *R, mp_int *modulus)
}
}
}
- err = CRYPT_OK;
+
+ /* map R back from projective space */
+ err = ecc_map(R, modulus, &mu);
goto done;
error:
err = mpi_to_ltc_error(err);
@@ -516,6 +706,10 @@ done:
#undef WINSIZE
+/**
+ Perform on the ECC system
+ @return CRYPT_OK if successful
+*/
int ecc_test(void)
{
mp_int modulus, order;
@@ -558,6 +752,7 @@ int ecc_test(void)
if ((err = mp_read_radix(&G->x, (char *)sets[i].Gx, 64)) != MP_OKAY) { goto error; }
if ((err = mp_read_radix(&G->y, (char *)sets[i].Gy, 64)) != MP_OKAY) { goto error; }
+ mp_set(&G->z, 1);
/* then we should have G == (order + 1)G */
if ((err = mp_add_d(&order, 1, &order)) != MP_OKAY) { goto error; }
@@ -581,8 +776,8 @@ done:
void ecc_sizes(int *low, int *high)
{
int i;
- _ARGCHK(low != NULL);
- _ARGCHK(high != NULL);
+ LTC_ARGCHK(low != NULL);
+ LTC_ARGCHK(high != NULL);
*low = INT_MAX;
*high = 0;
@@ -596,6 +791,14 @@ void ecc_sizes(int *low, int *high)
}
}
+/**
+ Make a new ECC key
+ @param prng An active PRNG state
+ @param wprng The index of the PRNG you wish to use
+ @param keysize The keysize for the new key (in octets from 20 to 65 bytes)
+ @param key [out] Destination of the newly created key
+ @return CRYPT_OK if successful, upon error all allocated memory will be freed
+*/
int ecc_make_key(prng_state *prng, int wprng, int keysize, ecc_key *key)
{
int x, err;
@@ -603,7 +806,7 @@ int ecc_make_key(prng_state *prng, int wprng, int keysize, ecc_key *key)
mp_int prime;
unsigned char *buf;
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(key != NULL);
/* good prng? */
if ((err = prng_is_valid(wprng)) != CRYPT_OK) {
@@ -613,9 +816,8 @@ int ecc_make_key(prng_state *prng, int wprng, int keysize, ecc_key *key)
/* find key size */
for (x = 0; (keysize > sets[x].size) && (sets[x].size != 0); x++);
keysize = sets[x].size;
- _ARGCHK(keysize <= ECC_MAXSIZE);
- if (sets[x].size == 0) {
+ if (keysize > ECC_MAXSIZE || sets[x].size == 0) {
return CRYPT_INVALID_KEYSIZE;
}
key->idx = x;
@@ -630,46 +832,48 @@ int ecc_make_key(prng_state *prng, int wprng, int keysize, ecc_key *key)
/* make up random string */
if (prng_descriptor[wprng].read(buf, (unsigned long)keysize, prng) != (unsigned long)keysize) {
err = CRYPT_ERROR_READPRNG;
- goto __ERR2;
+ goto LBL_ERR2;
}
/* setup the key variables */
- if ((err = mp_init_multi(&key->pubkey.x, &key->pubkey.y, &key->k, &prime, NULL)) != MP_OKAY) {
+ if ((err = mp_init_multi(&key->pubkey.x, &key->pubkey.y, &key->pubkey.z, &key->k, &prime, NULL)) != MP_OKAY) {
err = mpi_to_ltc_error(err);
- goto __ERR;
+ goto LBL_ERR;
}
base = new_point();
if (base == NULL) {
- mp_clear_multi(&key->pubkey.x, &key->pubkey.y, &key->k, &prime, NULL);
+ mp_clear_multi(&key->pubkey.x, &key->pubkey.y, &key->pubkey.z, &key->k, &prime, NULL);
err = CRYPT_MEM;
- goto __ERR;
+ goto LBL_ERR;
}
/* read in the specs for this key */
if ((err = mp_read_radix(&prime, (char *)sets[key->idx].prime, 64)) != MP_OKAY) { goto error; }
if ((err = mp_read_radix(&base->x, (char *)sets[key->idx].Gx, 64)) != MP_OKAY) { goto error; }
if ((err = mp_read_radix(&base->y, (char *)sets[key->idx].Gy, 64)) != MP_OKAY) { goto error; }
+ mp_set(&base->z, 1);
if ((err = mp_read_unsigned_bin(&key->k, (unsigned char *)buf, keysize)) != MP_OKAY) { goto error; }
/* make the public key */
- if ((err = ecc_mulmod(&key->k, base, &key->pubkey, &prime)) != CRYPT_OK) { goto __ERR; }
+ if ((err = ecc_mulmod(&key->k, base, &key->pubkey, &prime)) != CRYPT_OK) { goto LBL_ERR; }
key->type = PK_PRIVATE;
/* shrink key */
if ((err = mp_shrink(&key->k)) != MP_OKAY) { goto error; }
if ((err = mp_shrink(&key->pubkey.x)) != MP_OKAY) { goto error; }
if ((err = mp_shrink(&key->pubkey.y)) != MP_OKAY) { goto error; }
+ if ((err = mp_shrink(&key->pubkey.z)) != MP_OKAY) { goto error; }
/* free up ram */
err = CRYPT_OK;
- goto __ERR;
+ goto LBL_ERR;
error:
err = mpi_to_ltc_error(err);
-__ERR:
+LBL_ERR:
del_point(base);
mp_clear(&prime);
-__ERR2:
-#ifdef CLEAN_STACK
+LBL_ERR2:
+#ifdef LTC_CLEAN_STACK
zeromem(buf, ECC_MAXSIZE);
#endif
@@ -678,10 +882,14 @@ __ERR2:
return err;
}
+/**
+ Free an ECC key from memory
+ @param key The key you wish to free
+*/
void ecc_free(ecc_key *key)
{
- _ARGCHK(key != NULL);
- mp_clear_multi(&key->pubkey.x, &key->pubkey.y, &key->k, NULL);
+ LTC_ARGCHK(key != NULL);
+ mp_clear_multi(&key->pubkey.x, &key->pubkey.y, &key->pubkey.z, &key->k, NULL);
}
static int compress_y_point(ecc_point *pt, int idx, int *result)
@@ -689,8 +897,8 @@ static int compress_y_point(ecc_point *pt, int idx, int *result)
mp_int tmp, tmp2, p;
int err;
- _ARGCHK(pt != NULL);
- _ARGCHK(result != NULL);
+ LTC_ARGCHK(pt != NULL);
+ LTC_ARGCHK(result != NULL);
if ((err = mp_init_multi(&tmp, &tmp2, &p, NULL)) != MP_OKAY) {
return mpi_to_ltc_error(err);
@@ -731,7 +939,7 @@ static int expand_y_point(ecc_point *pt, int idx, int result)
mp_int tmp, tmp2, p;
int err;
- _ARGCHK(pt != NULL);
+ LTC_ARGCHK(pt != NULL);
if ((err = mp_init_multi(&tmp, &tmp2, &p, NULL)) != MP_OKAY) {
return CRYPT_MEM;
@@ -767,14 +975,22 @@ done:
return err;
}
+/**
+ Export an ECC key as a binary packet
+ @param out [out] Destination for the key
+ @param outlen [in/out] Max size and resulting size of the exported key
+ @param type The type of key you want to export (PK_PRIVATE or PK_PUBLIC)
+ @param key The key to export
+ @return CRYPT_OK if successful
+*/
int ecc_export(unsigned char *out, unsigned long *outlen, int type, ecc_key *key)
{
unsigned long y, z;
int cp, err;
- _ARGCHK(out != NULL);
- _ARGCHK(outlen != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+ LTC_ARGCHK(key != NULL);
/* can we store the static header? */
if (*outlen < (PACKET_SIZE + 3)) {
@@ -811,13 +1027,20 @@ int ecc_export(unsigned char *out, unsigned long *outlen, int type, ecc_key *key
return CRYPT_OK;
}
+/**
+ Import an ECC key from a binary packet
+ @param in The packet to import
+ @param inlen The length of the packet
+ @param key [out] The destination of the import
+ @return CRYPT_OK if successful, upon error all allocated memory will be freed
+*/
int ecc_import(const unsigned char *in, unsigned long inlen, ecc_key *key)
{
unsigned long x, y, s;
int err;
- _ARGCHK(in != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(key != NULL);
/* check length */
if ((3+PACKET_SIZE) > inlen) {
@@ -830,7 +1053,7 @@ int ecc_import(const unsigned char *in, unsigned long inlen, ecc_key *key)
}
/* init key */
- if (mp_init_multi(&key->pubkey.x, &key->pubkey.y, &key->k, NULL) != MP_OKAY) {
+ if (mp_init_multi(&key->pubkey.x, &key->pubkey.y, &key->pubkey.z, &key->k, NULL) != MP_OKAY) {
return CRYPT_MEM;
}
@@ -876,12 +1099,23 @@ int ecc_import(const unsigned char *in, unsigned long inlen, ecc_key *key)
mp_clear(&key->k);
}
+ /* z is always 1 */
+ mp_set(&key->pubkey.z, 1);
+
return CRYPT_OK;
error:
- mp_clear_multi(&key->pubkey.x, &key->pubkey.y, &key->k, NULL);
+ mp_clear_multi(&key->pubkey.x, &key->pubkey.y, &key->pubkey.z, &key->k, NULL);
return err;
}
+/**
+ Create an ECC shared secret between two keys
+ @param private_key The private ECC key
+ @param public_key The public key
+ @param out [out] Destination of the shared secret
+ @param outlen [in/out] The max size and resulting size of the shared secret
+ @return CRYPT_OK if successful
+*/
int ecc_shared_secret(ecc_key *private_key, ecc_key *public_key,
unsigned char *out, unsigned long *outlen)
{
@@ -890,10 +1124,10 @@ int ecc_shared_secret(ecc_key *private_key, ecc_key *public_key,
mp_int prime;
int err;
- _ARGCHK(private_key != NULL);
- _ARGCHK(public_key != NULL);
- _ARGCHK(out != NULL);
- _ARGCHK(outlen != NULL);
+ LTC_ARGCHK(private_key != NULL);
+ LTC_ARGCHK(public_key != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
/* type valid? */
if (private_key->type != PK_PRIVATE) {
@@ -939,9 +1173,14 @@ done1:
return err;
}
+/**
+ Get the size of an ECC key
+ @param key The key to get the size of
+ @return The size (octets) of the key or INT_MAX on error
+*/
int ecc_get_size(ecc_key *key)
{
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(key != NULL);
if (is_valid_idx(key->idx))
return sets[key->idx].size;
else
diff --git a/ecc_sys.c b/src/pk/ecc/ecc_sys.c
similarity index 75%
rename from ecc_sys.c
rename to src/pk/ecc/ecc_sys.c
index 5b0ef822..d5576f64 100644
--- a/ecc_sys.c
+++ b/src/pk/ecc/ecc_sys.c
@@ -6,10 +6,28 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-int ecc_encrypt_key(const unsigned char *inkey, unsigned long keylen,
- unsigned char *out, unsigned long *len,
+
+/**
+ @file ecc_sys.c
+ ECC Crypto, Tom St Denis
+*/
+
+/**
+ Encrypt a symmetric key with ECC
+ @param in The symmetric key you want to encrypt
+ @param inlen The length of the key to encrypt (octets)
+ @param out [out] The destination for the ciphertext
+ @param outlen [in/out] The max size and resulting size of the ciphertext
+ @param prng An active PRNG state
+ @param wprng The index of the PRNG you wish to use
+ @param hash The index of the hash you want to use
+ @param key The ECC key you want to encrypt to
+ @return CRYPT_OK if successful
+*/
+int ecc_encrypt_key(const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen,
prng_state *prng, int wprng, int hash,
ecc_key *key)
{
@@ -18,10 +36,10 @@ int ecc_encrypt_key(const unsigned char *inkey, unsigned long keylen,
unsigned long x, y, z, hashsize, pubkeysize;
int err;
- _ARGCHK(inkey != NULL);
- _ARGCHK(out != NULL);
- _ARGCHK(len != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+ LTC_ARGCHK(key != NULL);
/* check that wprng/cipher/hash are not invalid */
if ((err = prng_is_valid(wprng)) != CRYPT_OK) {
@@ -32,7 +50,7 @@ int ecc_encrypt_key(const unsigned char *inkey, unsigned long keylen,
return err;
}
- if (keylen > hash_descriptor[hash].hashsize) {
+ if (inlen > hash_descriptor[hash].hashsize) {
return CRYPT_INVALID_HASH;
}
@@ -61,14 +79,14 @@ int ecc_encrypt_key(const unsigned char *inkey, unsigned long keylen,
pubkeysize = ECC_BUF_SIZE;
if ((err = ecc_export(pub_expt, &pubkeysize, PK_PUBLIC, &pubkey)) != CRYPT_OK) {
ecc_free(&pubkey);
- goto __ERR;
+ goto LBL_ERR;
}
/* now check if the out buffer is big enough */
- if (*len < (9 + PACKET_SIZE + pubkeysize + hash_descriptor[hash].hashsize)) {
+ if (*outlen < (9 + PACKET_SIZE + pubkeysize + hash_descriptor[hash].hashsize)) {
ecc_free(&pubkey);
err = CRYPT_BUFFER_OVERFLOW;
- goto __ERR;
+ goto LBL_ERR;
}
/* make random key */
@@ -76,12 +94,12 @@ int ecc_encrypt_key(const unsigned char *inkey, unsigned long keylen,
x = ECC_BUF_SIZE;
if ((err = ecc_shared_secret(&pubkey, key, ecc_shared, &x)) != CRYPT_OK) {
ecc_free(&pubkey);
- goto __ERR;
+ goto LBL_ERR;
}
ecc_free(&pubkey);
z = MAXBLOCKSIZE;
if ((err = hash_memory(hash, ecc_shared, x, skey, &z)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* store header */
@@ -101,18 +119,18 @@ int ecc_encrypt_key(const unsigned char *inkey, unsigned long keylen,
out[y] = pub_expt[x];
}
- STORE32L(keylen, out+y);
+ STORE32L(inlen, out+y);
y += 4;
/* Encrypt/Store the encrypted key */
- for (x = 0; x < keylen; x++, y++) {
- out[y] = skey[x] ^ inkey[x];
+ for (x = 0; x < inlen; x++, y++) {
+ out[y] = skey[x] ^ in[x];
}
- *len = y;
+ *outlen = y;
err = CRYPT_OK;
-__ERR:
-#ifdef CLEAN_STACK
+LBL_ERR:
+#ifdef LTC_CLEAN_STACK
/* clean up */
zeromem(pub_expt, ECC_BUF_SIZE);
zeromem(ecc_shared, ECC_BUF_SIZE);
@@ -126,8 +144,17 @@ __ERR:
return err;
}
-int ecc_decrypt_key(const unsigned char *in, unsigned long inlen,
- unsigned char *outkey, unsigned long *keylen,
+/**
+ Decrypt an ECC encrypted key
+ @param in The ciphertext
+ @param inlen The length of the ciphertext (octets)
+ @param out [out] The plaintext
+ @param outlen [in/out] The max size and resulting size of the plaintext
+ @param key The corresponding private ECC key
+ @return CRYPT_OK if successful
+*/
+int ecc_decrypt_key(const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen,
ecc_key *key)
{
unsigned char *shared_secret, *skey;
@@ -135,10 +162,10 @@ int ecc_decrypt_key(const unsigned char *in, unsigned long inlen,
int hash, err;
ecc_key pubkey;
- _ARGCHK(in != NULL);
- _ARGCHK(outkey != NULL);
- _ARGCHK(keylen != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+ LTC_ARGCHK(key != NULL);
/* right key type? */
if (key->type != PK_PRIVATE) {
@@ -198,39 +225,39 @@ int ecc_decrypt_key(const unsigned char *in, unsigned long inlen,
x = ECC_BUF_SIZE;
if ((err = ecc_shared_secret(key, &pubkey, shared_secret, &x)) != CRYPT_OK) {
ecc_free(&pubkey);
- goto __ERR;
+ goto LBL_ERR;
}
ecc_free(&pubkey);
z = MAXBLOCKSIZE;
if ((err = hash_memory(hash, shared_secret, x, skey, &z)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
LOAD32L(keysize, in+y);
if (inlen < keysize) {
err = CRYPT_INVALID_PACKET;
- goto __ERR;
+ goto LBL_ERR;
} else {
inlen -= keysize;
}
y += 4;
- if (*keylen < keysize) {
+ if (*outlen < keysize) {
err = CRYPT_BUFFER_OVERFLOW;
- goto __ERR;
+ goto LBL_ERR;
}
/* Decrypt the key */
for (x = 0; x < keysize; x++, y++) {
- outkey[x] = skey[x] ^ in[y];
+ out[x] = skey[x] ^ in[y];
}
- *keylen = keysize;
+ *outlen = keysize;
err = CRYPT_OK;
-__ERR:
-#ifdef CLEAN_STACK
+LBL_ERR:
+#ifdef LTC_CLEAN_STACK
zeromem(shared_secret, ECC_BUF_SIZE);
zeromem(skey, MAXBLOCKSIZE);
#endif
@@ -241,6 +268,17 @@ __ERR:
return err;
}
+/**
+ Sign a message digest
+ @param in The message digest to sign
+ @param inlen The length of the digest
+ @param out [out] The destination for the signature
+ @param outlen [in/out] The max size and resulting size of the signature
+ @param prng An active PRNG state
+ @param wprng The index of the PRNG you wish to use
+ @param key A private ECC key
+ @return CRYPT_OK if successful
+*/
int ecc_sign_hash(const unsigned char *in, unsigned long inlen,
unsigned char *out, unsigned long *outlen,
prng_state *prng, int wprng, ecc_key *key)
@@ -251,10 +289,10 @@ int ecc_sign_hash(const unsigned char *in, unsigned long inlen,
unsigned long x, y, pubkeysize, rsize;
int err;
- _ARGCHK(in != NULL);
- _ARGCHK(out != NULL);
- _ARGCHK(outlen != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+ LTC_ARGCHK(key != NULL);
/* is this a private key? */
if (key->type != PK_PRIVATE) {
@@ -292,7 +330,7 @@ int ecc_sign_hash(const unsigned char *in, unsigned long inlen,
pubkeysize = ECC_BUF_SIZE;
if ((err = ecc_export(epubkey, &pubkeysize, PK_PUBLIC, &pubkey)) != CRYPT_OK) {
ecc_free(&pubkey);
- goto __ERR;
+ goto LBL_ERR;
}
/* get the hash and load it as a bignum into 'b' */
@@ -300,7 +338,7 @@ int ecc_sign_hash(const unsigned char *in, unsigned long inlen,
if ((err = mp_init_multi(&b, &p, NULL)) != MP_OKAY) {
ecc_free(&pubkey);
err = mpi_to_ltc_error(err);
- goto __ERR;
+ goto LBL_ERR;
}
if ((err = mp_read_radix(&p, (char *)sets[key->idx].order, 64)) != MP_OKAY) { goto error; }
if ((err = mp_read_unsigned_bin(&b, (unsigned char *)in, (int)inlen)) != MP_OKAY) { goto error; }
@@ -321,7 +359,7 @@ int ecc_sign_hash(const unsigned char *in, unsigned long inlen,
/* now lets check the outlen before we write */
if (*outlen < (12 + rsize + pubkeysize)) {
err = CRYPT_BUFFER_OVERFLOW;
- goto __ERR;
+ goto LBL_ERR;
}
/* lets output */
@@ -351,13 +389,13 @@ int ecc_sign_hash(const unsigned char *in, unsigned long inlen,
/* all ok */
err = CRYPT_OK;
- goto __ERR;
+ goto LBL_ERR;
error:
err = mpi_to_ltc_error(err);
-__ERR:
+LBL_ERR:
mp_clear_multi(&b, &p, NULL);
ecc_free(&pubkey);
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(er, ECC_BUF_SIZE);
zeromem(epubkey, ECC_BUF_SIZE);
#endif
@@ -381,8 +419,19 @@ __ERR:
* The user given only xG, kG and b cannot determine k or x which means they can't find the private key.
*
*/
-int ecc_verify_hash(const unsigned char *sig, unsigned long siglen,
- const unsigned char *hash, unsigned long inlen,
+
+/**
+ Verify an ECC signature
+ @param sig The signature to verify
+ @param siglen The length of the signature (octets)
+ @param hash The hash (message digest) that was signed
+ @param hashlen The length of the hash (octets)
+ @param stat Result of signature, 1==valid, 0==invalid
+ @param key The corresponding public ECC key
+ @return CRYPT_OK if successful (even if the signature is not valid)
+*/
+int ecc_verify_hash(const unsigned char *sig, unsigned long siglen,
+ const unsigned char *hash, unsigned long hashlen,
int *stat, ecc_key *key)
{
ecc_point *mG;
@@ -391,10 +440,10 @@ int ecc_verify_hash(const unsigned char *sig, unsigned long siglen,
unsigned long x, y;
int err;
- _ARGCHK(sig != NULL);
- _ARGCHK(hash != NULL);
- _ARGCHK(stat != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(sig != NULL);
+ LTC_ARGCHK(hash != NULL);
+ LTC_ARGCHK(stat != NULL);
+ LTC_ARGCHK(key != NULL);
/* default to invalid signature */
*stat = 0;
@@ -455,7 +504,7 @@ int ecc_verify_hash(const unsigned char *sig, unsigned long siglen,
y += x;
/* get m in binary a bignum */
- if ((err = mp_read_unsigned_bin(&m, (unsigned char *)hash, (int)inlen)) != MP_OKAY) { goto error; }
+ if ((err = mp_read_unsigned_bin(&m, (unsigned char *)hash, (int)hashlen)) != MP_OKAY) { goto error; }
/* load prime */
if ((err = mp_read_radix(&p, (char *)sets[key->idx].prime, 64)) != MP_OKAY) { goto error; }
@@ -471,9 +520,13 @@ int ecc_verify_hash(const unsigned char *sig, unsigned long siglen,
/* get bA + Y */
if ((err = add_point(&pubkey.pubkey, &key->pubkey, &pubkey.pubkey, &p, &mu)) != CRYPT_OK) { goto done; }
+ /* we have to transform it */
+ if ((err = ecc_map(&pubkey.pubkey, &p, &mu)) != CRYPT_OK) { goto done; }
+
/* get mG */
if ((err = mp_read_radix(&mG->x, (char *)sets[key->idx].Gx, 64)) != MP_OKAY) { goto error; }
if ((err = mp_read_radix(&mG->y, (char *)sets[key->idx].Gy, 64)) != MP_OKAY) { goto error; }
+ mp_set(&mG->z, 1);
if ((err = ecc_mulmod(&m, mG, mG, &p)) != CRYPT_OK) { goto done; }
/* compare mG to bA + Y */
diff --git a/packet_store_header.c b/src/pk/packet_store_header.c
similarity index 84%
rename from packet_store_header.c
rename to src/pk/packet_store_header.c
index d750718a..a2442cc8 100644
--- a/packet_store_header.c
+++ b/src/pk/packet_store_header.c
@@ -6,15 +6,15 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
#ifdef PACKET
void packet_store_header(unsigned char *dst, int section, int subsection)
{
- _ARGCHK(dst != NULL);
+ LTC_ARGCHK(dst != NULL);
/* store version number */
dst[0] = (unsigned char)(CRYPT&255);
diff --git a/packet_valid_header.c b/src/pk/packet_valid_header.c
similarity index 86%
rename from packet_valid_header.c
rename to src/pk/packet_valid_header.c
index 7fda5073..b2eb9c94 100644
--- a/packet_valid_header.c
+++ b/src/pk/packet_valid_header.c
@@ -6,9 +6,9 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
#ifdef PACKET
@@ -16,7 +16,7 @@ int packet_valid_header(unsigned char *src, int section, int subsection)
{
unsigned long ver;
- _ARGCHK(src != NULL);
+ LTC_ARGCHK(src != NULL);
/* check version */
ver = ((unsigned long)src[0]) | ((unsigned long)src[1] << 8U);
diff --git a/pkcs_1_i2osp.c b/src/pk/pkcs1/pkcs_1_i2osp.c
similarity index 67%
rename from pkcs_1_i2osp.c
rename to src/pk/pkcs1/pkcs_1_i2osp.c
index 1a7faddb..7f13626c 100644
--- a/pkcs_1_i2osp.c
+++ b/src/pk/pkcs1/pkcs_1_i2osp.c
@@ -6,17 +6,28 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
-/* Integer to Octet I2OSP -- Tom St Denis */
+/**
+ @file pkcs_1_i2osp.c
+ Integer to Octet I2OSP, Tom St Denis
+*/
#ifdef PKCS_1
/* always stores the same # of bytes, pads with leading zero bytes
as required
*/
+
+/**
+ PKCS #1 Integer to binary
+ @param n The integer to store
+ @param modulus_len The length of the RSA modulus
+ @param out [out] The destination for the integer
+ @return CRYPT_OK if successful
+*/
int pkcs_1_i2osp(mp_int *n, unsigned long modulus_len, unsigned char *out)
{
int err;
diff --git a/pkcs_1_mgf1.c b/src/pk/pkcs1/pkcs_1_mgf1.c
similarity index 71%
rename from pkcs_1_mgf1.c
rename to src/pk/pkcs1/pkcs_1_mgf1.c
index 8b2bf8bd..0fe177fd 100644
--- a/pkcs_1_mgf1.c
+++ b/src/pk/pkcs1/pkcs_1_mgf1.c
@@ -6,25 +6,38 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
-/* The Mask Generation Function (MGF1) for PKCS #1 -- Tom St Denis */
+/**
+ @file pkcs_1_mgf1.c
+ The Mask Generation Function (MGF1) for PKCS #1, Tom St Denis
+*/
#ifdef PKCS_1
+/**
+ Perform PKCS #1 MGF1 (internal)
+ @param seed The seed for MGF1
+ @param seedlen The length of the seed
+ @param hash_idx The index of the hash desired
+ @param mask [out] The destination
+ @param masklen The length of the mask desired
+ @return CRYPT_OK if successful
+*/
int pkcs_1_mgf1(const unsigned char *seed, unsigned long seedlen,
int hash_idx,
unsigned char *mask, unsigned long masklen)
{
- unsigned long hLen, counter, x;
+ unsigned long hLen, x;
+ ulong32 counter;
int err;
hash_state *md;
unsigned char *buf;
- _ARGCHK(seed != NULL);
- _ARGCHK(mask != NULL);
+ LTC_ARGCHK(seed != NULL);
+ LTC_ARGCHK(mask != NULL);
/* ensure valid hash */
if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) {
@@ -57,16 +70,16 @@ int pkcs_1_mgf1(const unsigned char *seed, unsigned long seedlen,
/* get hash of seed || counter */
if ((err = hash_descriptor[hash_idx].init(md)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((err = hash_descriptor[hash_idx].process(md, seed, seedlen)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((err = hash_descriptor[hash_idx].process(md, buf, 4)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((err = hash_descriptor[hash_idx].done(md, buf)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* store it */
@@ -76,8 +89,8 @@ int pkcs_1_mgf1(const unsigned char *seed, unsigned long seedlen,
}
err = CRYPT_OK;
-__ERR:
-#ifdef CLEAN_STACK
+LBL_ERR:
+#ifdef LTC_CLEAN_STACK
zeromem(buf, hLen);
zeromem(md, sizeof(hash_state));
#endif
diff --git a/pkcs_1_oaep_decode.c b/src/pk/pkcs1/pkcs_1_oaep_decode.c
similarity index 74%
rename from pkcs_1_oaep_decode.c
rename to src/pk/pkcs1/pkcs_1_oaep_decode.c
index 2275bb31..82862c1e 100644
--- a/pkcs_1_oaep_decode.c
+++ b/src/pk/pkcs1/pkcs_1_oaep_decode.c
@@ -6,14 +6,30 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
-/* OAEP Padding for PKCS #1 -- Tom St Denis */
+/**
+ @file pkcs_1_oaep_decode.c
+ OAEP Padding for PKCS #1, Tom St Denis
+*/
#ifdef PKCS_1
+/**
+ PKCS #1 v2.00 OAEP decode
+ @param msg The encoded data to decode
+ @param msglen The length of the encoded data (octets)
+ @param lparam The session or system data (can be NULL)
+ @param lparamlen The length of the lparam
+ @param modulus_bitlen The bit length of the RSA modulus
+ @param hash_idx The index of the hash desired
+ @param out [out] Destination of decoding
+ @param outlen [in/out] The max size and resulting size of the decoding
+ @param res [out] Result of decoding, 1==valid, 0==invalid
+ @return CRYPT_OK if successful (even if invalid)
+*/
int pkcs_1_oaep_decode(const unsigned char *msg, unsigned long msglen,
const unsigned char *lparam, unsigned long lparamlen,
unsigned long modulus_bitlen, int hash_idx,
@@ -24,10 +40,10 @@ int pkcs_1_oaep_decode(const unsigned char *msg, unsigned long msglen,
unsigned long hLen, x, y, modulus_len;
int err;
- _ARGCHK(msg != NULL);
- _ARGCHK(out != NULL);
- _ARGCHK(outlen != NULL);
- _ARGCHK(res != NULL);
+ LTC_ARGCHK(msg != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+ LTC_ARGCHK(res != NULL);
/* default to invalid packet */
*res = 0;
@@ -39,6 +55,11 @@ int pkcs_1_oaep_decode(const unsigned char *msg, unsigned long msglen,
hLen = hash_descriptor[hash_idx].hashsize;
modulus_len = (modulus_bitlen >> 3) + (modulus_bitlen & 7 ? 1 : 0);
+ /* test hash/message size */
+ if ((2*hLen >= (modulus_len - 2)) || (msglen != modulus_len)) {
+ return CRYPT_PK_INVALID_SIZE;
+ }
+
/* allocate ram for DB/mask/salt of size modulus_len */
DB = XMALLOC(modulus_len);
mask = XMALLOC(modulus_len);
@@ -56,13 +77,6 @@ int pkcs_1_oaep_decode(const unsigned char *msg, unsigned long msglen,
return CRYPT_MEM;
}
-
- /* test message size */
- if (msglen != modulus_len) {
- err = CRYPT_PK_INVALID_SIZE;
- goto __ERR;
- }
-
/* ok so it's now in the form
0x00 || maskedseed || maskedDB
@@ -74,7 +88,7 @@ int pkcs_1_oaep_decode(const unsigned char *msg, unsigned long msglen,
/* must have leading 0x00 byte */
if (msg[0] != 0x00) {
err = CRYPT_OK;
- goto __ERR;
+ goto LBL_ERR;
}
/* now read the masked seed */
@@ -89,7 +103,7 @@ int pkcs_1_oaep_decode(const unsigned char *msg, unsigned long msglen,
/* compute MGF1 of maskedDB (hLen) */
if ((err = pkcs_1_mgf1(DB, modulus_len - hLen - 1, hash_idx, mask, hLen)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* XOR against seed */
@@ -99,7 +113,7 @@ int pkcs_1_oaep_decode(const unsigned char *msg, unsigned long msglen,
/* compute MGF1 of seed (k - hlen - 1) */
if ((err = pkcs_1_mgf1(seed, hLen, hash_idx, mask, modulus_len - hLen - 1)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* xor against DB */
@@ -113,19 +127,19 @@ int pkcs_1_oaep_decode(const unsigned char *msg, unsigned long msglen,
x = modulus_len;
if (lparam != NULL) {
if ((err = hash_memory(hash_idx, lparam, lparamlen, seed, &x)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
} else {
/* can't pass hash_memory a NULL so use DB with zero length */
if ((err = hash_memory(hash_idx, DB, 0, seed, &x)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
}
/* compare the lhash'es */
if (memcmp(seed, DB, hLen) != 0) {
err = CRYPT_OK;
- goto __ERR;
+ goto LBL_ERR;
}
/* now zeroes before a 0x01 */
@@ -136,13 +150,13 @@ int pkcs_1_oaep_decode(const unsigned char *msg, unsigned long msglen,
/* error out if wasn't 0x01 */
if (x == (modulus_len - hLen - 1) || DB[x] != 0x01) {
err = CRYPT_OK;
- goto __ERR;
+ goto LBL_ERR;
}
/* rest is the message (and skip 0x01) */
if ((modulus_len - hLen - 1) - ++x > *outlen) {
err = CRYPT_BUFFER_OVERFLOW;
- goto __ERR;
+ goto LBL_ERR;
}
/* copy message */
@@ -155,8 +169,8 @@ int pkcs_1_oaep_decode(const unsigned char *msg, unsigned long msglen,
*res = 1;
err = CRYPT_OK;
-__ERR:
-#ifdef CLEAN_STACK
+LBL_ERR:
+#ifdef LTC_CLEAN_STACK
zeromem(DB, modulus_len);
zeromem(seed, modulus_len);
zeromem(mask, modulus_len);
diff --git a/pkcs_1_oaep_encode.c b/src/pk/pkcs1/pkcs_1_oaep_encode.c
similarity index 73%
rename from pkcs_1_oaep_encode.c
rename to src/pk/pkcs1/pkcs_1_oaep_encode.c
index 56816e61..7afea602 100644
--- a/pkcs_1_oaep_encode.c
+++ b/src/pk/pkcs1/pkcs_1_oaep_encode.c
@@ -6,14 +6,31 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
-/* OAEP Padding for PKCS #1 -- Tom St Denis */
+/**
+ @file pkcs_1_oaep_encode.c
+ OAEP Padding for PKCS #1, Tom St Denis
+*/
#ifdef PKCS_1
+/**
+ PKCS #1 v2.00 OAEP encode
+ @param msg The data to encode
+ @param msglen The length of the data to encode (octets)
+ @param lparam A session or system parameter (can be NULL)
+ @param lparamlen The length of the lparam data
+ @param modulus_bitlen The bit length of the RSA modulus
+ @param prng An active PRNG state
+ @param prng_idx The index of the PRNG desired
+ @param hash_idx The index of the hash desired
+ @param out [out] The destination for the encoded data
+ @param outlen [in/out] The max size and resulting size of the encoded data
+ @return CRYPT_OK if successful
+*/
int pkcs_1_oaep_encode(const unsigned char *msg, unsigned long msglen,
const unsigned char *lparam, unsigned long lparamlen,
unsigned long modulus_bitlen, prng_state *prng,
@@ -24,9 +41,9 @@ int pkcs_1_oaep_encode(const unsigned char *msg, unsigned long msglen,
unsigned long hLen, x, y, modulus_len;
int err;
- _ARGCHK(msg != NULL);
- _ARGCHK(out != NULL);
- _ARGCHK(outlen != NULL);
+ LTC_ARGCHK(msg != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
/* test valid hash */
if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) {
@@ -41,6 +58,11 @@ int pkcs_1_oaep_encode(const unsigned char *msg, unsigned long msglen,
hLen = hash_descriptor[hash_idx].hashsize;
modulus_len = (modulus_bitlen >> 3) + (modulus_bitlen & 7 ? 1 : 0);
+ /* test message size */
+ if ((2*hLen >= (modulus_len - 2)) || (msglen > (modulus_len - 2*hLen - 2))) {
+ return CRYPT_PK_INVALID_SIZE;
+ }
+
/* allocate ram for DB/mask/salt of size modulus_len */
DB = XMALLOC(modulus_len);
mask = XMALLOC(modulus_len);
@@ -58,23 +80,17 @@ int pkcs_1_oaep_encode(const unsigned char *msg, unsigned long msglen,
return CRYPT_MEM;
}
- /* test message size */
- if (msglen > (modulus_len - 2*hLen - 2)) {
- err = CRYPT_PK_INVALID_SIZE;
- goto __ERR;
- }
-
/* get lhash */
/* DB == lhash || PS || 0x01 || M, PS == k - mlen - 2hlen - 2 zeroes */
x = modulus_len;
if (lparam != NULL) {
if ((err = hash_memory(hash_idx, lparam, lparamlen, DB, &x)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
} else {
/* can't pass hash_memory a NULL so use DB with zero length */
if ((err = hash_memory(hash_idx, DB, 0, DB, &x)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
}
@@ -95,12 +111,12 @@ int pkcs_1_oaep_encode(const unsigned char *msg, unsigned long msglen,
/* now choose a random seed */
if (prng_descriptor[prng_idx].read(seed, hLen, prng) != hLen) {
err = CRYPT_ERROR_READPRNG;
- goto __ERR;
+ goto LBL_ERR;
}
/* compute MGF1 of seed (k - hlen - 1) */
if ((err = pkcs_1_mgf1(seed, hLen, hash_idx, mask, modulus_len - hLen - 1)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* xor against DB */
@@ -110,7 +126,7 @@ int pkcs_1_oaep_encode(const unsigned char *msg, unsigned long msglen,
/* compute MGF1 of maskedDB (hLen) */
if ((err = pkcs_1_mgf1(DB, modulus_len - hLen - 1, hash_idx, mask, hLen)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* XOR against seed */
@@ -121,7 +137,7 @@ int pkcs_1_oaep_encode(const unsigned char *msg, unsigned long msglen,
/* create string of length modulus_len */
if (*outlen < modulus_len) {
err = CRYPT_BUFFER_OVERFLOW;
- goto __ERR;
+ goto LBL_ERR;
}
/* start output which is 0x00 || maskedSeed || maskedDB */
@@ -136,8 +152,8 @@ int pkcs_1_oaep_encode(const unsigned char *msg, unsigned long msglen,
*outlen = x;
err = CRYPT_OK;
-__ERR:
-#ifdef CLEAN_STACK
+LBL_ERR:
+#ifdef LTC_CLEAN_STACK
zeromem(DB, modulus_len);
zeromem(seed, modulus_len);
zeromem(mask, modulus_len);
diff --git a/pkcs_1_os2ip.c b/src/pk/pkcs1/pkcs_1_os2ip.c
similarity index 58%
rename from pkcs_1_os2ip.c
rename to src/pk/pkcs1/pkcs_1_os2ip.c
index cff881e8..db6b58c7 100644
--- a/pkcs_1_os2ip.c
+++ b/src/pk/pkcs1/pkcs_1_os2ip.c
@@ -6,13 +6,23 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
-/* Octet to Integer OS2IP -- Tom St Denis */
+/**
+ @file pkcs_1_os2ip.c
+ Octet to Integer OS2IP, Tom St Denis
+*/
#ifdef PKCS_1
+/**
+ Read a binary string into an mp_int
+ @param n [out] The mp_int destination
+ @param in The binary string to read
+ @param inlen The length of the binary string
+ @return CRYPT_OK if successful
+*/
int pkcs_1_os2ip(mp_int *n, unsigned char *in, unsigned long inlen)
{
int err;
diff --git a/pkcs_1_pss_decode.c b/src/pk/pkcs1/pkcs_1_pss_decode.c
similarity index 76%
rename from pkcs_1_pss_decode.c
rename to src/pk/pkcs1/pkcs_1_pss_decode.c
index 564c90c3..a19e7d8c 100644
--- a/pkcs_1_pss_decode.c
+++ b/src/pk/pkcs1/pkcs_1_pss_decode.c
@@ -6,14 +6,29 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
-/* PKCS #1 PSS Signature Padding -- Tom St Denis */
+/**
+ @file pkcs_1_pss_decode.c
+ PKCS #1 PSS Signature Padding, Tom St Denis
+*/
#ifdef PKCS_1
+/**
+ PKCS #1 v2.00 PSS decode
+ @param msghash The hash to verify
+ @param msghashlen The length of the hash (octets)
+ @param sig The signature data (encoded data)
+ @param siglen The length of the signature data (octets)
+ @param saltlen The length of the salt used (octets)
+ @param hash_idx The index of the hash desired
+ @param modulus_bitlen The bit length of the RSA modulus
+ @param res [out] The result of the comparison, 1==valid, 0==invalid
+ @return CRYPT_OK if successful (even if the comparison failed)
+*/
int pkcs_1_pss_decode(const unsigned char *msghash, unsigned long msghashlen,
const unsigned char *sig, unsigned long siglen,
unsigned long saltlen, int hash_idx,
@@ -24,8 +39,8 @@ int pkcs_1_pss_decode(const unsigned char *msghash, unsigned long msghashlen,
int err;
hash_state md;
- _ARGCHK(msghash != NULL);
- _ARGCHK(res != NULL);
+ LTC_ARGCHK(msghash != NULL);
+ LTC_ARGCHK(res != NULL);
/* default to invalid */
*res = 0;
@@ -38,6 +53,12 @@ int pkcs_1_pss_decode(const unsigned char *msghash, unsigned long msghashlen,
hLen = hash_descriptor[hash_idx].hashsize;
modulus_len = (modulus_bitlen>>3) + (modulus_bitlen & 7 ? 1 : 0);
+ /* check sizes */
+ if ((saltlen > modulus_len) ||
+ (modulus_len < hLen + saltlen + 2) || (siglen != modulus_len)) {
+ return CRYPT_PK_INVALID_SIZE;
+ }
+
/* allocate ram for DB/mask/salt/hash of size modulus_len */
DB = XMALLOC(modulus_len);
mask = XMALLOC(modulus_len);
@@ -59,17 +80,10 @@ int pkcs_1_pss_decode(const unsigned char *msghash, unsigned long msghashlen,
return CRYPT_MEM;
}
- /* check sizes */
- if ((saltlen > modulus_len) ||
- (modulus_len < hLen + saltlen + 2) || (siglen != modulus_len)) {
- err = CRYPT_INVALID_ARG;
- goto __ERR;
- }
-
/* ensure the 0xBC byte */
if (sig[siglen-1] != 0xBC) {
err = CRYPT_OK;
- goto __ERR;
+ goto LBL_ERR;
}
/* copy out the DB */
@@ -85,12 +99,12 @@ int pkcs_1_pss_decode(const unsigned char *msghash, unsigned long msghashlen,
/* check the MSB */
if ((sig[0] & ~(0xFF >> ((modulus_len<<3) - (modulus_bitlen-1)))) != 0) {
err = CRYPT_OK;
- goto __ERR;
+ goto LBL_ERR;
}
/* generate mask of length modulus_len - hLen - 1 from hash */
if ((err = pkcs_1_mgf1(hash, hLen, hash_idx, mask, modulus_len - hLen - 1)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* xor against DB */
@@ -107,32 +121,32 @@ int pkcs_1_pss_decode(const unsigned char *msghash, unsigned long msghashlen,
for (x = 0; x < modulus_len - saltlen - hLen - 2; x++) {
if (DB[x] != 0x00) {
err = CRYPT_OK;
- goto __ERR;
+ goto LBL_ERR;
}
}
/* check for the 0x01 */
if (DB[x++] != 0x01) {
err = CRYPT_OK;
- goto __ERR;
+ goto LBL_ERR;
}
/* M = (eight) 0x00 || msghash || salt, mask = H(M) */
if ((err = hash_descriptor[hash_idx].init(&md)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
zeromem(mask, 8);
if ((err = hash_descriptor[hash_idx].process(&md, mask, 8)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((err = hash_descriptor[hash_idx].process(&md, msghash, msghashlen)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((err = hash_descriptor[hash_idx].process(&md, DB+x, saltlen)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((err = hash_descriptor[hash_idx].done(&md, mask)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* mask == hash means valid signature */
@@ -141,8 +155,8 @@ int pkcs_1_pss_decode(const unsigned char *msghash, unsigned long msghashlen,
}
err = CRYPT_OK;
-__ERR:
-#ifdef CLEAN_STACK
+LBL_ERR:
+#ifdef LTC_CLEAN_STACK
zeromem(DB, modulus_len);
zeromem(mask, modulus_len);
zeromem(salt, modulus_len);
diff --git a/pkcs_1_pss_encode.c b/src/pk/pkcs1/pkcs_1_pss_encode.c
similarity index 76%
rename from pkcs_1_pss_encode.c
rename to src/pk/pkcs1/pkcs_1_pss_encode.c
index 43691fcc..58a03d52 100644
--- a/pkcs_1_pss_encode.c
+++ b/src/pk/pkcs1/pkcs_1_pss_encode.c
@@ -6,14 +6,30 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
-/* PKCS #1 PSS Signature Padding -- Tom St Denis */
+/**
+ @file pkcs_1_pss_encode.c
+ PKCS #1 PSS Signature Padding, Tom St Denis
+*/
#ifdef PKCS_1
+/**
+ PKCS #1 v2.00 Signature Encoding
+ @param msghash The hash to encode
+ @param msghashlen The length of the hash (octets)
+ @param saltlen The length of the salt desired (octets)
+ @param prng An active PRNG context
+ @param prng_idx The index of the PRNG desired
+ @param hash_idx The index of the hash desired
+ @param modulus_bitlen The bit length of the RSA modulus
+ @param out [out] The destination of the encoding
+ @param outlen [in/out] The max size and resulting size of the encoded data
+ @return CRYPT_OK if successful
+*/
int pkcs_1_pss_encode(const unsigned char *msghash, unsigned long msghashlen,
unsigned long saltlen, prng_state *prng,
int prng_idx, int hash_idx,
@@ -25,9 +41,9 @@ int pkcs_1_pss_encode(const unsigned char *msghash, unsigned long msghashlen,
int err;
hash_state md;
- _ARGCHK(msghash != NULL);
- _ARGCHK(out != NULL);
- _ARGCHK(outlen != NULL);
+ LTC_ARGCHK(msghash != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
/* ensure hash and PRNG are valid */
if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) {
@@ -40,6 +56,11 @@ int pkcs_1_pss_encode(const unsigned char *msghash, unsigned long msghashlen,
hLen = hash_descriptor[hash_idx].hashsize;
modulus_len = (modulus_bitlen>>3) + (modulus_bitlen & 7 ? 1 : 0);
+ /* check sizes */
+ if ((saltlen > modulus_len) || (modulus_len < hLen + saltlen + 2)) {
+ return CRYPT_PK_INVALID_SIZE;
+ }
+
/* allocate ram for DB/mask/salt/hash of size modulus_len */
DB = XMALLOC(modulus_len);
mask = XMALLOC(modulus_len);
@@ -62,36 +83,30 @@ int pkcs_1_pss_encode(const unsigned char *msghash, unsigned long msghashlen,
}
- /* check sizes */
- if ((saltlen > modulus_len) || (modulus_len < hLen + saltlen + 2)) {
- err = CRYPT_INVALID_ARG;
- goto __ERR;
- }
-
/* generate random salt */
if (saltlen > 0) {
if (prng_descriptor[prng_idx].read(salt, saltlen, prng) != saltlen) {
err = CRYPT_ERROR_READPRNG;
- goto __ERR;
+ goto LBL_ERR;
}
}
/* M = (eight) 0x00 || msghash || salt, hash = H(M) */
if ((err = hash_descriptor[hash_idx].init(&md)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
zeromem(DB, 8);
if ((err = hash_descriptor[hash_idx].process(&md, DB, 8)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((err = hash_descriptor[hash_idx].process(&md, msghash, msghashlen)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((err = hash_descriptor[hash_idx].process(&md, salt, saltlen)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((err = hash_descriptor[hash_idx].done(&md, hash)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* generate DB = PS || 0x01 || salt, PS == modulus_len - saltlen - hLen - 2 zero bytes */
@@ -105,7 +120,7 @@ int pkcs_1_pss_encode(const unsigned char *msghash, unsigned long msghashlen,
/* generate mask of length modulus_len - hLen - 1 from hash */
if ((err = pkcs_1_mgf1(hash, hLen, hash_idx, mask, modulus_len - hLen - 1)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* xor against DB */
@@ -116,7 +131,7 @@ int pkcs_1_pss_encode(const unsigned char *msghash, unsigned long msghashlen,
/* output is DB || hash || 0xBC */
if (*outlen < modulus_len) {
err = CRYPT_BUFFER_OVERFLOW;
- goto __ERR;
+ goto LBL_ERR;
}
/* DB */
@@ -136,8 +151,8 @@ int pkcs_1_pss_encode(const unsigned char *msghash, unsigned long msghashlen,
/* store output size */
*outlen = modulus_len;
err = CRYPT_OK;
-__ERR:
-#ifdef CLEAN_STACK
+LBL_ERR:
+#ifdef LTC_CLEAN_STACK
zeromem(DB, modulus_len);
zeromem(mask, modulus_len);
zeromem(salt, modulus_len);
diff --git a/pkcs_1_v15_es_decode.c b/src/pk/pkcs1/pkcs_1_v15_es_decode.c
similarity index 65%
rename from pkcs_1_v15_es_decode.c
rename to src/pk/pkcs1/pkcs_1_v15_es_decode.c
index 7de4c153..fc548459 100644
--- a/pkcs_1_v15_es_decode.c
+++ b/src/pk/pkcs1/pkcs_1_v15_es_decode.c
@@ -6,14 +6,27 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
-/* PKCS #1 v1.5 Encryption Padding -- Tom St Denis */
+/**
+ @file pkcs_1_v15_es_decode.c
+ PKCS #1 v1.5 Encryption Padding, Tom St Denis
+*/
#ifdef PKCS_1
+/**
+ PKCS #1 v1.5 Encryption Decoding
+ @param msg The padded data
+ @param msglen The length of the padded data (octets)
+ @param modulus_bitlen The bit length of the RSA modulus
+ @param out [out] Where to store the decoded data
+ @param outlen The length of the decoded data
+ @param res [out] Result of the decoding, 1==valid, 0==invalid
+ @return CRYPT_OK if successful
+*/
int pkcs_1_v15_es_decode(const unsigned char *msg, unsigned long msglen,
unsigned long modulus_bitlen,
unsigned char *out, unsigned long outlen,
@@ -21,9 +34,9 @@ int pkcs_1_v15_es_decode(const unsigned char *msg, unsigned long msglen,
{
unsigned long x, modulus_bytelen;
- _ARGCHK(msg != NULL);
- _ARGCHK(out != NULL);
- _ARGCHK(res != NULL);
+ LTC_ARGCHK(msg != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(res != NULL);
/* default to failed */
*res = 0;
diff --git a/pkcs_1_v15_es_encode.c b/src/pk/pkcs1/pkcs_1_v15_es_encode.c
similarity index 63%
rename from pkcs_1_v15_es_encode.c
rename to src/pk/pkcs1/pkcs_1_v15_es_encode.c
index 17947747..b6ac4298 100644
--- a/pkcs_1_v15_es_encode.c
+++ b/src/pk/pkcs1/pkcs_1_v15_es_encode.c
@@ -6,14 +6,28 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
-/* v1.5 Encryption Padding for PKCS #1 -- Tom St Denis */
+/**
+ @file pkcs_1_v15_es_encode.c
+ v1.5 Encryption Padding for PKCS #1, Tom St Denis
+*/
#ifdef PKCS_1
+/**
+ PKCS #1 v1.5 Encryption Padding
+ @param msg The data to encode
+ @param msglen The length of the data (octets)
+ @param modulus_bitlen The bit length of the RSA modulus
+ @param prng An active PRNG
+ @param prng_idx The index of the PRNG desired
+ @param out [out] The destination of the padding
+ @param outlen [in/out] The max size and resulting size of the padding
+ @return CRYPT_OK if successful
+*/
int pkcs_1_v15_es_encode(const unsigned char *msg, unsigned long msglen,
unsigned long modulus_bitlen,
prng_state *prng, int prng_idx,
@@ -21,9 +35,9 @@ int pkcs_1_v15_es_encode(const unsigned char *msg, unsigned long msglen,
{
unsigned long modulus_bytelen, x, y;
- _ARGCHK(msg != NULL);
- _ARGCHK(out != NULL);
- _ARGCHK(outlen != NULL);
+ LTC_ARGCHK(msg != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
/* get modulus len */
modulus_bytelen = (modulus_bitlen >> 3) + (modulus_bitlen & 7 ? 1 : 0);
diff --git a/pkcs_1_v15_sa_decode.c b/src/pk/pkcs1/pkcs_1_v15_sa_decode.c
similarity index 71%
rename from pkcs_1_v15_sa_decode.c
rename to src/pk/pkcs1/pkcs_1_v15_sa_decode.c
index 1b5307cc..7cad021a 100644
--- a/pkcs_1_v15_sa_decode.c
+++ b/src/pk/pkcs1/pkcs_1_v15_sa_decode.c
@@ -6,14 +6,28 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
-/* PKCS #1 v1.5 Signature Padding -- Tom St Denis */
+/**
+ @file pkcs_1_v15_sa_decode.c
+ PKCS #1 v1.5 Signature Padding, Tom St Denis
+*/
#ifdef PKCS_1
+/**
+ Perform PKCS #1 v1.5 Signature Decoding
+ @param msghash The hash that was signed
+ @param msghashlen The length of the hash
+ @param sig The signature [padded data]
+ @param siglen The length of the signature
+ @param hash_idx The index of the hash used
+ @param modulus_bitlen The bit length of the RSA modulus
+ @param res [out] Result of comparison, 1==valid, 0==invalid
+ @return CRYPT_OK if successful
+*/
int pkcs_1_v15_sa_decode(const unsigned char *msghash, unsigned long msghashlen,
const unsigned char *sig, unsigned long siglen,
int hash_idx, unsigned long modulus_bitlen,
@@ -22,9 +36,9 @@ int pkcs_1_v15_sa_decode(const unsigned char *msghash, unsigned long msghashlen,
unsigned long x, y, modulus_bytelen, derlen;
int err;
- _ARGCHK(msghash != NULL);
- _ARGCHK(sig != NULL);
- _ARGCHK(res != NULL);
+ LTC_ARGCHK(msghash != NULL);
+ LTC_ARGCHK(sig != NULL);
+ LTC_ARGCHK(res != NULL);
/* default to invalid */
*res = 0;
diff --git a/pkcs_1_v15_sa_encode.c b/src/pk/pkcs1/pkcs_1_v15_sa_encode.c
similarity index 69%
rename from pkcs_1_v15_sa_encode.c
rename to src/pk/pkcs1/pkcs_1_v15_sa_encode.c
index f0f258a8..60c77ef0 100644
--- a/pkcs_1_v15_sa_encode.c
+++ b/src/pk/pkcs1/pkcs_1_v15_sa_encode.c
@@ -6,14 +6,27 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
-/* PKCS #1 v1.5 Signature Padding -- Tom St Denis */
+/**
+ @file pkcs_1_v15_sa_encode.c
+ PKCS #1 v1.5 Signature Padding, Tom St Denis
+*/
#ifdef PKCS_1
+/**
+ Perform PKCS #1 v1.5 Signature Padding
+ @param msghash The hash you wish to incorporate in the padding
+ @param msghashlen The length of the hash
+ @param hash_idx The index of the hash used
+ @param modulus_bitlen The length of the RSA modulus that will sign this (bits)
+ @param out [out] Where to store the padded data
+ @param outlen [in/out] Max size and resulting size of the padded data
+ @return CRYPT_OK if successful
+*/
int pkcs_1_v15_sa_encode(const unsigned char *msghash, unsigned long msghashlen,
int hash_idx, unsigned long modulus_bitlen,
unsigned char *out, unsigned long *outlen)
@@ -21,9 +34,9 @@ int pkcs_1_v15_sa_encode(const unsigned char *msghash, unsigned long msghashlen
unsigned long derlen, modulus_bytelen, x, y;
int err;
- _ARGCHK(msghash != NULL)
- _ARGCHK(out != NULL);
- _ARGCHK(outlen != NULL);
+ LTC_ARGCHK(msghash != NULL)
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) {
return err;
diff --git a/src/pk/rsa/rsa_decrypt_key.c b/src/pk/rsa/rsa_decrypt_key.c
new file mode 100644
index 00000000..3117715b
--- /dev/null
+++ b/src/pk/rsa/rsa_decrypt_key.c
@@ -0,0 +1,89 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file rsa_decrypt_key.c
+ RSA PKCS #1 OAEP Decryption, Tom St Denis
+*/
+
+#ifdef MRSA
+
+/**
+ (PKCS #1 v2.0) decrypt then OAEP depad
+ @param in The ciphertext
+ @param inlen The length of the ciphertext (octets)
+ @param out [out] The plaintext
+ @param outlen [in/out] The max size and resulting size of the plaintext (octets)
+ @param lparam The system "lparam" value
+ @param lparamlen The length of the lparam value (octets)
+ @param hash_idx The index of the hash desired
+ @param stat [out] Result of the decryption, 1==valid, 0==invalid
+ @param key The corresponding private RSA key
+ @return CRYPT_OK if succcessul (even if invalid)
+*/
+int rsa_decrypt_key(const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen,
+ const unsigned char *lparam, unsigned long lparamlen,
+ int hash_idx, int *stat,
+ rsa_key *key)
+{
+ unsigned long modulus_bitlen, modulus_bytelen, x;
+ int err;
+ unsigned char *tmp;
+
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(stat != NULL);
+
+ /* default to invalid */
+ *stat = 0;
+
+ /* valid hash ? */
+ if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) {
+ return err;
+ }
+
+ /* get modulus len in bits */
+ modulus_bitlen = mp_count_bits(&(key->N));
+
+ /* outlen must be at least the size of the modulus */
+ modulus_bytelen = mp_unsigned_bin_size(&(key->N));
+ if (modulus_bytelen != inlen) {
+ return CRYPT_INVALID_PACKET;
+ }
+
+ /* allocate ram */
+ tmp = XMALLOC(inlen);
+ if (tmp == NULL) {
+ return CRYPT_MEM;
+ }
+
+ /* rsa decode the packet */
+ x = inlen;
+ if ((err = rsa_exptmod(in, inlen, tmp, &x, PK_PRIVATE, key)) != CRYPT_OK) {
+ XFREE(tmp);
+ return err;
+ }
+
+ /* now OAEP decode the packet */
+ err = pkcs_1_oaep_decode(tmp, x, lparam, lparamlen, modulus_bitlen, hash_idx,
+ out, outlen, stat);
+ XFREE(tmp);
+ return err;
+}
+
+#endif /* MRSA */
+
+
+
+
diff --git a/rsa_encrypt_key.c b/src/pk/rsa/rsa_encrypt_key.c
similarity index 50%
rename from rsa_encrypt_key.c
rename to src/pk/rsa/rsa_encrypt_key.c
index c0c8400f..891b43e0 100644
--- a/rsa_encrypt_key.c
+++ b/src/pk/rsa/rsa_encrypt_key.c
@@ -6,26 +6,43 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
-#include "mycrypt.h"
+/**
+ @file rsa_encrypt_key.c
+ RSA PKCS OAEP encryption, Tom St Denis
+*/
#ifdef MRSA
-/* (PKCS #1 v2.0) OAEP pad then encrypt */
-int rsa_encrypt_key(const unsigned char *inkey, unsigned long inlen,
- unsigned char *outkey, unsigned long *outlen,
+/**
+ (PKCS #1 v2.0) OAEP pad then encrypt
+ @param in The plaintext
+ @param inlen The length of the plaintext (octets)
+ @param out [out] The ciphertext
+ @param outlen [in/out] The max size and resulting size of the ciphertext
+ @param lparam The system "lparam" for the encryption
+ @param lparamlen The length of lparam (octets)
+ @param prng An active PRNG
+ @param prng_idx The index of the desired prng
+ @param hash_idx The index of the desired hash
+ @param key The RSA key to encrypt to
+ @return CRYPT_OK if successful
+*/
+int rsa_encrypt_key(const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen,
const unsigned char *lparam, unsigned long lparamlen,
prng_state *prng, int prng_idx, int hash_idx, rsa_key *key)
{
unsigned long modulus_bitlen, modulus_bytelen, x;
int err;
- _ARGCHK(inkey != NULL);
- _ARGCHK(outkey != NULL);
- _ARGCHK(outlen != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+ LTC_ARGCHK(key != NULL);
/* valid prng and hash ? */
if ((err = prng_is_valid(prng_idx)) != CRYPT_OK) {
@@ -46,14 +63,14 @@ int rsa_encrypt_key(const unsigned char *inkey, unsigned long inlen,
/* OAEP pad the key */
x = *outlen;
- if ((err = pkcs_1_oaep_encode(inkey, inlen, lparam,
+ if ((err = pkcs_1_oaep_encode(in, inlen, lparam,
lparamlen, modulus_bitlen, prng, prng_idx, hash_idx,
- outkey, &x)) != CRYPT_OK) {
+ out, &x)) != CRYPT_OK) {
return err;
}
/* rsa exptmod the OAEP pad */
- return rsa_exptmod(outkey, x, outkey, outlen, PK_PUBLIC, prng, prng_idx, key);
+ return rsa_exptmod(out, x, out, outlen, PK_PUBLIC, key);
}
#endif /* MRSA */
diff --git a/src/pk/rsa/rsa_export.c b/src/pk/rsa/rsa_export.c
new file mode 100644
index 00000000..951be702
--- /dev/null
+++ b/src/pk/rsa/rsa_export.c
@@ -0,0 +1,98 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file rsa_export.c
+ Export RSA PKCS keys, Tom St Denis
+*/
+
+#ifdef MRSA
+
+/**
+ This will export either an RSAPublicKey or RSAPrivateKey [defined in PKCS #1 v2.1]
+ @param out [out] Destination of the packet
+ @param outlen [in/out] The max size and resulting size of the packet
+ @param type The type of exported key (PK_PRIVATE or PK_PUBLIC)
+ @param key The RSA key to export
+ @return CRYPT_OK if successful
+*/
+int rsa_export(unsigned char *out, unsigned long *outlen, int type, rsa_key *key)
+{
+ int err, x;
+
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+ LTC_ARGCHK(key != NULL);
+
+ /* type valid? */
+ if (!(key->type == PK_PRIVATE) && (type == PK_PRIVATE)) {
+ return CRYPT_PK_INVALID_TYPE;
+ }
+ if (*outlen < 4) {
+ return CRYPT_BUFFER_OVERFLOW;
+ }
+
+ /* Mental Note: push space for the header 0x30 0x82 LL LL (LL = length of packet EXcluding 4 bytes)
+ * we assume LL > 255 which is true since the smallest RSA key has a 128-byte modulus (1024-bit)
+ */
+ *outlen -= 4;
+
+ if (type == PK_PRIVATE) {
+ /* private key */
+ mp_int zero;
+
+ /* first INTEGER == 0 to signify two-prime RSA */
+ if ((err = mp_init(&zero)) != MP_OKAY) {
+ return mpi_to_ltc_error(err);
+ }
+
+ /* output is
+ Version, n, e, d, p, q, d mod (p-1), d mod (q - 1), 1/q mod p
+ */
+ if ((err = der_put_multi_integer(
+ out+4, outlen, &zero, &key->N, &key->e,
+ &key->d, &key->p, &key->q, &key->dP,
+ &key->dQ, &key->qP, NULL)) != CRYPT_OK) {
+ mp_clear(&zero);
+ return err;
+ }
+
+ /* clear zero and return */
+ mp_clear(&zero);
+ } else {
+ /* public key */
+ if ((err = der_put_multi_integer(out+4, outlen, &key->N, &key->e, NULL)) != CRYPT_OK) {
+ return err;
+ }
+ }
+
+ /* store the header */
+ out[0] = 0x30;
+ if (*outlen < 256) {
+ /* shift the output up one byte if the header is only 3 bytes */
+ for (x = 0; x < *outlen; x++) {
+ out[x+3] = out[x+4];
+ }
+ out[1] = 0x81;
+ out[2] = (*outlen & 255);
+ *outlen += 3;
+ } else {
+ out[1] = 0x82;
+ out[2] = (*outlen >> 8) & 255;
+ out[3] = (*outlen & 255);
+ *outlen += 4;
+ }
+ return err;
+}
+
+#endif /* MRSA */
+
diff --git a/rsa_exptmod.c b/src/pk/rsa/rsa_exptmod.c
similarity index 61%
rename from rsa_exptmod.c
rename to src/pk/rsa/rsa_exptmod.c
index 2eebd86e..fda6cbb5 100644
--- a/rsa_exptmod.c
+++ b/src/pk/rsa/rsa_exptmod.c
@@ -6,34 +6,40 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
-/* RSA Code by Tom St Denis */
-#include "mycrypt.h"
+/**
+ @file rsa_exptmod.c
+ RSA PKCS exptmod, Tom St Denis
+*/
#ifdef MRSA
-/* compute an RSA modular exponentiation */
+/**
+ Compute an RSA modular exponentiation
+ @param in The input data to send into RSA
+ @param inlen The length of the input (octets)
+ @param out [out] The destination
+ @param outlen [in/out] The max size and resulting size of the output
+ @param which Which exponent to use, e.g. PK_PRIVATE or PK_PUBLIC
+ @param key The RSA key to use
+ @return CRYPT_OK if successful
+*/
int rsa_exptmod(const unsigned char *in, unsigned long inlen,
unsigned char *out, unsigned long *outlen, int which,
- prng_state *prng, int prng_idx,
rsa_key *key)
{
mp_int tmp, tmpa, tmpb;
unsigned long x;
int err;
- _ARGCHK(in != NULL);
- _ARGCHK(out != NULL);
- _ARGCHK(outlen != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+ LTC_ARGCHK(key != NULL);
- /* valid prng? */
- if ((err = prng_is_valid(prng_idx)) != CRYPT_OK) {
- return err;
- }
-
/* is the key of the right type for the operation? */
if (which == PK_PRIVATE && (key->type != PK_PRIVATE)) {
return CRYPT_PK_NOT_PRIVATE;
@@ -45,8 +51,8 @@ int rsa_exptmod(const unsigned char *in, unsigned long inlen,
}
/* init and copy into tmp */
- if ((err = mp_init_multi(&tmp, &tmpa, &tmpb, NULL)) != MP_OKAY) { return mpi_to_ltc_error(err); }
- if ((err = mp_read_unsigned_bin(&tmp, (unsigned char *)in, (int)inlen)) != MP_OKAY) { goto error; }
+ if ((err = mp_init_multi(&tmp, &tmpa, &tmpb, NULL)) != MP_OKAY) { return mpi_to_ltc_error(err); }
+ if ((err = mp_read_unsigned_bin(&tmp, (unsigned char *)in, (int)inlen)) != MP_OKAY) { goto error; }
/* sanity check on the input */
if (mp_cmp(&key->N, &tmp) == MP_LT) {
@@ -57,21 +63,21 @@ int rsa_exptmod(const unsigned char *in, unsigned long inlen,
/* are we using the private exponent and is the key optimized? */
if (which == PK_PRIVATE) {
/* tmpa = tmp^dP mod p */
- if ((err = tim_exptmod(prng, prng_idx, &tmp, &key->e, &key->dP, &key->p, &tmpa)) != MP_OKAY) { goto error; }
+ if ((err = mp_exptmod(&tmp, &key->dP, &key->p, &tmpa)) != MP_OKAY) { goto error; }
/* tmpb = tmp^dQ mod q */
- if ((err = tim_exptmod(prng, prng_idx, &tmp, &key->e, &key->dQ, &key->q, &tmpb)) != MP_OKAY) { goto error; }
+ if ((err = mp_exptmod(&tmp, &key->dQ, &key->q, &tmpb)) != MP_OKAY) { goto error; }
/* tmp = (tmpa - tmpb) * qInv (mod p) */
- if ((err = mp_sub(&tmpa, &tmpb, &tmp)) != MP_OKAY) { goto error; }
- if ((err = mp_mulmod(&tmp, &key->qP, &key->p, &tmp)) != MP_OKAY) { goto error; }
+ if ((err = mp_sub(&tmpa, &tmpb, &tmp)) != MP_OKAY) { goto error; }
+ if ((err = mp_mulmod(&tmp, &key->qP, &key->p, &tmp)) != MP_OKAY) { goto error; }
/* tmp = tmpb + q * tmp */
- if ((err = mp_mul(&tmp, &key->q, &tmp)) != MP_OKAY) { goto error; }
- if ((err = mp_add(&tmp, &tmpb, &tmp)) != MP_OKAY) { goto error; }
+ if ((err = mp_mul(&tmp, &key->q, &tmp)) != MP_OKAY) { goto error; }
+ if ((err = mp_add(&tmp, &tmpb, &tmp)) != MP_OKAY) { goto error; }
} else {
/* exptmod it */
- if ((err = mp_exptmod(&tmp, &key->e, &key->N, &tmp)) != MP_OKAY) { goto error; }
+ if ((err = mp_exptmod(&tmp, &key->e, &key->N, &tmp)) != MP_OKAY) { goto error; }
}
/* read it back */
@@ -84,7 +90,7 @@ int rsa_exptmod(const unsigned char *in, unsigned long inlen,
/* convert it */
zeromem(out, x);
- if ((err = mp_to_unsigned_bin(&tmp, out+(x-mp_unsigned_bin_size(&tmp)))) != MP_OKAY) { goto error; }
+ if ((err = mp_to_unsigned_bin(&tmp, out+(x-mp_unsigned_bin_size(&tmp)))) != MP_OKAY) { goto error; }
/* clean up and return */
err = CRYPT_OK;
diff --git a/rsa_free.c b/src/pk/rsa/rsa_free.c
similarity index 64%
rename from rsa_free.c
rename to src/pk/rsa/rsa_free.c
index 45627885..85ade97d 100644
--- a/rsa_free.c
+++ b/src/pk/rsa/rsa_free.c
@@ -6,17 +6,24 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
-/* RSA Code by Tom St Denis */
-#include "mycrypt.h"
+/**
+ @file rsa_free.c
+ Free an RSA key, Tom St Denis
+*/
#ifdef MRSA
+/**
+ Free an RSA key from memory
+ @param key The RSA key to free
+*/
void rsa_free(rsa_key *key)
{
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(key != NULL);
mp_clear_multi(&key->e, &key->d, &key->N, &key->dQ, &key->dP,
&key->qP, &key->p, &key->q, NULL);
}
diff --git a/rsa_import.c b/src/pk/rsa/rsa_import.c
similarity index 51%
rename from rsa_import.c
rename to src/pk/rsa/rsa_import.c
index 02b4ca8e..5408df06 100644
--- a/rsa_import.c
+++ b/src/pk/rsa/rsa_import.c
@@ -6,21 +6,31 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
-#include "mycrypt.h"
+/**
+ @file rsa_import.c
+ Import a PKCS RSA key, Tom St Denis
+*/
#ifdef MRSA
-/* import an RSAPublicKey or RSAPrivateKey [two-prime only, defined in PKCS #1 v2.1] */
+/**
+ Import an RSAPublicKey or RSAPrivateKey [two-prime only, defined in PKCS #1 v2.1]
+ @param in The packet to import from
+ @param inlen It's length (octets)
+ @param key [out] Destination for newly imported key
+ @return CRYPT_OK if successful, upon error allocated memory is freed
+*/
int rsa_import(const unsigned char *in, unsigned long inlen, rsa_key *key)
{
- unsigned long x;
+ unsigned long x, y;
int err;
- _ARGCHK(in != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(key != NULL);
/* init key */
if ((err = mp_init_multi(&key->e, &key->d, &key->N, &key->dQ, &key->dP, &key->qP,
@@ -28,10 +38,39 @@ int rsa_import(const unsigned char *in, unsigned long inlen, rsa_key *key)
return mpi_to_ltc_error(err);
}
+ /* check the header */
+ if (inlen < 4) {
+ return CRYPT_INVALID_PACKET;
+ }
+
+ /* should be 0x30 0x8{1|2} LL LL */
+ if ((in[0] != 0x30) || ((in[1] != 0x81) && (in[1] != 0x82))) {
+ return CRYPT_INVALID_PACKET;
+ }
+
+ /* ok all the ASN.1 params are fine so far, let's move up */
+ x = ((unsigned long)in[2]);
+ y = 0;
+ if ((in[1] & ~0x80) == 2) {
+ x = (x << 8) + ((unsigned long)in[3]) + 1;
+ in += 1;
+ y = 1;
+ }
+ in += 3; /* advance input */
+ x += 3; /* size of packet according to header */
+ y += 3; /* used input */
+
+ if (x != inlen) {
+ return CRYPT_INVALID_PACKET;
+ }
+
+ /* decrement inlen by the header size */
+ inlen -= y;
+
/* read first number, it's either N or 0 [0 == private key] */
x = inlen;
if ((err = der_get_multi_integer(in, &x, &key->N, NULL)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* advance */
@@ -43,14 +82,18 @@ int rsa_import(const unsigned char *in, unsigned long inlen, rsa_key *key)
if ((err = der_get_multi_integer(in, &inlen, &key->N, &key->e,
&key->d, &key->p, &key->q, &key->dP,
&key->dQ, &key->qP, NULL)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
key->type = PK_PRIVATE;
+ } else if (mp_cmp_d(&key->N, 1) == MP_EQ) {
+ /* we don't support multi-prime RSA */
+ err = CRYPT_PK_INVALID_TYPE;
+ goto LBL_ERR;
} else {
/* it's a public key and we lack e */
if ((err = der_get_multi_integer(in, &inlen, &key->e, NULL)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* free up some ram */
@@ -59,7 +102,7 @@ int rsa_import(const unsigned char *in, unsigned long inlen, rsa_key *key)
key->type = PK_PUBLIC;
}
return CRYPT_OK;
-__ERR:
+LBL_ERR:
mp_clear_multi(&key->d, &key->e, &key->N, &key->dQ, &key->dP,
&key->qP, &key->p, &key->q, NULL);
return err;
diff --git a/rsa_make_key.c b/src/pk/rsa/rsa_make_key.c
similarity index 88%
rename from rsa_make_key.c
rename to src/pk/rsa/rsa_make_key.c
index fc954501..9d49e3ce 100644
--- a/rsa_make_key.c
+++ b/src/pk/rsa/rsa_make_key.c
@@ -6,20 +6,32 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
-/* RSA Code by Tom St Denis */
-#include "mycrypt.h"
+/**
+ @file rsa_make_key.c
+ RSA key generation, Tom St Denis
+*/
#ifdef MRSA
+/**
+ Create an RSA key
+ @param prng An active PRNG state
+ @param wprng The index of the PRNG desired
+ @param size The size of the modulus (key size) desired (octets)
+ @param e The "e" value (public key). e==65537 is a good choice
+ @param key [out] Destination of a newly created private key pair
+ @return CRYPT_OK if successful, upon error all allocated ram is freed
+*/
int rsa_make_key(prng_state *prng, int wprng, int size, long e, rsa_key *key)
{
mp_int p, q, tmp1, tmp2, tmp3;
int err;
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(key != NULL);
if ((size < (MIN_RSA_SIZE/8)) || (size > (MAX_RSA_SIZE/8))) {
return CRYPT_INVALID_KEYSIZE;
diff --git a/src/pk/rsa/rsa_sign_hash.c b/src/pk/rsa/rsa_sign_hash.c
new file mode 100644
index 00000000..b86ad64f
--- /dev/null
+++ b/src/pk/rsa/rsa_sign_hash.c
@@ -0,0 +1,75 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file rsa_sign_hash.c
+ RSA PKCS v2 PSS sign hash, Tom St Denis
+*/
+
+#ifdef MRSA
+
+/**
+ (PKCS #1, v2.0) PSS pad then sign
+ @param in The hash to sign
+ @param inlen The length of the hash to sign (octets)
+ @param out [out] The signature
+ @param outlen [in/out] The max size and resulting size of the signature
+ @param prng An active PRNG state
+ @param prng_idx The index of the PRNG desired
+ @param hash_idx The index of the hash desired
+ @param saltlen The length of the salt desired (octets)
+ @param key The private RSA key to use
+ @return CRYPT_OK if successful
+*/
+int rsa_sign_hash(const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen,
+ prng_state *prng, int prng_idx,
+ int hash_idx, unsigned long saltlen,
+ rsa_key *key)
+{
+ unsigned long modulus_bitlen, modulus_bytelen, x;
+ int err;
+
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+ LTC_ARGCHK(key != NULL);
+
+ /* valid prng and hash ? */
+ if ((err = prng_is_valid(prng_idx)) != CRYPT_OK) {
+ return err;
+ }
+ if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) {
+ return err;
+ }
+
+ /* get modulus len in bits */
+ modulus_bitlen = mp_count_bits(&(key->N));
+
+ /* outlen must be at least the size of the modulus */
+ modulus_bytelen = mp_unsigned_bin_size(&(key->N));
+ if (modulus_bytelen > *outlen) {
+ return CRYPT_BUFFER_OVERFLOW;
+ }
+
+ /* PSS pad the key */
+ x = *outlen;
+ if ((err = pkcs_1_pss_encode(in, inlen, saltlen, prng, prng_idx,
+ hash_idx, modulus_bitlen, out, &x)) != CRYPT_OK) {
+ return err;
+ }
+
+ /* RSA encode it */
+ return rsa_exptmod(out, x, out, outlen, PK_PRIVATE, key);
+}
+
+#endif /* MRSA */
diff --git a/src/pk/rsa/rsa_v15_decrypt_key.c b/src/pk/rsa/rsa_v15_decrypt_key.c
new file mode 100644
index 00000000..eb5fe7d9
--- /dev/null
+++ b/src/pk/rsa/rsa_v15_decrypt_key.c
@@ -0,0 +1,73 @@
+ /* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file rsa_v15_decrypt_key.c
+ RSA PKCS v1.5 Decryption, Tom St Denis
+*/
+
+#ifdef MRSA
+
+/**
+ RSA decrypt then PKCS #1 v1.5 depad
+ @param in The ciphertext
+ @param inlen The length of the ciphertext (octets)
+ @param out [out] The plaintext
+ @param outlen The length of the plaintext (you have to tell this function as it's not part of PKCS #1 v1.0 padding!)
+ @param stat [out] Status of decryption, 1==valid, 0==invalid
+ @param key The corresponding private RSA key
+ @return CRYPT_OK if successful (even if invalid)
+*/
+int rsa_v15_decrypt_key(const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long outlen,
+ int *stat, rsa_key *key)
+{
+ unsigned long modulus_bitlen, modulus_bytelen, x;
+ int err;
+ unsigned char *tmp;
+
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(key != NULL);
+ LTC_ARGCHK(stat != NULL);
+
+ /* default to invalid */
+ *stat = 0;
+
+ /* get modulus len in bits */
+ modulus_bitlen = mp_count_bits(&(key->N));
+
+ /* outlen must be at least the size of the modulus */
+ modulus_bytelen = mp_unsigned_bin_size(&(key->N));
+ if (modulus_bytelen != inlen) {
+ return CRYPT_INVALID_PACKET;
+ }
+
+ /* allocate ram */
+ tmp = XMALLOC(inlen);
+ if (tmp == NULL) {
+ return CRYPT_MEM;
+ }
+
+ /* rsa decode the packet */
+ x = inlen;
+ if ((err = rsa_exptmod(in, inlen, tmp, &x, PK_PRIVATE, key)) != CRYPT_OK) {
+ XFREE(tmp);
+ return err;
+ }
+
+ /* PKCS #1 v1.5 depad */
+ err = pkcs_1_v15_es_decode(tmp, x, modulus_bitlen, out, outlen, stat);
+ XFREE(tmp);
+ return err;
+}
+
+#endif
diff --git a/src/pk/rsa/rsa_v15_encrypt_key.c b/src/pk/rsa/rsa_v15_encrypt_key.c
new file mode 100644
index 00000000..d422f67b
--- /dev/null
+++ b/src/pk/rsa/rsa_v15_encrypt_key.c
@@ -0,0 +1,68 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file rsa_v15_encrypt_key.c
+ RSA PKCS v1.5 Encryption, Tom St Denis
+*/
+
+#ifdef MRSA
+
+/**
+ PKCS #1 v1.5 pad then encrypt
+ @param in The plaintext
+ @param inlen The length of the plaintext (octets)
+ @param out [out] The ciphertext
+ @param outlen [in/out] The max size and resulting size of the ciphertext
+ @param prng An active PRNG
+ @param prng_idx The index of the desired PRNG
+ @param key The public RSA key
+ @return CRYPT_OK if successful
+*/
+int rsa_v15_encrypt_key(const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *outlen,
+ prng_state *prng, int prng_idx,
+ rsa_key *key)
+{
+ unsigned long modulus_bitlen, modulus_bytelen, x;
+ int err;
+
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+ LTC_ARGCHK(key != NULL);
+
+ /* valid prng? */
+ if ((err = prng_is_valid(prng_idx)) != CRYPT_OK) {
+ return err;
+ }
+
+ /* get modulus len in bits */
+ modulus_bitlen = mp_count_bits(&(key->N));
+
+ /* outlen must be at least the size of the modulus */
+ modulus_bytelen = mp_unsigned_bin_size(&(key->N));
+ if (modulus_bytelen > *outlen) {
+ return CRYPT_BUFFER_OVERFLOW;
+ }
+
+ /* pad it */
+ x = *outlen;
+ if ((err = pkcs_1_v15_es_encode(in, inlen, modulus_bitlen, prng, prng_idx, out, &x)) != CRYPT_OK) {
+ return err;
+ }
+
+ /* encrypt it */
+ return rsa_exptmod(out, x, out, outlen, PK_PUBLIC, key);
+}
+
+#endif
diff --git a/src/pk/rsa/rsa_v15_sign_hash.c b/src/pk/rsa/rsa_v15_sign_hash.c
new file mode 100644
index 00000000..7e9b3505
--- /dev/null
+++ b/src/pk/rsa/rsa_v15_sign_hash.c
@@ -0,0 +1,66 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file rsa_v15_sign_hash.c
+ RSA PKCS v1.5 Signature, Tom St Denis
+*/
+
+#ifdef MRSA
+
+/**
+ PKCS #1 v1.5 pad then sign
+ @param in The hash to sign
+ @param inlen The length of the message hash (octets)
+ @param out [out] The signature
+ @param siglen [in/out] The max size and resulting size of the signature
+ @param hash_idx The index of the hash desired
+ @param key The private RSA key to perform the signature with
+ @return CRYPT_OK if successful
+*/
+int rsa_v15_sign_hash(const unsigned char *in, unsigned long inlen,
+ unsigned char *out, unsigned long *siglen,
+ int hash_idx, rsa_key *key)
+{
+ unsigned long modulus_bitlen, modulus_bytelen, x;
+ int err;
+
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(siglen != NULL);
+ LTC_ARGCHK(key != NULL);
+
+ /* valid hash ? */
+ if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) {
+ return err;
+ }
+
+ /* get modulus len in bits */
+ modulus_bitlen = mp_count_bits(&(key->N));
+
+ /* outlen must be at least the size of the modulus */
+ modulus_bytelen = mp_unsigned_bin_size(&(key->N));
+ if (modulus_bytelen > *siglen) {
+ return CRYPT_BUFFER_OVERFLOW;
+ }
+
+ /* PKCS #1 v1.5 pad the key */
+ x = *siglen;
+ if ((err = pkcs_1_v15_sa_encode(in, inlen, hash_idx, modulus_bitlen, out, &x)) != CRYPT_OK) {
+ return err;
+ }
+
+ /* RSA encode it */
+ return rsa_exptmod(out, x, out, siglen, PK_PRIVATE, key);
+}
+
+#endif
diff --git a/rsa_v15_verify_hash.c b/src/pk/rsa/rsa_v15_verify_hash.c
similarity index 52%
rename from rsa_v15_verify_hash.c
rename to src/pk/rsa/rsa_v15_verify_hash.c
index 6f6ee995..e742cba0 100644
--- a/rsa_v15_verify_hash.c
+++ b/src/pk/rsa/rsa_v15_verify_hash.c
@@ -6,17 +6,30 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
-#include "mycrypt.h"
+/**
+ @file rsa_v15_verify_hash.c
+ RSA PKCS v1.5 Signature verification, Tom St Denis
+*/
#ifdef MRSA
-/* de-sign then PKCS v1.5 depad */
+/**
+ RSA de-sign then PKCS v1.5 signature depad
+ @param sig The signature data
+ @param siglen The length of the signature (octets)
+ @param hash The hash of the message that was signed
+ @param hashlen The length of the hash of the message that was signed (octets)
+ @param hash_idx The index of the desired hash
+ @param stat [out] The result of the signature comparison, 1==valid, 0==invalid
+ @param key The corresponding public RSA key that performed the signature
+ @return CRYPT_OK if successful (even if the signature is invalid)
+*/
int rsa_v15_verify_hash(const unsigned char *sig, unsigned long siglen,
- const unsigned char *msghash, unsigned long msghashlen,
- prng_state *prng, int prng_idx,
+ const unsigned char *hash, unsigned long hashlen,
int hash_idx, int *stat,
rsa_key *key)
{
@@ -24,10 +37,10 @@ int rsa_v15_verify_hash(const unsigned char *sig, unsigned long siglen,
int err;
unsigned char *tmpbuf;
- _ARGCHK(msghash != NULL);
- _ARGCHK(sig != NULL);
- _ARGCHK(stat != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(hash != NULL);
+ LTC_ARGCHK(sig != NULL);
+ LTC_ARGCHK(stat != NULL);
+ LTC_ARGCHK(key != NULL);
/* default to invalid */
*stat = 0;
@@ -36,10 +49,6 @@ int rsa_v15_verify_hash(const unsigned char *sig, unsigned long siglen,
if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) {
return err;
}
-
- if ((err = prng_is_valid(prng_idx)) != CRYPT_OK) {
- return err;
- }
/* get modulus len in bits */
modulus_bitlen = mp_count_bits(&(key->N));
@@ -58,13 +67,13 @@ int rsa_v15_verify_hash(const unsigned char *sig, unsigned long siglen,
/* RSA decode it */
x = siglen;
- if ((err = rsa_exptmod(sig, siglen, tmpbuf, &x, PK_PUBLIC, prng, prng_idx, key)) != CRYPT_OK) {
+ if ((err = rsa_exptmod(sig, siglen, tmpbuf, &x, PK_PUBLIC, key)) != CRYPT_OK) {
XFREE(tmpbuf);
return err;
}
/* PSS decode it */
- err = pkcs_1_v15_sa_decode(msghash, msghashlen, tmpbuf, x, hash_idx, modulus_bitlen, stat);
+ err = pkcs_1_v15_sa_decode(hash, hashlen, tmpbuf, x, hash_idx, modulus_bitlen, stat);
XFREE(tmpbuf);
return err;
}
diff --git a/rsa_verify_hash.c b/src/pk/rsa/rsa_verify_hash.c
similarity index 51%
rename from rsa_verify_hash.c
rename to src/pk/rsa/rsa_verify_hash.c
index 1da1af39..7072083d 100644
--- a/rsa_verify_hash.c
+++ b/src/pk/rsa/rsa_verify_hash.c
@@ -6,17 +6,31 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
-#include "mycrypt.h"
+/**
+ @file rsa_verify_hash.c
+ RSA PKCS v2 PSS signature verification, Tom St Denis
+*/
#ifdef MRSA
-/* (PKCS #1, v2.0) de-sign then PSS depad */
+/**
+ (PKCS #1, v2.0) de-sign then PSS depad
+ @param sig The signature data
+ @param siglen The length of the signature data (octets)
+ @param hash The hash of the message that was signed
+ @param hashlen The length of the hash of the message that was signed (octets)
+ @param hash_idx The index of the desired hash
+ @param saltlen The length of the salt used during signature
+ @param stat [out] The result of the signature comparison, 1==valid, 0==invalid
+ @param key The public RSA key corresponding to the key that performed the signature
+ @return CRYPT_OK on success (even if the signature is invalid)
+*/
int rsa_verify_hash(const unsigned char *sig, unsigned long siglen,
- const unsigned char *msghash, unsigned long msghashlen,
- prng_state *prng, int prng_idx,
+ const unsigned char *hash, unsigned long hashlen,
int hash_idx, unsigned long saltlen,
int *stat, rsa_key *key)
{
@@ -24,10 +38,10 @@ int rsa_verify_hash(const unsigned char *sig, unsigned long siglen,
int err;
unsigned char *tmpbuf;
- _ARGCHK(msghash != NULL);
- _ARGCHK(sig != NULL);
- _ARGCHK(stat != NULL);
- _ARGCHK(key != NULL);
+ LTC_ARGCHK(hash != NULL);
+ LTC_ARGCHK(sig != NULL);
+ LTC_ARGCHK(stat != NULL);
+ LTC_ARGCHK(key != NULL);
/* default to invalid */
*stat = 0;
@@ -36,10 +50,6 @@ int rsa_verify_hash(const unsigned char *sig, unsigned long siglen,
if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) {
return err;
}
-
- if ((err = prng_is_valid(prng_idx)) != CRYPT_OK) {
- return err;
- }
/* get modulus len in bits */
modulus_bitlen = mp_count_bits(&(key->N));
@@ -58,13 +68,13 @@ int rsa_verify_hash(const unsigned char *sig, unsigned long siglen,
/* RSA decode it */
x = siglen;
- if ((err = rsa_exptmod(sig, siglen, tmpbuf, &x, PK_PUBLIC, prng, prng_idx, key)) != CRYPT_OK) {
+ if ((err = rsa_exptmod(sig, siglen, tmpbuf, &x, PK_PUBLIC, key)) != CRYPT_OK) {
XFREE(tmpbuf);
return err;
}
/* PSS decode it */
- err = pkcs_1_pss_decode(msghash, msghashlen, tmpbuf, x, saltlen, hash_idx, modulus_bitlen, stat);
+ err = pkcs_1_pss_decode(hash, hashlen, tmpbuf, x, saltlen, hash_idx, modulus_bitlen, stat);
XFREE(tmpbuf);
return err;
}
diff --git a/fortuna.c b/src/prngs/fortuna.c
similarity index 73%
rename from fortuna.c
rename to src/prngs/fortuna.c
index 5d81255b..4548a901 100644
--- a/fortuna.c
+++ b/src/prngs/fortuna.c
@@ -6,17 +6,21 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
+/**
+ @file fortuna.c
+ Fortuna PRNG, Tom St Denis
+*/
+
/* Implementation of Fortuna by Tom St Denis
We deviate slightly here for reasons of simplicity [and to fit in the API]. First all "sources"
in the AddEntropy function are fixed to 0. Second since no reliable timer is provided
we reseed automatically when len(pool0) >= 64 or every FORTUNA_WD calls to the read function */
-#include "mycrypt.h"
-
#ifdef FORTUNA
/* requries SHA256 and AES */
@@ -33,7 +37,7 @@ we reseed automatically when len(pool0) >= 64 or every FORTUNA_WD calls to the r
#error FORTUNA_POOLS must be in [4..32]
#endif
-const struct _prng_descriptor fortuna_desc = {
+const struct ltc_prng_descriptor fortuna_desc = {
"fortuna", 1024,
&fortuna_start,
&fortuna_add_entropy,
@@ -104,7 +108,7 @@ static int fortuna_reseed(prng_state *prng)
prng->fortuna.wd = 0;
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(&md, sizeof(md));
zeromem(tmp, sizeof(tmp));
#endif
@@ -112,11 +116,16 @@ static int fortuna_reseed(prng_state *prng)
return CRYPT_OK;
}
+/**
+ Start the PRNG
+ @param prng [out] The PRNG state to initialize
+ @return CRYPT_OK if successful
+*/
int fortuna_start(prng_state *prng)
{
int err, x;
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(prng != NULL);
/* initialize the pools */
for (x = 0; x < FORTUNA_POOLS; x++) {
@@ -135,30 +144,37 @@ int fortuna_start(prng_state *prng)
return CRYPT_OK;
}
-int fortuna_add_entropy(const unsigned char *buf, unsigned long len, prng_state *prng)
+/**
+ Add entropy to the PRNG state
+ @param in The data to add
+ @param inlen Length of the data to add
+ @param prng PRNG state to update
+ @return CRYPT_OK if successful
+*/
+int fortuna_add_entropy(const unsigned char *in, unsigned long inlen, prng_state *prng)
{
unsigned char tmp[2];
int err;
- _ARGCHK(buf != NULL);
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(prng != NULL);
- /* ensure len <= 32 */
- if (len > 32) {
+ /* ensure inlen <= 32 */
+ if (inlen > 32) {
return CRYPT_INVALID_ARG;
}
- /* add s || length(buf) || buf to pool[pool_idx] */
+ /* add s || length(in) || in to pool[pool_idx] */
tmp[0] = 0;
- tmp[1] = len;
+ tmp[1] = inlen;
if ((err = sha256_process(&prng->fortuna.pool[prng->fortuna.pool_idx], tmp, 2)) != CRYPT_OK) {
return err;
}
- if ((err = sha256_process(&prng->fortuna.pool[prng->fortuna.pool_idx], buf, len)) != CRYPT_OK) {
+ if ((err = sha256_process(&prng->fortuna.pool[prng->fortuna.pool_idx], in, inlen)) != CRYPT_OK) {
return err;
}
if (prng->fortuna.pool_idx == 0) {
- prng->fortuna.pool0_len += len;
+ prng->fortuna.pool0_len += inlen;
}
if (++(prng->fortuna.pool_idx) == FORTUNA_POOLS) {
prng->fortuna.pool_idx = 0;
@@ -167,19 +183,31 @@ int fortuna_add_entropy(const unsigned char *buf, unsigned long len, prng_state
return CRYPT_OK;
}
+/**
+ Make the PRNG ready to read from
+ @param prng The PRNG to make active
+ @return CRYPT_OK if successful
+*/
int fortuna_ready(prng_state *prng)
{
return fortuna_reseed(prng);
}
-unsigned long fortuna_read(unsigned char *dst, unsigned long len, prng_state *prng)
+/**
+ Read from the PRNG
+ @param out Destination
+ @param outlen Length of output
+ @param prng The active PRNG to read from
+ @return Number of octets read
+*/
+unsigned long fortuna_read(unsigned char *out, unsigned long outlen, prng_state *prng)
{
unsigned char tmp[16];
int err;
unsigned long tlen;
- _ARGCHK(dst != NULL);
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(prng != NULL);
/* do we have to reseed? */
if (++prng->fortuna.wd == FORTUNA_WD || prng->fortuna.pool0_len >= 64) {
@@ -189,21 +217,21 @@ unsigned long fortuna_read(unsigned char *dst, unsigned long len, prng_state *pr
}
/* now generate the blocks required */
- tlen = len;
+ tlen = outlen;
/* handle whole blocks without the extra memcpy */
- while (len >= 16) {
+ while (outlen >= 16) {
/* encrypt the IV and store it */
- rijndael_ecb_encrypt(prng->fortuna.IV, dst, &prng->fortuna.skey);
- dst += 16;
- len -= 16;
+ rijndael_ecb_encrypt(prng->fortuna.IV, out, &prng->fortuna.skey);
+ out += 16;
+ outlen -= 16;
fortuna_update_iv(prng);
}
/* left over bytes? */
- if (len > 0) {
+ if (outlen > 0) {
rijndael_ecb_encrypt(prng->fortuna.IV, tmp, &prng->fortuna.skey);
- XMEMCPY(dst, tmp, len);
+ XMEMCPY(out, tmp, outlen);
fortuna_update_iv(prng);
}
@@ -214,18 +242,23 @@ unsigned long fortuna_read(unsigned char *dst, unsigned long len, prng_state *pr
return 0;
}
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(tmp, sizeof(tmp));
#endif
return tlen;
}
+/**
+ Terminate the PRNG
+ @param prng The PRNG to terminate
+ @return CRYPT_OK if successful
+*/
int fortuna_done(prng_state *prng)
{
int err, x;
unsigned char tmp[32];
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(prng != NULL);
/* terminate all the hashes */
for (x = 0; x < FORTUNA_POOLS; x++) {
@@ -235,21 +268,28 @@ int fortuna_done(prng_state *prng)
}
/* call cipher done when we invent one ;-) */
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(tmp, sizeof(tmp));
#endif
return CRYPT_OK;
}
+/**
+ Export the PRNG state
+ @param out [out] Destination
+ @param outlen [in/out] Max size and resulting size of the state
+ @param prng The PRNG to export
+ @return CRYPT_OK if successful
+*/
int fortuna_export(unsigned char *out, unsigned long *outlen, prng_state *prng)
{
int x, err;
hash_state *md;
- _ARGCHK(out != NULL);
- _ARGCHK(outlen != NULL);
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+ LTC_ARGCHK(prng != NULL);
/* we'll write bytes for s&g's */
if (*outlen < 32*FORTUNA_POOLS) {
@@ -270,37 +310,44 @@ int fortuna_export(unsigned char *out, unsigned long *outlen, prng_state *prng)
/* terminate it */
if ((err = sha256_done(md, out+x*32)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
/* now hash it */
if ((err = sha256_init(md)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((err = sha256_process(md, out+x*32, 32)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
if ((err = sha256_done(md, out+x*32)) != CRYPT_OK) {
- goto __ERR;
+ goto LBL_ERR;
}
}
*outlen = 32*FORTUNA_POOLS;
err = CRYPT_OK;
-__ERR:
-#ifdef CLEAN_STACK
+LBL_ERR:
+#ifdef LTC_CLEAN_STACK
zeromem(md, sizeof(*md));
#endif
XFREE(md);
return err;
}
+/**
+ Import a PRNG state
+ @param in The PRNG state
+ @param inlen Size of the state
+ @param prng The PRNG to import
+ @return CRYPT_OK if successful
+*/
int fortuna_import(const unsigned char *in, unsigned long inlen, prng_state *prng)
{
int err, x;
- _ARGCHK(in != NULL);
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(prng != NULL);
if (inlen != 32*FORTUNA_POOLS) {
return CRYPT_INVALID_ARG;
@@ -317,6 +364,10 @@ int fortuna_import(const unsigned char *in, unsigned long inlen, prng_state *prn
return err;
}
+/**
+ PRNG self-test
+ @return CRYPT_OK if successful, CRYPT_NOP if self-testing has been disabled
+*/
int fortuna_test(void)
{
#ifndef LTC_TEST
diff --git a/rc4.c b/src/prngs/rc4.c
similarity index 62%
rename from rc4.c
rename to src/prngs/rc4.c
index e8139ad9..750c38b5 100644
--- a/rc4.c
+++ b/src/prngs/rc4.c
@@ -6,13 +6,18 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file rc4.c
+ RC4 PRNG, Tom St Denis
+*/
#ifdef RC4
-const struct _prng_descriptor rc4_desc =
+const struct ltc_prng_descriptor rc4_desc =
{
"rc4", 32,
&rc4_start,
@@ -25,9 +30,14 @@ const struct _prng_descriptor rc4_desc =
&rc4_test
};
+/**
+ Start the PRNG
+ @param prng [out] The PRNG state to initialize
+ @return CRYPT_OK if successful
+*/
int rc4_start(prng_state *prng)
{
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(prng != NULL);
/* set keysize to zero */
prng->rc4.x = 0;
@@ -35,36 +45,48 @@ int rc4_start(prng_state *prng)
return CRYPT_OK;
}
-int rc4_add_entropy(const unsigned char *buf, unsigned long len, prng_state *prng)
+/**
+ Add entropy to the PRNG state
+ @param in The data to add
+ @param inlen Length of the data to add
+ @param prng PRNG state to update
+ @return CRYPT_OK if successful
+*/
+int rc4_add_entropy(const unsigned char *in, unsigned long inlen, prng_state *prng)
{
- _ARGCHK(buf != NULL);
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(prng != NULL);
/* trim as required */
- if (prng->rc4.x + len > 256) {
+ if (prng->rc4.x + inlen > 256) {
if (prng->rc4.x == 256) {
/* I can't possibly accept another byte, ok maybe a mint wafer... */
return CRYPT_OK;
} else {
/* only accept part of it */
- len = 256 - prng->rc4.x;
+ inlen = 256 - prng->rc4.x;
}
}
- while (len--) {
- prng->rc4.buf[prng->rc4.x++] = *buf++;
+ while (inlen--) {
+ prng->rc4.buf[prng->rc4.x++] = *in++;
}
return CRYPT_OK;
}
+/**
+ Make the PRNG ready to read from
+ @param prng The PRNG to make active
+ @return CRYPT_OK if successful
+*/
int rc4_ready(prng_state *prng)
{
unsigned char key[256], tmp, *s;
int keylen, x, y, j;
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(prng != NULL);
/* extract the key */
s = prng->rc4.buf;
@@ -86,48 +108,67 @@ int rc4_ready(prng_state *prng)
prng->rc4.x = 0;
prng->rc4.y = 0;
-#ifdef CLEAN_STACK
+#ifdef LTC_CLEAN_STACK
zeromem(key, sizeof(key));
#endif
return CRYPT_OK;
}
-unsigned long rc4_read(unsigned char *buf, unsigned long len, prng_state *prng)
+/**
+ Read from the PRNG
+ @param out Destination
+ @param outlen Length of output
+ @param prng The active PRNG to read from
+ @return Number of octets read
+*/
+unsigned long rc4_read(unsigned char *out, unsigned long outlen, prng_state *prng)
{
unsigned char x, y, *s, tmp;
unsigned long n;
- _ARGCHK(buf != NULL);
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(prng != NULL);
- n = len;
+ n = outlen;
x = prng->rc4.x;
y = prng->rc4.y;
s = prng->rc4.buf;
- while (len--) {
+ while (outlen--) {
x = (x + 1) & 255;
y = (y + s[x]) & 255;
tmp = s[x]; s[x] = s[y]; s[y] = tmp;
tmp = (s[x] + s[y]) & 255;
- *buf++ ^= s[tmp];
+ *out++ ^= s[tmp];
}
prng->rc4.x = x;
prng->rc4.y = y;
return n;
}
+/**
+ Terminate the PRNG
+ @param prng The PRNG to terminate
+ @return CRYPT_OK if successful
+*/
int rc4_done(prng_state *prng)
{
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(prng != NULL);
return CRYPT_OK;
}
+/**
+ Export the PRNG state
+ @param out [out] Destination
+ @param outlen [in/out] Max size and resulting size of the state
+ @param prng The PRNG to export
+ @return CRYPT_OK if successful
+*/
int rc4_export(unsigned char *out, unsigned long *outlen, prng_state *prng)
{
- _ARGCHK(outlen != NULL);
- _ARGCHK(out != NULL);
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(outlen != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(prng != NULL);
if (*outlen < 32) {
return CRYPT_BUFFER_OVERFLOW;
@@ -141,11 +182,18 @@ int rc4_export(unsigned char *out, unsigned long *outlen, prng_state *prng)
return CRYPT_OK;
}
+/**
+ Import a PRNG state
+ @param in The PRNG state
+ @param inlen Size of the state
+ @param prng The PRNG to import
+ @return CRYPT_OK if successful
+*/
int rc4_import(const unsigned char *in, unsigned long inlen, prng_state *prng)
{
int err;
- _ARGCHK(in != NULL);
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(prng != NULL);
if (inlen != 32) {
return CRYPT_INVALID_ARG;
@@ -157,6 +205,10 @@ int rc4_import(const unsigned char *in, unsigned long inlen, prng_state *prng)
return rc4_add_entropy(in, 32, prng);
}
+/**
+ PRNG self-test
+ @return CRYPT_OK if successful, CRYPT_NOP if self-testing has been disabled
+*/
int rc4_test(void)
{
#ifndef LTC_TEST
diff --git a/rng_get_bytes.c b/src/prngs/rng_get_bytes.c
similarity index 77%
rename from rng_get_bytes.c
rename to src/prngs/rng_get_bytes.c
index f3027cd8..8519e0af 100644
--- a/rng_get_bytes.c
+++ b/src/prngs/rng_get_bytes.c
@@ -6,17 +6,21 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* portable way to get secure random bits to feed a PRNG */
-#include "mycrypt.h"
+#include "tomcrypt.h"
+
+/**
+ @file rng_get_bytes.c
+ portable way to get secure random bits to feed a PRNG (Tom St Denis)
+*/
#ifdef DEVRANDOM
/* on *NIX read /dev/random */
static unsigned long rng_nix(unsigned char *buf, unsigned long len,
void (*callback)(void))
{
-#ifdef NO_FILE
+#ifdef LTC_NO_FILE
return 0;
#else
FILE *f;
@@ -40,7 +44,7 @@ static unsigned long rng_nix(unsigned char *buf, unsigned long len,
x = (unsigned long)fread(buf, 1, (size_t)len, f);
fclose(f);
return x;
-#endif /* NO_FILE */
+#endif /* LTC_NO_FILE */
}
#endif /* DEVRANDOM */
@@ -109,21 +113,28 @@ static unsigned long rng_win32(unsigned char *buf, unsigned long len,
#endif /* WIN32 */
-unsigned long rng_get_bytes(unsigned char *buf, unsigned long len,
+/**
+ Read the system RNG
+ @param out Destination
+ @param outlen Length desired (octets)
+ @param callback Pointer to void function to act as "callback" when RNG is slow. This can be NULL
+ @return Number of octets read
+*/
+unsigned long rng_get_bytes(unsigned char *out, unsigned long outlen,
void (*callback)(void))
{
unsigned long x;
- _ARGCHK(buf != NULL);
+ LTC_ARGCHK(out != NULL);
#if defined(DEVRANDOM)
- x = rng_nix(buf, len, callback); if (x != 0) { return x; }
+ x = rng_nix(out, outlen, callback); if (x != 0) { return x; }
#endif
#ifdef WIN32
- x = rng_win32(buf, len, callback); if (x != 0) { return x; }
+ x = rng_win32(out, outlen, callback); if (x != 0) { return x; }
#endif
#ifdef ANSI_RNG
- x = rng_ansic(buf, len, callback); if (x != 0) { return x; }
+ x = rng_ansic(out, outlen, callback); if (x != 0) { return x; }
#endif
return 0;
}
diff --git a/rng_make_prng.c b/src/prngs/rng_make_prng.c
similarity index 66%
rename from rng_make_prng.c
rename to src/prngs/rng_make_prng.c
index 4c30e693..94132e71 100644
--- a/rng_make_prng.c
+++ b/src/prngs/rng_make_prng.c
@@ -6,18 +6,30 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-/* portable way to get secure random bits to feed a PRNG */
-#include "mycrypt.h"
+#include "tomcrypt.h"
+/**
+ @file rng_make_prng.c
+ portable way to get secure random bits to feed a PRNG (Tom St Denis)
+*/
+
+/**
+ Create a PRNG from a RNG
+ @param bits Number of bits of entropy desired (64 ... 1024)
+ @param wprng Index of which PRNG to setup
+ @param prng [out] PRNG state to initialize
+ @param callback A pointer to a void function for when the RNG is slow, this can be NULL
+ @return CRYPT_OK if successful
+*/
int rng_make_prng(int bits, int wprng, prng_state *prng,
void (*callback)(void))
{
unsigned char buf[256];
int err;
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(prng != NULL);
/* check parameter */
if ((err = prng_is_valid(wprng)) != CRYPT_OK) {
@@ -45,7 +57,7 @@ int rng_make_prng(int bits, int wprng, prng_state *prng,
return err;
}
- #ifdef CLEAN_STACK
+ #ifdef LTC_CLEAN_STACK
zeromem(buf, sizeof(buf));
#endif
return CRYPT_OK;
diff --git a/sober128.c b/src/prngs/sober128.c
similarity index 73%
rename from sober128.c
rename to src/prngs/sober128.c
index bc007486..48667bd2 100644
--- a/sober128.c
+++ b/src/prngs/sober128.c
@@ -6,19 +6,21 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
-#include "mycrypt.h"
+#include "tomcrypt.h"
-/* Implementation of SOBER-128 by Tom St Denis.
- * Based on s128fast.c reference code supplied by Greg Rose of QUALCOMM.
- */
+/**
+ @file sober128.c
+ Implementation of SOBER-128 by Tom St Denis.
+ Based on s128fast.c reference code supplied by Greg Rose of QUALCOMM.
+*/
#ifdef SOBER128
#include "sober128tab.c"
-const struct _prng_descriptor sober128_desc =
+const struct ltc_prng_descriptor sober128_desc =
{
"sober128", 64,
&sober128_start,
@@ -86,7 +88,7 @@ static void cycle(ulong32 *R)
{ \
t = c->R[OFF(z,0)] + c->R[OFF(z,16)]; \
t ^= Sbox[(t >> 24) & 0xFF]; \
- t = ROR(t, 8); \
+ t = RORc(t, 8); \
t = ((t + c->R[OFF(z,1)]) ^ c->konst) + c->R[OFF(z,6)]; \
t ^= Sbox[(t >> 24) & 0xFF]; \
t = t + c->R[OFF(z,13)]; \
@@ -99,14 +101,17 @@ static ulong32 nltap(struct sober128_prng *c)
return t;
}
-/* initialise to known state
- */
+/**
+ Start the PRNG
+ @param prng [out] The PRNG state to initialize
+ @return CRYPT_OK if successful
+*/
int sober128_start(prng_state *prng)
{
int i;
struct sober128_prng *c;
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(prng != NULL);
c = &(prng->sober128);
@@ -192,31 +197,38 @@ static void s128_diffuse(struct sober128_prng *c)
DROUND(16);
}
-int sober128_add_entropy(const unsigned char *buf, unsigned long len, prng_state *prng)
+/**
+ Add entropy to the PRNG state
+ @param in The data to add
+ @param inlen Length of the data to add
+ @param prng PRNG state to update
+ @return CRYPT_OK if successful
+*/
+int sober128_add_entropy(const unsigned char *in, unsigned long inlen, prng_state *prng)
{
struct sober128_prng *c;
ulong32 i, k;
- _ARGCHK(buf != NULL);
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(prng != NULL);
c = &(prng->sober128);
if (c->flag == 1) {
/* this is the first call to the add_entropy so this input is the key */
- /* len must be multiple of 4 bytes */
- if ((len & 3) != 0) {
+ /* inlen must be multiple of 4 bytes */
+ if ((inlen & 3) != 0) {
return CRYPT_INVALID_KEYSIZE;
}
- for (i = 0; i < len; i += 4) {
- k = BYTE2WORD((unsigned char *)&buf[i]);
+ for (i = 0; i < inlen; i += 4) {
+ k = BYTE2WORD((unsigned char *)&in[i]);
ADDKEY(k);
cycle(c->R);
XORNL(nltap(c));
}
/* also fold in the length of the key */
- ADDKEY(len);
+ ADDKEY(inlen);
/* now diffuse */
s128_diffuse(c);
@@ -230,20 +242,20 @@ int sober128_add_entropy(const unsigned char *buf, unsigned long len, prng_state
/* ok we are adding an IV then... */
s128_reloadstate(c);
- /* len must be multiple of 4 bytes */
- if ((len & 3) != 0) {
+ /* inlen must be multiple of 4 bytes */
+ if ((inlen & 3) != 0) {
return CRYPT_INVALID_KEYSIZE;
}
- for (i = 0; i < len; i += 4) {
- k = BYTE2WORD((unsigned char *)&buf[i]);
+ for (i = 0; i < inlen; i += 4) {
+ k = BYTE2WORD((unsigned char *)&in[i]);
ADDKEY(k);
cycle(c->R);
XORNL(nltap(c));
}
/* also fold in the length of the key */
- ADDKEY(len);
+ ADDKEY(inlen);
/* now diffuse */
s128_diffuse(c);
@@ -253,6 +265,11 @@ int sober128_add_entropy(const unsigned char *buf, unsigned long len, prng_state
return CRYPT_OK;
}
+/**
+ Make the PRNG ready to read from
+ @param prng The PRNG to make active
+ @return CRYPT_OK if successful
+*/
int sober128_ready(prng_state *prng)
{
return prng->sober128.set == 1 ? CRYPT_OK : CRYPT_ERROR;
@@ -260,31 +277,38 @@ int sober128_ready(prng_state *prng)
/* XOR pseudo-random bytes into buffer
*/
-#define SROUND(z) STEP(c->R,z); NLFUNC(c,(z+1)); XORWORD(t, buf+(z*4));
-
-unsigned long sober128_read(unsigned char *buf, unsigned long nbytes, prng_state *prng)
+#define SROUND(z) STEP(c->R,z); NLFUNC(c,(z+1)); XORWORD(t, out+(z*4));
+
+/**
+ Read from the PRNG
+ @param out Destination
+ @param outlen Length of output
+ @param prng The active PRNG to read from
+ @return Number of octets read
+*/
+unsigned long sober128_read(unsigned char *out, unsigned long outlen, prng_state *prng)
{
struct sober128_prng *c;
ulong32 t, tlen;
- _ARGCHK(buf != NULL);
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(prng != NULL);
c = &(prng->sober128);
t = 0;
- tlen = nbytes;
+ tlen = outlen;
/* handle any previously buffered bytes */
- while (c->nbuf != 0 && nbytes != 0) {
- *buf++ ^= c->sbuf & 0xFF;
+ while (c->nbuf != 0 && outlen != 0) {
+ *out++ ^= c->sbuf & 0xFF;
c->sbuf >>= 8;
c->nbuf -= 8;
- --nbytes;
+ --outlen;
}
-#ifndef SMALL_CODE
+#ifndef LTC_SMALL_CODE
/* do lots at a time, if there's enough to do */
- while (nbytes >= N*4) {
+ while (outlen >= N*4) {
SROUND(0);
SROUND(1);
SROUND(2);
@@ -302,47 +326,59 @@ unsigned long sober128_read(unsigned char *buf, unsigned long nbytes, prng_state
SROUND(14);
SROUND(15);
SROUND(16);
- buf += 4*N;
- nbytes -= 4*N;
+ out += 4*N;
+ outlen -= 4*N;
}
#endif
/* do small or odd size buffers the slow way */
- while (4 <= nbytes) {
+ while (4 <= outlen) {
cycle(c->R);
t = nltap(c);
- XORWORD(t, buf);
- buf += 4;
- nbytes -= 4;
+ XORWORD(t, out);
+ out += 4;
+ outlen -= 4;
}
/* handle any trailing bytes */
- if (nbytes != 0) {
+ if (outlen != 0) {
cycle(c->R);
c->sbuf = nltap(c);
c->nbuf = 32;
- while (c->nbuf != 0 && nbytes != 0) {
- *buf++ ^= c->sbuf & 0xFF;
+ while (c->nbuf != 0 && outlen != 0) {
+ *out++ ^= c->sbuf & 0xFF;
c->sbuf >>= 8;
c->nbuf -= 8;
- --nbytes;
+ --outlen;
}
}
return tlen;
}
+/**
+ Terminate the PRNG
+ @param prng The PRNG to terminate
+ @return CRYPT_OK if successful
+*/
int sober128_done(prng_state *prng)
{
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(prng != NULL);
return CRYPT_OK;
}
+/**
+ Export the PRNG state
+ @param out [out] Destination
+ @param outlen [in/out] Max size and resulting size of the state
+ @param prng The PRNG to export
+ @return CRYPT_OK if successful
+*/
int sober128_export(unsigned char *out, unsigned long *outlen, prng_state *prng)
{
- _ARGCHK(outlen != NULL);
- _ARGCHK(out != NULL);
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(outlen != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(prng != NULL);
if (*outlen < 64) {
return CRYPT_BUFFER_OVERFLOW;
@@ -356,11 +392,18 @@ int sober128_export(unsigned char *out, unsigned long *outlen, prng_state *prng)
return CRYPT_OK;
}
+/**
+ Import a PRNG state
+ @param in The PRNG state
+ @param inlen Size of the state
+ @param prng The PRNG to import
+ @return CRYPT_OK if successful
+*/
int sober128_import(const unsigned char *in, unsigned long inlen, prng_state *prng)
{
int err;
- _ARGCHK(in != NULL);
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(prng != NULL);
if (inlen != 64) {
return CRYPT_INVALID_ARG;
@@ -375,6 +418,10 @@ int sober128_import(const unsigned char *in, unsigned long inlen, prng_state *pr
return sober128_ready(prng);
}
+/**
+ PRNG self-test
+ @return CRYPT_OK if successful, CRYPT_NOP if self-testing has been disabled
+*/
int sober128_test(void)
{
#ifndef LTC_TEST
diff --git a/sober128tab.c b/src/prngs/sober128tab.c
similarity index 96%
rename from sober128tab.c
rename to src/prngs/sober128tab.c
index f50afb5c..dc6f3e22 100644
--- a/sober128tab.c
+++ b/src/prngs/sober128tab.c
@@ -1,5 +1,9 @@
-/* $Id: s128multab.h 213 2003-12-16 04:27:12Z ggr $ */
-/* @(#)TuringMultab.h 1.3 (QUALCOMM) 02/09/03 */
+/**
+ @file sober128tab.c
+ SOBER-128 Tables
+*/
+/* $Id: sober128tab.c,v 1.1.1.1 2005/03/18 23:19:17 root Exp $ */
+/* @(#)TuringMultab.h 1.3 (QUALCOMM) 02/09/03 */
/* Multiplication table for Turing using 0xD02B4367 */
static const ulong32 Multab[256] = {
0x00000000, 0xD02B4367, 0xED5686CE, 0x3D7DC5A9,
@@ -68,7 +72,7 @@ static const ulong32 Multab[256] = {
0xEF72A3F1, 0x3F59E096, 0x0224253F, 0xD20F6658,
};
-/* $Id: s128sbox.h 213 2003-12-16 04:27:12Z ggr $ */
+/* $Id: sober128tab.c,v 1.1.1.1 2005/03/18 23:19:17 root Exp $ */
/* Sbox for SOBER-128 */
/*
* This is really the combination of two SBoxes; the least significant
diff --git a/src/prngs/sprng.c b/src/prngs/sprng.c
new file mode 100644
index 00000000..dce83478
--- /dev/null
+++ b/src/prngs/sprng.c
@@ -0,0 +1,132 @@
+/* LibTomCrypt, modular cryptographic library -- Tom St Denis
+ *
+ * LibTomCrypt is a library that provides various cryptographic
+ * algorithms in a highly modular and flexible manner.
+ *
+ * The library is free for all purposes without any express
+ * guarantee it works.
+ *
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
+ */
+#include "tomcrypt.h"
+
+/**
+ @file sprng.c
+ Secure PRNG, Tom St Denis
+*/
+
+/* A secure PRNG using the RNG functions. Basically this is a
+ * wrapper that allows you to use a secure RNG as a PRNG
+ * in the various other functions.
+ */
+
+#ifdef SPRNG
+
+const struct ltc_prng_descriptor sprng_desc =
+{
+ "sprng", 0,
+ &sprng_start,
+ &sprng_add_entropy,
+ &sprng_ready,
+ &sprng_read,
+ &sprng_done,
+ &sprng_export,
+ &sprng_import,
+ &sprng_test
+};
+
+/**
+ Start the PRNG
+ @param prng [out] The PRNG state to initialize
+ @return CRYPT_OK if successful
+*/
+int sprng_start(prng_state *prng)
+{
+ return CRYPT_OK;
+}
+
+/**
+ Add entropy to the PRNG state
+ @param in The data to add
+ @param inlen Length of the data to add
+ @param prng PRNG state to update
+ @return CRYPT_OK if successful
+*/
+int sprng_add_entropy(const unsigned char *in, unsigned long inlen, prng_state *prng)
+{
+ return CRYPT_OK;
+}
+
+/**
+ Make the PRNG ready to read from
+ @param prng The PRNG to make active
+ @return CRYPT_OK if successful
+*/
+int sprng_ready(prng_state *prng)
+{
+ return CRYPT_OK;
+}
+
+/**
+ Read from the PRNG
+ @param out Destination
+ @param outlen Length of output
+ @param prng The active PRNG to read from
+ @return Number of octets read
+*/
+unsigned long sprng_read(unsigned char *out, unsigned long outlen, prng_state *prng)
+{
+ LTC_ARGCHK(out != NULL);
+ return rng_get_bytes(out, outlen, NULL);
+}
+
+/**
+ Terminate the PRNG
+ @param prng The PRNG to terminate
+ @return CRYPT_OK if successful
+*/
+int sprng_done(prng_state *prng)
+{
+ return CRYPT_OK;
+}
+
+/**
+ Export the PRNG state
+ @param out [out] Destination
+ @param outlen [in/out] Max size and resulting size of the state
+ @param prng The PRNG to export
+ @return CRYPT_OK if successful
+*/
+int sprng_export(unsigned char *out, unsigned long *outlen, prng_state *prng)
+{
+ LTC_ARGCHK(outlen != NULL);
+
+ *outlen = 0;
+ return CRYPT_OK;
+}
+
+/**
+ Import a PRNG state
+ @param in The PRNG state
+ @param inlen Size of the state
+ @param prng The PRNG to import
+ @return CRYPT_OK if successful
+*/
+int sprng_import(const unsigned char *in, unsigned long inlen, prng_state *prng)
+{
+ return CRYPT_OK;
+}
+
+/**
+ PRNG self-test
+ @return CRYPT_OK if successful, CRYPT_NOP if self-testing has been disabled
+*/
+int sprng_test(void)
+{
+ return CRYPT_OK;
+}
+
+#endif
+
+
+
diff --git a/yarrow.c b/src/prngs/yarrow.c
similarity index 72%
rename from yarrow.c
rename to src/prngs/yarrow.c
index 333892e0..1582856e 100644
--- a/yarrow.c
+++ b/src/prngs/yarrow.c
@@ -6,14 +6,18 @@
* The library is free for all purposes without any express
* guarantee it works.
*
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
+ * Tom St Denis, tomstdenis@gmail.com, http://libtomcrypt.org
*/
+#include "tomcrypt.h"
-#include "mycrypt.h"
+/**
+ @file yarrow.c
+ Yarrow PRNG, Tom St Denis
+*/
#ifdef YARROW
-const struct _prng_descriptor yarrow_desc =
+const struct ltc_prng_descriptor yarrow_desc =
{
"yarrow", 64,
&yarrow_start,
@@ -26,11 +30,16 @@ const struct _prng_descriptor yarrow_desc =
&yarrow_test
};
+/**
+ Start the PRNG
+ @param prng [out] The PRNG state to initialize
+ @return CRYPT_OK if successful
+*/
int yarrow_start(prng_state *prng)
{
int err;
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(prng != NULL);
/* these are the default hash/cipher combo used */
#ifdef RIJNDAEL
@@ -105,13 +114,20 @@ int yarrow_start(prng_state *prng)
return CRYPT_OK;
}
-int yarrow_add_entropy(const unsigned char *buf, unsigned long len, prng_state *prng)
+/**
+ Add entropy to the PRNG state
+ @param in The data to add
+ @param inlen Length of the data to add
+ @param prng PRNG state to update
+ @return CRYPT_OK if successful
+*/
+int yarrow_add_entropy(const unsigned char *in, unsigned long inlen, prng_state *prng)
{
hash_state md;
int err;
- _ARGCHK(buf != NULL);
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(prng != NULL);
if ((err = hash_is_valid(prng->yarrow.hash)) != CRYPT_OK) {
return err;
@@ -129,7 +145,7 @@ int yarrow_add_entropy(const unsigned char *buf, unsigned long len, prng_state *
}
/* add the new entropy */
- if ((err = hash_descriptor[prng->yarrow.hash].process(&md, buf, len)) != CRYPT_OK) {
+ if ((err = hash_descriptor[prng->yarrow.hash].process(&md, in, inlen)) != CRYPT_OK) {
return err;
}
@@ -141,11 +157,16 @@ int yarrow_add_entropy(const unsigned char *buf, unsigned long len, prng_state *
return CRYPT_OK;
}
+/**
+ Make the PRNG ready to read from
+ @param prng The PRNG to make active
+ @return CRYPT_OK if successful
+*/
int yarrow_ready(prng_state *prng)
{
int ks, err;
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(prng != NULL);
if ((err = hash_is_valid(prng->yarrow.hash)) != CRYPT_OK) {
return err;
@@ -171,34 +192,55 @@ int yarrow_ready(prng_state *prng)
return CRYPT_OK;
}
-unsigned long yarrow_read(unsigned char *buf, unsigned long len, prng_state *prng)
+/**
+ Read from the PRNG
+ @param out Destination
+ @param outlen Length of output
+ @param prng The active PRNG to read from
+ @return Number of octets read
+*/
+unsigned long yarrow_read(unsigned char *out, unsigned long outlen, prng_state *prng)
{
- _ARGCHK(buf != NULL);
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(prng != NULL);
- /* put buf in predictable state first */
- zeromem(buf, len);
+ /* put out in predictable state first */
+ zeromem(out, outlen);
/* now randomize it */
- if (ctr_encrypt(buf, buf, len, &prng->yarrow.ctr) != CRYPT_OK) {
+ if (ctr_encrypt(out, out, outlen, &prng->yarrow.ctr) != CRYPT_OK) {
return 0;
}
- return len;
+ return outlen;
}
+/**
+ Terminate the PRNG
+ @param prng The PRNG to terminate
+ @return CRYPT_OK if successful
+*/
int yarrow_done(prng_state *prng)
{
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(prng != NULL);
+
/* call cipher done when we invent one ;-) */
- return CRYPT_OK;
+ /* we invented one */
+ return ctr_done(&prng->yarrow.ctr);
}
+/**
+ Export the PRNG state
+ @param out [out] Destination
+ @param outlen [in/out] Max size and resulting size of the state
+ @param prng The PRNG to export
+ @return CRYPT_OK if successful
+*/
int yarrow_export(unsigned char *out, unsigned long *outlen, prng_state *prng)
{
- _ARGCHK(out != NULL);
- _ARGCHK(outlen != NULL);
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(out != NULL);
+ LTC_ARGCHK(outlen != NULL);
+ LTC_ARGCHK(prng != NULL);
/* we'll write 64 bytes for s&g's */
if (*outlen < 64) {
@@ -213,12 +255,19 @@ int yarrow_export(unsigned char *out, unsigned long *outlen, prng_state *prng)
return CRYPT_OK;
}
+/**
+ Import a PRNG state
+ @param in The PRNG state
+ @param inlen Size of the state
+ @param prng The PRNG to import
+ @return CRYPT_OK if successful
+*/
int yarrow_import(const unsigned char *in, unsigned long inlen, prng_state *prng)
{
int err;
- _ARGCHK(in != NULL);
- _ARGCHK(prng != NULL);
+ LTC_ARGCHK(in != NULL);
+ LTC_ARGCHK(prng != NULL);
if (inlen != 64) {
return CRYPT_INVALID_ARG;
@@ -230,6 +279,10 @@ int yarrow_import(const unsigned char *in, unsigned long inlen, prng_state *prng
return yarrow_add_entropy(in, 64, prng);
}
+/**
+ PRNG self-test
+ @return CRYPT_OK if successful, CRYPT_NOP if self-testing has been disabled
+*/
int yarrow_test(void)
{
#ifndef LTC_TEST
diff --git a/demos/test/base64_test.c b/testprof/base64_test.c
similarity index 86%
rename from demos/test/base64_test.c
rename to testprof/base64_test.c
index b02c1a2a..e93ebefa 100644
--- a/demos/test/base64_test.c
+++ b/testprof/base64_test.c
@@ -1,4 +1,4 @@
-#include "test.h"
+#include <tomcrypt_test.h>
int base64_test(void)
{
@@ -6,7 +6,7 @@ int base64_test(void)
unsigned long x, l1, l2;
for (x = 0; x < 64; x++) {
- yarrow_read(in, x, &test_yarrow);
+ yarrow_read(in, x, &yarrow_prng);
l1 = sizeof(out);
DO(base64_encode(in, x, out, &l1));
l2 = sizeof(tmp);
diff --git a/demos/test/cipher_hash_test.c b/testprof/cipher_hash_test.c
similarity index 97%
rename from demos/test/cipher_hash_test.c
rename to testprof/cipher_hash_test.c
index 27376233..d2f3bfca 100644
--- a/demos/test/cipher_hash_test.c
+++ b/testprof/cipher_hash_test.c
@@ -1,6 +1,6 @@
/* test the ciphers and hashes using their built-in self-tests */
-#include "test.h"
+#include <tomcrypt_test.h>
int cipher_hash_test(void)
{
diff --git a/demos/test/der_tests.c b/testprof/der_tests.c
similarity index 93%
rename from demos/test/der_tests.c
rename to testprof/der_tests.c
index 0c0e3df4..fe8eb000 100644
--- a/demos/test/der_tests.c
+++ b/testprof/der_tests.c
@@ -1,4 +1,14 @@
-#include "test.h"
+#include <tomcrypt_test.h>
+
+#ifndef LTC_DER
+
+int der_tests(void)
+{
+ printf("NOP");
+ return 0;
+}
+
+#else
int der_tests(void)
{
@@ -9,7 +19,7 @@ int der_tests(void)
DO(mpi_to_ltc_error(mp_init_multi(&a, &b, &c, &d, &e, &f, &g, NULL)));
for (zz = 0; zz < 16; zz++) {
for (z = 0; z < 1024; z++) {
- if (yarrow_read(buf[0], z, &test_yarrow) != z) {
+ if (yarrow_read(buf[0], z, &yarrow_prng) != z) {
printf("Failed to read %lu bytes from yarrow\n", z);
return 1;
}
@@ -80,3 +90,5 @@ int der_tests(void)
mp_clear_multi(&a, &b, &c, &d, &e, &f, &g, NULL);
return 0;
}
+
+#endif
diff --git a/demos/test/dh_tests.c b/testprof/dh_tests.c
similarity index 84%
rename from demos/test/dh_tests.c
rename to testprof/dh_tests.c
index 6977c587..feb74acf 100644
--- a/demos/test/dh_tests.c
+++ b/testprof/dh_tests.c
@@ -1,4 +1,4 @@
-#include "test.h"
+#include <tomcrypt_test.h>
#ifdef MDH
@@ -12,8 +12,8 @@ int dh_tests (void)
DO(dh_test());
/* make up two keys */
- DO(dh_make_key (&test_yarrow, find_prng ("yarrow"), 512, &usera));
- DO(dh_make_key (&test_yarrow, find_prng ("yarrow"), 512, &userb));
+ DO(dh_make_key (&yarrow_prng, find_prng ("yarrow"), 512, &usera));
+ DO(dh_make_key (&yarrow_prng, find_prng ("yarrow"), 512, &userb));
/* make the shared secret */
x = 4096;
@@ -52,12 +52,12 @@ int dh_tests (void)
dh_free (&userb);
/* test encrypt_key */
- dh_make_key (&test_yarrow, find_prng ("yarrow"), 512, &usera);
+ dh_make_key (&yarrow_prng, find_prng ("yarrow"), 512, &usera);
for (x = 0; x < 16; x++) {
buf[0][x] = x;
}
y = sizeof (buf[1]);
- DO(dh_encrypt_key (buf[0], 16, buf[1], &y, &test_yarrow, find_prng ("yarrow"), find_hash ("md5"), &usera));
+ DO(dh_encrypt_key (buf[0], 16, buf[1], &y, &yarrow_prng, find_prng ("yarrow"), find_hash ("md5"), &usera));
zeromem (buf[0], sizeof (buf[0]));
x = sizeof (buf[0]);
DO(dh_decrypt_key (buf[1], y, buf[0], &x, &usera));
@@ -76,7 +76,7 @@ int dh_tests (void)
buf[0][x] = x;
}
x = sizeof (buf[1]);
- DO(dh_sign_hash (buf[0], 16, buf[1], &x, &test_yarrow , find_prng ("yarrow"), &usera));
+ DO(dh_sign_hash (buf[0], 16, buf[1], &x, &yarrow_prng , find_prng ("yarrow"), &usera));
DO(dh_verify_hash (buf[1], x, buf[0], 16, &stat, &usera));
buf[0][0] ^= 1;
DO(dh_verify_hash (buf[1], x, buf[0], 16, &stat2, &usera));
diff --git a/demos/test/dsa_test.c b/testprof/dsa_test.c
similarity index 90%
rename from demos/test/dsa_test.c
rename to testprof/dsa_test.c
index c5eeb6d3..cd2e89a3 100644
--- a/demos/test/dsa_test.c
+++ b/testprof/dsa_test.c
@@ -1,4 +1,4 @@
-#include "test.h"
+#include <tomcrypt_test.h>
#ifdef MDSA
@@ -10,7 +10,7 @@ int dsa_test(void)
dsa_key key, key2;
/* make a random key */
- DO(dsa_make_key(&test_yarrow, find_prng("yarrow"), 20, 128, &key));
+ DO(dsa_make_key(&yarrow_prng, find_prng("yarrow"), 20, 128, &key));
/* verify it */
DO(dsa_verify_key(&key, &stat1));
@@ -18,7 +18,7 @@ int dsa_test(void)
/* sign the message */
x = sizeof(out);
- DO(dsa_sign_hash(msg, sizeof(msg), out, &x, &test_yarrow, find_prng("yarrow"), &key));
+ DO(dsa_sign_hash(msg, sizeof(msg), out, &x, &yarrow_prng, find_prng("yarrow"), &key));
/* verify it once */
DO(dsa_verify_hash(out, x, msg, sizeof(msg), &stat1, &key));
diff --git a/demos/test/ecc_test.c b/testprof/ecc_test.c
similarity index 61%
rename from demos/test/ecc_test.c
rename to testprof/ecc_test.c
index eb66c580..0b37ba2f 100644
--- a/demos/test/ecc_test.c
+++ b/testprof/ecc_test.c
@@ -1,4 +1,4 @@
-#include "test.h"
+#include <tomcrypt_test.h>
#ifdef MECC
@@ -7,13 +7,13 @@ int ecc_tests (void)
unsigned char buf[4][4096];
unsigned long x, y, z;
int stat, stat2;
- ecc_key usera, userb;
+ ecc_key usera, userb, pubKey, privKey;
DO(ecc_test ());
/* make up two keys */
- DO(ecc_make_key (&test_yarrow, find_prng ("yarrow"), 65, &usera));
- DO(ecc_make_key (&test_yarrow, find_prng ("yarrow"), 65, &userb));
+ DO(ecc_make_key (&yarrow_prng, find_prng ("yarrow"), 65, &usera));
+ DO(ecc_make_key (&yarrow_prng, find_prng ("yarrow"), 65, &userb));
/* make the shared secret */
x = 4096;
@@ -55,15 +55,24 @@ int ecc_tests (void)
ecc_free (&userb);
/* test encrypt_key */
- ecc_make_key (&test_yarrow, find_prng ("yarrow"), 65, &usera);
+ DO(ecc_make_key (&yarrow_prng, find_prng ("yarrow"), 65, &usera));
+
+/* export key */
+ x = sizeof(buf[0]);
+ DO(ecc_export(buf[0], &x, PK_PUBLIC, &usera));
+ DO(ecc_import(buf[0], x, &pubKey));
+ x = sizeof(buf[0]);
+ DO(ecc_export(buf[0], &x, PK_PRIVATE, &usera));
+ DO(ecc_import(buf[0], x, &privKey));
+
for (x = 0; x < 32; x++) {
buf[0][x] = x;
}
y = sizeof (buf[1]);
- DO(ecc_encrypt_key (buf[0], 32, buf[1], &y, &test_yarrow, find_prng ("yarrow"), find_hash ("sha256"), &usera));
+ DO(ecc_encrypt_key (buf[0], 32, buf[1], &y, &yarrow_prng, find_prng ("yarrow"), find_hash ("sha256"), &pubKey));
zeromem (buf[0], sizeof (buf[0]));
x = sizeof (buf[0]);
- DO(ecc_decrypt_key (buf[1], y, buf[0], &x, &usera));
+ DO(ecc_decrypt_key (buf[1], y, buf[0], &x, &privKey));
if (x != 32) {
printf ("Failed (length)");
return 1;
@@ -78,15 +87,17 @@ int ecc_tests (void)
buf[0][x] = x;
}
x = sizeof (buf[1]);
- DO(ecc_sign_hash (buf[0], 16, buf[1], &x, &test_yarrow, find_prng ("yarrow"), &usera));
- DO(ecc_verify_hash (buf[1], x, buf[0], 16, &stat, &usera));
+ DO(ecc_sign_hash (buf[0], 16, buf[1], &x, &yarrow_prng, find_prng ("yarrow"), &privKey));
+ DO(ecc_verify_hash (buf[1], x, buf[0], 16, &stat, &pubKey));
buf[0][0] ^= 1;
- DO(ecc_verify_hash (buf[1], x, buf[0], 16, &stat2, &usera));
+ DO(ecc_verify_hash (buf[1], x, buf[0], 16, &stat2, &privKey));
if (!(stat == 1 && stat2 == 0)) {
- printf("ecc_verify_hash failed");
+ printf("ecc_verify_hash failed %d, %d, ", stat, stat2);
return 1;
}
- ecc_free (&usera);
+ ecc_free (&usera);
+ ecc_free (&pubKey);
+ ecc_free (&privKey);
return 0;
}
diff --git a/testprof/mac_test.c b/testprof/mac_test.c
new file mode 100644
index 00000000..b076d7b6
--- /dev/null
+++ b/testprof/mac_test.c
@@ -0,0 +1,31 @@
+/* test pmac/omac/hmac */
+#include <tomcrypt_test.h>
+
+int mac_test(void)
+{
+#ifdef HMAC
+ DO(hmac_test());
+#endif
+#ifdef PMAC
+ DO(pmac_test());
+#endif
+#ifdef OMAC
+ DO(omac_test());
+#endif
+#ifdef EAX_MODE
+ DO(eax_test());
+#endif
+#ifdef OCB_MODE
+ DO(ocb_test());
+#endif
+#ifdef CCM_MODE
+ DO(ccm_test());
+#endif
+#ifdef GCM_MODE
+ DO(gcm_test());
+#endif
+#ifdef PELICAN
+ DO(pelican_test());
+#endif
+ return 0;
+}
diff --git a/testprof/makefile b/testprof/makefile
new file mode 100644
index 00000000..f4be5773
--- /dev/null
+++ b/testprof/makefile
@@ -0,0 +1,15 @@
+CFLAGS += -I../src/headers -I./ -Wall -W
+
+OBJECTS = base64_test.o cipher_hash_test.o der_tests.o dh_tests.o \
+dsa_test.o ecc_test.o mac_test.o modes_test.o pkcs_1_test.o rsa_test.o \
+store_test.o test.o x86_prof.o
+
+default: libtomcrypt_prof.a
+
+libtomcrypt_prof.a: $(OBJECTS)
+ $(AR) $(ARFLAGS) libtomcrypt_prof.a $(OBJECTS)
+ ranlib libtomcrypt_prof.a
+
+clean:
+ rm -f *.o *.a
+
diff --git a/testprof/makefile.icc b/testprof/makefile.icc
new file mode 100644
index 00000000..c9226fba
--- /dev/null
+++ b/testprof/makefile.icc
@@ -0,0 +1,15 @@
+CFLAGS += -I../src/headers -I./ -O3 -xP -ip
+CC=icc
+
+OBJECTS = base64_test.o cipher_hash_test.o der_tests.o dh_tests.o \
+dsa_test.o ecc_test.o mac_test.o modes_test.o pkcs_1_test.o rsa_test.o \
+store_test.o test.o x86_prof.o
+
+default: libtomcrypt_prof.a
+
+libtomcrypt_prof.a: $(OBJECTS)
+ $(AR) $(ARFLAGS) libtomcrypt_prof.a $(OBJECTS)
+
+clean:
+ rm -f *.o *.a
+
diff --git a/testprof/makefile.msvc b/testprof/makefile.msvc
new file mode 100644
index 00000000..6e15ffba
--- /dev/null
+++ b/testprof/makefile.msvc
@@ -0,0 +1,10 @@
+CFLAGS = /I../src/headers/ /I./ /Ox /DWIN32 /W3 /Fo$@
+
+OBJECTS=base64_test.obj cipher_hash_test.obj der_tests.obj dh_tests.obj \
+dsa_test.obj ecc_test.obj mac_test.obj modes_test.obj pkcs_1_test.obj \
+rsa_test.obj store_test.obj test.obj x86_prof.obj
+
+tomcrypt_prof.lib: $(OBJECTS)
+ lib /out:tomcrypt_prof.lib $(OBJECTS)
+
+
diff --git a/testprof/makefile.shared b/testprof/makefile.shared
new file mode 100644
index 00000000..b4219f0f
--- /dev/null
+++ b/testprof/makefile.shared
@@ -0,0 +1,15 @@
+CC=libtool --mode=compile gcc
+
+CFLAGS += -I../src/headers -I./ -O3 -fomit-frame-pointer -funroll-loops -Wall -W
+
+OBJECTS = base64_test.o cipher_hash_test.o der_tests.o dh_tests.o \
+dsa_test.o ecc_test.o mac_test.o modes_test.o pkcs_1_test.o rsa_test.o \
+store_test.o test.o x86_prof.o
+
+default: $(LIBNAME)
+
+$(LIBNAME): $(OBJECTS)
+ libtool --silent --mode=link gcc $(CFLAGS) `find . -type f | grep "[.]lo" | xargs` -o libtomcrypt_prof.la -rpath $(LIBPATH) -version-info $(VERSION)
+ libtool --silent --mode=link gcc $(CFLAGS) `find . -type f | grep "[.]o" | xargs` -o libtomcrypt_prof.a
+ ranlib libtomcrypt_prof.a
+ libtool --silent --mode=install install -c libtomcrypt_prof.la $(LIBPATH)/libtomcrypt_prof.la
diff --git a/demos/test/modes_test.c b/testprof/modes_test.c
similarity index 84%
rename from demos/test/modes_test.c
rename to testprof/modes_test.c
index 7494b4d3..46beb8ab 100644
--- a/demos/test/modes_test.c
+++ b/testprof/modes_test.c
@@ -1,10 +1,10 @@
/* test CFB/OFB/CBC modes */
-#include "test.h"
+#include <tomcrypt_test.h>
int modes_test(void)
{
unsigned char pt[64], ct[64], tmp[64], key[16], iv[16], iv2[16];
- int x, cipher_idx;
+ int cipher_idx;
symmetric_CBC cbc;
symmetric_CFB cfb;
symmetric_OFB ofb;
@@ -12,9 +12,9 @@ int modes_test(void)
unsigned long l;
/* make a random pt, key and iv */
- yarrow_read(pt, 64, &test_yarrow);
- yarrow_read(key, 16, &test_yarrow);
- yarrow_read(iv, 16, &test_yarrow);
+ yarrow_read(pt, 64, &yarrow_prng);
+ yarrow_read(key, 16, &yarrow_prng);
+ yarrow_read(iv, 16, &yarrow_prng);
/* get idx of AES handy */
cipher_idx = find_cipher("aes");
@@ -23,6 +23,7 @@ int modes_test(void)
return 1;
}
+#ifdef CBC
/* test CBC mode */
/* encode the block */
DO(cbc_start(cipher_idx, iv, key, 16, 0, &cbc));
@@ -32,21 +33,19 @@ int modes_test(void)
printf("cbc_getiv failed");
return 1;
}
- for (x = 0; x < 4; x++) {
- DO(cbc_encrypt(pt+x*16, ct+x*16, &cbc));
- }
+ DO(cbc_encrypt(pt, ct, 64, &cbc));
/* decode the block */
DO(cbc_setiv(iv2, l, &cbc));
zeromem(tmp, sizeof(tmp));
- for (x = 0; x < 4; x++) {
- DO(cbc_decrypt(ct+x*16, tmp+x*16, &cbc));
- }
+ DO(cbc_decrypt(ct, tmp, 64, &cbc));
if (memcmp(tmp, pt, 64) != 0) {
printf("CBC failed");
return 1;
}
-
+#endif
+
+#ifdef CFB
/* test CFB mode */
/* encode the block */
DO(cfb_start(cipher_idx, iv, key, 16, 0, &cfb));
@@ -67,7 +66,9 @@ int modes_test(void)
printf("CFB failed");
return 1;
}
+#endif
+#ifdef OFB
/* test OFB mode */
/* encode the block */
DO(ofb_start(cipher_idx, iv, key, 16, 0, &ofb));
@@ -87,7 +88,9 @@ int modes_test(void)
printf("OFB failed");
return 1;
}
-
+#endif
+
+#ifdef CTR
/* test CTR mode */
/* encode the block */
DO(ctr_start(cipher_idx, iv, key, 16, 0, &ctr));
@@ -97,16 +100,17 @@ int modes_test(void)
printf("ctr_getiv failed");
return 1;
}
- DO(ctr_encrypt(pt, ct, 64, &ctr));
+ DO(ctr_encrypt(pt, ct, 57, &ctr));
/* decode the block */
DO(ctr_setiv(iv2, l, &ctr));
zeromem(tmp, sizeof(tmp));
- DO(ctr_decrypt(ct, tmp, 64, &ctr));
- if (memcmp(tmp, pt, 64) != 0) {
+ DO(ctr_decrypt(ct, tmp, 57, &ctr));
+ if (memcmp(tmp, pt, 57) != 0) {
printf("CTR failed");
return 1;
}
+#endif
return 0;
}
diff --git a/demos/test/pkcs_1_test.c b/testprof/pkcs_1_test.c
similarity index 94%
rename from demos/test/pkcs_1_test.c
rename to testprof/pkcs_1_test.c
index 52af7b6f..40cf6306 100644
--- a/demos/test/pkcs_1_test.c
+++ b/testprof/pkcs_1_test.c
@@ -1,4 +1,4 @@
-#include "test.h"
+#include <tomcrypt_test.h>
#ifdef PKCS_1
@@ -31,7 +31,7 @@ int pkcs_1_test(void)
/* PKCS v1.5 testing (encryption) */
l1 = sizeof(buf[1]);
- DO(pkcs_1_v15_es_encode(buf[0], l3, modlen, &test_yarrow, prng_idx, buf[1], &l1));
+ DO(pkcs_1_v15_es_encode(buf[0], l3, modlen, &yarrow_prng, prng_idx, buf[1], &l1));
DO(pkcs_1_v15_es_decode(buf[1], l1, modlen, buf[2], l3, &res1));
if (res1 != 1 || memcmp(buf[0], buf[2], l3)) {
printf("pkcs v1.5 encrypt failed %d, %lu, %lu ", res1, l1, l3);
@@ -64,7 +64,7 @@ int pkcs_1_test(void)
/* encode it */
l1 = sizeof(buf[1]);
- DO(pkcs_1_oaep_encode(buf[0], l3, lparam, lparamlen, modlen, &test_yarrow, prng_idx, hash_idx, buf[1], &l1));
+ DO(pkcs_1_oaep_encode(buf[0], l3, lparam, lparamlen, modlen, &yarrow_prng, prng_idx, hash_idx, buf[1], &l1));
/* decode it */
l2 = sizeof(buf[2]);
@@ -86,7 +86,7 @@ int pkcs_1_test(void)
/* test PSS */
l1 = sizeof(buf[1]);
- DO(pkcs_1_pss_encode(buf[0], l3, saltlen, &test_yarrow, prng_idx, hash_idx, modlen, buf[1], &l1));
+ DO(pkcs_1_pss_encode(buf[0], l3, saltlen, &yarrow_prng, prng_idx, hash_idx, modlen, buf[1], &l1));
DO(pkcs_1_pss_decode(buf[0], l3, buf[1], l1, saltlen, hash_idx, modlen, &res1));
buf[0][i1 = abs(rand()) % l3] ^= 1;
diff --git a/demos/test/rsa_test.c b/testprof/rsa_test.c
similarity index 65%
rename from demos/test/rsa_test.c
rename to testprof/rsa_test.c
index a6034dda..f114e499 100644
--- a/demos/test/rsa_test.c
+++ b/testprof/rsa_test.c
@@ -1,4 +1,4 @@
-#include "test.h"
+#include <tomcrypt_test.h>
#ifdef MRSA
@@ -8,7 +8,7 @@ int rsa_test(void)
{
unsigned char in[1024], out[1024], tmp[1024];
rsa_key key, privKey, pubKey;
- int hash_idx, prng_idx, stat, stat2;
+ int hash_idx, prng_idx, stat, stat2, cnt;
unsigned long rsa_msgsize, len, len2;
static unsigned char lparam[] = { 0x01, 0x02, 0x03, 0x04 };
@@ -19,50 +19,89 @@ int rsa_test(void)
return 1;
}
- /* make a random key */
- DO(rsa_make_key(&test_yarrow, prng_idx, 1024/8, 65537, &key));
+ /* make 10 random key */
+ for (cnt = 0; cnt < 10; cnt++) {
+ DO(rsa_make_key(&yarrow_prng, prng_idx, 1024/8, 65537, &key));
+ if (mp_count_bits(&key.N) != 1024) {
+ printf("rsa_1024 key modulus has %d bits\n", mp_count_bits(&key.N));
+
+len = mp_unsigned_bin_size(&key.N);
+mp_to_unsigned_bin(&key.N, tmp);
+printf("N == \n");
+for (cnt = 0; cnt < len; ) {
+ printf("%02x ", tmp[cnt]);
+ if (!(++cnt & 15)) printf("\n");
+}
+
+len = mp_unsigned_bin_size(&key.p);
+mp_to_unsigned_bin(&key.p, tmp);
+printf("p == \n");
+for (cnt = 0; cnt < len; ) {
+ printf("%02x ", tmp[cnt]);
+ if (!(++cnt & 15)) printf("\n");
+}
+
+len = mp_unsigned_bin_size(&key.q);
+mp_to_unsigned_bin(&key.q, tmp);
+printf("\nq == \n");
+for (cnt = 0; cnt < len; ) {
+ printf("%02x ", tmp[cnt]);
+ if (!(++cnt & 15)) printf("\n");
+}
+printf("\n");
+
+
+ return 1;
+ }
+ if (cnt != 9) {
+ rsa_free(&key);
+ }
+ }
/* test PKCS #1 v1.5 */
+ for (cnt = 0; cnt < 4; cnt++) {
for (rsa_msgsize = 1; rsa_msgsize <= 117; rsa_msgsize++) {
/* make a random key/msg */
- yarrow_read(in, rsa_msgsize, &test_yarrow);
+ yarrow_read(in, rsa_msgsize, &yarrow_prng);
len = sizeof(out);
len2 = rsa_msgsize;
/* encrypt */
- DO(rsa_v15_encrypt_key(in, rsa_msgsize, out, &len, &test_yarrow, prng_idx, &key));
- DO(rsa_v15_decrypt_key(out, len, tmp, rsa_msgsize, &test_yarrow, prng_idx, &stat, &key));
+ DO(rsa_v15_encrypt_key(in, rsa_msgsize, out, &len, &yarrow_prng, prng_idx, &key));
+ DO(rsa_v15_decrypt_key(out, len, tmp, rsa_msgsize, &stat, &key));
if (stat != 1 || memcmp(tmp, in, rsa_msgsize)) {
printf("PKCS #1 v1.5 encrypt/decrypt failure (rsa_msgsize: %lu, stat: %d)\n", rsa_msgsize, stat);
- return 1;
+ return 1;
}
}
-
+ }
+
/* signature */
len = sizeof(out);
- DO(rsa_v15_sign_hash(in, 20, out, &len, &test_yarrow, prng_idx, hash_idx, &key));
+ DO(rsa_v15_sign_hash(in, 20, out, &len, hash_idx, &key));
in[1] ^= 1;
- DO(rsa_v15_verify_hash(out, len, in, 20, &test_yarrow, prng_idx, hash_idx, &stat, &key));
+ DO(rsa_v15_verify_hash(out, len, in, 20, hash_idx, &stat, &key));
in[1] ^= 1;
- DO(rsa_v15_verify_hash(out, len, in, 20, &test_yarrow, prng_idx, hash_idx, &stat2, &key));
+ DO(rsa_v15_verify_hash(out, len, in, 20, hash_idx, &stat2, &key));
if (!(stat == 0 && stat2 == 1)) {
printf("PKCS #1 v1.5 sign/verify failure (stat %d, stat2 %d)\n", stat, stat2);
return 1;
}
/* encrypt the key (without lparam) */
+ for (cnt = 0; cnt < 4; cnt++) {
for (rsa_msgsize = 1; rsa_msgsize <= 86; rsa_msgsize++) {
/* make a random key/msg */
- yarrow_read(in, rsa_msgsize, &test_yarrow);
+ yarrow_read(in, rsa_msgsize, &yarrow_prng);
len = sizeof(out);
len2 = rsa_msgsize;
- DO(rsa_encrypt_key(in, rsa_msgsize, out, &len, NULL, 0, &test_yarrow, prng_idx, hash_idx, &key));
+ DO(rsa_encrypt_key(in, rsa_msgsize, out, &len, NULL, 0, &yarrow_prng, prng_idx, hash_idx, &key));
/* change a byte */
out[8] ^= 1;
- DO(rsa_decrypt_key(out, len, tmp, &len2, NULL, 0, &test_yarrow, prng_idx, hash_idx, &stat2, &key));
+ DO(rsa_decrypt_key(out, len, tmp, &len2, NULL, 0, hash_idx, &stat2, &key));
/* change a byte back */
out[8] ^= 1;
if (len2 != rsa_msgsize) {
@@ -71,7 +110,7 @@ int rsa_test(void)
}
len2 = rsa_msgsize;
- DO(rsa_decrypt_key(out, len, tmp, &len2, NULL, 0, &test_yarrow, prng_idx, hash_idx, &stat, &key));
+ DO(rsa_decrypt_key(out, len, tmp, &len2, NULL, 0, hash_idx, &stat, &key));
if (!(stat == 1 && stat2 == 0)) {
printf("rsa_decrypt_key failed");
return 1;
@@ -98,15 +137,16 @@ int rsa_test(void)
return 1;
}
}
+ }
/* encrypt the key (with lparam) */
for (rsa_msgsize = 1; rsa_msgsize <= 86; rsa_msgsize++) {
len = sizeof(out);
len2 = rsa_msgsize;
- DO(rsa_encrypt_key(in, rsa_msgsize, out, &len, lparam, sizeof(lparam), &test_yarrow, prng_idx, hash_idx, &key));
+ DO(rsa_encrypt_key(in, rsa_msgsize, out, &len, lparam, sizeof(lparam), &yarrow_prng, prng_idx, hash_idx, &key));
/* change a byte */
out[8] ^= 1;
- DO(rsa_decrypt_key(out, len, tmp, &len2, lparam, sizeof(lparam), &test_yarrow, prng_idx, hash_idx, &stat2, &key));
+ DO(rsa_decrypt_key(out, len, tmp, &len2, lparam, sizeof(lparam), hash_idx, &stat2, &key));
if (len2 != rsa_msgsize) {
printf("\nrsa_decrypt_key mismatch len %lu (first decrypt)", len2);
return 1;
@@ -115,7 +155,7 @@ int rsa_test(void)
out[8] ^= 1;
len2 = rsa_msgsize;
- DO(rsa_decrypt_key(out, len, tmp, &len2, lparam, sizeof(lparam), &test_yarrow, prng_idx, hash_idx, &stat, &key));
+ DO(rsa_decrypt_key(out, len, tmp, &len2, lparam, sizeof(lparam), hash_idx, &stat, &key));
if (!(stat == 1 && stat2 == 0)) {
printf("rsa_decrypt_key failed");
return 1;
@@ -128,7 +168,7 @@ int rsa_test(void)
/* sign a message (unsalted, lower cholestorol and Atkins approved) now */
len = sizeof(out);
- DO(rsa_sign_hash(in, 20, out, &len, &test_yarrow, prng_idx, hash_idx, 0, &key));
+ DO(rsa_sign_hash(in, 20, out, &len, &yarrow_prng, prng_idx, hash_idx, 0, &key));
/* export key and import as both private and public */
len2 = sizeof(tmp);
@@ -139,10 +179,10 @@ int rsa_test(void)
DO(rsa_import(tmp, len2, &pubKey));
/* verify with original */
- DO(rsa_verify_hash(out, len, in, 20, &test_yarrow, prng_idx, hash_idx, 0, &stat, &key));
+ DO(rsa_verify_hash(out, len, in, 20, hash_idx, 0, &stat, &key));
/* change a byte */
in[0] ^= 1;
- DO(rsa_verify_hash(out, len, in, 20, &test_yarrow, prng_idx, hash_idx, 0, &stat2, &key));
+ DO(rsa_verify_hash(out, len, in, 20, hash_idx, 0, &stat2, &key));
if (!(stat == 1 && stat2 == 0)) {
printf("rsa_verify_hash (unsalted, origKey) failed, %d, %d", stat, stat2);
@@ -155,10 +195,10 @@ int rsa_test(void)
/* verify with privKey */
/* change a byte */
in[0] ^= 1;
- DO(rsa_verify_hash(out, len, in, 20, &test_yarrow, prng_idx, hash_idx, 0, &stat, &privKey));
+ DO(rsa_verify_hash(out, len, in, 20, hash_idx, 0, &stat, &privKey));
/* change a byte */
in[0] ^= 1;
- DO(rsa_verify_hash(out, len, in, 20, &test_yarrow, prng_idx, hash_idx, 0, &stat2, &privKey));
+ DO(rsa_verify_hash(out, len, in, 20, hash_idx, 0, &stat2, &privKey));
if (!(stat == 1 && stat2 == 0)) {
printf("rsa_verify_hash (unsalted, privKey) failed, %d, %d", stat, stat2);
@@ -171,10 +211,10 @@ int rsa_test(void)
/* verify with pubKey */
/* change a byte */
in[0] ^= 1;
- DO(rsa_verify_hash(out, len, in, 20, &test_yarrow, prng_idx, hash_idx, 0, &stat, &pubKey));
+ DO(rsa_verify_hash(out, len, in, 20, hash_idx, 0, &stat, &pubKey));
/* change a byte */
in[0] ^= 1;
- DO(rsa_verify_hash(out, len, in, 20, &test_yarrow, prng_idx, hash_idx, 0, &stat2, &pubKey));
+ DO(rsa_verify_hash(out, len, in, 20, hash_idx, 0, &stat2, &pubKey));
if (!(stat == 1 && stat2 == 0)) {
printf("rsa_verify_hash (unsalted, pubkey) failed, %d, %d", stat, stat2);
@@ -186,11 +226,11 @@ int rsa_test(void)
/* sign a message (salted) now (use privKey to make, pubKey to verify) */
len = sizeof(out);
- DO(rsa_sign_hash(in, 20, out, &len, &test_yarrow, prng_idx, hash_idx, 8, &privKey));
- DO(rsa_verify_hash(out, len, in, 20, &test_yarrow, prng_idx, hash_idx, 8, &stat, &pubKey));
+ DO(rsa_sign_hash(in, 20, out, &len, &yarrow_prng, prng_idx, hash_idx, 8, &privKey));
+ DO(rsa_verify_hash(out, len, in, 20, hash_idx, 8, &stat, &pubKey));
/* change a byte */
in[0] ^= 1;
- DO(rsa_verify_hash(out, len, in, 20, &test_yarrow, prng_idx, hash_idx, 8, &stat2, &pubKey));
+ DO(rsa_verify_hash(out, len, in, 20, hash_idx, 8, &stat2, &pubKey));
if (!(stat == 1 && stat2 == 0)) {
printf("rsa_verify_hash (salted) failed, %d, %d", stat, stat2);
diff --git a/demos/test/store_test.c b/testprof/store_test.c
similarity index 95%
rename from demos/test/store_test.c
rename to testprof/store_test.c
index e033594b..41b2f927 100644
--- a/demos/test/store_test.c
+++ b/testprof/store_test.c
@@ -1,11 +1,11 @@
-#include "test.h"
+#include <tomcrypt_test.h>
/* Test store/load macros with offsets */
int store_test(void)
{
unsigned char buf[24];
- unsigned long L, L1;
int y;
+ ulong32 L, L1;
ulong64 LL, LL1;
L = 0x12345678UL;
diff --git a/testprof/test.c b/testprof/test.c
new file mode 100644
index 00000000..9f6df715
--- /dev/null
+++ b/testprof/test.c
@@ -0,0 +1,9 @@
+#include <tomcrypt_test.h>
+
+void run_cmd(int res, int line, char *file, char *cmd)
+{
+ if (res != CRYPT_OK) {
+ fprintf(stderr, "%s (%d)\n%s:%d:%s\n", error_to_string(res), res, file, line, cmd);
+ exit(EXIT_FAILURE);
+ }
+}
diff --git a/testprof/tomcrypt_test.h b/testprof/tomcrypt_test.h
new file mode 100644
index 00000000..fc284304
--- /dev/null
+++ b/testprof/tomcrypt_test.h
@@ -0,0 +1,73 @@
+
+#ifndef __TEST_H_
+#define __TEST_H_
+
+#include <tomcrypt.h>
+
+/* enable stack testing */
+// #define STACK_TEST
+
+/* stack testing, define this if stack usage goes downwards [e.g. x86] */
+#define STACK_DOWN
+
+typedef struct {
+ char *name, *prov, *req;
+ int (*entry)(void);
+} test_entry;
+
+extern prng_state yarrow_prng;
+
+void run_cmd(int res, int line, char *file, char *cmd);
+#define DO(x) { run_cmd((x), __LINE__, __FILE__, #x); }
+
+/* TESTS */
+int cipher_hash_test(void);
+int modes_test(void);
+int mac_test(void);
+int pkcs_1_test(void);
+int store_test(void);
+int rsa_test(void);
+int ecc_tests(void);
+int dsa_test(void);
+int dh_tests(void);
+int der_tests(void);
+
+/* timing */
+#define KTIMES 25
+#define TIMES 100000
+
+extern struct list {
+ int id;
+ unsigned long spd1, spd2, avg;
+} results[];
+
+extern int no_results;
+
+int sorter(const void *a, const void *b);
+void tally_results(int type);
+ulong64 rdtsc (void);
+
+void t_start(void);
+ulong64 t_read(void);
+void init_timer(void);
+
+/* register default algs */
+void reg_algs(void);
+int time_keysched(void);
+int time_cipher(void);
+int time_cipher2(void);
+int time_cipher3(void);
+int time_hash(void);
+void time_mult(void);
+void time_sqr(void);
+void time_prng(void);
+void time_rsa(void);
+void time_ecc(void);
+void time_dh(void);
+void time_macs_(unsigned long MAC_SIZE);
+void time_macs(void);
+void time_encmacs(void);
+
+
+
+#endif
diff --git a/demos/x86_prof.c b/testprof/x86_prof.c
similarity index 59%
rename from demos/x86_prof.c
rename to testprof/x86_prof.c
index b77b76c7..bcc25f47 100644
--- a/demos/x86_prof.c
+++ b/testprof/x86_prof.c
@@ -1,15 +1,9 @@
-#include <mycrypt.h>
+#include <tomcrypt_test.h>
-#define KTIMES 25
-#define TIMES 100000
-
-struct list {
- int id;
- unsigned long spd1, spd2, avg;
-} results[100];
+prng_state yarrow_prng;
+struct list results[100];
int no_results;
-
int sorter(const void *a, const void *b)
{
const struct list *A, *B;
@@ -35,7 +29,7 @@ void tally_results(int type)
} else if (type == 1) {
for (x = 0; x < no_results; x++) {
printf
- ("%-20s: Encrypt at %5lu, Decrypt at %5lu\n", cipher_descriptor[results[x].id].name, results[x].spd1, results[x].spd2);
+ ("%-20s[%3d]: Encrypt at %5lu, Decrypt at %5lu\n", cipher_descriptor[results[x].id].name, cipher_descriptor[results[x].id].ID, results[x].spd1, results[x].spd2);
}
} else {
for (x = 0; x < no_results; x++) {
@@ -46,19 +40,25 @@ void tally_results(int type)
}
/* RDTSC from Scott Duplichan */
-static ulong64 rdtsc (void)
+ulong64 rdtsc (void)
{
#if defined __GNUC__
- #if defined(__i386__) || defined(__x86_64__)
- unsigned long long a;
- __asm__ __volatile__ ("rdtsc\nmovl %%eax,%0\nmovl %%edx,4+%0\n"::"m"(a):"%eax","%edx");
+ #ifdef INTEL_CC
+ ulong64 a;
+ asm ( " rdtsc ":"=A"(a));
return a;
- #else /* gcc-IA64 version */
+ #elif defined(__i386__) || defined(__x86_64__)
+ ulong64 a;
+ asm __volatile__ ("rdtsc\nmovl %%eax,(%0)\nmovl %%edx,4(%0)\n"::"r"(&a):"%eax","%edx");
+ return a;
+ #elif defined(__ia64__) /* gcc-IA64 version */
unsigned long result;
__asm__ __volatile__("mov %0=ar.itc" : "=r"(result) :: "memory");
while (__builtin_expect ((int) result == -1, 0))
__asm__ __volatile__("mov %0=ar.itc" : "=r"(result) :: "memory");
return result;
+ #else
+ return XCLOCK();
#endif
// Microsoft and Intel Windows compilers
@@ -72,12 +72,11 @@ static ulong64 rdtsc (void)
#endif
return __getReg (3116);
#else
- #error need rdtsc function for this build
+ return XCLOCK();
#endif
}
-ulong64 timer, skew = 0;
-prng_state prng;
+static ulong64 timer, skew = 0;
void t_start(void)
{
@@ -99,10 +98,10 @@ void init_timer(void)
t_start();
t1 = t_read();
t3 = t_read();
- t2 = t_read() - t1;
+ t2 = (t_read() - t1)>>1;
- c1 = (c1 > t1) ? t1 : c1;
- c2 = (c2 > t2) ? t2 : c2;
+ c1 = (t1 > c1) ? t1 : c1;
+ c2 = (t2 > c2) ? t2 : c2;
}
skew = c2 - c1;
printf("Clock Skew: %lu\n", (unsigned long)skew);
@@ -154,6 +153,12 @@ void reg_algs(void)
#ifdef SKIPJACK
register_cipher (&skipjack_desc);
#endif
+#ifdef KHAZAD
+ register_cipher (&khazad_desc);
+#endif
+#ifdef ANUBIS
+ register_cipher (&anubis_desc);
+#endif
#ifdef TIGER
register_hash (&tiger_desc);
@@ -214,7 +219,7 @@ register_prng(&rc4_desc);
register_prng(&sober128_desc);
#endif
-rng_make_prng(128, find_prng("yarrow"), &prng, NULL);
+rng_make_prng(128, find_prng("yarrow"), &yarrow_prng, NULL);
}
int time_keysched(void)
@@ -235,7 +240,7 @@ int time_keysched(void)
kl = cipher_descriptor[x].min_key_length;
c1 = (ulong64)-1;
for (y1 = 0; y1 < KTIMES; y1++) {
- yarrow_read(key, kl, &prng);
+ yarrow_read(key, kl, &yarrow_prng);
t_start();
DO1(key);
t1 = t_read();
@@ -257,16 +262,14 @@ int time_cipher(void)
{
unsigned long x, y1;
ulong64 t1, t2, c1, c2, a1, a2;
- symmetric_key skey;
- void (*func) (const unsigned char *, unsigned char *, symmetric_key *);
- unsigned char key[MAXBLOCKSIZE], pt[MAXBLOCKSIZE];
+ symmetric_ECB ecb;
+ unsigned char key[MAXBLOCKSIZE], pt[4096];
int err;
printf ("\n\nECB Time Trials for the Symmetric Ciphers:\n");
no_results = 0;
for (x = 0; cipher_descriptor[x].name != NULL; x++) {
- cipher_descriptor[x].setup (key, cipher_descriptor[x].min_key_length, 0,
- &skey);
+ ecb_start(x, key, cipher_descriptor[x].min_key_length, 0, &ecb);
/* sanity check on cipher */
if ((err = cipher_descriptor[x].test()) != CRYPT_OK) {
@@ -274,12 +277,11 @@ int time_cipher(void)
exit(EXIT_FAILURE);
}
-#define DO1 func(pt,pt,&skey);
+#define DO1 ecb_encrypt(pt, pt, sizeof(pt), &ecb);
#define DO2 DO1 DO1
- func = cipher_descriptor[x].ecb_encrypt;
c1 = c2 = (ulong64)-1;
- for (y1 = 0; y1 < TIMES; y1++) {
+ for (y1 = 0; y1 < 100; y1++) {
t_start();
DO1;
t1 = t_read();
@@ -292,10 +294,13 @@ int time_cipher(void)
}
a1 = c2 - c1 - skew;
+#undef DO1
+#undef DO2
+#define DO1 ecb_decrypt(pt, pt, sizeof(pt), &ecb);
+#define DO2 DO1 DO1
- func = cipher_descriptor[x].ecb_decrypt;
c1 = c2 = (ulong64)-1;
- for (y1 = 0; y1 < TIMES; y1++) {
+ for (y1 = 0; y1 < 100; y1++) {
t_start();
DO1;
t1 = t_read();
@@ -309,8 +314,8 @@ int time_cipher(void)
a2 = c2 - c1 - skew;
results[no_results].id = x;
- results[no_results].spd1 = a1/cipher_descriptor[x].block_length;
- results[no_results].spd2 = a2/cipher_descriptor[x].block_length;;
+ results[no_results].spd1 = a1/(sizeof(pt)/cipher_descriptor[x].block_length);
+ results[no_results].spd2 = a2/(sizeof(pt)/cipher_descriptor[x].block_length);
results[no_results].avg = (results[no_results].spd1 + results[no_results].spd2+1)/2;
++no_results;
printf("."); fflush(stdout);
@@ -323,6 +328,154 @@ int time_cipher(void)
return 0;
}
+#ifdef CBC
+int time_cipher2(void)
+{
+ unsigned long x, y1;
+ ulong64 t1, t2, c1, c2, a1, a2;
+ symmetric_CBC cbc;
+ unsigned char key[MAXBLOCKSIZE], pt[4096];
+ int err;
+
+ printf ("\n\nCBC Time Trials for the Symmetric Ciphers:\n");
+ no_results = 0;
+ for (x = 0; cipher_descriptor[x].name != NULL; x++) {
+ cbc_start(x, pt, key, cipher_descriptor[x].min_key_length, 0, &cbc);
+
+ /* sanity check on cipher */
+ if ((err = cipher_descriptor[x].test()) != CRYPT_OK) {
+ fprintf(stderr, "\n\nERROR: Cipher %s failed self-test %s\n", cipher_descriptor[x].name, error_to_string(err));
+ exit(EXIT_FAILURE);
+ }
+
+#define DO1 cbc_encrypt(pt, pt, sizeof(pt), &cbc);
+#define DO2 DO1 DO1
+
+ c1 = c2 = (ulong64)-1;
+ for (y1 = 0; y1 < 100; y1++) {
+ t_start();
+ DO1;
+ t1 = t_read();
+ DO2;
+ t2 = t_read();
+ t2 -= t1;
+
+ c1 = (t1 > c1 ? c1 : t1);
+ c2 = (t2 > c2 ? c2 : t2);
+ }
+ a1 = c2 - c1 - skew;
+
+#undef DO1
+#undef DO2
+#define DO1 cbc_decrypt(pt, pt, sizeof(pt), &cbc);
+#define DO2 DO1 DO1
+
+ c1 = c2 = (ulong64)-1;
+ for (y1 = 0; y1 < 100; y1++) {
+ t_start();
+ DO1;
+ t1 = t_read();
+ DO2;
+ t2 = t_read();
+ t2 -= t1;
+
+ c1 = (t1 > c1 ? c1 : t1);
+ c2 = (t2 > c2 ? c2 : t2);
+ }
+ a2 = c2 - c1 - skew;
+
+ results[no_results].id = x;
+ results[no_results].spd1 = a1/(sizeof(pt)/cipher_descriptor[x].block_length);
+ results[no_results].spd2 = a2/(sizeof(pt)/cipher_descriptor[x].block_length);
+ results[no_results].avg = (results[no_results].spd1 + results[no_results].spd2+1)/2;
+ ++no_results;
+ printf("."); fflush(stdout);
+
+#undef DO2
+#undef DO1
+ }
+ tally_results(1);
+
+ return 0;
+}
+#else
+int time_cipher2(void) { printf("NO CBC\n"); return 0; }
+#endif
+
+#ifdef CTR
+int time_cipher3(void)
+{
+ unsigned long x, y1;
+ ulong64 t1, t2, c1, c2, a1, a2;
+ symmetric_CTR ctr;
+ unsigned char key[MAXBLOCKSIZE], pt[4096];
+ int err;
+
+ printf ("\n\nCTR Time Trials for the Symmetric Ciphers:\n");
+ no_results = 0;
+ for (x = 0; cipher_descriptor[x].name != NULL; x++) {
+ ctr_start(x, pt, key, cipher_descriptor[x].min_key_length, 0, &ctr);
+
+ /* sanity check on cipher */
+ if ((err = cipher_descriptor[x].test()) != CRYPT_OK) {
+ fprintf(stderr, "\n\nERROR: Cipher %s failed self-test %s\n", cipher_descriptor[x].name, error_to_string(err));
+ exit(EXIT_FAILURE);
+ }
+
+#define DO1 ctr_encrypt(pt, pt, sizeof(pt), &ctr);
+#define DO2 DO1 DO1
+
+ c1 = c2 = (ulong64)-1;
+ for (y1 = 0; y1 < 100; y1++) {
+ t_start();
+ DO1;
+ t1 = t_read();
+ DO2;
+ t2 = t_read();
+ t2 -= t1;
+
+ c1 = (t1 > c1 ? c1 : t1);
+ c2 = (t2 > c2 ? c2 : t2);
+ }
+ a1 = c2 - c1 - skew;
+
+#undef DO1
+#undef DO2
+#define DO1 ctr_decrypt(pt, pt, sizeof(pt), &ctr);
+#define DO2 DO1 DO1
+
+ c1 = c2 = (ulong64)-1;
+ for (y1 = 0; y1 < 100; y1++) {
+ t_start();
+ DO1;
+ t1 = t_read();
+ DO2;
+ t2 = t_read();
+ t2 -= t1;
+
+ c1 = (t1 > c1 ? c1 : t1);
+ c2 = (t2 > c2 ? c2 : t2);
+ }
+ a2 = c2 - c1 - skew;
+
+ results[no_results].id = x;
+ results[no_results].spd1 = a1/(sizeof(pt)/cipher_descriptor[x].block_length);
+ results[no_results].spd2 = a2/(sizeof(pt)/cipher_descriptor[x].block_length);
+ results[no_results].avg = (results[no_results].spd1 + results[no_results].spd2+1)/2;
+ ++no_results;
+ printf("."); fflush(stdout);
+
+#undef DO2
+#undef DO1
+ }
+ tally_results(1);
+
+ return 0;
+}
+#else
+int time_cipher3(void) { printf("NO CTR\n"); return 0; }
+#endif
+
int time_hash(void)
{
unsigned long x, y1, len;
@@ -374,6 +527,7 @@ int time_hash(void)
return 0;
}
+#ifdef MPI
void time_mult(void)
{
ulong64 t1, t2;
@@ -382,7 +536,7 @@ void time_mult(void)
printf("Timing Multiplying:\n");
mp_init_multi(&a,&b,&c,NULL);
- for (x = 128/DIGIT_BIT; x <= 1024/DIGIT_BIT; x += 128/DIGIT_BIT) {
+ for (x = 128/DIGIT_BIT; x <= 1536/DIGIT_BIT; x += 128/DIGIT_BIT) {
mp_rand(&a, x);
mp_rand(&b, x);
@@ -397,13 +551,13 @@ void time_mult(void)
t1 = (t_read() - t1)>>1;
if (t1 < t2) t2 = t1;
}
- printf("%3lu digits: %9llu cycles\n", x, t2);
+ printf("%4lu bits: %9llu cycles\n", x*DIGIT_BIT, t2);
}
mp_clear_multi(&a,&b,&c,NULL);
#undef DO1
#undef DO2
-}
+}
void time_sqr(void)
{
@@ -413,7 +567,7 @@ void time_sqr(void)
printf("Timing Squaring:\n");
mp_init_multi(&a,&b,NULL);
- for (x = 128/DIGIT_BIT; x <= 1024/DIGIT_BIT; x += 128/DIGIT_BIT) {
+ for (x = 128/DIGIT_BIT; x <= 1536/DIGIT_BIT; x += 128/DIGIT_BIT) {
mp_rand(&a, x);
#define DO1 mp_sqr(&a, &b);
@@ -427,13 +581,17 @@ void time_sqr(void)
t1 = (t_read() - t1)>>1;
if (t1 < t2) t2 = t1;
}
- printf("%3lu digits: %9llu cycles\n", x, t2);
+ printf("%4lu bits: %9llu cycles\n", x*DIGIT_BIT, t2);
}
mp_clear_multi(&a,&b,NULL);
#undef DO1
#undef DO2
-}
+}
+#else
+void time_mult(void) { printf("NO MULT\n"); }
+void time_sqr(void) { printf("NO SQR\n"); }
+#endif
void time_prng(void)
{
@@ -486,7 +644,8 @@ void time_prng(void)
}
}
-
+
+#ifdef MRSA
/* time various RSA operations */
void time_rsa(void)
{
@@ -501,7 +660,7 @@ void time_rsa(void)
for (y = 0; y < 16; y++) {
t_start();
t1 = t_read();
- if ((err = rsa_make_key(&prng, find_prng("yarrow"), x/8, 65537, &key)) != CRYPT_OK) {
+ if ((err = rsa_make_key(&yarrow_prng, find_prng("yarrow"), x/8, 65537, &key)) != CRYPT_OK) {
fprintf(stderr, "\n\nrsa_make_key says %s, wait...no it should say %s...damn you!\n", error_to_string(err), error_to_string(CRYPT_OK));
exit(EXIT_FAILURE);
}
@@ -520,7 +679,7 @@ void time_rsa(void)
t_start();
t1 = t_read();
z = sizeof(buf[1]);
- if ((err = rsa_encrypt_key(buf[0], 32, buf[1], &z, "testprog", 8, &prng,
+ if ((err = rsa_encrypt_key(buf[0], 32, buf[1], &z, "testprog", 8, &yarrow_prng,
find_prng("yarrow"), find_hash("sha1"),
&key)) != CRYPT_OK) {
fprintf(stderr, "\n\nrsa_encrypt_key says %s, wait...no it should say %s...damn you!\n", error_to_string(err), error_to_string(CRYPT_OK));
@@ -537,8 +696,7 @@ void time_rsa(void)
t_start();
t1 = t_read();
zzz = sizeof(buf[0]);
- if ((err = rsa_decrypt_key(buf[1], z, buf[0], &zzz, "testprog", 8, &prng,
- find_prng("yarrow"), find_hash("sha1"),
+ if ((err = rsa_decrypt_key(buf[1], z, buf[0], &zzz, "testprog", 8, find_hash("sha1"),
&zz, &key)) != CRYPT_OK) {
fprintf(stderr, "\n\nrsa_decrypt_key says %s, wait...no it should say %s...damn you!\n", error_to_string(err), error_to_string(CRYPT_OK));
exit(EXIT_FAILURE);
@@ -553,7 +711,11 @@ void time_rsa(void)
rsa_free(&key);
}
}
+#else
+void time_rsa(void) { printf("NO RSA\n"); }
+#endif
+#ifdef MECC
/* time various ECC operations */
void time_ecc(void)
{
@@ -569,7 +731,7 @@ void time_ecc(void)
for (y = 0; y < 16; y++) {
t_start();
t1 = t_read();
- if ((err = ecc_make_key(&prng, find_prng("yarrow"), x, &key)) != CRYPT_OK) {
+ if ((err = ecc_make_key(&yarrow_prng, find_prng("yarrow"), x, &key)) != CRYPT_OK) {
fprintf(stderr, "\n\necc_make_key says %s, wait...no it should say %s...damn you!\n", error_to_string(err), error_to_string(CRYPT_OK));
exit(EXIT_FAILURE);
}
@@ -588,7 +750,7 @@ void time_ecc(void)
t_start();
t1 = t_read();
z = sizeof(buf[1]);
- if ((err = ecc_encrypt_key(buf[0], 20, buf[1], &z, &prng, find_prng("yarrow"), find_hash("sha1"),
+ if ((err = ecc_encrypt_key(buf[0], 20, buf[1], &z, &yarrow_prng, find_prng("yarrow"), find_hash("sha1"),
&key)) != CRYPT_OK) {
fprintf(stderr, "\n\necc_encrypt_key says %s, wait...no it should say %s...damn you!\n", error_to_string(err), error_to_string(CRYPT_OK));
exit(EXIT_FAILURE);
@@ -601,7 +763,11 @@ void time_ecc(void)
ecc_free(&key);
}
}
+#else
+void time_ecc(void) { printf("NO ECC\n"); }
+#endif
+#ifdef MDH
/* time various DH operations */
void time_dh(void)
{
@@ -617,7 +783,7 @@ void time_dh(void)
for (y = 0; y < 16; y++) {
t_start();
t1 = t_read();
- if ((err = dh_make_key(&prng, find_prng("yarrow"), x, &key)) != CRYPT_OK) {
+ if ((err = dh_make_key(&yarrow_prng, find_prng("yarrow"), x, &key)) != CRYPT_OK) {
fprintf(stderr, "\n\ndh_make_key says %s, wait...no it should say %s...damn you!\n", error_to_string(err), error_to_string(CRYPT_OK));
exit(EXIT_FAILURE);
}
@@ -636,7 +802,7 @@ void time_dh(void)
t_start();
t1 = t_read();
z = sizeof(buf[1]);
- if ((err = dh_encrypt_key(buf[0], 20, buf[1], &z, &prng, find_prng("yarrow"), find_hash("sha1"),
+ if ((err = dh_encrypt_key(buf[0], 20, buf[1], &z, &yarrow_prng, find_prng("yarrow"), find_hash("sha1"),
&key)) != CRYPT_OK) {
fprintf(stderr, "\n\ndh_encrypt_key says %s, wait...no it should say %s...damn you!\n", error_to_string(err), error_to_string(CRYPT_OK));
exit(EXIT_FAILURE);
@@ -649,9 +815,11 @@ void time_dh(void)
dh_free(&key);
}
}
+#else
+void time_dh(void) { printf("NO DH\n"); }
+#endif
-#define MAC_SIZE 32
-void time_macs(void)
+void time_macs_(unsigned long MAC_SIZE)
{
unsigned char *buf, key[16], tag[16];
ulong64 t1, t2;
@@ -669,9 +837,10 @@ void time_macs(void)
cipher_idx = find_cipher("aes");
hash_idx = find_hash("md5");
- yarrow_read(buf, MAC_SIZE*1024, &prng);
- yarrow_read(key, 16, &prng);
+ yarrow_read(buf, MAC_SIZE*1024, &yarrow_prng);
+ yarrow_read(key, 16, &yarrow_prng);
+#ifdef OMAC
t2 = -1;
for (x = 0; x < 10000; x++) {
t_start();
@@ -685,7 +854,9 @@ void time_macs(void)
if (t1 < t2) t2 = t1;
}
printf("OMAC-AES\t\t%9llu\n", t2/(MAC_SIZE*1024));
+#endif
+#ifdef PMAC
t2 = -1;
for (x = 0; x < 10000; x++) {
t_start();
@@ -699,7 +870,25 @@ void time_macs(void)
if (t1 < t2) t2 = t1;
}
printf("PMAC-AES\t\t%9llu\n", t2/(MAC_SIZE*1024));
+#endif
+
+#ifdef PELICAN
+ t2 = -1;
+ for (x = 0; x < 10000; x++) {
+ t_start();
+ t1 = t_read();
+ z = 16;
+ if ((err = pelican_memory(key, 16, buf, MAC_SIZE*1024, tag)) != CRYPT_OK) {
+ fprintf(stderr, "\n\npelican error... %s\n", error_to_string(err));
+ exit(EXIT_FAILURE);
+ }
+ t1 = t_read() - t1;
+ if (t1 < t2) t2 = t1;
+ }
+ printf("PELICAN \t\t%9llu\n", t2/(MAC_SIZE*1024));
+#endif
+#ifdef HMAC
t2 = -1;
for (x = 0; x < 10000; x++) {
t_start();
@@ -713,28 +902,145 @@ void time_macs(void)
if (t1 < t2) t2 = t1;
}
printf("HMAC-MD5\t\t%9llu\n", t2/(MAC_SIZE*1024));
+#endif
XFREE(buf);
}
-int main(void)
+void time_macs(void)
{
- reg_algs();
-
- printf("Timings for ciphers and hashes. Times are listed as cycles per byte processed.\n\n");
-
-// init_timer();
- time_mult();
- time_sqr();
- time_rsa();
- time_dh();
- time_ecc();
- time_prng();
- time_cipher();
- time_keysched();
- time_hash();
- time_macs();
-
- return EXIT_SUCCESS;
+ time_macs_(1);
+ time_macs_(4);
+ time_macs_(32);
}
+void time_encmacs_(unsigned long MAC_SIZE)
+{
+ unsigned char *buf, IV[16], key[16], tag[16];
+ ulong64 t1, t2;
+ unsigned long x, z;
+ int err, cipher_idx;
+
+ printf("\nENC+MAC Timings (zero byte AAD, 16 byte IV, cycles/byte on %dKB blocks):\n", MAC_SIZE);
+
+ buf = XMALLOC(MAC_SIZE*1024);
+ if (buf == NULL) {
+ fprintf(stderr, "\n\nout of heap yo\n\n");
+ exit(EXIT_FAILURE);
+ }
+
+ cipher_idx = find_cipher("aes");
+
+ yarrow_read(buf, MAC_SIZE*1024, &yarrow_prng);
+ yarrow_read(key, 16, &yarrow_prng);
+ yarrow_read(IV, 16, &yarrow_prng);
+
+#ifdef EAX_MODE
+ t2 = -1;
+ for (x = 0; x < 10000; x++) {
+ t_start();
+ t1 = t_read();
+ z = 16;
+ if ((err = eax_encrypt_authenticate_memory(cipher_idx, key, 16, IV, 16, NULL, 0, buf, MAC_SIZE*1024, buf, tag, &z)) != CRYPT_OK) {
+ fprintf(stderr, "\nEAX error... %s\n", error_to_string(err));
+ exit(EXIT_FAILURE);
+ }
+ t1 = t_read() - t1;
+ if (t1 < t2) t2 = t1;
+ }
+ printf("EAX \t\t%9llu\n", t2/(MAC_SIZE*1024));
+#endif
+
+#ifdef OCB_MODE
+ t2 = -1;
+ for (x = 0; x < 10000; x++) {
+ t_start();
+ t1 = t_read();
+ z = 16;
+ if ((err = ocb_encrypt_authenticate_memory(cipher_idx, key, 16, IV, buf, MAC_SIZE*1024, buf, tag, &z)) != CRYPT_OK) {
+ fprintf(stderr, "\nOCB error... %s\n", error_to_string(err));
+ exit(EXIT_FAILURE);
+ }
+ t1 = t_read() - t1;
+ if (t1 < t2) t2 = t1;
+ }
+ printf("OCB \t\t%9llu\n", t2/(MAC_SIZE*1024));
+#endif
+
+#ifdef CCM_MODE
+ t2 = -1;
+ for (x = 0; x < 10000; x++) {
+ t_start();
+ t1 = t_read();
+ z = 16;
+ if ((err = ccm_memory(cipher_idx, key, 16, IV, 16, NULL, 0, buf, MAC_SIZE*1024, buf, tag, &z, CCM_ENCRYPT)) != CRYPT_OK) {
+ fprintf(stderr, "\nCCM error... %s\n", error_to_string(err));
+ exit(EXIT_FAILURE);
+ }
+ t1 = t_read() - t1;
+ if (t1 < t2) t2 = t1;
+ }
+ printf("CCM \t\t%9llu\n", t2/(MAC_SIZE*1024));
+#endif
+
+#ifdef GCM_MODE
+ t2 = -1;
+ for (x = 0; x < 100; x++) {
+ t_start();
+ t1 = t_read();
+ z = 16;
+ if ((err = gcm_memory(cipher_idx, key, 16, IV, 16, NULL, 0, buf, MAC_SIZE*1024, buf, tag, &z, GCM_ENCRYPT)) != CRYPT_OK) {
+ fprintf(stderr, "\nGCM error... %s\n", error_to_string(err));
+ exit(EXIT_FAILURE);
+ }
+ t1 = t_read() - t1;
+ if (t1 < t2) t2 = t1;
+ }
+ printf("GCM (no-precomp)\t%9llu\n", t2/(MAC_SIZE*1024));
+
+ {
+ gcm_state gcm;
+
+ if ((err = gcm_init(&gcm, cipher_idx, key, 16)) != CRYPT_OK) { printf("gcm_init: %s\n", error_to_string(err)); exit(EXIT_FAILURE); }
+ t2 = -1;
+ for (x = 0; x < 10000; x++) {
+ t_start();
+ t1 = t_read();
+ z = 16;
+ if ((err = gcm_reset(&gcm)) != CRYPT_OK) {
+ fprintf(stderr, "\nGCM error[%d]... %s\n", __LINE__, error_to_string(err));
+ exit(EXIT_FAILURE);
+ }
+ if ((err = gcm_add_iv(&gcm, IV, 16)) != CRYPT_OK) {
+ fprintf(stderr, "\nGCM error[%d]... %s\n", __LINE__, error_to_string(err));
+ exit(EXIT_FAILURE);
+ }
+ if ((err = gcm_add_aad(&gcm, NULL, 0)) != CRYPT_OK) {
+ fprintf(stderr, "\nGCM error[%d]... %s\n", __LINE__, error_to_string(err));
+ exit(EXIT_FAILURE);
+ }
+ if ((err = gcm_process(&gcm, buf, MAC_SIZE*1024, buf, GCM_ENCRYPT)) != CRYPT_OK) {
+ fprintf(stderr, "\nGCM error[%d]... %s\n", __LINE__, error_to_string(err));
+ exit(EXIT_FAILURE);
+ }
+
+ if ((err = gcm_done(&gcm, tag, &z)) != CRYPT_OK) {
+ fprintf(stderr, "\nGCM error[%d]... %s\n", __LINE__, error_to_string(err));
+ exit(EXIT_FAILURE);
+ }
+ t1 = t_read() - t1;
+ if (t1 < t2) t2 = t1;
+ }
+ printf("GCM (precomp)\t%9llu\n", t2/(MAC_SIZE*1024));
+ }
+
+#endif
+
+}
+
+void time_encmacs(void)
+{
+ time_encmacs_(1);
+ time_encmacs_(4);
+ time_encmacs_(32);
+}
diff --git a/tim_exptmod.c b/tim_exptmod.c
deleted file mode 100644
index 67fe4454..00000000
--- a/tim_exptmod.c
+++ /dev/null
@@ -1,77 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-
-/* RSA Code by Tom St Denis */
-#include "mycrypt.h"
-
-#ifdef RSA_TIMING
-
-/* decrypts c into m */
-int tim_exptmod(prng_state *prng, int prng_idx,
- mp_int *c, mp_int *e, mp_int *d, mp_int *n, mp_int *m)
-{
- int err;
- mp_int r, tmp, tmp2;
- unsigned char *rtmp;
- unsigned long rlen;
-
- _ARGCHK(c != NULL);
- _ARGCHK(e != NULL);
- _ARGCHK(d != NULL);
- _ARGCHK(n != NULL);
- _ARGCHK(m != NULL);
-
- if ((err = prng_is_valid(prng_idx)) != CRYPT_OK) {
- return err;
- }
-
- /* pick random r */
- rlen = mp_unsigned_bin_size(n);
- rtmp = XMALLOC(rlen);
- if (rtmp == NULL) {
- return CRYPT_MEM;
- }
-
- /* read in random value "r" */
- if (prng_descriptor[prng_idx].read(rtmp, rlen, prng) != rlen) {
- XFREE(rtmp);
- return CRYPT_ERROR_READPRNG;
- }
-
- if ((err = mp_init_multi(&r, &tmp, &tmp2, NULL)) != MP_OKAY) {
- XFREE(rtmp);
- return mpi_to_ltc_error(err);
- }
-
- /* read in r */
- if ((err = mp_read_unsigned_bin(&r, rtmp, rlen)) != MP_OKAY) { goto __ERR; }
-
- /* compute tmp = r^e */
- if ((err = mp_exptmod(&r, e, n, &tmp)) != MP_OKAY) { goto __ERR; }
-
- /* multiply C into the mix */
- if ((err = mp_mulmod(c, &tmp, n, &tmp)) != MP_OKAY) { goto __ERR; }
-
- /* raise to d */
- if ((err = mp_exptmod(&tmp, d, n, &tmp)) != MP_OKAY) { goto __ERR; }
-
- /* invert r and multiply */
- if ((err = mp_invmod(&r, n, &tmp2)) != MP_OKAY) { goto __ERR; }
-
- /* multiply and we are totally set */
- if ((err = mp_mulmod(&tmp, &tmp2, n, m)) != MP_OKAY) { goto __ERR; }
-
-__ERR: mp_clear_multi(&r, &tmp, &tmp2, NULL);
- XFREE(rtmp);
- return mpi_to_ltc_error(err);
-}
-
-#endif
diff --git a/zeromem.c b/zeromem.c
deleted file mode 100644
index 15181ac5..00000000
--- a/zeromem.c
+++ /dev/null
@@ -1,19 +0,0 @@
-/* LibTomCrypt, modular cryptographic library -- Tom St Denis
- *
- * LibTomCrypt is a library that provides various cryptographic
- * algorithms in a highly modular and flexible manner.
- *
- * The library is free for all purposes without any express
- * guarantee it works.
- *
- * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org
- */
-#include "mycrypt.h"
-
-void zeromem(void *dst, size_t len)
-{
- unsigned char *mem = (unsigned char *)dst;
- _ARGCHK(dst != NULL);
- while (len-- > 0)
- *mem++ = 0;
-}
--
GitLab